Odinstaluj
PriceFountain, Update for PriceFountain . Następnie wklej do notatnika:
HKLM-x32\...\RunOnce: [PriceFountain] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Nakano\AppData\Roaming\PriceFountain\UpdateProc\bkup.dat"
C:\Users\Nakano\AppData\Roaming\PriceFountain
HKU\S-1-5-21-3236304322-3598382758-57917902-1000\...\Run: [pricefountainw.exe] => C:\Users\Nakano\AppData\Local\PriceFountain\pricefountainw.exe [464384 2015-04-16] (Price Fountain)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3236304322-3598382758-57917902-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-3236304322-3598382758-57917902-1000] => localhost:8080
FF Extension: PriceFountain - C:\Users\Nakano\AppData\Roaming\Mozilla\Firefox\Profiles\k8s3m8hq.default-1393847713759\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi [2015-04-18]
CHR HKLM-x32\...\Chrome\Extension: [mbcjjdjanpccmehilicphhmeobiljcpk] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx [Not Found]
2015-04-18 13:19 - 2015-04-18 13:19 - 00000000 ____D () C:\Users\Nakano\AppData\Local\PriceFountain
2015-04-18 13:19 - 2015-04-18 13:19 - 00000000 ____D () C:\Users\Nakano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain
EmptyTemp:
Plik zapisujesz pod nazwą
fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim
Fix. Powstanie plik
fixlog.txt, który podajesz na forum.
Następnie podaj nowe logi z FRST.