Do notatnika wklej i zapisz jako
fixlist.txt
Kod:
CloseProcesses:
HKLM\...\Run: [Onet.pl AutoUpdate] => C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe [260096 2005-07-27] (Onet.pl)
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Run: [Akamai NetSession Interface] => C:\Users\Ania\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Run: [Facebook Update] => C:\Users\Ania\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-08-02] (Google Inc.)
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Run: [Google Update] => C:\Users\Ania\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-05] (Google Inc.)
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\RunOnce: [WindowsUpdate] => C:\ProgramData\Microsoft Services\symgr.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"
HKU\S-1-5-21-1714149439-657023472-4236964593-1003\...\Winlogon: [Shell] C:\windows\Explorer.exe [2616320 2010-11-20] (Microsoft Corporation) <==== ATTENTION
BootExecute: autocheck autochk * bddel.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {C2846C54-FEDF-40B9-A287-E206CBFD89E4} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7SKPB_pl
SearchScopes: HKCU - {C2846C54-FEDF-40B9-A287-E206CBFD89E4} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7SKPB_pl
BHO: Framed Display -> {05b5ef3f-4c6a-426e-b77e-48ebb3e721f1} -> C:\Program Files\Framed Display\FramedDisplaybho.dll (Framed Display)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_43-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_43-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_43-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FF NewTab: chrome://quick_start/content/index.html
FF user.js: detected! => C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\gi434lxi.default-1354393785640\user.js
FF Extension: TimeLineRemove.Com - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\gi434lxi.default-1354393785640\Extensions\[email protected] [2013-06-16]
FF Extension: Framed Display - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\gi434lxi.default-1354393785640\Extensions\{e9bebce7-deb3-4ab9-896c-549739f208c5}.xpi [2014-09-28]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\gi434lxi.default-1354393785640\extensions\[email protected]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\gi434lxi.default-1354393785640\extensions\[email protected]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 Update Framed Display; C:\Program Files\Framed Display\updateFramedDisplay.exe [521976 2014-09-30] ()
R2 Util Framed Display; C:\Program Files\Framed Display\bin\utilFramedDisplay.exe [521976 2014-09-30] ()
S2 svchost; C:\Users\Ania\AppData\Roaming\svchost.exe [35840 2014-09-30] () [File not signed]
R1 {e9bebce7-deb3-4ab9-896c-549739f208c5}Gw; C:\windows\System32\drivers\{e9bebce7-deb3-4ab9-896c-549739f208c5}Gw.sys [43160 2014-09-27] (StdLib)
U2 IviRegMgr; No ImagePath
S1 junfzrzs; \??\C:\windows\system32\drivers\junfzrzs.sys [X]
U3 RichVideo; No ImagePath
C:\windows\system32\bddel.exe
C:\windows\system32\bddel.dat
C:\Users\Ania\Downloads\SC-4874V44.rar.crdownload
C:\Users\Ania\AppData\Roaming\gen32
C:\Users\Ania\AppData\Roaming\gen32.exe
C:\Users\Ania\AppData\Roaming\svchost.exe
C:\Users\Ania\AppData\Roaming\tmp.exe
C:\windows\system32\Drivers\{e9bebce7-deb3-4ab9-896c-549739f208c5}Gw.sys
C:\Users\Ania\Downloads\291c4652-602c-40c4-9e5b-ce8a48bda532.htm
C:\Users\Ania\Downloads\291c4652-602c-40c4-9e5b-ce8a48bda532 (1).htm
C:\Program Files\Enigma Software Group
C:\windows\455F074C814E4520B69B5584BD90400C.TMP
C:\Users\Ania\Downloads\SpyHunter-Installer.exe
C:\Program Files\Mozilla Firefox.bak
C:\Users\Ania\AppData\Roaming\nvidiacc.exe
C:\Users\Ania\AppData\Roaming\nvidiadisp.exe
C:\Users\Ania\AppData\Local\C4
C:\Users\Ania\AppData\Local\P
C:\ProgramData\Microsoft Services
C:\Users\Ania\AppData\Roaming\F1L83BAPZG.exe
C:\Users\Ania\jagex_cl_runescape_LIVE.dat
C:\Users\Ania\jagex_cl_runescape_LIVE1.dat
C:\Users\Ania\jagex_runescape_preferences.dat
C:\Users\Ania\jagex_runescape_preferences2.dat
