System jest zainfekowany.
Wykonaj skrypt w OTL:
:OTL
PRC - [2014-05-12 22:49:44 | 005,591,040 | -H-- | M] (Microsoft/Windows) -- C:\Users\Kuba\AppData\Roaming\Microsoft\wuaudt\wuaudt.exe
DRV:
64bit: - [2014-04-24 12:32:28 | 000,061,120 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64.sys -- ({2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:14303;https=127.0.0.1:14303
O4 - HKCU..\Run: [Adobe Update] C:\Users\Kuba\AppData\Roaming\Microsoft Corporation\msoftwin.exe ()
O4 - HKCU..\RunOnce: [wuaudt] C:\Users\Kuba\AppData\Roaming\Microsoft\wuaudt\wuaudt.exe (Microsoft/Windows)
[2014-05-01 13:56:18 | 000,061,120 | ---- | C] (StdLib) -- C:\Windows\SysNative\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64.sys
[2014-05-30 20:57:36 | 000,570,777 | -H-- | M] () -- C:\Users\Kuba\AppData\Roaming\Kubalog.dat
[2014-05-22 17:16:33 | 000,000,378 | ---- | C] () -- C:\Windows\tasks\PassShow_wd.job
Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Daj w zalaczniku logi z FRST:
http://www.fixitpc.pl/topic/61-diagnostyka-ogólne-raporty-systemowe/#entry119294
Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/
oraz
http://ftp.drweb.com/pub/drweb/cureit/launch.exe