Do notatnika wklej i zapisz jako
fixlist.txt
Kod:
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd
HKLM-x32\...\Run: [] - [X]
HKU\S-1-5-21-169763694-4158994703-12170628-1001\...\Run: [LiveSupport] - "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
HKU\S-1-5-21-169763694-4158994703-12170628-1001\...\Policies\Explorer: []
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394306857&from=cor&uid=ST9500325AS_S2W648H9XXXXS2W648H9&q={searchTerms}
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Mega Browse - {4e6cd411-ce62-4584-97ff-6afbcf6900af} - C:\Program Files (x86)\Mega Browse\MegaBrowsebho.dll (Mega Browse)
Toolbar: HKLM-x32 - No Name - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -No File
S4 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [198424 2013-11-13] (TMRG,Inc.)
S4 Update Mega Browse; C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe [112416 2014-03-11] ()
S4 Util Mega Browse; "C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe" [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
C:\Users\Alice\Downloads\extension_1_7_4.crx
C:\Users\Alice\AppData\Local\Temp\bitool.dll
C:\Users\Alice\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Alice\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Alice\AppData\Local\Temp\setup.exe
C:\Users\Alice\AppData\Local\Temp\uninst1.exe
C:\Users\Alice\Desktop\~WRL2792.tmp
C:\Users\Alice\Desktop\~WRL1912.tmp
C:\Users\Alice\Desktop\~WRL0004.tmp
Task: {0942D712-8C49-4D8A-AFA5-AABC7AB4BE59} - System32\Tasks\HQ-Video-Pro-1.4-enabler => C:\Program Files (x86)\HQ-Video-Pro-1.4\HQ-Video-Pro-1.4-enabler.exe
Task: {1B71CE16-2267-4D1E-8CE4-C70C625DA7B3} - \AdobeFlashPlayerUpdate 2 No Task File
Task: {3D2F3354-CF51-4736-AB15-FA1F3B63076C} - \AdobeFlashPlayerUpdate No Task File
Task: {4389D193-8BB3-4535-BF72-1116F23FBBAE} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION
Task: {AC3F7B55-15DC-422E-A1B8-46C39E973398} - System32\Tasks\HQ-Video-Pro-1.4-codedownloader => C:\Program Files (x86)\HQ-Video-Pro-1.4\HQ-Video-Pro-1.4-codedownloader.exe
Task: {AF48B9D1-4F34-4F0C-BC80-934C7FB5193D} - System32\Tasks\EPUpdater => C:\Users\Alice\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] ()
Task: {F63D6263-FCD4-4CFC-B15A-5859295B809E} - System32\Tasks\HQ-Video-Pro-1.4-firefoxinstaller => C:\Program Files (x86)\HQ-Video-Pro-1.4\HQ-Video-Pro-1.4-firefoxinstaller.exe
Task: {FF7D5C8D-E8C8-4F11-827C-68E7AEDF84EB} - System32\Tasks\HQ-Video-Pro-1.4-chromeinstaller => C:\Program Files (x86)\HQ-Video-Pro-1.4\HQ-Video-Pro-1.4-chromeinstaller.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-169763694-4158994703-12170628-1001Core.job => C:\Users\Alice\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-169763694-4158994703-12170628-1001UA.job => C:\Users\Alice\AppData\Local\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\Temp:3E7393FC
Zapisany skrypt umieść obok ściągniętego programu
FRST
Następnie w programie kliknij
Fix ,po wykonaniu pokaż raport z tego działania.
Google Chrome
W Google Chrome pasek adresu wpisz
chrome//extensionsi klik enter
Odinstaluj jeśli widoczne
RelevantKnowledge,
HQ-Video-Pro-1.4
Zresetuj cache wtyczek. W pasku adresów wpisz chrome//plugins i ENTER. Na liście wtyczek wybierz dowolną i kliknij Wyłącz i następnie Włącz
Ustawienia > karta Historia > wyczyść
Odinstaluj:
RelevantKnowledge
Jak już masz ściągniętego bo widzę
Adwcleanerato uruchom kliknij szukaj a następnie usuń.
Pokaż raport z tego działania
Wklej na stronę raport z
SecurityCheck
[Aby zobaczyć linki, zarejestruj się tutaj]
Uruchom kliknij w dowolny klawisz,poczekaj aż program zakończy działanie.
