Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Laptop Dell - Reklamy w przeglądarce.

rammmzes 13 Sty 2016 21:00 501 5
  • #3 13 Sty 2016 21:35
    krzychupar
    Poziom 41  

    Otwórz notatnik systemowy i wklej:
    Task: {1CB77D4D-E4F0-43BB-8133-5542A06EF450} - System32\Tasks\psv_VivaZenzap => /c regedit.exe /s "C:\ProgramData\Danlax\QuoSilair.reg" &amp; del "C:\ProgramData\Danlax\QuoSilair.reg" &amp; SCHTASKS /Delete /TN "psv_VivaZenzap" /F <==== UWAGA
    Task: {42417B8A-B65A-46D6-9DD4-4E7F7C75E3DE} - System32\Tasks\psv_Tamflex => /c regedit.exe /s "C:\ProgramData\Danlax\ZimKix.reg" &amp; del "C:\ProgramData\Danlax\ZimKix.reg" &amp; SCHTASKS /Delete /TN "psv_Tamflex" /F <==== UWAGA
    Task: {66555C6E-91C1-4B8B-A445-124AFB2A8B0A} - System32\Tasks\psv_Refix => /c regedit.exe /s "C:\ProgramData\Danlax\Flexis.reg" &amp; del "C:\ProgramData\Danlax\Flexis.reg" &amp; SCHTASKS /Delete /TN "psv_Refix" /F <==== UWAGA
    Task: {AE35045C-35BE-4B45-A33F-6A27FADBCFBC} - System32\Tasks\psv_Tantom => /c regedit.exe /s "C:\ProgramData\Danlax\Moveis.reg" &amp; del "C:\ProgramData\Danlax\Moveis.reg" &amp; SCHTASKS /Delete /TN "psv_Tantom" /F <==== UWAGA
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F...ghST9II83BAyZdX8nFQWI9z5vG6K4po2mnD2rJpo9Ng,,,,
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-260571771-3608825713-1752179502-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    FF NewTab: C:\\ProgramData\\Danlax\\ff.NT
    FF SelectedSearchEngine: Default
    U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
    S3 PCDSRVC{AEEF1793-83875E70-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc.pkms [X]
    2016-01-13 19:45 - 2016-01-13 19:48 - 00000000 ____D C:\AdwCleaner

    EmptyTemp:

    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix/Napraw.

    0
  • #4 13 Sty 2016 21:41
    Acorus 20
    Spec od komputerów

    Otwórz notatnik systemowy i wklej:

    Cytat:
    Task: {1CB77D4D-E4F0-43BB-8133-5542A06EF450} - System32\Tasks\psv_VivaZenzap => /c regedit.exe /s "C:\ProgramData\Danlax\QuoSilair.reg" &amp; del "C:\ProgramData\Danlax\QuoSilair.reg" &amp; SCHTASKS /Delete /TN "psv_VivaZenzap" /F <==== UWAGA
    Task: {42417B8A-B65A-46D6-9DD4-4E7F7C75E3DE} - System32\Tasks\psv_Tamflex => /c regedit.exe /s "C:\ProgramData\Danlax\ZimKix.reg" &amp; del "C:\ProgramData\Danlax\ZimKix.reg" &amp; SCHTASKS /Delete /TN "psv_Tamflex" /F <==== UWAGA
    Task: {66555C6E-91C1-4B8B-A445-124AFB2A8B0A} - System32\Tasks\psv_Refix => /c regedit.exe /s "C:\ProgramData\Danlax\Flexis.reg" &amp; del "C:\ProgramData\Danlax\Flexis.reg" &amp; SCHTASKS /Delete /TN "psv_Refix" /F <==== UWAGA
    Task: {AE35045C-35BE-4B45-A33F-6A27FADBCFBC} - System32\Tasks\psv_Tantom => /c regedit.exe /s "C:\ProgramData\Danlax\Moveis.reg" &amp; del "C:\ProgramData\Danlax\Moveis.reg" &amp; SCHTASKS /Delete /TN "psv_Tantom" /F <==== UWAGA
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F...ghST9II83BAyZdX8nFQWI9z5vG6K4po2mnD2rJpo9Ng,,,,
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    HKU\S-1-5-21-260571771-3608825713-1752179502-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...mruiIcDux0lSV0XX8crAmNGZL6VGh0UzQOcw,,&q={searchTerms}
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-260571771-3608825713-1752179502-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    FF NewTab: C:\\ProgramData\\Danlax\\ff.NT
    CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
    U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
    S3 PCDSRVC{AEEF1793-83875E70-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc.pkms [X]
    2016-01-13 19:45 - 2016-01-13 19:48 - 00000000 ____D C:\AdwCleaner
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix/Napraw.

    0