Wklej do notatnika:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-2437959725-1182584091-4130879527-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\V126\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
C:\Users\V126\AppData\Roaming\newnext.me
HKU\S-1-5-21-2437959725-1182584091-4130879527-1001\...\Run: [AVG-Secure-Search-Update_1213b] => C:\Users\V126\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=adb6f878521b47d3ac6cd15696713533-2ba7b061bdcd5601fadfebd818cbe55eb977015c /CMPID=1213b
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C62F001FD095DCC0&affID=121962&tsp=4972
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C62F001FD095DCC0&affID=121962&tsp=4972
SearchScopes: HKCU - {51819CD9-1B7C-4B28-B5F8-366066CF54FF} URL = http://avira.search.ask.com/web?p2=%5EB0Y%5EYYYYYY%5EYY%5EPL&gct=sb&itbv=12.2.1.477&o=APN11080&tpid=AVIRA-V7&apn_uid=5DA2CFFB-5C4E-4CFE-9A11-E182CAA371B4&apn_ptnrs=%5EB0Y&apn_dtid=%5EYYYYYY%5EYY%5EPL&apn_dbr=Launcher.exe_0_15.0.1147.148&doi=2013-07-21&trgb=ALL&q={searchTerms}&psv=
SearchScopes: HKCU - {EC7B4E9E-5E8E-4915-9617-AB2600907871} URL = http://search.aol.pl/aol/search?s_it=tb50winamp&q={searchTerms}
Toolbar: HKLM-x32 - No Name - {82E1477C-B154-48D3-9891-33D83C26BCD3} - No File
Toolbar: HKLM-x32 - No Name - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
U2 SCardDrv; No ImagePath
U3 pxldqpow; \??\C:\Users\V126\AppData\Local\Temp\pxldqpow.sys [X]
Task: {4E797D2B-1162-40F8-9DC9-19DA4B0573D9} - System32\Tasks\EPUpdater => C:\Users\V126\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe <==== ATTENTION
C:\Users\V126\AppData\Roaming\BABSOL~1
Task: {330499F6-F232-48E2-9DF7-8F63CCF1324B} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION
EmptyTemp:
Plik zapisujesz pod nazwą
fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim
Fix. Powstanie plik
fixlog.txt, który podajesz na forum.
Następnie podaj nowe logi z FRST.
Wysłany: 24 Paź 2014, 18:36
To mogło mieć opłakane skutki i uszkodzić programy, system itp. Dla każdego przypadku skrypty są unikatowe.