Nie pisz post pod posem, uzywaj ZMIEN. Brak addition.txt z FRST.
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
() C:\Windows\SysWOW64\netupdsrv.exe
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\Program Files (x86)\SN_x64.Booster [4210176 2014-05-14] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
BHO-x32: bettermarkit - {549a4810-1fe3-4841-bbbe-d61b7268f56e} - No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
FF Plugin HKCU: @vizlight.pl/deLight3D,version=1.4 - D:\Program Files (x86)\deLight3D\npdelight3d.dll No File
FF HKCU\...\Firefox\Extensions: [{ed380e65-d9d6-4d7d-b5f8-6ee928414dbd}] - C:\Program Files (x86)\bettermarkit\150.xpi
CHR HKCU\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Home\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-04-17]
CHR HKLM-x32\...\Chrome\Extension: [bpeeepmahhfjiediknjejcmcfmjcjdck] - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\serach.crx [2012-04-17]
CHR HKLM-x32\...\Chrome\Extension: [dkdkpmmkgdbglmfmmmmehbkmnkopingb] - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx [2012-04-17]
CHR HKLM-x32\...\Chrome\Extension: [mpnkngdlkfogmplnfcbphiekcjgbnckb] - C:\Program Files (x86)\bettermarkit\150.crx [2012-04-17]
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\Home\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx [2012-04-17]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 NetHttpService; C:\Windows\SysWOW64\nethtsrv.exe [180224 2014-06-15] () [File not signed]
R2 ServiceUpdater; C:\Windows\SysWOW64\netupdsrv.exe [162304 2014-06-15] () [File not signed]
S3 ALSysIO; \??\C:\Users\Home\AppData\Local\Temp\ALSysIO64.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 EIO64; system32\DRIVERS\EIO64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 WinRing0_1_2_0; \??\D:\PC Monitor\PCMonitorSrv.sys [X]
S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [X]
S3 X6va010; \??\C:\Windows\SysWOW64\Drivers\X6va010 [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
2014-06-25 12:55 - 2014-06-25 12:55 - 00000687 _____ () C:\awhEC9F.tmp
2014-06-24 19:13 - 2014-06-24 19:13 - 00000687 _____ () C:\awhBCAA.tmp
2014-06-24 12:57 - 2014-06-24 12:57 - 00000687 _____ () C:\awhD152.tmp
2014-06-24 12:35 - 2014-06-24 12:35 - 00000687 _____ () C:\awhCED2.tmp
2014-06-23 21:15 - 2014-06-23 21:15 - 00000687 _____ () C:\awhCC72.tmp
2014-06-23 14:36 - 2014-06-23 14:36 - 00000687 _____ () C:\awhD123.tmp
2014-06-23 10:56 - 2014-06-23 10:56 - 00000687 _____ () C:\awhB3A5.tmp
2014-06-22 17:02 - 2014-06-22 17:02 - 00000687 _____ () C:\awhBF87.tmp
2014-06-22 15:55 - 2014-06-22 15:55 - 00000687 _____ () C:\awhC995.tmp
2014-06-22 13:38 - 2014-06-22 13:38 - 00000687 _____ () C:\awhBEEB.tmp
2014-06-21 14:07 - 2014-06-21 14:07 - 00000687 _____ () C:\awhB47F.tmp
2014-06-21 12:19 - 2014-06-21 12:19 - 00000687 _____ () C:\awh4394.tmp
2014-06-21 12:07 - 2014-06-21 12:07 - 00000687 _____ () C:\awhE159.tmp
2014-06-20 20:48 - 2014-06-20 20:48 - 00000687 _____ () C:\awhB894.tmp
2014-06-20 18:20 - 2014-06-20 18:20 - 00724152 _____ (Elex do Brasil Participações Ltda) C:\Users\Mariusz\Downloads\yet_another_cleaner_dmga (2).exe
2014-06-20 18:19 - 2014-06-20 18:19 - 00000687 _____ () C:\awhE2B0.tmp
2014-06-20 15:56 - 2014-06-20 15:56 - 00000687 _____ () C:\awhA830.tmp
2014-06-20 15:44 - 2014-06-21 14:00 - 00000000 ____D () C:\AdwCleaner
2014-06-20 15:30 - 2014-06-20 15:30 - 00000000 ___SD () C:\ComboFix
2014-06-20 15:30 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-20 15:30 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-20 15:30 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-20 15:30 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-20 15:30 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-20 15:30 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-20 15:30 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-20 15:30 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-20 15:29 - 2014-06-20 15:30 - 00000000 ____D () C:\Qoobox
2014-06-20 15:00 - 2014-06-20 15:00 - 00000687 _____ () C:\awh6D07.tmp
2014-06-19 22:03 - 2014-06-19 22:03 - 00724152 _____ (Elex do Brasil Participações Ltda) C:\Users\Mariusz\Downloads\yet_another_cleaner_dmga (1).exe
2014-06-15 19:28 - 2014-06-15 19:28 - 00162304 _____ () C:\Windows\SysWOW64\netupdsrv.exe
2014-06-15 19:27 - 2014-06-15 19:27 - 00247296 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 19:27 - 2014-06-15 19:27 - 00180224 _____ () C:\Windows\SysWOW64\nethtsrv.exe
2014-06-15 19:27 - 2014-06-15 19:27 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 19:27 - 2014-06-15 19:27 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-02 19:17 - 2014-06-02 19:17 - 11568296 _____ (Elex do Brasil Participações Ltda) C:\Users\Mariusz\Downloads\yet_another_cleaner_dmga.exe
2014-06-25 12:49 - 2014-05-14 15:34 - 00000454 ____H () C:\Windows\Tasks\SN.Booster-S-4674074418.job
2014-06-24 19:33 - 2013-04-19 19:28 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3767379795-823197629-1772105019-1001UA.job
2014-06-24 19:33 - 2013-04-19 19:28 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3767379795-823197629-1772105019-1001Core.job
Reboot:
W Frst wybierz Fix.
Uzyj
http://www.bleepingcomputer.com/download/tfc/ Usun katalog C:\FRST i to wszystko.
