Odinstaluj:
mks_vir (HKLM\...\{0BB53A7E-9F83-4714-9914-95AF8813EA2E}) (Version: 13.06.6401 - ArcaBit Sp z o.o.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.15.13.48 - Client Connect LTD) <==== ATTENTION
Internet Download Manager? 1.0 (HKLM-x32\...\IDMSQ) (Version: 1.0 - OR Interactive Ltd)
Obok frst.exe utwórz plik fixlist.txt z zawartością:
Task: {64DD6DE9-2AA8-4DBA-8DD9-89D02CF4567F} - \BrowserSafeguard Update Task No Task File <==== ATTENTION
Task: {D59B69B3-2960-4683-9040-91F7758812B8} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {FE2BC500-BA46-42DF-ADC9-F7B4B5138CB9} - \Rocket Updater No Task File <==== ATTENTION
() C:\Program Files (x86)\9B0D3D35-C69A-4D44-BBF5-B75ED01D6712\skwdldhvtp64.exe
() C:\Program Files\005\hzunyanhtn64.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll" File Not Found
ProxyServer: http=127.0.0.1:49182;https=127.0.0.1:49182
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.trovi.com/?gd=&ctid=CT3316206&...0B1EAC8-C485-4DEF-8B25-93F108867F7A&SSPV= SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2453} URL =
http://search.fantastigames.com/web?src=ieb&appid=106&systemid=453&sr=0&q= {searchTerms}
SearchScopes: HKLM - {6CFE476D-5A9B-4DA2-9845-BBB998B54DB2} URL =
http://www.amazon.co.uk/s/ref=azs_osd_ieauk?i...k%5Fcode=qs&index=aps&field-keywords= {searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2453} URL =
http://search.fantastigames.com/web?src=ieb&appid=106&systemid=453&sr=0&q= {searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
http://rover.ebay.com/rover/1/710-111095-2958-3/4?mpre=http://www.ebay.co.uk/sch/i.html?_nkw= {searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {6CFE476D-5A9B-4DA2-9845-BBB998B54DB2} URL =
http://www.amazon.co.uk/s/ref=azs_osd_ieauk?i...k%5Fcode=qs&index=aps&field-keywords= {searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2453} URL =
http://search.fantastigames.com/web?src=ieb&appid=106&systemid=453&sr=0&q= {searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
http://rover.ebay.com/rover/1/710-111095-2958-3/4?mpre=http://www.ebay.co.uk/sch/i.html?_nkw= {searchTerms}
SearchScopes: HKCU - {6CFE476D-5A9B-4DA2-9845-BBB998B54DB2} URL =
http://www.amazon.co.uk/s/ref=azs_osd_ieauk?i...k%5Fcode=qs&index=aps&field-keywords= {searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2453} URL =
http://search.fantastigames.com/web?src=ieb&appid=106&systemid=453&sr=0&q= {searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
http://rover.ebay.com/rover/1/710-111095-2958-3/4?mpre=http://www.ebay.co.uk/sch/i.html?_nkw= {searchTerms}
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL =
http://uk.search.yahoo.com/search?fr=mcafee&p= {SearchTerms}
BHO-x32: Idmsq Extension -> {3AA4FC9D-FB51-44a2-B09F-0457857CA7C2} -> C:\Users\ba1948\AppData\Roaming\IDMSQ\idmsqext.dll (Or Interactive Ltd)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3316206&octid=EB_ORIGINAL_CTID&ISID=M9D69CA64-C756-4F64-A887-CE562593415D&SearchSource=69&CUI=&SSPV=&Lay=1&UM=6&UP=SP70B1EAC8-C485-4DEF-8B25-93F108867F7A
FF SearchEngineOrder.1: Secure Search
FF Homepage: hxxp://www.trovi.com/?gd=&ctid=CT3316206&octid=EB_ORIGINAL_CTID&ISID=M9D69CA64-C756-4F64-A887-CE562593415D&SearchSource=55&CUI=&UM=6&UP=SP70B1EAC8-C485-4DEF-8B25-93F108867F7A&SSPV=
FF SearchPlugin: C:\Users\ba1948\AppData\Roaming\Mozilla\Firefox\Profiles\lsy9utd6.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\ba1948\AppData\Roaming\Mozilla\Firefox\Profiles\lsy9utd6.default\searchplugins\youtube-video-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\chambers-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-en-GB.xml
FF Extension: Update Service - C:\Users\ba1948\AppData\Roaming\Mozilla\Firefox\Profiles\lsy9utd6.default\Extensions\updater@foxstart.com [2012-06-20]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\mcciwbch@motive.com.xpi [2014-05-11]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-11]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
CHR DefaultSearchKeyword: trovi.search
CHR HKLM-x32\...\Chrome\Extension: [edmgmpmklgfbohogafcfobonnkogchec] - C:\Program Files (x86)\Common Files\Motive\extensions\MotiveRequest.crx [2014-01-17]
CHR HKLM-x32\...\Chrome\Extension: [ohenffmfbnoidogjgebadealdkecjdal] - C:\Users\ba1948\AppData\Roaming\IDMSQ\IDMSQ.crx [2013-09-24]
R2 hzunyanhtn64; C:\Program Files\005\hzunyanhtn64.exe [709120 2014-07-20] () [File not signed]
R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
2014-07-21 18:23 - 2014-07-21 18:23 - 17292208 _____ (Malwarebytes Corporation ) C:\Users\ba1948\Downloads\mbam-setup (1).exe
2014-07-21 17:46 - 2014-07-21 17:46 - 00000000 ____D () C:\Users\ba1948\AppData\Local\SearchProtect
2014-07-21 17:46 - 2014-07-21 17:46 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-07-21 17:34 - 2014-07-21 17:36 - 00000000 ____D () C:\AdwCleaner
2014-07-21 17:20 - 2014-07-21 17:20 - 00125638 _____ () C:\Users\ba1948\Desktop\OTL.Txt
2014-07-21 17:20 - 2014-07-21 17:20 - 00111108 _____ () C:\Users\ba1948\Desktop\Extras.Txt
2014-07-21 16:19 - 2014-07-21 16:19 - 00111108 _____ () C:\Users\ba1948\Downloads\Extras.Txt
2014-07-21 16:16 - 2014-07-21 17:20 - 00125638 _____ () C:\Users\ba1948\Downloads\OTL.Txt
2014-07-21 14:29 - 2014-07-21 14:29 - 00003250 _____ () C:\Windows\System32\Tasks\Optimizer Pro Schedule
2014-07-21 14:22 - 2014-07-21 14:22 - 00776656 _____ ( ) C:\Users\ba1948\Downloads\CCleaner(13061).exe
2014-07-21 12:12 - 2014-07-21 12:12 - 00776656 _____ ( ) C:\Users\ba1948\Downloads\Malwarebytes-AntiMalware(13117).exe
2014-07-20 19:23 - 2014-07-20 21:36 - 00000000 ____D () C:\Program Files (x86)\9B0D3D35-C69A-4D44-BBF5-B75ED01D6712
2014-07-20 18:49 - 2014-07-20 19:21 - 00000000 ____D () C:\Program Files\005
2014-07-12 13:44 - 2014-07-12 13:44 - 00000000 _____ () C:\Windows\SysWOW64\shoA817.tmp
W FRST Wybierz Fix.
