Problem z Discount Dragon

Dla specjalistów Bezpieczeństwo
#1

Mam problem z Discount Dragon

 

OTL- http://wklej.org/id/1401114/

 

OTL Extras-http://wklej.org/id/1401118/

 

Pomocy!

#2

W panelu sterowania odinstaluj McAfee Internet Security.

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool 64-Bit Version

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

#3

Odinstalowałem McAfee, przeskanowałem ADW a to raport:

 

FRST-http://wklej.org/id/1401341/

 

Addition-http://wklej.org/id/1401342/

#4

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
HKLM-x32\...\Run: [fst_pl_141] => [X]
HKLM-x32\...\Run: [t4pc_en_6] => [X]
HKLM-x32\...\Run: [BService64] => C:\Program Files (x86)\Bench\BService\1.1\bservice64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyServer: http=127.0.0.1:3128
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-06-21]
CHR Extension: (SiteAdvisor) - C:\Users\PelsQun\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-06-24]
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
S3 cpuz137; \??\C:\Users\PelsQun\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
C:\AdwCleaner
C:\Users\PelsQun\Downloads\CCleaner(13061).exe
C:\temp
C:\Users\PelsQun\AppData\Local\Temp\*.dll
C:\Users\PelsQun\AppData\Local\Temp\*.exe
c:\Program Files (x86)\McAfee
C:\ProgramData\McAfee
Task: {0555AE56-4F1E-4B69-98BA-2BFC9A4063F2} - \bench-sys No Task File <==== ATTENTION
Task: {0578F9A1-C9D5-47D0-999D-0EA2A3DAFC0A} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-2 No Task File <==== ATTENTION
Task: {0DEF3665-B0FB-4D98-B760-D9F36CAB49B1} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-6 No Task File <==== ATTENTION
Task: {1D6F4C08-74E7-4340-8F26-9315BC0DB629} - \Opera D2 No Task File <==== ATTENTION
Task: {2A902231-2BAA-4DBB-B290-68800A1FEF58} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-1 No Task File <==== ATTENTION
Task: {523B6E3F-0A5D-4B52-934E-C818847D6A92} - \Opera D4 No Task File <==== ATTENTION
Task: {68459079-0C1B-4560-90C6-43A4BF905F6C} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-7 No Task File <==== ATTENTION
Task: {76B91CC0-B327-4388-8246-D0037C948DD0} - \Opera D1 No Task File <==== ATTENTION
Task: {7F08C072-2403-4DB2-9152-131FCA284739} - \Opera D3 No Task File <==== ATTENTION
Task: {862199A9-93D3-4D3E-9435-F145F3F8E537} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-3 No Task File <==== ATTENTION
Task: {A87E33FA-260D-4AF1-B199-65E975C8BF08} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-4 No Task File <==== ATTENTION
Task: {B2564C30-D2A7-4018-8EED-DBA01600FE40} - \Opera D5 No Task File <==== ATTENTION
Task: {E55DC267-3D75-47D7-8AAD-04540F1FBE88} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-11 No Task File <==== ATTENTION
Task: {E6902466-5447-409D-9216-9008122A63F5} - \Opera D6 No Task File <==== ATTENTION
Task: {E7CDF69C-4E79-45AE-808C-89569118626B} - \Opera D7 No Task File <==== ATTENTION
Task: {F7B5CB0D-8142-4CBB-AED6-EAEB62D18B8A} - \da696a5d-c7da-4ee9-bdbf-45f506da3eb0-5 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\bench-S-1-5-21-1187290648-736124345-163144623-1000.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Hosts:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.