logi otl

[bfffff]

usuncie mi wirusa pls ten z reklamami i inne jak są  http://wklej.to/EsYpC logi z otl http://wklej.to/gwEu4 (dajcie skrypt do usuniecia)

[bfffff]

http://wklej.to/RAbVm      http://wklej.to/VZ79a  masz te logi 

[Nezvik]

Dnalo chyba ma urlop. Nie pozostaje mi nic innego jak to sprawdzić.
Jesteś z Lublina to wisisz mi piwo


Odinstaluj: SaveItCoupons, Skype Packages (jak nie masz to pomiń)
Następnie w folderze, w którym znajduje się FRST, utwórz plik tekstowy o nazwie fixlist i wklej do niego podaną zawartość:

CloseProcesses:
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM-x32\...\Run: [mbot_pl_15] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com?affID=na
HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\S-1-5-21-3267543897-3525959809-1917337950-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKU\S-1-5-21-3267543897-3525959809-1917337950-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: dealpeak -> {292215b8-c529-46d0-a558-62d15dc12daf} -> C:\ProgramData\dealpeak\DM1SMzmJjWXxVw.x64.dll ()
BHO-x32: dealpeak -> {292215b8-c529-46d0-a558-62d15dc12daf} -> C:\ProgramData\dealpeak\DM1SMzmJjWXxVw.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers
FF Extension: Speed Test 127 - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers [2014-01-30]
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
2014-12-07 09:20 - 2014-12-07 09:21 - 00008016 _____ () C:\Windows\SysWOW64\Drivers\kgpfr2.cfg
2014-12-07 09:08 - 2014-12-07 09:08 - 00000004 _____ () C:\Users\Admin\AppData\Roaming\appdataFr2.bin
2014-12-06 17:24 - 2014-12-06 17:24 - 00000000 ____D () C:\ProgramData\SaveItCoupons
2014-12-06 17:08 - 2014-12-06 17:08 - 00000000 ____D () C:\Users\Admin\AppData\Local\Pay-By-Ads
2014-11-30 14:56 - 2014-11-30 14:56 - 00000000 ____D () C:\ProgramData\374311380
2014-11-29 18:02 - 2014-11-29 18:02 - 00000000 ____D () C:\ProgramData\ShoppingDealFactory
2014-11-29 13:48 - 2014-11-29 13:49 - 00000000 ____D () C:\ProgramData\dealpeak
2014-11-22 17:55 - 2014-11-22 17:55 - 00000000 _____ () C:\Windows\SysWOW64\sho5AA0.tmp
2014-11-12 19:36 - 2014-11-12 19:36 - 00000000 _____ () C:\Windows\SysWOW64\shoF259.tmp
2014-12-07 09:20 - 2014-11-01 20:22 - 00000000 ____D () C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7
2014-12-06 19:14 - 2013-08-27 20:24 - 00002426 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-12-04 10:16 - 2013-08-27 08:53 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-12-01 15:08 - 2014-11-02 09:19 - 00000000 ____D () C:\ProgramData\dbf663b9f8a4ab8b
2014-11-20 21:07 - 2013-09-24 20:02 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3267543897-3525959809-1917337950-1001Core.job
Task: {24E538FE-992D-44A3-8E7F-4E6998C72779} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
2011-04-20 09:18 - 2011-01-27 01:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
AlternateDataStreams: C:\Users\Admin\Downloads\MKJOGO__7934_il2984843.exe:typelib
HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\Software\Classes\.exe: exefile =>  <===== ATTENTION!
HKU\S-1-5-21-3267543897-3525959809-1917337950-1001\Software\Classes\exefile:  <===== ATTENTION!
EmptyTemp:

UWAGA! FIX PRZEZNACZONY TYLKO DLA DANEGO UŻYTKOWNIKA. WYKONANIE FIXU BEZ ZALECEŃ MOŻE SPOWODOWAĆ USZKODZENIE SYSTEMU.

 
Zapisz plik, otwórz FRST, kliknij w nim FIX. Po restarcie komputera wykonaj nowe logi FRST.

[bfffff]

Ref

[bfffff]

Ref

[Janusz.]

dostarcz logi FRST [TuT] Wykonywanie Logów. - Komputery - Poradniki - MultiPlayer Community Forum | Kody, Porady | Gry online