Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
Task: {C3919D43-696E-4E20-9303-CDD06218E7D6} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
HKU\S-1-5-21-2466319396-4157294396-1527453628-1001\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
http://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.search-plaza.info/?pid=20320&r=2014/11/15&hid=15360208705423391598&lg=EN&cc=PL&unqvl=69&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine,S: WebSearch
FF Extension: websave - C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\g93xfcny.default\Extensions\hEOe@z3.edu [2014-11-15]
FF Extension: YoutubeAdBlocke - C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\g93xfcny.default\Extensions\Z@9O.org [2014-11-15]
CHR Extension: (websave) - C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbilgldgclmcohmfocledghjmaeadefh [2014-11-15]
CHR Extension: (Save Best) - C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndhinffkekpekljifjkkkkkhopnjodja [2014-11-15]
2014-11-15 13:20 - 2014-11-16 15:35 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-11-15 13:20 - 2014-11-15 13:57 - 00000000 ____D () C:\Users\Łukasz\AppData\Roaming\omiga-plus
2014-11-15 12:36 - 2014-11-15 14:02 - 00000000 ____D () C:\ProgramData\websave
2014-11-15 12:36 - 2014-11-15 13:59 - 00000000 ____D () C:\ProgramData\3d80940bbb1f96fc
2014-11-15 12:36 - 2014-11-15 13:59 - 00000000 ____D () C:\Program Files (x86)\websave
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Torch
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Comodo
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Łukasz\AppData\Local\Chromatic Browser
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Gość\AppData\Local\Torch
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Gość\AppData\Local\Google
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Gość\AppData\Local\Comodo
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Gość\AppData\Local\Chromatic Browser
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-15 12:36 - 2014-11-15 12:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser\
EmptyTemp:
W frst wybierz fix.
Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ 
