Ads by Albireo - jak to usunąć?

[Alesha 0]

Nie mogę tego za nic usunąć, pomocy :<

FRST.txt: http://wklej.to/u1Ssc

Addition.txt: http://wklej.to/m8KHA

[filutka78 11]

1) Odinstaluj niepotrzebny do niczego Akamai NetSession Interface

 

2)Otwórz Notatnik i wklej w nim:

2016-03-13 11:27 - 2016-03-13 11:27 - 7600640 _____ () C:\Users\Klaudia\AppData\Roaming\agent.dat

2016-03-13 11:26 - 2016-03-13 11:26 - 0188550 _____ () C:\Users\Klaudia\AppData\Roaming\BetaIng.bin

2016-03-13 11:27 - 2016-03-13 11:26 - 0761856 _____ () C:\Users\Klaudia\AppData\Roaming\HoldKaydom.exe

2016-03-13 11:27 - 2016-03-13 11:27 - 1786944 _____ () C:\Users\Klaudia\AppData\Roaming\HoldKaydom.tst

2016-03-13 11:26 - 2016-03-13 11:26 - 0127488 _____ () C:\Users\Klaudia\AppData\Roaming\Installer.dat

2016-03-13 11:27 - 2016-03-13 11:27 - 0018432 _____ () C:\Users\Klaudia\AppData\Roaming\Main.dat

2016-03-13 11:26 - 2016-03-13 11:26 - 0761856 _____ () C:\Users\Klaudia\AppData\Roaming\Saoing.exe

2016-03-13 11:26 - 2016-03-13 11:26 - 0072729 _____ () C:\Users\Klaudia\AppData\Roaming\Saoing.tst

2016-03-13 11:16 - 2016-03-13 11:27 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

2016-03-01 10:50 - 2016-03-01 10:50 - 00001058 _____ C:\WINDOWS\run.vbs

2016-03-09 12:08 - 2016-03-09 12:09 - 00000000 ___HD C:\Program Files (x86)\Temp

2016-03-13 10:57 - 2016-03-13 10:53 - 00000999 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak

2016-03-13 11:21 - 2016-03-13 11:21 - 00000000 ____D C:\ProgramData\JWdMJ

2016-03-13 11:17 - 2016-03-13 21:43 - 00000000 ____D C:\Users\Klaudia\AppData\Local\app

2016-03-13 11:16 - 2016-03-13 11:27 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

2016-03-13 11:13 - 2016-03-13 20:48 - 00000000 ____D C:\Users\Klaudia\AppData\LocalLow\Company

2016-03-13 11:13 - 2016-03-13 11:32 - 00000000 ____D C:\Users\Klaudia\AppData\Local\Tempfolder

2016-03-13 11:13 - 2016-03-13 11:13 - 00000000 ____D C:\Users\Klaudia\AppData\Roaming\Gozhut

2016-03-13 11:27 - 2016-03-13 11:27 - 00000000 ____D C:\ProgramData\9WdM9

2016-03-13 11:27 - 2016-03-13 11:27 - 00000000 ____D C:\Program Files\ktip

2016-03-13 11:31 - 2016-03-13 11:31 - 00000000 _____ C:\WINDOWS\SysWOW64\Number of results

2016-03-13 12:31 - 2016-03-13 17:01 - 00000000 ____D C:\WINDOWS\system32\epaf

2016-03-13 12:21 - 2016-03-13 12:22 - 00000140 _____ C:\WINDOWS\Reimage.ini

2016-03-13 12:20 - 2016-03-13 12:20 - 00772016 _____ (Reimage®) C:\Users\Klaudia\Downloads\ReimageRepair.exe

2016-03-13 12:14 - 2016-03-13 12:49 - 00000000 ____D C:\Users\Klaudia\AppData\Roaming\MCorp

2016-03-13 12:13 - 2016-03-13 12:17 - 00000000 ____D C:\extensions

2016-03-13 12:13 - 2016-03-13 12:13 - 00000000 ____D C:\Program Files (x86)\WinTaske

