Podaje to co dostałam. + Po restarcie po wykonaniu Naprawy w FRST wyskoczyło coś takiego: https://obrazki.elektroda.pl/7644140300_1539118889_thumb.jpg
# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-10-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 10-09-2018
# Duration: 00:00:08
# OS: Windows 7 Home Basic
# Scanned: 31927
# Detected: 41
***** [ Services ] *****
PUP.Optional.Legacy Update service
***** [ Folders ] *****
Adware.Linkury C:\ProgramData\Logic Cramble
PUP.Optional.OnlineIO C:\Windows\Installer\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
***** [ Files ] *****
PUP.Optional.Legacy C:\Users\proxx\appdata\local\installationconfiguration.xml
PUP.Optional.Legacy C:\Users\proxx\AppData\Local\Main.dat
PUP.Optional.OnlineIO C:\Windows\Installer\SOURCEHASH{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
PUP.Optional.YesSearches C:\Windows\SysWOW64\findit.xml
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
PUP.Optional.SafeFinder C:\Users\proxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
PUP.Optional.SafeFinder C:\Users\proxx\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
Adware.DNSUnlocker HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Adware.ICLoader HKLM\Software\MICROSOFT\TechnologyDesktopnew
Adware.ICLoader HKLM\SOFTWARE\MICROSOFT\Speedycar
Adware.Linkury HKCU\Software\mtQuoteex
Adware.Linkury HKLM\Software\Wow6432Node\mtQuoteex
Adware.Linkury HKLM\Software\Wow6432Node\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\Quoteex.exe
Adware.OnlineIO HKLM\Software\Wow6432Node\Microleaves
Adware.RunBooster HKLM\Software\RunBooster
PUP.Adware.Heuristic HKLM\SOFTWARE\cb6be6702e8a509dd7cdf8460482de9d
PUP.Adware.Heuristic HKLM\SOFTWARE\9dd4e461268c8034f5c8564e155c67a6
PUP.Adware.Heuristic HKLM\SOFTWARE\014b7e8faa617cd73dd8fe7221b985fb
PUP.Optional.DNSUnlocker HKLM\Software\Wow6432Node\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E
PUP.Optional.DNSUnlocker HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E
PUP.Optional.FastDataX HKCU\Software\FastDataX
PUP.Optional.InstallCore HKCU\Software\csastats
PUP.Optional.Legacy HKCU\Software\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I
PUP.Optional.Legacy HKCU\Software\dobreprogramy
PUP.Optional.Legacy HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{17C44D82-AA56-4529-B74E-3AA386955345}|NameServer - " 82.163.143.178,82.163.142.180 "
PUP.Optional.Linkury HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quoteex.exe
PUP.Optional.Linkury HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quoteex.exe
PUP.Optional.Microleaves HKU\S-1-5-18\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
PUP.Optional.Microleaves HKU\.DEFAULT\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
PUP.Optional.Microleaves HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}
PUP.Optional.Microleaves HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\436F6625D7B77354DBCD89DDC6CFAB1A
PUP.Optional.Microleaves HKLM\Software\Classes\Installer\Products\436F6625D7B77354DBCD89DDC6CFAB1A
PUP.Optional.Microleaves HKLM\Software\Classes\Installer\Features\436F6625D7B77354DBCD89DDC6CFAB1A
PUP.Optional.SafeFinder HKCU\Environment|SNP
PUP.Optional.SafeFinder HKCU\Environment|SNF
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
PUP.Optional.HelperBar https://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ016lJlmTyAQ0ez4aqxf_QQM5EY4Qy9DoAtUaur_KByaFzfrmA27Quz_CTDN3Im9Gf_w2mRKZh2bJPTJt46nmgAbuYeX5dG5wm9F6v5XoOq3fZtoQyEefTYleDl41cwWmvvzrTu2XMWOmGf52ht6uTcAuEgg,,
PUP.Optional.Legacy https://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ016lJlmTyAQ0ez4aqxf_QQM5EY4Qy9DoAtUaur_KByaFzfrmA27Quz_CTDN3Im9Gf_w2mRKZh2bJPTJt46nmgAbuYeX5dG5wm9F6v5XoOq3fZtoQyEefTYleDl41cwWmvvzrTu2XMWOmGf52ht6uTcAuEgg,,
PUP.Optional.Legacy WebSearch
PUP.Optional.SofTonicAssistant Softonic PL
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########