Uruchom
OTL 
w oknie
Własne opcje skanowania/skrypt wklej:
:OTL
IE - HKU\S-1-5-21-787632886-2001235247-1982539702-1000\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No CLSID value found
IE - HKU\S-1-5-21-787632886-2001235247-1982539702-1000\..\SearchScopes\{16CC3586-3547-4025-9E2F-F04C365D8B90}: "URL" = http://search.eazel.com/results.php?cat=web&co=&lg=en&q={searchTerms}
IE - HKU\S-1-5-21-787632886-2001235247-1982539702-1000\..\SearchScopes\{1DBF9164-37D3-4996-953F-C88EBB1F9085}: "URL" = http://services.zinio.com/search?s={searchTerms}&rf=sonyslices
O2:64bit: - BHO: (Adblocker) - {1BBDC1EB-00A1-55C8-B8F7-5860930A74D6} - C:\Program Files (x86)\Adblocker\Bcse.x64.dll ()
O2:64bit: - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2:64bit: - BHO: (NextiCoup) - {ab642329-ebf8-4d2d-8142-4fbd4226efed} - C:\Program Files (x86)\NextiCoup\e56S6GO3LnhJXY.x64.dll ()
O2:64bit: - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2 - BHO: (Adblocker) - {1BBDC1EB-00A1-55C8-B8F7-5860930A74D6} - C:\Program Files (x86)\Adblocker\Bcse.dll ()
O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
O2 - BHO: (NextiCoup) - {ab642329-ebf8-4d2d-8142-4fbd4226efed} - C:\Program Files (x86)\NextiCoup\e56S6GO3LnhJXY.dll ()
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O3 - HKU\S-1-5-21-787632886-2001235247-1982539702-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [SFAUpdater] C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe (Filefacts.net)
O4 - HKLM..\Run: [Smart File Advisor] C:\Program Files (x86)\Smart File Advisor\sfa.exe (Filefacts.net)
SRV - [2013-07-12 21:40:28 | 000,834,664 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Users\vaio\AppData\Local\Temp\007375~1.EXE -- (0073751410783197mcinstcleanup)
O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
[2014-09-15 07:56:58 | 000,000,000 | ---D | C] -- C:\ProgramData\NextiCoup
[2014-09-15 07:56:47 | 002,254,336 | ---- | C] (Setup) -- C:\Windows\SysWow64\setup.exe
[2014-09-12 20:26:19 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013-06-26 19:02:04 | 000,003,729 | ---- | C] () -- C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
[2014-07-18 19:35:25 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\AVG
[2014-07-17 15:24:29 | 000,000,000 | ---D | M] -- C:\Users\vaio\AppData\Roaming\AVG
[2012-09-20 19:03:14 | 000,000,000 | ---D | M] -- C:\Users\vaio\AppData\Roaming\Babylon
:Files
C:\Program Files (x86)\NextiCoup
C:\Program Files (x86)\Adblocker
C:\Program Files (x86)\Smart File Advisor
:Commands
[clearallrestorepoints]
[emptytemp]
Klikasz
Wykonaj skrypt. Podajesz log z usuwania + nowe logi z OTL.