2016-03-13 11:49 - 2016-03-13 17:02 - 00000000 ____D C:\WINDOWS\system32\shn

2016-03-13 11:49 - 2016-03-13 17:01 - 00000000 ____D C:\WINDOWS\system32\huc

2016-03-13 11:32 - 2016-03-13 14:06 - 00000000 ____D C:\Users\Klaudia\AppData\Roaming\Aciod

2016-03-13 11:32 - 2016-03-13 11:32 - 00000000 ____D C:\Users\Klaudia\AppData\Roaming\OwueQeocbh

2016-03-13 13:03 - 2016-03-13 17:01 - 00000000 ____D C:\WINDOWS\system32\faui

2016-03-13 14:35 - 2016-03-13 14:35 - 00000000 ____D C:\ESD

2016-03-13 20:53 - 2016-03-13 20:53 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Klaudia\Downloads\sh-remover.exe

C:\WINDOWS\Minidump\*.dmp

S2 ktip; C:\Program Files\ktip\ktip.exe [383488 2016-03-13] () [brak podpisu cyfrowego]

CHR DefaultSearchURL: Default -> hxxp://search.mpc.am/index/search?q={searchTerms}&cx=partner-pub-3796753109442372:3837783968&ie=UTF-8

CHR DefaultSearchKeyword: Default -> mpc safe search

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA

HKU\S-1-5-21-915749086-1938285570-3274171390-1002\...\Policies\Explorer: []

HKU\S-1-5-21-915749086-1938285570-3274171390-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Klaudia\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)

FirewallRules: [uDP Query User{437ED2C6-A3A7-4125-AA39-6D919BD3796B}C:\users\klaudia\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\klaudia\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{92AA99D2-5C43-46F4-B559-3D03585C4140}C:\users\klaudia\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\klaudia\appdata\local\akamai\netsession_win.exe

C:\users\klaudia\appdata\local\akamai\netsession_win.exe

Task: {C4F4EBB1-2B35-43F7-8CAD-769A0EE5E698} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA

Task: {CA98561A-7178-4E59-8823-E6FA1EAB51C1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA

Task: {D37466A0-431B-44A4-8A03-87F42ECF2654} - \MPC AdCleaner -> Brak pliku <==== UWAGA

Task: {A917C855-5757-4658-A900-A2159C7E4326} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA

Task: {ACE4151A-8E3B-4B06-957B-A65F5C87F6D2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA

Task: {958A7066-0B2E-4302-BDEA-67F5518C0ECF} - \ReimageUpdater -> Brak pliku <==== UWAGA

Task: {596C4B47-E130-4070-8F4C-DFF8DD02E331} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA

Task: {5C495D99-6F8A-40B1-9A12-35E471B53E8C} - System32\Tasks\{6C34FFE7-A688-4840-88E0-814E9CA8C9AF} => pcalua.exe -a C:\Users\Klaudia\Downloads\DTLite_10.1.0.exe -d C:\Users\Klaudia\Downloads

Task: {7D0518AB-7603-4B7B-B7C0-30420A462A69} - \{7E0A7E47-0D79-0D79-7911-0A7E787A117F} -> Brak pliku <==== UWAGA

Task: {229515BF-A0BC-4795-9389-044055CAA3CB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA

Task: {0A6EEA1D-84B0-4B37-AA9A-FBE8F9937041} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA

Task: {13D7397B-9A6D-4602-8B37-D9C796DA78F5} - System32\Tasks\{5E6C050C-0FDA-4DB9-A204-7BD2AC1D5DBA} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Villazenlax\uninstall.exe" -c shuz -f "C:\Program Files (x86)\Common Files\Villazenlax\uninstall.dat" -a uninstallme 32807A5D-FCBD-435E-946F-10332EA98E39 DeviceId=e3b8104c-bd2e-ddc5-3d0c-466659ec8d96 BarcodeId=51113011 ChannelId=11 DistributerName=APSFTuto4PC

C:\Program Files (x86)\Common Files\Villazenlax

HOSTS:

EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe

Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

----------------------

Jeśli będzie OK, to będziemy kończyć:

Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).

przez SHIFT+DEL usuń pozostały folder C:\FRST.

 

 

Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.

.

F.

[Alesha 0]

Bardzo dziękuję za pomoc, od razu pomogło.