Pojawiające się reklamy w przeglądarce

Dla specjalistów Bezpieczeństwo
#1

witam niestety mam ponownie problem z robakami. Z komputera korzysta dużo osób i nie upilnuje się wszystkich

Wklejam logi z OTLa

http://wklej.org/id/1277992/

http://wklej.org/id/1277997/

 

Proszę znowu o pomoc

#2

Odinstaluj sweet-page Browser newtab extension,WPM17.8.0.3325,SaveSense.Użyj AdwCleaner http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner z funkcji Skan(Szukaj) a następnie Clean(usuń) (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).

Pokaż nowy OTL.txt

#3

wklejka z

Adw http://wklej.org/id/1278136/

#4

To miałeś pokazać.

Pokaż nowy OTL.txt
#5

http://wklej.org/id/1278148/

#6

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
SRV - [2014-02-19 19:47:25 | 000,080,672 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\FindRight\updateFindRight.exe -- (Update FindRight)
SRV - [2014-02-19 19:14:11 | 000,080,672 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\FindRight\bin\utilFindRight.exe -- (Util FindRight)
O2 - BHO: (FindRight) - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll (FindRight)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKCU..\Run: [AVG-Secure-Search-Update_0214c] C:\Users\Łukasz\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=adcc94eb6db047d09c3115cc4eef602e-ccd859252b8c3a24509467232fcd8e722c0b2f16 /CMPID=0214c File not found
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\rjatydimofu.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\rjatydimofu.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
[2014-02-18 20:39:05 | 000,859,416 | ---- | C] (TMRG, Inc.) -- C:\Windows\SysNative\rlls64.dll
[2014-02-18 20:39:05 | 000,593,688 | ---- | C] (TMRG, Inc.) -- C:\Windows\SysWow64\rlls.dll
[2014-02-18 16:26:01 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\sweet-page
[2014-02-18 16:25:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FindRight
[2014-02-12 19:28:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Datamngr
[2014-02-04 20:08:50 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\Ykeqpu
[2014-02-04 20:08:50 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\Tyyffok

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.Po restarcie uruchom OTL i użyj opcji Sprzątanie.