Odinstaluj:
Adobe Reader 9.5.0 - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-A95000000001}) (Version: 9.5.0 - Adobe Systems Incorporated)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)
FoxTab Music Converter (HKCU\...\FoxTab Music Converter) (Version: - ) <==== ATTENTION
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216030FF}) (Version: 6.0.300 - Oracle)
Zainstaluj
http://ninite.com/java-foxit/
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
AlternateDataStreams: C:\Windows:9AE78ADD795C70DA
HKLM-x32\...\Run: [ROC_ROC_NT] => "C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT
HKLM-x32\...\Run: [ROC_roc_ssl_v12] => "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKCU - {B1278B25-AB49-47D1-A456-DA3DEA80F945} URL =
http://search.babylon.com/?q= {searchTerms}&AF=100482&babsrc=SP_ss&mntrId=14819b8300000000000050e5492b97ca
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
2014-10-30 15:00 - 2014-10-30 15:08 - 00000000 ____D () C:\AdwCleaner
2014-10-23 14:26 - 2014-10-30 14:44 - 00000000 ____D () C:\ProgramData\dbaaf201e5d27df4
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\Gość\AppData\Local\Google
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\Gość\AppData\Local\Comodo
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\Adrian\AppData\Local\Comodo
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-10-23 14:26 - 2014-10-23 14:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
C:\ProgramData\qjaxlkio.dss
EmptyTemp:
W FRST wybierz Fix.
Usun katalog C:\FRST i to wszystko.