Zepsuty chrome

[ToServeAndProtect]

Chciałem zainstalować starszą wersję chroma bo już denerwowały mnie komunikaty, że wtyczka FLASH nie jest obsługiwana. A że 95% po których chodzę używa flasha stało się to denerwujące.
Niestety po instalacji starszego chroma coś mi się spierniczyło i przestał działać kompletnie. Odinstalowanie, czyszczenie resztek oraz plików z dysku nie pomogło. Syfa nie podejrzewam ale może jakieś śmieciuchy się wrzuciły i nic nie potrafię zrobić.

Loga:
FRST
Addition

OTL
EXTRAS

[ordynat]

W tej chwili Chrome nie jest wcale zainstalowany.
Infekcji żadnej nie widzę.

Otwórz Notatnik i wklej w nim:

HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.exe <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.com <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.pif <====== UWAGA
HKLM Group Policy restriction on software: syskey.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.exe <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.scr <====== UWAGA
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.js <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.js <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.js <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.com <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.scr <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.pif <====== UWAGA
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.png*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.js <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.js <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.com <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.com <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.exe <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.exe <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.com <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.js <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.js <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.bat <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.com <====== UWAGA
HKLM Group Policy restriction on software: *.png*.js <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.js <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.com <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.com <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.scr <====== UWAGA
HKLM Group Policy restriction on software: lsassw86s.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.com <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.exe <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.bat <====== UWAGA
HKLM Group Policy restriction on software: ** <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.scr <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.com <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.js <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.com <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.com <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.js <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.js <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.jse <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.jse <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== UWAGA
HKLM Group Policy restriction on software: scsvserv.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.jse <====== UWAGA
HKLM Group Policy restriction on software: cipher.exe <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.com <====== UWAGA
HKLM Group Policy restriction on software: *.png*.com <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.png*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.js <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.com <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.com <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.js <====== UWAGA
HKLM Group Policy restriction on software: *.jpg*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.exe <====== UWAGA
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.exe <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.exe <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.bat <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.png*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.png*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.bmp*.js <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.pif <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.divx*.js <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.rar*.exe <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.jse <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.bat <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\*.js <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.jpeg*.scr <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.js <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.jse <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.com <====== UWAGA
HKLM Group Policy restriction on software: *.pptx*.com <====== UWAGA
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.com <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.xls*.js <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.txt*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.js <====== UWAGA
HKLM Group Policy restriction on software: *.pdf*.js <====== UWAGA
HKLM Group Policy restriction on software: *.png*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.js <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.js <====== UWAGA
HKLM Group Policy restriction on software: *.7z*.js <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.mp3*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.wmv*.exe <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.mp4*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== UWAGA
HKLM Group Policy restriction on software: *.xlsx*.scr <====== UWAGA
HKLM Group Policy restriction on software: *.zip*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.com <====== UWAGA
HKLM Group Policy restriction on software: *.wma*.exe <====== UWAGA
HKLM Group Policy restriction on software: *.ppt*.com <====== UWAGA
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\*.jse <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.cmd <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.rtf*.js <====== UWAGA
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== UWAGA
HKLM Group Policy restriction on software: *.avi*.com <====== UWAGA
HKLM Group Policy restriction on software: *.wav*.bat <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== UWAGA
HKLM Group Policy restriction on software: *.doc*.jse <====== UWAGA
HKLM Group Policy restriction on software: *.gif*.js <====== UWAGA
HKLM Group Policy restriction on software: *.docx*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.pub*.cmd <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== UWAGA
HKLM Group Policy restriction on software: *.png*.scr <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== UWAGA
HKLM Group Policy restriction on software: vssadmin.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\raptr\raptr-4.5.0-r103535-release.exe <====== UWAGA
HKLM Group Policy restriction on software: %appdata%\raptr\raptr-4.5.0-r103535-release.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\raptr\raptr-4.5.0-r103535-release.exe <====== UWAGA
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\raptr\raptr-4.5.0-r103535-release.exe <====== UWAGA
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <===== UWAGA
Task: {C11BC725-0D38-4960-BF51-85CB43467917} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {45C273E8-778F-4318-9C28-04211AF5BB0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Brak pliku
HKU\S-1-5-21-4217712009-947032007-1070934627-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
FF Extension: Brak nazwy - C:\Users\szcze\AppData\Roaming\Mozilla\Firefox\Profiles\fx4uj2hm.default\Extensions\uBlock0@raymondhill.net.xpi [2015-12-28] [Brak podpisu cyfrowego]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

Autor postu otrzymał pochwałę

[Łowca Androidów]

Pytanie - czy miałeś włączona synchronizację w chrome?
Jełi tak to trzeba ją zresetować:

Google Chrome:
https://support.google.com/chrome/answer/2390059?hl=pl

Po resecie należy odczekać - proces resetowania na serwerze może trwać nawet kilka dni.

