Złośliwe reklamy w Firefoxie - jak usunąć? Logi w załączniku

jan_palony napisał:

Po skanie mam tylko jeden

krzychupar napisał:

Po uruchomieniu programu FRST musisz zaznaczyć Addition.txt

Cytat:

Task: {6098179C-AFDD-4DD2-B6B6-19E28127D2FA} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
Task: {8EA16A3C-568E-48BF-9424-A330C1A82FF2} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-11] (Realtek Semiconductor)
Task: {E1F0C492-75A1-40B0-BE22-AD7A9708E238} - System32\Tasks\{7FAD824E-3561-4886-8289-B90A9BA4A7E6} => pcalua.exe -a C:\Users\Kuba\Downloads\SolidWorksSetup.exe -d C:\Users\Kuba\Downloads
(© 2015 Microsoft Corporation) C:\Users\Kuba\AppData\Local\Microsoft\BingSvc\BingSvc.exe
HKU\S-1-5-21-2457708178-773723873-3117486440-1000\...\Run: [BingSvc] => C:\Users\Kuba\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2457708178-773723873-3117486440-1000\...\RunOnce: [ALLPlayer Remote Update] => C:\Users\Kuba\AppData\Local\Temp\ALLRemote.exe [2200144 2017-01-25] (ALLPlayer ) <===== UWAGA
HKU\S-1-5-21-2457708178-773723873-3117486440-1000\...\MountPoints2: {a332ee52-8580-11e5-8bb3-a088693eb83a} - E:\setup.exe
HKU\S-1-5-21-2457708178-773723873-3117486440-1000\...\MountPoints2: {fd2bbe33-b567-11e6-a7f3-a088693eb83a} - E:\autorun.exe
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
SearchScopes: HKLM -> DefaultScope - brak wartości
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2457708178-773723873-3117486440-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2457708178-773723873-3117486440-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
FF Extension: (Adblock Plus Pop-up Addon) - C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\e8lokyf0.default-1471596497161\Extensions\adblockpopups@jessehakanen.net.xpi [2016-09-19]
FF Plugin: @Microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/GENUINE -> disabled [Brak pliku]
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nie znaleziono>
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S3 btmhsf; system32\DRIVERS\btmhsf.sys [X]
S3 ibtusb; system32\DRIVERS\ibtusb.sys [X]
S3 iscFlash; \??\C:\Users\Kuba\AppData\Local\Temp\7zS4A29.tmp\iscflashx64.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
C:\Users\Kuba\AppData\Local\Temp\ALLRemote.exe
EmptyTemp: