Odinstaluj: Adobe Reader 9.5.0 - Polish, zainstaluj
http://ninite.com/foxit/
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
AlternateDataStreams: C:\Documents and Settings\Właściciel:zylomtest
AlternateDataStreams: C:\Documents and Settings\Właściciel:zylomtr{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVGV}
AlternateDataStreams: C:\Documents and Settings\Właściciel:zylomtr{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVK9}
AlternateDataStreams: C:\Documents and Settings\Właściciel:zylomtr{000HQ7FF-AD7A-3FG4-7162-239Q3NAHCVV6}
AlternateDataStreams: C:\Documents and Settings\Właściciel:zylomtr{002AVPFP-JHLQ-ABE5-INQH-20B2D80EAVVU}
HKU\S-1-5-19\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [1035264 2008-04-14] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [1035264 2008-04-14] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-1644491937-682003330-1417001333-1004\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [1035264 2008-04-14] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-18\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [1035264 2008-04-14] (Microsoft Corporation) <==== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1416848305&from=cor&uid=ST380211AS_5PS2EXNXXXXX5PS2EXNX"
CHR Extension: (BrowseStudio) - C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ooeeliilpmaonodidficepghngjnjjce [2014-11-24]
2014-12-16 19:29 - 2014-12-16 19:54 - 00000000 ____D () C:\AdwCleaner
EmptyTemp:
W FRST wybierz Fix. Usun katalog C:\FRST i to wszystko.