Niechciane reklamy, adblock nie pomaga

Michal_jrg · 26 Październik 2014 12:52

Witam

Mam problem na wszystkich przeglądarkach pokazują się niechciane reklamy, których nie blokuje adblock

OTL.txt: http://www.wklej.org/id/1499509/

FRST.txt: http://www.wklej.org/id/1499517/

Additional.txt: http://www.wklej.org/id/1499519/

Shortcut.txt: http://www.wklej.org/id/1499520/

proszę o pomoc w rozwiązaniu problemu

Atis · 26 Październik 2014 12:56

W panelu sterowania odinstaluj iWebar.

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.

Michal_jrg · 26 Październik 2014 17:31

FRST.txt http://wklejto.pl/213792

Shortcut.txt http://wklejto.pl/213793

chyba się pozbyłem tych reklam, dziękuję Atis, gdybyś mógł to jeszcze zerknij w te logi czy nie ma tam żadnego dziadostwa

Atis · 26 Październik 2014 17:46

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKU\S-1-5-21-36489186-475327560-3956185294-1000\...\Run: [SPDriver] => C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1383\jsdrv.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Extension: iWebar - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qygal5nd.default\Extensions\ROUAILDE73397174@UXGZI17268980.com [2014-10-25]
CHR Extension: (PodoWeb) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\clgffgjkimlimcmdlcecobffkjffdagn [2014-10-25]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S2 SPDRIVER_1.37.0.1383; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1383\jsdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\AdwCleaner
C:\Program Files (x86)\Temp
C:\Users\admin\AppData\Roaming\*.exe
Task: {06D01AA0-6E20-4CF6-B8A4-44EECD938945} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-5 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-5.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {1AC2A081-951B-4BEC-A6D5-E4C6DBDF1267} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-5_user => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-5.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {1DFD5161-723E-4070-A9F0-5E7350D1A869} - System32\Tasks\JXBV => C:\Users\admin\AppData\Roaming\JXBV.exe [2014-10-25] (Object Browser) <==== ATTENTION
Task: {48A67553-5F8A-4E6A-9768-EEA75A2DABC7} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-4 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-4.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {50A27E89-3212-4B34-9C13-C90F67F5D193} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-6 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-6.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {51ABFDA8-4F38-4F50-BD86-2E13B479C986} - System32\Tasks\SPBIW_UpdateTask_Time_343236353737343634342d3755556c415a505757414a34 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0
Task: {5498CF79-E5D0-40F3-ABAE-14915A8857CF} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-2 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-2.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {64D39E52-8B8E-44C2-92B9-13EEB55C3B90} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-25] (globalUpdate) <==== ATTENTION
Task: {79E5C87C-A28E-429A-885E-EE49172F3125} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-11 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-11.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {A9B8B9FD-331E-427A-A828-FC5F2F989CA9} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-25] (globalUpdate) <==== ATTENTION
Task: {B7AE3ADF-84E3-43B6-BEBA-8F3C98A30364} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-7 => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-7.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: {CAEECE2C-EA62-4FF5-BE9B-EB29040FE648} - System32\Tasks\LSURFV => C:\Users\admin\AppData\Roaming\LSURFV.exe [2014-10-25] (Object Browser) <==== ATTENTION
Task: {F70AE213-4190-49E9-9356-50CE9E674AE1} - System32\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-1 => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe [2014-10-25] (iWebar) <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-1.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-11.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-2.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-4.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-5.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-5_user.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-6.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\edd3da2b-14ae-411b-add6-8aa4425d0364-7.job => C:\Program Files (x86)\iWebar\edd3da2b-14ae-411b-add6-8aa4425d0364-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\JXBV.job => C:\Users\admin\AppData\Roaming\JXBV.exe <==== ATTENTION
Task: C:\Windows\Tasks\LSURFV.job => C:\Users\admin\AppData\Roaming\LSURFV.exe <==== ATTENTION
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.