Dziwne Reklamy

krwawy1212 · 9 Grudzień 2014 22:04

Witam mam problem z reklamami na Google Chrome a mianowicie z czymś takim http://scr.hu/2os0/dlbgk

Czytałem o jakiś logach itp ale jestem zielony.

Mam takie coś :

FRST: http://wklej.to/x4J96

Addition: http://wklej.to/bHkl5

Atis · 9 Grudzień 2014 22:22

W panelu sterowania odinstaluj Akamai NetSession Interface i Help Save.

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKU\S-1-5-21-305566740-955266908-1076458232-1000\...\Run: [Cudauro] => C:\Users\Dominik\AppData\Roaming\Cudauro\nircmd.exe [44032 2013-08-11] (NirSoft)
HKU\S-1-5-21-305566740-955266908-1076458232-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dominik\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-305566740-955266908-1076458232-1000\...\Run: [Gx3uJZEYIM] => C:\Users\Dominik\AppData\Roaming\y6e8nrI7\ukh9vsT.exe.lnk
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-305566740-955266908-1076458232-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-305566740-955266908-1076458232-1000] => 111.111.111.111:8080
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF HKU\S-1-5-21-305566740-955266908-1076458232-1000\...\Firefox\Extensions: [{841531c9-338a-47e8-9724-864b3be7f84e}] - C:\Program Files\TubeSaver\131.xpi
FF Extension: No Name - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\oof5rki9.default\extensions\faststartff@gmail.com [Not Found]
CHR Extension: (Help Save) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjjghkapdciaiogkeofggpblmbbnjinn [2014-12-06]
S3 McComponentHostService; "C:\Program Files\McAfee Security Scan\3.0.285\McCHSvc.exe" [X]
S3 TunngleService; E:\Tunngle\TnglCtrl.exe [X]
S3 catchme; \??\C:\Users\Dominik\AppData\Local\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 glynnxxGE; \??\C:\Users\Dominik\Desktop\Intelligent Aimbot Gold Edition Cracked\glynnharr.sys [X]
S3 OSFMount; \??\C:\Program Files\Counter-Strike Global Offensive\image\x86\OSFMount.sys [X]
S3 vtany; \??\C:\Windows\vtany.sys [X]
S3 XDva406; \??\C:\Windows\system32\XDva406.sys [X]
S3 XDva409; \??\C:\Windows\system32\XDva409.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
C:\Users\Dominik\AppData\Roaming\y6e8nrI7
C:\Users\Dominik\AppData\Roaming\Cudauro
C:\Program Files\Help Save
C:\Program Files\TubeSaver
C:\ProgramData\efmmphimdpnihgpclgpmjcpfdecmjgjp
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.