Gameharbor.org - Samoistne uruchamianie przy starcie windowsa.

Cytat:

Task: {61180FAA-9BF2-48F3-ACA5-47BFC117930E} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {C290F8D1-028E-4978-9B53-8709F790553B} - \APSnotifierPP3 No Task File <==== ATTENTION
Task: {E05AFB8F-BEEB-495F-8B7E-1FB00BA67E11} - \APSnotifierPP2 No Task File <==== ATTENTION
HKU\S-1-5-21-1147089480-3178323539-3287727858-1000\...\Run: [CMD] => cmd.exe /c start http://extendedunlimited.org && exit <===== ATTENTION
HKU\S-1-5-21-1147089480-3178323539-3287727858-1000\...\Run: [Akamai NetSession Interface] => C:\Users\MiX\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
Startup: C:\Users\MiX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShellIconOverlayIdentifiers: ###MegaShellExtPending -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => No File
ShellIconOverlayIdentifiers: ###MegaShellExtSynced -> {05B38830-F4E9-4329-978B-1DD28605D202} => No File
ShellIconOverlayIdentifiers: ###MegaShellExtSyncing -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => No File
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers-x32: ###MegaShellExtPending -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => No File
ShellIconOverlayIdentifiers-x32: ###MegaShellExtSynced -> {05B38830-F4E9-4329-978B-1DD28605D202} => No File
ShellIconOverlayIdentifiers-x32: ###MegaShellExtSyncing -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO-x32: webporpoise -> {f31845e6-7a36-476e-802e-f81e59588e80} -> C:\Program Files (x86)\webporpoise\webporpoiseBHO.dll (webporpoise)
CHR Extension: (Save Me) - C:\Users\MiX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jikbjpjgjmmdhcmlagappehlpiljoaop [2014-04-17]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 Update webporpoise; C:\Program Files (x86)\webporpoise\updatewebporpoise.exe [318752 2014-07-06] ()
R2 Util webporpoise; C:\Program Files (x86)\webporpoise\bin\utilwebporpoise.exe [318752 2014-07-06] ()
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]
S4 CouponDownloaderService64; c:\Program Files\CouponDownloader\CouponDownloaderService64.exe [X]
S2 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
S4 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe run options=01100010040000000000000000000000 sourceguid=C78087A8-C960-4464-A618-3D351DF6C0D7 [X]
R1 {572f484b-455f-44b0-9d6a-da3ad2071365}Gw64; C:\Windows\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}Gw64.sys [61120 2014-04-24] (StdLib)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
2014-07-05 10:39 - 2014-07-05 10:41 - 00000000 ____D () C:\AdwCleaner
CMD: del /f /s /q %TEMP%\*.*

Kolobos napisał:

tg2013 Naucz sie pisac wielkie litery i kropki.

Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

Daj w zalaczniku logi z FRST:
http://www.fixitpc.pl/topic/61-diagnostyka-ogólne-raporty-systemowe/#entry119294

Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

Acorus 20 napisał:

tg2013-usuń wszystko i punkt 2.
naaitias-załóż osobny temat bo robisz bałagan.

Acorus 20 napisał:

Pokaż logi z FRST po usuwaniu adwCleanerem.