Odinstaluj:
Ask Toolbar (HKLM\...\{4F524A2D-5637-4300-76A7-A758B70C0F01}) (Version: 12.15.1.16 - APN, LLC) <==== ATTENTION
PC Tools Spyware Doctor 9.1 (HKLM\...\Spyware Doctor) (Version: 9.1 - PC Tools)
Remote Desktop Access (VuuPC) (HKLM\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
SpyHunter (HKLM\...\{455F074C-814E-4520-B69B-5584BD90400C}) (Version: 4.17.6.4336 - Enigma Software Group USA, LLC)
video MediaPlay-Air (HKLM\...\video MediaPlay-Air) (Version: 1.34.7.1 - enter) <==== ATTENTION
WindowsProtectManger20.0.0.401 (HKLM\...\WindowsProtectManger) (Version: 20.0.0.401 - Fuyu LIMITED) <==== ATTENTION
Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleane
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Fuyu LIMITED) C:\ProgramData\WindowsProtectManger\wprotectmanager.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
Task: {08A921E3-56E1-4A2C-AFBC-6FDB0859B108} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-2 => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-2.exe [2014-07-24] (enter) <==== ATTENTION)
Task: {49FD4CA7-EC5B-4139-9DDB-A83078FACC08} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-4 => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-4.exe [2014-07-24] (enter) <==== ATTENTION
Task: {6AE79E56-C3C9-445C-9B7F-78F6247D40BC} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5 => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5.exe [2014-07-24] (enter) <==== ATTENTION
Task: {6B646B8C-C845-47BA-87A9-B5848A7C9F8C} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {70C827BF-7C89-45AC-A4C3-48D2B705F554} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3156588958-2365017500-3498564279-1000Core => C:\Users\Basia Piotruś Bubuś\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-29] (Facebook Inc.)
Task: {7BE7A490-D8B9-4896-8488-9E08D3D1D4E5} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-11 => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-11.exe [2014-07-24] (enter) <==== ATTENTION
Task: {A22F816C-775D-4F54-BAB4-1FA3DE7CB26C} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-3 => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-3.exe [2014-07-24] (enter) <==== ATTENTION
Task: {DA2F33C6-66C0-425F-9EA3-955D58002FB4} - System32\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-6 => C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-novainstaller.exe
Task: {E92EBB7A-FA3E-4B86-8221-3AFD5AE8DEB1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3156588958-2365017500-3498564279-1000UA => C:\Users\Basia Piotruś Bubuś\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-29] (Facebook Inc.)
Task: {EF254D40-AC3B-4E6E-906D-CF3572F45BE4} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe <==== ATTENTION
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-11.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-11.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-2.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-2.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-3.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-3.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-4.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-4.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5_user.job => C:\Program Files\video MediaPlay-Air\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5.exe
Task: C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-6.job => C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-novainstaller.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156588958-2365017500-3498564279-1000Core.job => C:\Users\Basia Piotru[ Bubu[\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156588958-2365017500-3498564279-1000UA.job => C:\Users\Basia Piotru[ Bubu[\AppData\Local\Facebook\Update\FacebookUpdate.exe
BHO: video MediaPlay-Air -> {11111111-1111-1111-1111-110611171199} -> C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-bho.dll (enter)
FF SearchEngineOrder.1: Ask Search
FF SearchPlugin: C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Mozilla\Firefox\Profiles\w5bdlzmk.default\searchplugins\ask-search.xml
FF Extension: video MediaPlayers - C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Mozilla\Firefox\Profiles\w5bdlzmk.default\Extensions\5c8764929678437cbd90994a5a82@ac863d978ade40948f4c7f15bb3c4.com [2014-07-25]
FF Extension: Site Matcher Pro - C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Mozilla\Firefox\Profiles\w5bdlzmk.default\Extensions\matchersitepro@matchersitepro.com [2014-07-19]
FF Extension: Ask Toolbar - C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Mozilla\Firefox\Profiles\w5bdlzmk.default\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2014-01-11]
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [165784 2014-06-24] (APN LLC.)
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [757872 2014-06-19] (Cherished Technololgy LIMITED)
R2 WindowsProtectManger; C:\ProgramData\WindowsProtectManger\wprotectmanager.exe [591776 2014-06-12] (Fuyu LIMITED)
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /svc [X]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /medsvc [X]
S2 Update findopolis; "C:\Program Files\findopolis\updatefindopolis.exe" [X]
U3 apy8istq; No ImagePath
C:\ProgramData\IePluginServices\
C:\ProgramData\WindowsProtectManger\
C:\Program Files\AskPartnerNetwork\
2014-07-24 18:44 - 2014-07-24 18:44 - 00000000 ____D () C:\ProgramData\2308189059
2014-07-24 18:33 - 2014-07-25 18:38 - 00002290 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-4.job
2014-07-24 18:33 - 2014-07-25 18:33 - 00001526 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5.job
2014-07-24 18:33 - 2014-07-25 18:33 - 00001426 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-2.job
2014-07-24 18:33 - 2014-07-24 18:33 - 00001544 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-5_user.job
2014-07-24 18:33 - 2014-07-24 18:33 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Roaming\VOPackage
2014-07-24 18:33 - 2014-07-24 18:33 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-07-24 18:32 - 2014-07-25 18:33 - 00001676 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-6.job
2014-07-24 18:32 - 2014-07-25 18:32 - 00003824 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-11.job
2014-07-24 18:32 - 2014-07-25 18:32 - 00003142 _____ () C:\Windows\Tasks\590e5d72-844e-4010-8ec4-43d6bbd30ce3-3.job
2014-07-24 18:32 - 2014-07-24 18:32 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\Documents\Optimizer Pro
2014-07-24 18:32 - 2014-07-24 18:32 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Local\globalUpdate
2014-07-24 18:32 - 2014-07-24 18:32 - 00000000 ____D () C:\Program Files\globalUpdate
2014-07-24 18:31 - 2014-07-25 14:33 - 00000000 ____D () C:\Program Files\video MediaPlay-Air
2014-07-24 18:31 - 2014-07-24 18:44 - 00000000 ____D () C:\Program Files\Optimizer Pro
2014-06-28 09:31 - 2014-06-28 09:31 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Roaming\SimilarSites
2014-06-28 09:31 - 2014-06-28 09:31 - 00000000 ____D () C:\Program Files\SiteLookup
2014-06-28 09:30 - 2014-06-28 10:25 - 00000000 ____D () C:\Program Files\SupTab
2014-06-28 09:30 - 2014-06-28 09:30 - 00000000 ____D () C:\ProgramData\WindowsProtectManger
2014-06-28 09:30 - 2014-06-28 09:30 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-06-28 09:29 - 2014-07-06 08:40 - 00000000 ____D () C:\Program Files\004
2014-06-28 09:29 - 2014-06-29 15:01 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Roaming\Systweak
2014-06-28 09:29 - 2014-06-28 10:25 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Roaming\sweet-page
2014-06-28 09:29 - 2014-04-25 14:49 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 ____D () C:\Users\Basia Piotruś Bubuś\AppData\Local\AskPartnerNetwork
W FRST wybierz Fix.
Uzyj
http://www.bleepingcomputer.com/download/tfc/ Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ Po wykonaniu daj nowe logi z FRST razem z fixlog.txt.
