W logach nie widac, ze komputer ma dostep do internetu.
Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
HKU\S-1-5-21-1105737165-281988599-134102048-1006\...\ChromeHTML: -> <==== UWAGA
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.30.4\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Staś\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-1105737165-281988599-134102048-1006_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Staś\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll => Brak pliku
Task: {510884D3-A3F3-41E0-82AB-50664EC73A91} - System32\Tasks\{47C027C2-404E-418B-8E87-2F1FD0F13EAA} => pcalua.exe -a C:\Rozrywka\Gry\CoDSP.exe -d C:\Rozrywka\Gry
Task: {B058E52A-D12E-48F3-AAD1-7413DDC90C5B} - System32\Tasks\Opera scheduled Autoupdate 1444825147 => C:\Program Files (x86)\Opera\launcher.exe [2017-02-27] (Opera Software)
Task: {B54E1137-CCB7-40A5-B713-B95B2B287FC0} - System32\Tasks\{7B1F4864-1E4C-4567-BD2E-944C2877BEF7} => pcalua.exe -a C:\Rozrywka\Gry\CoDMP.exe -d C:\Rozrywka\Gry
Task: {DBCEF7A6-5F2C-48AB-A8FB-B3B7D16A5F35} - System32\Tasks\Format Factory => C:\Users\Roberto\AppData\Local\Temp\is-QPI4K.tmp\prsetup.exe <==== UWAGA
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
HKU\S-1-5-21-1105737165-281988599-134102048-1003\...\Run: [BingSvc] => C:\Users\Roberto\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-13] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-1105737165-281988599-134102048-1003\...\Run: [Akamai NetSession Interface] => C:\Users\Roberto\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1105737165-281988599-134102048-1003\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-1105737165-281988599-134102048-1003\...\MountPoints2: {9a4ed14f-ce3f-11e4-825a-806e6f6e6963} - "E:\AidemMediaSplash.exe"
HKU\S-1-5-21-1105737165-281988599-134102048-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
hxxp://www.komputronik.pl/staticContent/pl/index/content/homepage_support_komputery
HKU\S-1-5-21-1105737165-281988599-134102048-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
hxxp://www.komputronik.pl/staticContent/pl/index/content/homepage_support_komputery
Handler: WSKVAllmytubechrome - {91AB862D-07B8-4A85 - Brak pliku
CHR HomePage: Default -> search-results.com/?gct=hp
CHR DefaultSearchURL: Default ->
hxxp://www.search-results.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search-results.com
CHR DefaultSuggestURL: Default ->
hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Extension: (SearchBetter) - C:\Users\Roberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaboojhahjgdjeknnemneiajjhhddi [2015-11-19]
CHR Extension: (SearchBetter App) - C:\Users\Roberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaccjgkjbhfmpcfnbhihbaojflfaji [2015-11-19]
CHR HKLM\...\Chrome\Extension: [aaaaboojhahjgdjeknnemneiajjhhddi] -
hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] -
hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaboojhahjgdjeknnemneiajjhhddi] -
hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] -
hxxps://clients2.google.com/service/update2/crx
2015-10-16 21:46 - 2015-10-16 21:46 - 0000016 _____ () C:\ProgramData\mntemp
W FRST wybierz Napraw.
Odinstaluj na razie Nortona o ile problem nadal wystepuje.
