Odinstaluj:
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.5.6 - AVG Technologies)
Smart File Advisor 1.1.6 (HKLM-x32\...\Smart File Advisor_is1) (Version: 1.1.6 - Filefacts.net)
Softonic Assistant (HKU\S-1-5-21-3235095235-3306333463-72938311-1000\...\SoftonicAssistant) (Version: 0.1.6 - Softonic International S.A
Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
Task: {2CDF9410-2DF9-4DB7-B89F-F547C58FFA50} - System32\Tasks\QYKYJ => C:\Users\Alf\AppData\Roaming\QYKYJ.exe <==== ATTENTION
Task: {C6ECDC36-367B-4987-B5E1-ADA0313F19F9} - System32\Tasks\CODJ => C:\Users\Alf\AppData\Roaming\CODJ.exe <==== ATTENTION
Task: {DA133106-945E-410D-8C15-7499717E350E} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: C:\Windows\Tasks\CODJ.job => C:\Users\Alf\AppData\Roaming\CODJ.exe <==== ATTENTION
Task: C:\Windows\Tasks\QYKYJ.job => C:\Users\Alf\AppData\Roaming\QYKYJ.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\Users\Alf\Application Data:NT
AlternateDataStreams: C:\Users\Alf\Application Data:NT2
AlternateDataStreams: C:\Users\Alf\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Alf\AppData\Roaming:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR Extension: (snipsmart) - C:\Users\Alf\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaccgfkbmhkegoljkoefhpifoaehnhjp [2014-11-22]
CHR Extension: (Elite Unzip) - C:\Users\Alf\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjcoccminpbgmiffhifdcnelpojeeb [2014-11-15]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-12-07 22:39 - 2014-12-07 22:39 - 00000000 ____D () C:\Users\Alf\AppData\Local\SoftonicAssistant
2014-12-26 19:04 - 2014-11-22 15:49 - 00001328 _____ () C:\Windows\Tasks\QYKYJ.job
2014-12-26 19:04 - 2014-11-22 15:49 - 00001326 _____ () C:\Windows\Tasks\CODJ.job
2014-12-26 18:41 - 2014-11-24 15:49 - 00000000 ____D () C:\AdwCleaner
EmptyTemp:
W FRST wybierz Fix. Usun katalog C:\FRST i to wszystko.