CustomCLSID: HKU\S-1-5-21-1714149439-657023472-4236964593-1003_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Ania\AppData\Local\Google\Update\1.3.23.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1714149439-657023472-4236964593-1003_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Ania\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1714149439-657023472-4236964593-1003_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Ania\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1714149439-657023472-4236964593-1003_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\Ania\AppData\Local\Google\Update\1.3.22.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1714149439-657023472-4236964593-1003_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Ania\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File
Task: {17B3E8A7-A4EC-4144-A44F-C13A82F0251E} - System32\Tasks\{133851B1-774E-4C3C-B741-9FE15CBCECCC} => Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/pl/abandoninstall?page=tsProgressBar
Task: {5904A566-39C1-4A04-9616-5BDEBB93E4AC} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {276D915E-53BC-4662-A54B-00B1C8627E22} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1714149439-657023472-4236964593-1003Core => C:\Users\Ania\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {3E2EF4F7-216D-49F2-9B8C-7D2199BC3DEB} - System32\Tasks\{EA7106D9-3EB4-4FDB-9BEA-DC6ABF3B7537} => C:\Program Files\Skype\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {6F517C54-91E9-41BB-8201-94D2A6B0BD32} - System32\Tasks\{6E8D8C16-1EE4-477A-9BD1-666407A28332} => Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/pl/abandoninstall?page=tsProgressBar
Task: {3DD01D1D-9E21-4B05-881D-EFA8843B36F7} - System32\Tasks\{8C1E0875-5529-41AD-9856-136DB6BF4A76} => C:\Program Files\Rockstar Games\GTA San Andreas\gta_sa.exe [2005-08-05] ()
Task: {9DA089B6-390D-46E6-8D8F-37002AB5B717} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6A9CDF3-6B80-4E87-84A7-57FAE41F887D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1714149439-657023472-4236964593-1003UA => C:\Users\Ania\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {B1DB88D1-6721-44C8-819A-E295089054C4} - System32\Tasks\{463725D6-DA1A-42BE-BC31-C6EE227A238A} => Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/pl/abandoninstall?page=tsProgressBar
Task: {DAF6371F-7B25-4E01-AA75-B7090DE69B5A} - System32\Tasks\{BC23B8AF-2297-4BAB-B7AF-AEB493B4BD20} => Chrome.exe http://ui.skype.com/ui/0/5.8.0.158/pl/abandoninstall?page=tsProgressBar
Task: {43212C82-23F8-4664-AEA9-5C1D5B1B7602} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: {5979206A-2FBD-4732-ABD0-B9B7308C42FE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1714149439-657023472-4236964593-1003UA => C:\Users\Ania\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)
Task: {79CF2DD2-76CE-4E79-A969-73D3E92A17B0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1714149439-657023472-4236964593-1003Core => C:\Users\Ania\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-05] (Google Inc.)
Task: {C00C7BC5-906F-4E5E-BB21-140699D9B9BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
Reg: reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2 /f
CMD: netsh advfirewall reset
CMD: ipconfig /flushdns
EmptyTemp:
Zapisany skrypt umieść obok ściągniętego programu
FRST
Następnie w programie kliknij
Fix,po wykonaniu pokaż raport z tego działania.
Odinstaluj:
AVG 2013 użyj (AVG Remover)
[Aby zobaczyć linki, zarejestruj się tutaj]
Akamai NetSession
Framed Display
Java 7 Update 55
Java™ 6 Update 43
ArcaVir Prerequistes
W przeglądarce Firefox
Otwórz menu w górnym rogu po prawej stronie > otwórz menu pomoc oznaczone czerwoną ramką.
[Aby zobaczyć linki, zarejestruj się tutaj]
Informacje dla pomocy technicznej > Zresetuj program Firefox. Reset nie naruszy zakładek i haseł.
Google Chrome
Ustawienia > karta Rozszerzenia > usuń o ile będzie (Framed Display)
Ustawienia > karta Ustawienia > Pokaż ustawienia zaawansowane > zjedź na sam spód i uruchom opcję "Zresetuj ustawienia przeglądarki".
Ściągnij program
[Aby zobaczyć linki, zarejestruj się tutaj]
kliknij
Szukaj i następnie
Usuń
Pokaż raport z niego.
Wklej na stronę raport z
SecurityCheck
[Aby zobaczyć linki, zarejestruj się tutaj]
Uruchom kliknij w dowolny klawisz,poczekaj aż program zakończy działanie.