Dodatkowo użyłbym programu ResetBrowser:

• Pobieramy ResetBrowser
• Uruchamiamy prawwym myszy i opcja Uruchom jako administrator
• Po uruchomieniu otrzymujemy komunikat o działaniu programu
• Klikamy OK
• Pojawia się właściwe okno programu
• Na dole mamy trzy przyciski:
  
  • Reset FireFox
  • Reset Chrome
  • Reset Internet Explorer

• Klikamy w wybrany przycisk i program zresetuje wybraną przeglądarkę
• Nie resetuje haseł i zakładek
• Z górenej belki możemy również zresetować DNS'y klikając przycisk Reset DNS

Logi zaraz przejrzę

Dodano Dzisiaj, 17:30:
Z całym szacunkiem do wiedzy kolegi powyżej ale te wpisy są od programu CryptoPrevent i ni epowinny mieć żadnego znaczenia i wpływu na zaistniałą sytuację.

Jak dla mnie to:

• Do notatnika wklej poniższe:
  

  Kod: Zaznacz wszystko

  CloseProcesses:
CreateRestorePoint:
CHR Profile: C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-28]
CHR Extension: (Dokumenty Google) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-28]
CHR Extension: (Dysk Google) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-28]
CHR Extension: (YouTube) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-28]
CHR Extension: (Google Search) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-28]
CHR Extension: (Arkusze Google) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-28]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-28]
CHR Extension: (Gmail) - C:\Users\szcze\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-28]
C:\Users\szcze\Desktop\ChromeSetup.exe
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\Program Files (x86)\Google
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\szcze\AppData\Local\Google
EmptyTemp:


• Zapisz na pulpicie jako fixlist.txt
• Uruchom FRST (z pulpitu)
• Wciśnij przycisk NAPRAW
• Zostanie wygenerowany fixlog.txt - pokaż go (na http://www.wklej.org)

Dodano Dzisiaj, 17:34:
I tak na przyszłość - OTL używamy max do Windows 7 - jego wsparcie się już zakończyło i nie gwaranutje poprawnego działania pod systemami nowszymi od Windows 7

Dodano Dzisiaj, 17:37:
Jeszcze jedno - czym odinstalowywałeś starego chrome?
Użyłbym RevoUninstaler'a:

• Pobieramy program Revo Uninstaller Portable
  
  (Można w opcjach ustawić język PL)
  

• Urchamiamy prawym myszy i opcja Uruchom jako administrator
• Po uruchomieniu programu odszukujemy program do deinstlacji
• Zaznaczamy pozycję i prawym myszy -> opcja Uninsall
• Wyskoczy zapytanie czy na pewno chcemy odinstalować - klikamy Yes
• Wybieramy pozycję Advenced i klikamy Next
• Rozpocznie się deinstalacja przy użyciu instalatora Windows
• Po zakończeniu deinstlacji NIE POZWALAMY NA REBOOT
• Po zakończeniu w Revo klikamy Next
• Program rozpocznie skanowanie w poszukiwaniu pozostałości w rejestrze
• Po zakończeniu zaznaczamy wszystko i wciskamy Delete
• Zostaniemy zapytani czy na pewno - klikamy Yes
• Klikamy Next i program pokaże listę pozostałych plików i katalogów
• Klikamy Select all oraz Delete
• Klikamy Finish

[ToServeAndProtect]

1.
Fixlog dla Ordynata
Fixlog dla Łowcy

2.
Tak synchronizacja była włączona. To główny powód używania Chrome, w FF ona ssie xD Wszelkie urządzenia odłączone i zresetowane.

Nie pomyślałem: przed instalacją starszej wersji nie usunąłem nowszej. Chroma ogólnie usuwałem potem poprzez REVO, robię tak zawsze.

3.
Reset wykonany przy użyciu programu RESETBROWSER (uruchomione jako ADMIN).
Pokazał się komunikat: Kosz na dysku C jest uszkodzony. Czy go usunąć. Jeśli TAK to i tak nie mogłem usunąć więc dałem nie.

[Łowca Androidów]

OK - to reset synchronizacji i jak pisałem to może potrwać kilka dni więc po resecie odczekaj kilka dni i dopiero instaluj chrome.

Autor postu otrzymał pochwałę

[ToServeAndProtect]

buziaczki, działa od razu :*

umarłbym jakbym miał używać FF xD

[Łowca Androidów]

Ja korzystam z Opery i umarłbym gdybym miał korzystać z chrome