Złośliwe oprogramowanie- proszę o pomoc

**Posty:** 1 · przez **ebi1995** 19 Wrz 2016, 10:12

Witam, przy probie instalacji programu do obróbki wideo, dostałem w "pakiecie" chyba jakieś wirusy.
Nie potrafię usunąć paru plików. Widziałem na forum że ktoś wcześniej miał chyba podobny problem. W załączniku dodaję chyba odpowiednie pliki-wnioskuję po tym że tamta osoba dodała coś podobnego.

Z góry dziękuję za pomoc.

Pozdrawiam

**Posty:** 4765 · przez **ordynat** 19 Wrz 2016, 11:39

1) Odinstaluj niepotrzebny do niczego Akamai NetSession Interface

2) Spróbuj odinstalować ten program:
Search module (HKLM-x32\...\Search module) (Version: - Goobzo) <==== UWAGA

3) Otwórz Notatnik i wklej w nim:

Reg: reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v PendingFileRenameOperations /t REG_MULTI_SZ /d "" /f
CMD: for %i in ("C:\Program Files\żěŃą\X86\*.dll") do regsvr32.exe /s /u %i
Task: {0A520D5A-CD86-42C7-A3E1-A470B9451B8D} - System32\Tasks\UnregisterNonABICompliantCodeRange => Wscript.exe C:\PROGRA~2\ti2y2cqi\jkg5r.js
Task: {2535B358-346B-4631-B810-29C3586B86C3} - System32\Tasks\psv_FreshDox => /c regedit.exe /s "C:\ProgramData\Lightzap\Jaydom.reg" & del "C:\ProgramData\Lightzap\Jaydom.reg" & SCHTASKS /Delete /TN "psv_FreshDox" /F <==== UWAGA
Task: {26B95005-3968-4C5C-9925-5AC6845D84B8} - System32\Tasks\psv_Zamtax => /c regedit.exe /s "C:\ProgramData\Lightzap\White-Dax.reg" & del "C:\ProgramData\Lightzap\White-Dax.reg" & SCHTASKS /Delete /TN "psv_Zamtax" /F <==== UWAGA
Task: {30E867F0-A729-4122-8C21-31F96DA8FBD1} - System32\Tasks\psv_Kaycof => /c regedit.exe /s "C:\ProgramData\Lightzap\GreenEx.reg" & del "C:\ProgramData\Lightzap\GreenEx.reg" & SCHTASKS /Delete /TN "psv_Kaycof" /F <==== UWAGA
Task: {596DA830-8FA3-46B2-B255-64FA80289B92} - System32\Tasks\svchost => C:\Users\KRZYSZ~1\AppData\Local\Temp\is-4KC5K.tmp\51490.exe <==== UWAGA
Task: {7EA4C942-8266-441C-A431-043476A84321} - System32\Tasks\Atihesp Client => C:\Program Files (x86)\Chmicult\viqoied.exe
Task: {8E262448-45D6-4717-BA00-C6261F55FD5E} - System32\Tasks\{F4CE92A4-C2CF-4BEC-9F98-BD576F2554F3} => pcalua.exe -a "C:\Program Files (x86)\ContentPush\uninstall.exe" -c /uninstall
Task: {9F781878-96CD-4566-9C1F-749904BBABF8} - System32\Tasks\88-5-9666-989 => Rundll32.exe "C:\ProgramData\88.5.9666.989\88.5.9666.989.dll",DllRegisterServer
Task: {B367A733-4F9D-44EC-91CF-E8E69107E325} - System32\Tasks\SMW_P => C:\ProgramData\smp2.exe [2016-09-19] () <==== UWAGA
Task: {C4D96B04-CFB3-4D56-93B4-4A24C8722079} - System32\Tasks\SMW_UpdateTask_Time_323632343832323831352d5737325a786c5a3237344541 => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== UWAGA
Task: {D364F385-C79C-44C5-A145-15BDDC613F8A} - \IBUpd2 -> Brak pliku <==== UWAGA
Task: {FFC95776-54DA-49E4-867E-B40EBF00BF39} - System32\Tasks\psv_Zimdubsing => /c regedit.exe /s "C:\ProgramData\Lightzap\Conzap.reg" & del "C:\ProgramData\Lightzap\Conzap.reg" & SCHTASKS /Delete /TN "psv_Zimdubsing" /F <==== UWAGA
RemoveDirectory: C:\ProgramData\Lightzap
RemoveDirectory: C:\PROGRA~2\ti2y2cqi
RemoveDirectory: C:\Program Files (x86)\Chmicult
RemoveDirectory: C:\ProgramData\88.5.9666.989
RemoveDirectory: C:\ProgramData\SearchModule
RemoveDirectory: C:\Program Files (x86)\SPnP3
RemoveDirectory: D:\Program Files\Undp
RemoveDirectory: C:\Program Files (x86)\68A2F600-1474223806-81E3-2969-74D02B050FD5
RemoveDirectory: C:\Users\Krzysztof\AppData\Roaming\Hemkajdoa
RemoveDirectory: c:\program files\żěńą
RemoveDirectory: C:\Program Files (x86)\UCBrowser
RemoveDirectory: C:\Program Files (x86)\GreatMaker
C:\ProgramData\smp2.exe
ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=g9izamobl2140bu,c210d6d2-1f84-4586-be38-7dc3da5286c6,
ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet-Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=g9izamobl2140bu,c210d6d2-1f84-4586-be38-7dc3da5286c6,
ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=g9izamobl2140bu,c210d6d2-1f84-4586-be38-7dc3da5286c6,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=g9izamobl2140bu,c210d6d2-1f84-4586-be38-7dc3da5286c6,
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=g9izamobl2140bu,c210d6d2-1f84-4586-be38-7dc3da5286c6,
