Ace Race - potrzebne wsparcie

Dla specjalistów Bezpieczeństwo
#1

Witam

Potrzebuje pomocy przy analizie logów z FRST i wymagane dane do podmiany.

 

http://wklej.to/egQnu  Addition

http://wklej.to/7yPkP  FRST

 

AwdCleaner zrobił juZ swoje…

 

 

Z góry dzieki

 

Pozdrawiam

#2

Otwórz notatnik systemowy i wklej:

Task: {AC4391F0-ACA2-4720-B35C-D690B984D024} - System32\Tasks\{869B5233-67DC-4270-B892-CBEBAE29D9F4} = pcalua.exe -a "C:\Users\Magda\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe" -c /uninstl
Task: {B037FB56-BB08-420F-8BEB-D41C54C083DE} - System32\Tasks\{8A3B5F6F-53F4-413D-8598-025BE7AF7DBD} = pcalua.exe -a C:\Users\Magda\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=cor ==== ATTENTION
HKU\S-1-5-21-3593677871-2990020578-68418169-1001\...\Run: [Yahoo! Search] = C:\Users\Magda\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3593677871-2990020578-68418169-1001 - {1A95DC8F-4A6D-4938-B715-50B59B516306} URL =
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tabtype=616_pr __alt__ ddc_dsssyctab_bd_com
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=616_pr __alt__ ddc_dsssyc_bd_com
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=616_pr __alt__ ddc_dss_bd_comp=
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpts=1421056158from=coruid=ST1000LM024XHN-M101MBB_S314J90DA42155A42155"
CHR DefaultSuggestURL: Default - http://ssmsp.ask.com/query?sstype=prefixli=ffq={searchTerms}
2015-03-08 09:54 - 2015-03-08 10:05 - 00000000 ____ D () C:\AdwCleaner
2015-03-01 18:53 - 2015-03-01 18:53 - 00003176 _____ () C:\Windows\System32\Tasks\{869B5233-67DC-4270-B892-CBEBAE29D9F4}
2015-03-01 18:52 - 2015-03-01 18:52 - 00003222 _____ () C:\Windows\System32\Tasks\{89A4AE4B-058D-40BA-A534-2A43B82174D3}
2015-03-08 09:54 - 2015-03-08 10:05 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.