Firefox - uciążliwe reklamy

Dla specjalistów Bezpieczeństwo
#1

Witam jak widac wyzej mam problem z reklamami

Scan FRST http://www.wklej.org/id/1675369/

Scan Additon http://www.wklej.org/id/1675373/

Bardzo bym prosił o pomoc :wink:

 

 

 

 

@Edit

 

 Bardzo bym prosił o porady jak sie obronić przed takimi reklamami link do pogramu który nas ochrania od tego itp :wink:

#2

Otwórz notatnik systemowy i wklej:

Task: {26EA557D-B30C-4F8F-97C5-B1645527E554} - System32\Tasks\{2DB89B71-0E2D-400E-AB8F-EF512BA0B8B4} = pcalua.exe -a C:\Users\Adrian\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=obw ==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3799292215-1021963695-2689186287-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-3799292215-1021963695-2689186287-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: TaakETTheCOuPon - {07355e26-cfed-424c-a520-13c5a6874d39} - C:\Program Files (x86)\TaakETTheCOuPon\XIUSzYyFTDl0Na.x64.dll [2015-03-24] ()
BHO: RAnDoMoPriice - {277b73c3-d9a5-42a4-98c2-d96e310d32d6} - C:\Program Files (x86)\RAnDoMoPriice\vfuBlvey2NIhsB.x64.dll [2015-03-24] ()
BHO: UniDeaLsie - {37c7199e-192f-4ab3-8a8f-3f82bab1311a} - C:\Program Files (x86)\UniDeaLsie\5XL7SnGZWulR7q.x64.dll [2015-03-17] ()
BHO: youtubeadblocker - {d277974e-33d1-497d-bdba-29ea21c7dea3} - C:\Program Files (x86)\youtubeadblocker\iXKoQMFHpniRsL.x64.dll [2015-03-17] ()
BHO-x32: TaakETTheCOuPon - {07355e26-cfed-424c-a520-13c5a6874d39} - C:\Program Files (x86)\TaakETTheCOuPon\XIUSzYyFTDl0Na.dll [2015-03-24] ()
BHO-x32: RAnDoMoPriice - {277b73c3-d9a5-42a4-98c2-d96e310d32d6} - C:\Program Files (x86)\RAnDoMoPriice\vfuBlvey2NIhsB.dll [2015-03-24] ()
BHO-x32: UniDeaLsie - {37c7199e-192f-4ab3-8a8f-3f82bab1311a} - C:\Program Files (x86)\UniDeaLsie\5XL7SnGZWulR7q.dll No File
BHO-x32: youtubeadblocker - {d277974e-33d1-497d-bdba-29ea21c7dea3} - C:\Program Files (x86)\youtubeadblocker\iXKoQMFHpniRsL.dll No File
FF SelectedSearchEngine: mystartsearch
FF Extension: DDownSAve - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\z76uf765.default\Extensions\q@ZIhOpyg0.org [2015-03-24]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\z76uf765.default\extensions\searchengine@gmail.com
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2015-03-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [249000 2015-03-20] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [45224 2015-03-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2015-03-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [42152 2015-03-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [93352 2015-03-20] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-02-15] (Elex do Brasil Participações Ltda)
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
2015-03-24 11:21 - 2015-03-24 11:21 - 00000000 ____ D () C:\Users\Adrian\AppData\Roaming\Elex-tech
2015-03-24 11:21 - 2015-03-24 11:21 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
2015-03-24 11:21 - 2015-03-24 11:21 - 00000000 ____ D () C:\Program Files (x86)\Elex-tech
2015-03-24 11:21 - 2015-03-20 05:49 - 00045224 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2015-03-24 11:21 - 2015-02-15 10:37 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2015-03-24 11:20 - 2015-03-24 11:25 - 00000000 ____ D () C:\Users\Adrian\AppData\Roaming\eCyber
2015-03-24 11:20 - 2015-03-24 11:20 - 00868688 _____ () C:\Users\Adrian\Downloads\yet_another_cleaner_hdr.exe
2015-03-24 11:10 - 2015-03-25 23:14 - 00000000 ____ D () C:\Program Files (x86)\TaakETTheCOuPon
2015-03-24 11:10 - 2015-03-25 23:14 - 00000000 ____ D () C:\Program Files (x86)\RAnDoMoPriice
2015-03-24 11:10 - 2015-03-25 23:14 - 00000000 ____ D () C:\Program Files (x86)\DDownSAve
2015-03-17 16:35 - 2015-03-25 23:14 - 00000000 ____ D () C:\Program Files (x86)\youtubeadblocker
2015-03-17 16:34 - 2015-03-25 23:14 - 00000000 ____ D () C:\Program Files (x86)\UniDeaLsie
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.