Problem z SurfVoxem

Dla specjalistów Bezpieczeństwo
#1

Witam,

Posiadam problem z bardzo denerwującym oprogramowaniem. Z góry dziękuje za pomoc.

Logi:

Addition.txt

FRST.txt

#2

Otwórz notatnik systemowy i wklej:

CloseProcesses:
HKU\S-1-5-21-1133645338-2493133915-2333909604-1000\...\Run: [nvxasync] = C:\Users\admin\AppData\Roaming\nvxasync\nvxasync.exe [153822720 2015-04-23] ()
HKU\S-1-5-21-1133645338-2493133915-2333909604-1000\...\MountPoints2: {e951fd08-c552-11e4-a204-bc5ff494e575} - G:\Setup.exe
HKU\S-1-5-21-1133645338-2493133915-2333909604-1000\...\Winlogon: [Shell] C:\ProgramData\nvxasync\cvxasync.exe [153822720 2015-04-23] () ==== ATTENTION
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\dtlite.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\nvstlink.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\nvstview.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\originuninstall.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
HKU\S-1-5-21-1133645338-2493133915-2333909604-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.surfvox.com/
FF DefaultSearchEngine: SurfVox
FF SelectedSearchEngine: SurfVox
FF Homepage: hxxp://www.surfvox.com
FF SearchPlugin: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\toqg9niy.default\searchplugins\starter.xml [2015-04-23]
CHR HomePage: Default - hxxp://www.surfvox.com/
CHR StartupUrls: Default - "hxxp://www.surfvox.com/"
CHR DefaultSearchKeyword: Default - surfvox.com
CHR Extension: (Bookmark Manager) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
2015-04-23 06:44 - 2015-04-23 06:45 - 00000000 _RSHD () C:\ProgramData\nvxasync
2015-04-23 06:11 - 2015-04-23 06:14 - 00000080 _____ () C:\Users\admin\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-04-23 06:09 - 2015-04-23 06:09 - 00000000 ____ D () C:\Users\admin\AppData\Roaming\chportu
2015-04-23 06:08 - 2015-04-23 06:09 - 00000000 _RSHD () C:\Users\admin\AppData\Roaming\nvxasync
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Pomogło,dziękuje bardzo.Przeskanować komputer jakimś programem typu MBAM?

#4

Skasuj folder C:\FRST.Przeskanuj.