14.06.2018, 20:51
Wszystko te dodatki wywal:
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\aajjigceanbgcbcdlemoheclaealfgkm [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccbdoklfbpcifppcfahmmpmbkfdjjccm [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccnckbpmaceehanjmeomladnmlffdjgn [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\djdmadneanknadilpjiknlnanaolmbfk [2018-06-14]
OPR Extension: (Tab Auto Refresh) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\filddmgeklidnenaibigmjeopkaccljm [2018-06-14]
OPR Extension: (System Table) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\fklnhhlgonmaiddgllfeppnpdpohkilk [2018-06-14]
OPR Extension: (Stop AutoPlay Next for YouTube™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\gapabmkpmidbcacmidoiheaanbbpdbjk [2018-06-14]
OPR Extension: (SmoothScroll) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\giapppmfepkcnkmphikjdibgekehlfhj [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjpihpkhgfngnbhhfdehlcmgfahbciip [2018-06-14]
OPR Extension: (I don't care about cookies) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\iambaeepkgdclnmbfdnnohkjjpdglbeo [2018-06-14]
OPR Extension: (AdF.ly Skipper 2015) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ihbiepdchiclpglbpelcmjdkpogcgjco [2018-06-14]
OPR Extension: (Disable HTML5 Autoplay) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\jbinbhipioellbajhbkjlpioadehpfdj [2018-06-14]
OPR Extension: (User-Agent Switcher) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\jikibpedldihacokaanimbcjipghbloo [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\keoanijiealjeplfaflkcgijnnflaine [2018-06-14]
OPR Extension: (Tampermonkey) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfdhdgbonjidekjkjmjaneanmdmpmidf [2018-06-14]
OPR Extension: (Flash Video Downloader (FVD)) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple [2018-06-14]
OPR Extension: (Your Quality for YouTube™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\nfcilgimggemnogfigihdkmapdhhlbph [2018-06-14]
OPR Extension: (IP Address and Domain Information) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\nihdkclnhikkafmhcdfenecgbabjjfmg [2018-06-14]
Uruchom FRST. Z klawiatury CTRL+Y, zostanie otworzony plik fixlist.txt. Wklej do pliku następującą treść:
Z klawiatury CTRL+S, by zapisać zmiany. Następnie w oknie FRST klik w Napraw (Fix). Czekaj cierpliwie, nie przerywaj działania. Gdy Fix ukończy pracę, nastąpi restart systemu. W tym samym katalogu skąd uruchamiano FRST powstanie plik fixlog.txt przedstaw go.
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\aajjigceanbgcbcdlemoheclaealfgkm [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccbdoklfbpcifppcfahmmpmbkfdjjccm [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccnckbpmaceehanjmeomladnmlffdjgn [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\djdmadneanknadilpjiknlnanaolmbfk [2018-06-14]
OPR Extension: (Tab Auto Refresh) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\filddmgeklidnenaibigmjeopkaccljm [2018-06-14]
OPR Extension: (System Table) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\fklnhhlgonmaiddgllfeppnpdpohkilk [2018-06-14]
OPR Extension: (Stop AutoPlay Next for YouTube™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\gapabmkpmidbcacmidoiheaanbbpdbjk [2018-06-14]
OPR Extension: (SmoothScroll) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\giapppmfepkcnkmphikjdibgekehlfhj [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjpihpkhgfngnbhhfdehlcmgfahbciip [2018-06-14]
OPR Extension: (I don't care about cookies) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\iambaeepkgdclnmbfdnnohkjjpdglbeo [2018-06-14]
OPR Extension: (AdF.ly Skipper 2015) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\ihbiepdchiclpglbpelcmjdkpogcgjco [2018-06-14]
OPR Extension: (Disable HTML5 Autoplay) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\jbinbhipioellbajhbkjlpioadehpfdj [2018-06-14]
OPR Extension: (User-Agent Switcher) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\jikibpedldihacokaanimbcjipghbloo [2018-06-14]
OPR Extension: (AdBlocker for Facebook™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\keoanijiealjeplfaflkcgijnnflaine [2018-06-14]
OPR Extension: (Tampermonkey) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfdhdgbonjidekjkjmjaneanmdmpmidf [2018-06-14]
OPR Extension: (Flash Video Downloader (FVD)) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple [2018-06-14]
OPR Extension: (Your Quality for YouTube™) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\nfcilgimggemnogfigihdkmapdhhlbph [2018-06-14]
OPR Extension: (IP Address and Domain Information) - C:\Users\Mido\AppData\Roaming\Opera Software\Opera Stable\Extensions\nihdkclnhikkafmhcdfenecgbabjjfmg [2018-06-14]
Uruchom FRST. Z klawiatury CTRL+Y, zostanie otworzony plik fixlist.txt. Wklej do pliku następującą treść:
Kod:
CreateRestorePoint:
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2018-06-13]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Brak pliku)
BootExecute: autocheck autochk * sdnclean64.exe
HKU\S-1-5-21-2383447445-620778322-3345763141-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-2383447445-620778322-3345763141-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: WSKVAllmytubechrome - Brak wartosci CLSID
S3 HfAudio; \SystemRoot\system32\DRIVERS\HfAudio.sys [X]
S3 ScrHIDDriver; \SystemRoot\system32\DRIVERS\ScrHIDDriver.sys [X]
C:\Users\Mido\AppData\Roaming\w4cpowpedrc
C:\Users\Mido\AppData\Roaming\vtvnzj2de0i
C:\Users\Mido\AppData\Roaming\13ve3dgkwgc
C:\ProgramData\Arkei-703a78bc-2678-480e-b83b-8f0e65801582
C:\Users\Mido\AppData\Roaming\p02dnkoeuf5
C:\Users\Mido\AppData\Roaming\kw5unohkjfd
C:\Program Files\DXP5YQL0H4
C:\Program Files\8HU722WRE8
C:\Program Files (x86)\eCCFSA
CustomCLSID: HKU\S-1-5-21-2383447445-620778322-3345763141-1002_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-4D90DC8C3BD0}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku
Task: {0F7B7482-4A9B-4C26-9509-FB26E4909965} - System32\Tasks\AdobeAAMUpdater-1.0-MIDO-Mido => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-11] (Adobe Systems Incorporated)
Task: {11EF78D9-CC73-4E11-9153-CFCC5322EE3A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2018-04-20] (Safer-Networking Ltd.)
Task: {E6BBC0FE-EE34-477F-8A6A-EE82B3A72E20} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [2018-06-05] (Dell Inc.)
EmptyTemp:Z klawiatury CTRL+S, by zapisać zmiany. Następnie w oknie FRST klik w Napraw (Fix). Czekaj cierpliwie, nie przerywaj działania. Gdy Fix ukończy pracę, nastąpi restart systemu. W tym samym katalogu skąd uruchamiano FRST powstanie plik fixlog.txt przedstaw go.