Jest czysto.
Drobne korekcje.
Do notatnika wklej i zapisz jako
fixlist.txt
Kod:
CloseProcesses:
CreateRestorePoint:
BootExecute: autocheck autochk *
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/search/search.asp
HKU\S-1-5-21-2990430822-2784753754-2671567041-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2990430822-2784753754-2671567041-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
HKU\S-1-5-21-2990430822-2784753754-2671567041-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.microsoft.com/search/lobby/search.asp
HKU\S-1-5-21-2990430822-2784753754-2671567041-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/search/search.asp
HKU\S-1-5-21-2990430822-2784753754-2671567041-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
SearchScopes: HKU\S-1-5-21-2990430822-2784753754-2671567041-1001 -> DefaultScope {EC6E28AC-ECAE-4294-AD77-582E11F79554} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-2990430822-2784753754-2671567041-1001 -> {EC6E28AC-ECAE-4294-AD77-582E11F79554} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
S3 vdrive; system32\DRIVERS\vdrive.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
C:\Users\admin\AppData\Roaming\Crystal Security
C:\Windows\system32\Drivers\etc\hosts.ccebak
C:\Users\admin\AppData\Roaming\burnaware.ini
C:\Users\admin\AppData\Local\{4E2D921A-B284-4233-8103-C067317205C5}
C:\Users\admin\AppData\Local\{5FC509E3-1778-4EA1-9017-9E103FD838A1}
C:\Users\admin\AppData\Local\{ECC1E904-B608-411E-A502-19410FE79BC8}
Task: {21135F43-E764-4349-93D8-0BCD4A50B998} - System32\Tasks\{E6C1AC89-6AC8-4E64-BD9A-AD9E034A8D64} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.114.259/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {32C4DD4A-3760-4FF1-A176-C770E0529076} - System32\Tasks\Driver Booster SkipUAC (admin) => E:\Driver Booster\DriverBooster.exe [2015-04-09] (IObit)
Task: {371B5EF6-CD3C-4429-BBFF-1AE069B97534} - System32\Tasks\{2F0C1729-3ED2-4A6C-B4FD-9D6F97549FA2} => pcalua.exe -a "H:\Instalki\Nagrywanie\nero-8.3.2.1_europe_micro\Nero 8 Activation Crack.exe" -d H:\Instalki\Nagrywanie\nero-8.3.2.1_europe_micro
Task: {758B09EB-6EC0-465B-9E0C-F87C9873C264} - System32\Tasks\{9E931796-CF5F-4476-9A78-76D56F8C187C} => pcalua.exe -a C:\Users\admin\Desktop\webcam1051enu_x64.exe -d C:\Users\admin\Desktop
Task: {AF342C86-6EA9-4BBE-848F-08E7BAACA077} - System32\Tasks\Driver Booster Update => E:\Driver Booster\AutoUpdate.exe [2015-04-09] (IObit)
Task: {DEED57D0-AA16-4223-BBA6-C4027C20FB92} - System32\Tasks\{FA29EFFF-2C6C-4594-8F8A-AC9E4847E4CE} => pcalua.exe -a E:\ALLPlayer\ALLPlayer.exe -d E:\ALLPlayer
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
EmptyTemp:
Zapisany skrypt umieść obok ściągniętego programu
FRST
Następnie w programie kliknij
Fix,po wykonaniu pokaż raport z tego działania.
