Niechciane reklamy


(Golebiewski 91) #1

Witam.

Jak wielu widzę dopadł i mnie problem z wyskakującymi reklamami. Próbowałem się ich pozbyc za pomocą SpyHunter ale nic to nie dało. Dopiero to forum postawiło mnie na duchu, bo już mi format w głowie siedział.

Bardzo proszę o pomoc.

postępując zgodnie z Waszymy instrukcjami, pobrałem AdwCleaner(wyszukałem i usunąłem co tam sie pokazało), a potem FRST i poniżej umieszczam logi

FRST: http://www.wklej.org/id/1607471/

Addition: http://www.wklej.org/id/1607473/


(Acorus) #2

Otwórz notatnik systemowy i wklej:

Task: {5858DFF6-89F7-4F6E-A4DE-9DE590A5381D} - \AdobeFlashPlayerUpdate No Task File ==== ATTENTION
Task: {9333810E-45AB-43BF-A3B8-0BA8163D3157} - \AdobeFlashPlayerUpdate 2 No Task File ==== ATTENTION
HKLM-x32\...\Run: [iTunesHelper] = C:\Michal\Michał\Programy\iTunes\iTunesHelper.exe [421736 2011-12-08] (Apple Inc.)
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-3829500705-4082763259-2198423007-1001\...\CurrentVersion\Windows: [Load] C:\Users\MICHA~1\LOCALS~1\Temp\ccquruzf.scr ===== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {619D27D9-FEDB-B731-C8CA-16D79787312F} URL =
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF SearchEngineOrder.1: error
FF SelectedSearchEngine: error
FF Keyword.URL: error
FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{4afb9172-beea-1d0a-e048-96861f206d1a} [2012-07-14]
FF HKU\S-1-5-21-3829500705-4082763259-2198423007-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] () [File not signed] ==== ATTENTION
U3 ac1kjrfw; C:\Windows\System32\Drivers\ac1kjrfw.sys [0] (Microsoft Corporation) ==== ATTENTION (zero size file/folder)
U3 BcmSqlStartupSvc; No ImagePath
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath
2015-01-24 19:43 - 2015-01-24 19:57 - 00000000 ____ D () C:\AdwCleaner
2014-12-29 15:00 - 2014-12-29 15:00 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2014-12-29 14:48 - 2014-12-29 14:48 - 00000000 ____ D () C:\ProgramData\3872871776
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Golebiewski 91) #3

nowe logi:

FRST: http://www.wklej.org/id/1608146/

Addition: http://www.wklej.org/id/1608148/