Komunikat disorderstatus

Dla specjalistów Bezpieczeństwo
#1

Witam. Dziś po włączeniu komputera antywirus Avast zaczął wyświetlać mi co chwilę informacje o wykryciu zagrożenia:

2ups9s7.jpg
2ups9s7.jpg802×559

Skan AntiMalware nic nie pomógł, nie wiem czy to wina antywirusa czy rzeczywiście problem istnieje.

 

Skany:

FRST: http://wklej.org/id/1777569/

Addition: http://wklej.org/id/1777570/

Shortcut: http://wklej.org/id/1777573/

 

Z góry dzięki za pomoc.

 

#2

Odinstaluj Ask Toolbar,Ask Toolbar Updater,BrowseToSave,Qtrax Player.Otwórz notatnik systemowy i wklej:

Task: {E28BAD22-356C-4E1D-AAD8-173CCB53AC4D} - System32\Tasks\Scheduled Update for Ask Toolbar = C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-30] () ==== ATTENTION
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [ApnUpdater] = C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1721480 2013-04-30] (Ask)
HKLM\...\AppCertDlls: [x86] - C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\safetycrt.dll
HKLM\...\AppCertDlls: [x64] - C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\x64\safetycrt.dll
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=iebgct=dsappid=210systemid=488v=a12834-371apn_uid=2373140872294945apn_dtid=TCH001o=APN11459apn_ptnrs=AG1q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=iebgct=dsappid=210systemid=488v=a12834-371apn_uid=2373140872294945apn_dtid=TCH001o=APN11459apn_ptnrs=AG1q={searchTerms}
SearchScopes: HKU\S-1-5-21-870124490-3849452074-2056059067-1000 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2} URL = hxxp://dts.search.ask.com/sr?src=iebgct=dsappid=systemid=v=-apn_uid=apn_dtid=TCH001o=APN11459apn_ptnrs=AG1q={searchTerms}
SearchScopes: HKU\S-1-5-21-870124490-3849452074-2056059067-1000 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=iebgct=dsappid=210systemid=488v=a12834-371apn_uid=2373140872294945apn_dtid=TCH001o=APN11459apn_ptnrs=AG1q={searchTerms}
SearchScopes: HKU\S-1-5-21-870124490-3849452074-2056059067-1000 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2} URL = hxxp://dts.search.ask.com/sr?src=iebgct=dsappid=systemid=v=-apn_uid=apn_dtid=TCH001o=APN11459apn_ptnrs=AG1q={searchTerms}
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx not found
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
2015-08-19 19:58 - 2013-06-25 12:49 - 00000000 ____ D C:\Program Files (x86)\Delta
2015-08-19 19:58 - 2013-03-28 22:51 - 00000000 ____ D C:\Program Files (x86)\Conduit
C:\ProgramData\mstowsmbl.exe
C:\Users\pc\7za.exe
C:\Users\pc\adjperm.dll
C:\Users\pc\drvInst64.exe
C:\Users\pc\elevated.dll
C:\Users\pc\glib-2.0.dll
C:\Users\pc\glibmm-2.4.dll
C:\Users\pc\gmodule-2.0.dll
C:\Users\pc\gobject-2.0.dll
C:\Users\pc\gthread-2.0.dll
C:\Users\pc\gvmomi.dll
C:\Users\pc\iconv.dll
C:\Users\pc\icudt44l.dat
C:\Users\pc\intl.dll
C:\Users\pc\libcds.dll
C:\Users\pc\libcurl.dll
C:\Users\pc\libeay32.dll
C:\Users\pc\liblber.dll
C:\Users\pc\libldap.dll
C:\Users\pc\libldap_r.dll
C:\Users\pc\libxml2.dll
C:\Users\pc\mkisofs.exe
C:\Users\pc\sigc-2.0.dll
C:\Users\pc\ssleay32.dll
C:\Users\pc\sysimgbase.dll
C:\Users\pc\TPClnRDP.dll
C:\Users\pc\TPClnt.dll
C:\Users\pc\TPClntdeu.dll
C:\Users\pc\TPClntjpn.dll
C:\Users\pc\TPClntloc.dll
C:\Users\pc\TPClnVM.dll
C:\Users\pc\TPView.dll
C:\Users\pc\TPViewdeu.dll
C:\Users\pc\TPViewjpn.dll
C:\Users\pc\vixDiskMountApi.dll
C:\Users\pc\vixDiskMountServer.exe
C:\Users\pc\vm-support.vbs
C:\Users\pc\vmappcfg.dll
C:\Users\pc\vmappsdk.dll
C:\Users\pc\vmapputil.dll
C:\Users\pc\vmauthd.dll
C:\Users\pc\vmclientcore.dll
C:\Users\pc\vmdbCOM.dll
C:\Users\pc\vmdkShellExt.dll
C:\Users\pc\vmeventmsg.dll
C:\Users\pc\vmnat.exe
C:\Users\pc\vmnetBridge.dll
C:\Users\pc\VMnetDHCP.exe
C:\Users\pc\vmPerfmon.dll
C:\Users\pc\vmplayer.exe
C:\Users\pc\vmUpdateLauncher.exe
C:\Users\pc\vmware-authd.exe
C:\Users\pc\vmware-kvm.exe
C:\Users\pc\vmware-remotemks-debug.exe
C:\Users\pc\vmware-remotemks.exe
C:\Users\pc\vmware-shell-ext-thunker.exe
C:\Users\pc\vmware-unity-helper.exe
C:\Users\pc\vmwarebase.dll
C:\Users\pc\vmwarecui.dll
C:\Users\pc\vmwarestring.dll
C:\Users\pc\vmwarewui.dll
C:\Users\pc\vnetinst.dll
C:\Users\pc\vnetlib.dll
C:\Users\pc\vnetlib.exe
C:\Users\pc\vnetlib64.dll
C:\Users\pc\vnetlib64.exe
C:\Users\pc\vnetsniffer.exe
C:\Users\pc\vnetstats.exe
C:\Users\pc\vprintproxy.exe
C:\Users\pc\zip.exe
C:\Users\pc\zlib1.dll
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Nie chcę zapeszać ale chyba się udało! Wielkie dzięki za szybką odpowiedź i pomoc  :mrgreen: 

#4

Skasuj folder C:\FRST.