Witam,
jw. od jakiegoś czasu mam problem z wyskakującymi reklamami i muzyką lecącą w tle strony
OTL: http://wklej.org/id/1397810/
Extras: http://wklej.org/id/1397811/
W panelu sterowania odinstaluj:
SW-Booster
SO_Booster
Core Temp Packages
NoetoCuoupon
Adblocker
JooniCoupoN
CouupExtieNsioen
saeve net
saVee on
MySearch
Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.
Pobierz Farbar Recovery Scan Tool 64-Bit Version
Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.
Masz użyć najnowszej wersji AdwCleaner i zatwierdzić restart.
Później utwórz logi z FRST.
W jakim celu pobierasz szkodliwe programy typu:
C:\Users\Magda\Downloads\yet_another_cleaner_mma.exe
ale użyłam wersji 3.212
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
(Torpedo) C:\Users\Magda\AppData\Local\Torpedo\Torpedo.exe
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
Startup: C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Torpedo.lnk
C:\Users\Magda\AppData\Local\Torpedo
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyServer: 151.232.55.190:8080
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
FF Extension: DiigiSaver - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\dcomet3b.default\Extensions\a6icm@qloiel-.org [2014-05-29]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR Extension: (DiigiSaver) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aoifeehhdedjgbjghbfnajlagkdhigch [2014-05-22]
CHR Extension: (Keep Me) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdglbbcbmgnimogcmcdenggkpdmihlga [2014-06-18]
CHR Extension: (saVee on) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckmcigcjehcbdgeblbbgeinfapbfgnnk [2014-06-18]
CHR Extension: (Adblocker) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjibllgddfjlhijkhehocapkjnhhbljb [2014-06-18]
CHR Extension: (FindBestDeaL) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\jchijaciihengnaimeljfdfecgbfdage [2014-04-24]
CHR Extension: (DealEaxpareess) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdcmhjklhfockbnidjckojbchippfimf [2014-05-22]
CHR Extension: (MySearch) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldgfigeghmhcodeaadpfimabpmjbpppj [2014-06-18]
CHR Extension: (saVee on) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckmcigcjehcbdgeblbbgeinfapbfgnnk\2.14 [2014-06-18]
CHR HKLM-x32\...\Chrome\Extension: [bpeeepmahhfjiediknjejcmcfmjcjdck] - C:\Program Files (x86)\Google\Chrome\User Data\Default\Extensions\serach.crx [2014-06-18]
CHR HKLM-x32\...\Chrome\Extension: [dkdkpmmkgdbglmfmmmmehbkmnkopingb] - C:\Program Files (x86)\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx [2014-06-18]
CHR HKLM-x32\...\Chrome\Extension: [hjakmojkcnhgipgkkbiempkfdndcnlah] - C:\ProgramData\wxDfast\hjakmojkcnhgipgkkbiempkfdndcnlah.crx [2014-06-18]
S2 29850aa3; C:\Program Files (x86)\SO_Booster\AssistantSvc.dll [174928 2014-06-18] () [File not signed]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S3 cpuz136; \??\C:\Users\Magda\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
C:\Program Files (x86)\SO_Booster
C:\found.001
C:\Users\Magda\Downloads\yet_another_cleaner_dmga*.exe
C:\ProgramData\MySearch
C:\Program Files (x86)\MySearch
C:\ProgramData\saVee on
C:\ProgramData\Adblocker
C:\Program Files (x86)\saVee on
C:\Program Files (x86)\Adblocker
C:\Users\HomeGroupUser$
C:\Users\Magda\Downloads\B0E1.tmp
C:\Users\Magda\Downloads\20CC.tmp
C:\ProgramData\InstallMate
C:\Users\Magda\AppData\Local\Temp\*.exe
Task: {1E1EF896-3982-4FDD-BE11-D72AE6D65A29} - System32\Tasks\{F9F8C361-33E1-4E6F-A3DD-178E3263A24B} => Chrome.exe http://ui.skype.com/ui/0/6.1.0.129/pl/abandoninstall?page=tsInstall
Task: {355247D1-131C-4459-BD23-6BEC46FABFE4} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {45BC4D73-940E-4F35-B8A2-FB68D40B765B} - \SpeedUpMyPC No Task File <==== ATTENTION
Task: {548D59CF-B837-4524-A1D8-FEDEF7C6C407} - \Program aktualizacji online firmy DivX. No Task File <==== ATTENTION
Task: {54A67610-BAB9-48CB-9DF3-82D1DBD47B10} - System32\Tasks\{DC55AEC2-A545-4C9D-9F67-79C2AB382086} => Chrome.exe http://ui.skype.com/ui/0/6.1.0.129/pl/abandoninstall?page=tsProgressBar
Task: {7A2B2597-A06A-43F2-9C22-10F1DC206DB6} - \RegClean Pro No Task File <==== ATTENTION
Task: {86AD43CF-ADF8-4CF9-A3AB-2FB79F294995} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {8B16931E-A665-4785-A560-03974315660C} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-686955409-3281772727-1279038431-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-05-13] (RealNetworks, Inc.)
Task: {8B9E50D7-C037-422B-BE53-65FE23458B31} - \spmonitor No Task File <==== ATTENTION
Task: {90B4C003-9590-4B96-9FD3-6A0623D19769} - \DealPlyLiveUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {96B07BE3-4404-41BD-9816-072A3931F51C} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {9F149E20-04BE-4FFE-B9EC-0D3D2A9A3BDB} - \BrowserDefendert No Task File <==== ATTENTION
Task: {DEB13622-E4AA-4B3D-8D1A-DE16C3080F8A} - \Program aktualizacji online firmy Adobe. No Task File <==== ATTENTION
Task: {DF770C33-D237-40A8-8F7B-C29F6A09ACD6} - \Dealply No Task File <==== ATTENTION
Task: {E3E14376-6F76-4568-8944-CED2369C72E3} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-686955409-3281772727-1279038431-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-05-13] (RealNetworks, Inc.)
Task: {F7596B14-2811-4A3F-990E-809C97E64F4E} - \DealPlyLiveUpdateTaskMachineUA No Task File <==== ATTENTION
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\AdwCleaner
C:\found.000
C:\ProgramData\b0bf301fb7390f61
Uruchom FRST i kliknij Fix. Później skasuj folder C:\FRST
Pobierz TFC - Temp File Cleaner Uruchom TFC i kliknij Start.
Usuń stare punkty przywracania: Aby usunąć wszystkie punkty przywracania
Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK
Odinstaluj:
Adobe Flash Player 13 Plugin
Adobe Reader X
Adobe Shockwave Player 12.0
Java 7 Update 25
Java 7 Update 5
JavaFX 2.1.1
Zainstaluj:
Flash Player 14.0.0.125 Plugin-based browsers.
już, ale nadal mam te reklamy i cały czas pobiera się ten yet_another_cleaner
zrobione, to wszystko?
Tak.
dziękuje za pomoc 