W ustawieniach Chrome usun przywracanie szkodliwych stron po starcie przegladarki:
https://support.google.com/chrome/answer/95314?hl=pl <- Otworz konkretna strone lub zestaw..
Obok frst.exe utworz plik fixlist.txt z z awartoscia:
Task: {F1390F32-0847-46F1-B5D5-61EAF3F07AE7} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\AGUŚ:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Application Data:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Cookies:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Local Settings:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Templates:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\AppData\Local\Application Data:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\AppData\Local\History:gs5sys
AlternateDataStreams: C:\Users\AGUŚ\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://badoo.com/startpage/
SearchScopes: HKCU - DefaultScope {8A244612-A1F7-11E0-95C0-E71F4824019B} URL =
http://badoo.com/startpage/?source=bsb&q= {searchTerms}
SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL =
http://badoo.com/startpage/?source=bsb&q= {searchTerms}
CHR StartupUrls: Default -> "hxxp://aartemis.com/?type=hp&ts=1388444244&from=cor&uid=ST1000LM014-1EJ164_W3802X1CXXXXW3802X1C", "hxxp://www.aol.com/?mtmhp=hyplogusaolp00000020", "hxxp://www.awesomehp.com/?type=hp&ts=1394661365&from=tt4u&uid=ST1000LM014-1EJ164_W3802X1CXXXXW3802X1C", "hxxp://www.default-search.net?sid=476&aid=175&itype=n&ver=12349&tm=360&src=hmp", "hxxp://www.default-search.net?sid=476&aid=175&itype=a&ver=12791&tm=360&src=hmp"
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 vm331avs; System32\Drivers\vm331avs.sys [X]
C:\ProgramData\pclunst.exe
EmptyTemp:
W FRST wybierz Fix. Usun katalog C:\FRST i to wszystko.