Problem z reklamami positive finds, adwCleaner nie pomaga

Dla specjalistów Bezpieczeństwo
#1

Witam,

#2

Otwórz notatnik systemowy i wklej:

HKLM-x32\...\Run: [] = [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
GroupPolicy: Ograniczenia - Chrome ======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia ======= UWAGA
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2399485123-609836129-3552354481-1000 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF NewTab: hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHABCIQ5eBFgSDA0WdF0VVQwTQBhBcg4BTFhAEQJFcw1eVFxHQBNBNARaB0tXUUEeGGlxR1dMcVpQKU1RF1w3SFtHMw==
FF Homepage: hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggWIVgPB1wQQhgbdQ1cTA1EQ1QOIgsPWBQQEAUUJgoMBwwUF1QFIk0FA18DB0VXfWFoKB8fHGVMM1BMCE8UZ1xNJEo=
FF Extension: Positive Finds - C:\Users\Gigabyte\AppData\Roaming\Mozilla\Firefox\Profiles\iws4bsut.default\Extensions\{f57f3b24-cabd-4998-9e47-8842f793f6de}.xpi [2015-02-07]
OPR StartupUrls: "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggWIVgPB1wQQhgbdQ1cTA1EQ1QOIgsPWBQQEAUUJgoMBwwUF1QFIk0FA1oDB0VXfV5bFElXTwhzL0pRFVAHRHNKLl1L"],"urls_signature":"/8iUfMQPuFRxJWaExDwDYhmXsSGH5l4GOz4O3j0o1XeLk2azanNDSXv/glfEYFGL","urls_to_restore_on_startup":["hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggWIVgPB1wQQhgbdQ1cTA1EQ1QOIgsPWBQQEAUUJgoMBwwUF1QFIk0FA1oDB0VXfV5bFElXTwhzL0pRFVAHRHNKLl1L"
OPR Extension: (Positive Finds) - C:\Users\Gigabyte\AppData\Roaming\Opera Software\Opera Stable\Extensions\eiceaedbhdkkjgdpfalaeogdapjhlhhi [2015-05-18]
S3 EtronHub3; System32\Drivers\EtronHub3.sys [X]
S3 EtronXHCI; System32\Drivers\EtronXHCI.sys [X]
2015-09-23 14:47 - 2015-09-23 14:55 - 00000000 ____ D C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

Przeskanuj programem Malwarebytes Anti-Malware https://www.malwarebytes.org/downloads/

#3

Zrobione wszystko wedle wskazówek, problem usunięty. Dzięki wielkie! :slight_smile:

#4

Skasuj folder C:\FRST