FirewallRules: [TCP Query User{84AA123D-5214-4B1C-AEBA-CEE4D886D5C9}C:\users\krzysztof\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\krzysztof\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{E9878B94-1129-47A7-B7F2-73F4D334B185}C:\users\krzysztof\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\krzysztof\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{991C52DC-A28D-44F1-A7B5-0D28A13202CB}C:\users\krzysztof\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\krzysztof\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{ABB7BF12-53F6-44FA-B8B3-DFEFC4681141}C:\users\krzysztof\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\krzysztof\appdata\local\akamai\netsession_win.exe
FirewallRules: [{8166E0B3-1304-49A3-BAF4-582413A16A42}] => (Allow) C:\Users\Krzysztof\AppData\Local\Temp\is-4KC5K.tmp\download\MiniThunderPlatform.exe
FirewallRules: [{94F8F5A9-E661-48FC-B8FC-32309EEEDFCF}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{4E89E5B3-C6BA-48EA-A2FD-FF753F9F97AB}] => (Allow) C:\Program Files (x86)\GreatMaker\MaohaWiFi\MaohaWifiSvr.exe
HKLM-x32\...\Run: [AdAnti] => C:\Users\Krzysztof\AppData\Local\Temp\00019430\AdAnti87.exe [19164608 2016-09-18] () <===== UWAGA
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKLM-x32\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs, [X]
C:\WINDOWS\run.vbs,
HKU\S-1-5-21-4169431125-1973064923-1215171552-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Krzysztof\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4169431125-1973064923-1215171552-1002\...\Run: [svchost0] => "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"\UUC0789.exe
HKU\S-1-5-21-4169431125-1973064923-1215171552-1002\...\Run: [Installer] => C:\Users\KRZYSZ~1\AppData\Local\Temp\is-4KC5K.tmp\51490.exe /autorun <===== UWAGA
AppInit_DLLs: C:\ProgramData\Lightzap\S-is.dll => Brak pliku
AppInit_DLLs-x32: C:\ProgramData\Lightzap\SailSailing.dll => Brak pliku
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\żěŃą\X64\KZipShell.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: [KzShlobj2] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F3} => C:\Program Files (x86)\KuaiZip\X64\KZipShell.dll Brak pliku
Tcpip\..\Interfaces\{4DE39340-7BFF-47C7-A4CC-C27ED8E9FE50}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{7dfd2aa1-a5b2-11e5-824e-806e6f6e6963}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{92C9EFE0-0DCA-4D22-81E2-41B11FA65954}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{EA8C61D4-C98A-47E8-B88C-BD06EE3C4790}: [NameServer] 104.197.191.4
R2 KuaizipUpdateChecker; C:\Program Files\żěŃą\X86\kuaizipUpdateChecker.dll [219072 2016-09-18] ()
R2 SPnP3; C:\Program Files (x86)\SPnP3\SPnP3.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 SPnP4; C:\Program Files (x86)\SPnP4\SPnP4.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 SPnP5; C:\Program Files (x86)\SPnP5\SPnP5.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 SPnP6; C:\Program Files (x86)\SPnP6\SPnP6.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 Undp33; D:\Program Files\Undp\Undp3\Undp33.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 Undp44; D:\Program Files\Undp\Undp4\Undp44.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 Undp55; D:\Program Files\Undp\Undp5\Undp55.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R2 Undp66; D:\Program Files\Undp\Undp6\Undp66.exe [192004 2016-09-18] () [Brak podpisu cyfrowego]
R4 Viokdojvaf; C:\Users\Krzysztof\AppData\Roaming\Hemkajdoa\Hemkajdoa.exe [170496 2016-08-11] () [Brak podpisu cyfrowego]
S2 Citdhwa; "C:\Users\Krzysztof\AppData\Roaming\AzigcWig\Geeswu.exe" -cms [X]
S2 Sentinel RMS License Manager; "D:\Program Files (x86)\IBM\SPSS\Concurrent Licensing Tools\9.5.0\License Manager\WinNT\lservnt.exe" [X]
R2 xytekyby; C:\Program Files (x86)\68A2F600-1474223806-81E3-2969-74D02B050FD5\knsfCB.tmpfs [X]
R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [65344 2016-09-18] (Windows (R) Win 7 DDK provider) <==== UWAGA
C:\Windows\System32\drivers\cherimoya.sys
R2 KuaiZipDrive; C:\WINDOWS\system32\drivers\KuaiZipDrive.sys [92872 2016-09-18] (WinMount International Inc)
S3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2016-09-18] ()
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [81792 2016-08-29] (Huorong Borui (Beijing) Technology Co., Ltd.) <==== UWAGA
C:\Windows\System32\DRIVERS\ucguard.sys
C:\Program Files\Common Files\Noobzo
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-4169431125-1973064923-1215171552-1002_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Brak pliku
S3 dbx; system32\DRIVERS\dbx.sys [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

4) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SKANUJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.
Pokaż raport z niego "C"

5) Zrób nowe logi FRST.
Przed skanem zaznacz "Addition.txt" oraz "Shortcut.txt"
.