Usun to co wykryl mbam.
Odinstaluj:
AOL Uninstaller (Choose which Products to Remove) (HKLM-x32\...\AOL Uninstaller) (Version: - AOL Inc.)
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
Task: {B605E319-2B74-41C8-B87C-277E1D9B3C4D} - \bench-sys No Task File <==== ATTENTION
HKLM-x32\...\Run: [fst_pl_31] => [X]
HKLM-x32\...\Run: [HostManager] => C:\Program Files (x86)\Common Files\AOL\1391895032\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)
HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\...\Run: [AtiDriverStart] => C:\Users\user\AppData\Local\ATI Technologies\atidxx.exe [55296 2014-04-18] ()
HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\...\CurrentVersion\Windows: [Load] C:\ProgramData\Microsoft.com <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: NeoxtCoup -> {631F5535-371E-04BE-9F36-51E1955A1218} -> C:\Program Files (x86)\NeoxtCoup\Hiw0.x64.dll ()
BHO-x32: No Name -> {631F5535-371E-04BE-9F36-51E1955A1218} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR Extension: (NeoxtCoup) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocdcmboamgphbmejhdebdmkkccldkmic [2014-07-09]
CHR Extension: (NexttCoupp) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojajgkicdjakddolfkackbhodnkmaijl [2014-07-08]
CHR Extension: (NeoxtCoup) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocdcmboamgphbmejhdebdmkkccldkmic\1.0 [2014-07-09]
CHR Extension: (NexttCoupp) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojajgkicdjakddolfkackbhodnkmaijl\1.0 [2014-07-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S2 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
2014-07-09 01:11 - 2014-07-13 15:40 - 00000000 ____D () C:\Program Files (x86)\NeoxtCoup
2014-07-09 01:11 - 2014-07-09 01:11 - 00000000 ____D () C:\ProgramData\NeoxtCoup
2014-07-08 11:55 - 2014-07-09 01:11 - 00000000 ____D () C:\ProgramData\NexttCoupp
2014-07-08 11:55 - 2014-07-09 01:10 - 00000000 ____D () C:\Program Files (x86)\NexttCoupp
2014-06-24 18:20 - 2014-06-24 18:20 - 00702504 _____ () C:\Users\user\Downloads\Origin(38298).exe
2014-07-22 12:28 - 2014-06-12 14:17 - 00000000 ____D () C:\AdwCleaner
2014-07-09 01:11 - 2014-04-20 16:23 - 00000000 ____D () C:\ProgramData\1c2b29fb44c2bbd3
W FRST Wybierz Fix.
Uzyj
http://www.bleepingcomputer.com/download/tfc/
Usun katalog C:\FRST i to wszystko.