1) Odinstaluj:
"7c98d05f" = Contextual Tool Extrafind
"Browsers Protector" = Browsers Protector
"fst_pl_30_is1" = fst_pl_30
"nationzoom Browser Protecter" = nationzoom Browser Protecter
"StartSearch Toolbar" = StartSearch Toolbar 1.3
2) Użyj >
Adw-cleaner najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.
Pokaż raport z niego C:\AdwCleaner\AdwCleaner[S].txt
3) Uruchom
OTL i w oknie
Własne opcje skanowania/Skrypt wklej to:
:OTL
MOD - [2014/01/02 14:17:00 | 004,001,224 | ---- | M] () -- C:\Program Files (x86)\fst_pl_30\fst_pl_30.exe
SRV - [2014/01/31 18:57:27 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Cling Clang\updateClingClang.exe -- (Update Cling Clang)
SRV - [2014/01/30 17:14:01 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Cling Clang\bin\utilClingClang.exe -- (Util Cling Clang)
FF - prefs.js..browser.search.order.1: "Web Search"
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{dde15e35-c9b3-4c30-b055-730c5f4a45d3}: C:\Program Files (x86)\Lyrmix\133.xpi
[2012/01/23 21:58:47 | 000,000,000 | ---D | M] (VshareComplete - Speed up your search with your personal search suggestions tool) -- C:\Users\zbyszek\AppData\Roaming\mozilla\Firefox\Profiles\8yvz913w.default\extensions\{4ac04d99-3f4b-4ec5-bd2d-216d59822f8a}
[2013/10/07 13:12:34 | 000,003,717 | ---- | M] () -- C:\Users\zbyszek\AppData\Roaming\mozilla\firefox\profiles\8yvz913w.default\searchplugins\avg-secure-search.xml
[2012/03/30 20:36:45 | 000,000,792 | ---- | M] () -- C:\Users\zbyszek\AppData\Roaming\mozilla\firefox\profiles\8yvz913w.default\searchplugins\startsear.xml
[2012/03/30 20:36:53 | 000,000,000 | ---D | M] (z) -- C:\Program Files (x86)\mozilla firefox\extensions\{42b900b1-a011-951e-59fd-400c396c958e}
[2012/01/02 11:48:42 | 000,083,456 | ---- | M] (StartSearch ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll
[2012/03/21 18:52:53 | 000,003,749 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
O2:64bit: - BHO: (VshareComplete) - {222f31fb-a14e-4af2-bb14-997f28294370} - C:\Users\zbyszek\AppData\Roaming\VshareComplete\64\VshareComplete64.dll (SimplyGen)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2620062754-3560939241-2524965743-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2620062754-3560939241-2524965743-501\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2620062754-3560939241-2524965743-501\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O4 - HKLM..\Run: [ConvertAd] C:\Users\zbyszek\AppData\Local\ConvertAd\ConvertAd.exe File not found
O4 - HKLM..\Run: [fst_pl_30] C:\Program Files (x86)\fst_pl_30\fst_pl_30.exe ()
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found
O4 - HKLM..\RunOnce: [upfst_pl_30.exe] C:\Users\zbyszek\AppData\Local\fst_pl_30\upfst_pl_30.exe ()
O8:64bit: - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\Office10\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\Office10\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
[2014/01/14 11:44:05 | 000,000,000 | ---D | M] -- C:\Users\zbyszek\AppData\Roaming\nationzoom
:Files
C:\Program Files (x86)\Cling Clang
C:\Program Files (x86)\fst_pl_30
C:\Program Files (x86)\Lyrmix
C:\Users\zbyszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-21-2620062754-3560939241-2524965743-501\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[-HKEY_USERS\S-1-5-21-2620062754-3560939241-2524965743-501\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
:Commands
[emptytemp]
Kliknij w
Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom
OTL ponownie, tym razem kliknij
Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.
). Teraz około raz na 5min odpala się okno internet explorera z reklamami. 
.
