Wooden seal ads (i możliwe inne problemy)

[tyokke]

FRST: http://wklej.to/qqMfD
Addition: http://wklej.to/WnkSc

Proszę o sprawdzenie logów, wdarło mi się coś na komputer

[ordynat]

Otwórz Notatnik i wklej w nim:

OPR Extension: (Wooden Seal) - C:\Users\Krzysztof\AppData\Roaming\Opera Software\Opera Stable\Extensions\nbmfiocakkklapnbflkogpdkncjllnie [2016-02-01]
CHR Extension: (Wooden Seal) - C:\Users\Krzysztof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbmfiocakkklapnbflkogpdkncjllnie [2016-02-01] [UpdateUrl: hxxp://wwwwoodensealcom-a.akamaihd.net/update/chrome] <==== UWAGA
FF Extension: Wooden Seal 1.0.1 - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\ms37u4k4.default\Extensions\{06f9190d-9600-47b8-987f-b57740ac4370}.xpi [2016-01-31] [Brak podpisu cyfrowego]
HKU\S-1-5-21-2235829469-1722999986-218145402-1000\...\Run: [GalaxyClient] => [X]
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
Task: {CC00E384-3A28-46E2-AD02-C646B49E2FC8} - System32\Tasks\{3C801E92-9379-4A2A-A020-007D7B0099D7} => pcalua.exe -a "F:\Program Files (x86)\MSI\Live Update\LU5\DL_FILE\Realtek_PCIE_Network_Drivers_7.72.410.2013\setup.exe" -d C:\Windows\system32 -c /s /f2c:\mylog.log /z[-rpC:\RHDSetup.log]
Task: {D14442EB-E2BB-4003-A32D-66C83896D178} - System32\Tasks\{0B894E32-511E-497F-BFB0-5B71F8BC4663} => pcalua.exe -a "F:\Program Files (x86)\MSI\Live Update\LU5\DL_FILE\Realtek_HD_Audio_Drivers_6.0.1.7069\Setup.exe" -d C:\Windows\system32 -c /s /f2c:\RHDSetup.log /z[-rpC:\RHDSetup.log] /runfromtemp
Task: {DC885948-7409-44A4-81E0-6F4D9F415D83} - System32\Tasks\{BA833E3D-6601-45CB-8417-248C1AAA45EE} => pcalua.exe -a H:\setup.exe -d H:\
Task: {AE6CCA8B-F9C5-4C5E-94CC-E31252B33CD1} - System32\Tasks\{13D94120-D4F2-425E-ACDB-E2743A4A2793} => pcalua.exe -a "F:\Downloads\LCVA_0420_DRV_LA_1_01_01 (1).exe" -d F:\Downloads
Task: {593DD2E9-4228-40FA-B2A2-EA11682A43B6} - System32\Tasks\{A79059F2-E68C-4526-AB14-7E00DF880004} => pcalua.exe -a "F:\Program Files (x86)\MSI\Live Update\LU5\DL_FILE\Network_Genie_1.0.0.8\setup.exe" -d C:\Windows\system32 -c -s /f1.\setup.iss /f2c:\networkgenie.log
Task: {2017BC92-97A9-4AB7-A448-E9903D438F85} - System32\Tasks\{822731AE-6689-4AC8-BD5C-F523B9337DC5} => pcalua.exe -a "F:\Program Files (x86)\MSI\Live Update\LU5\DL_FILE\Intel_Smart_Connect_Technology_4.2.40.2418\Setup.exe" -d C:\Windows\system32 -c -s
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_4; \??\F:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
S3 NTIOLib_FastBoot; \??\C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [X]
S3 NTIOLib_MSISMB_CC; \??\C:\Program Files (x86)\MSI\ControlCenter\Sleep\NTIOLib_X64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
FF Plugin HKU\S-1-5-21-2235829469-1722999986-218145402-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]
FF user.js: detected! => C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\ms37u4k4.default\user.js [2016-02-01]
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).

Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.

Autor postu otrzymał pochwałę