Otwórz notatnik i wklej zawartość:
Cytat: CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: E - E:\LaunchU3.exe -a
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {0fefdbef-39cc-11e9-b0b1-acfdce9c4b0e} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {0fefdc43-39cc-11e9-b0b1-acfdce9c4b0e} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {335f7d81-68b7-11e8-af35-acfdce9c4b12} - E:\LaunchU3.exe -a
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {394394e4-58d8-11e7-b469-acfdce9c4b12} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {6bc34971-96cb-11e5-ad8a-acfdce9c4b12} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {6bc3498e-96cb-11e5-ad8a-acfdce9c4b12} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {6bc34990-96cb-11e5-ad8a-acfdce9c4b12} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {7f3fd050-5bef-11e8-a49f-806e6f6e6963} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {7f3fd0c5-5bef-11e8-a49f-acfdce9c4b12} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {a06f93e2-82f7-11e8-a9c1-acfdce9c4b12} - E:\AutoRun.exe
HKU\S-1-5-21-554963908-3903082898-970466155-1000\...\MountPoints2: {b6e47b72-0525-11e8-a01c-acfdce9c4b12} - F:\LaunchU3.exe -a
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {A818B808-243F-4C38-B688-4E441F220CBC} - System32\Tasks\{954F34EB-75B8-4278-A48A-979876663538} => C:\Windows\system32\pcalua.exe -a C:\Users\Maria\AppData\Roaming\yoursearching\UninstallManager.exe -c -ptid=cor
Tcpip\..\Interfaces\{199E6E46-5ABE-4F8D-B768-D5789AC6B4A6}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{57F0F2DE-040C-4DBB-838F-E4FD8C59928D}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{AA576564-1C16-402E-833B-1E5D8F822957}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{B19756F4-A410-47F5-B1DE-A293074F6F9C}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{C0E25151-5F7B-47F2-8758-BF28A1204001}: [DhcpNameServer] 192.168.1.1 192.168.1.1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-554963908-3903082898-970466155-1000 -> DefaultScope {8C1A7B8C-6290-4319-A877-DF01BFE7498E} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-554963908-3903082898-970466155-1000 -> OldSearch URL = hxxp://www.bing.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-554963908-3903082898-970466155-1000 -> {8C1A7B8C-6290-4319-A877-DF01BFE7498E} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
Toolbar: HKU\S-1-5-21-554963908-3903082898-970466155-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => nie znaleziono
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S2 HuaweiHiSuiteService64.exe; "C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service [X]
U1 aswbdisk; Brak ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Brak pliku
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść w folderze, gdzie masz FRST.exe.
Uruchom FRST i kliknij w Fix/Napraw.