Prośba o sprawdzenie logów z FRST w celu uzyskania pewności

[tachion]

Odinstaluj jeszcze:

Adobe AIR
Adobe Download Assistant
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 16.0.0.280 - Adobe Systems Incorporated)

Do notatnika wklej i zapisz jako fixlist.txt

Kod:

CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] => "C:\ProgramData\cisDAF5.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
U4 CmdAgent; No ImagePath
C:\Program Files\COMODO
C:\ProgramData\Comodo
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v AdobeAAMUpdater-1.0 /f
Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v Software Refresher /f
Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v YTDownloader /f
Reg: reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v Acrobat Assistant 8.0 /f
Reg: reg delete HKU\S-1-5-21-2527959907-2545972135-1007580503-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v SwvUpdtr /f
Reg: reg delete HKU\S-1-5-21-2527959907-2545972135-1007580503-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v YTDownloader /f
Reg: reg delete HKU\S-1-5-21-2527959907-2545972135-1007580503-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v RGSC /f
Reg: reg delete HKU\S-1-5-21-2527959907-2545972135-1007580503-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run /v Steam /f
CMD: dir /a "C:\Program Files"
CMD: dir /a "C:\Program Files (x86)"
CMD: dir /a "C:\Program Files (x86)\Common Files"
CMD: dir /a C:\ProgramData
CMD: dir /a C:\Users\barca12\AppData\Local
CMD: dir /a C:\Users\barca12\AppData\LocalLow
CMD: dir /a C:\Users\barca12\AppData\Roaming
RemoveDirectory: C:\AdwCleaner
EmptyTemp:

Zapisany skrypt umieść obok ściągniętego programu FRST
Następnie w programie kliknij Fix,po wykonaniu pokaż raport z tego działania.