Problem z wirusem mysearch123.com

Dla specjalistów Bezpieczeństwo
#1

Witam

#2

Odinstaluj Ask Toolbar,Search App by Ask.Otwórz notatnik systemowy i wklej:

Task: {0BBF502C-1093-4461-97B3-200ADC27A68F} - \QtraxPlayer No Task File ==== ATTENTION
Task: {4649AE98-964E-43E3-B7B0-53B0933BB27C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-776714802-2961370004-3411073784-1000Core = C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-31] (Facebook Inc.)
Task: {DCD140E7-1A04-4A49-AA4D-D99BE3DBF638} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-776714802-2961370004-3411073784-1000UA = C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-31] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-776714802-2961370004-3411073784-1000Core.job = C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-776714802-2961370004-3411073784-1000UA.job = C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe
AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
AlternateDataStreams: C:\ProgramData\Dane aplikacji:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
ShellIconOverlayIdentifiers: [GGDriveOverlay1] - {E68D0A50-3C40-4712-B90D-DCFA93FF2534} = No File
ShellIconOverlayIdentifiers: [GGDriveOverlay2] - {E68D0A51-3C40-4712-B90D-DCFA93FF2534} = No File
ShellIconOverlayIdentifiers: [GGDriveOverlay3] - {E68D0A52-3C40-4712-B90D-DCFA93FF2534} = No File
ShellIconOverlayIdentifiers: [GGDriveOverlay4] - {E68D0A53-3C40-4712-B90D-DCFA93FF2534} = No File
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF HKLM-x32\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF HKLM-x32\...\Firefox\Extensions: [{d9284e50-81fc-11da-a72b-0800200c9a66}] - C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
S3 BRDriver64; \\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \\C:\Windows\gdrv.sys [X]
S3 wolf; \\E:\WolfTeam\WolfTeam-PL\avital\wolf64.sys [X]
2015-06-11 21:53 - 2015-06-11 21:53 - 00000000 _____ C:\autoexec.bat
2015-06-11 21:52 - 2015-06-11 21:52 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\user\Downloads\SpyHunter-Installer.exe
2015-06-11 19:38 - 2014-01-26 19:28 - 00000000 ____ D C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Mam kolejny problem kiedy chce się pozbyć ask toolbar wyskakuje tylko komunikat “Konto już istnieje” i nie mogę odinstalować. 

#4

Pomiń to iwykonaj resztę.

#5

Dzięki za pomoc ale nic to nie dało :confused: Wirus nadal jest w komputerze :confused:

#6

Przeskanuj programem Malwarebytes Anti-Malware http://www.malwarebytes.org/8/

#7

Ok już jest wszystko ok dzięki ci jeszcze raz ;)