Przekierowywanie na http://govome.inspsearch.com/

arczikox123 · 12 Sierpień 2014 18:07

Gdy wpisuje coś do przeglądarki przekierowuje mnie na tą stronę http://govome.inspsearch.com/. Przeglądarka to chrome. Avast też nie odpowiada.

Tutaj logi :

Extras: http://www.wklej.eu/index.php?id=6ff0e1ca7e

Proszę o pomoc.

j2Lucky · 12 Sierpień 2014 18:18

Widzę że masz zainstalowany program Anti- Malware. Korzystałeś / aś z niego ?

Acorus · 12 Sierpień 2014 18:19

Odinstaluj Ad-Aware SE Personal,Przyspiesz Komputer - Kompletna deinstalacja.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.

arczikox123 · 12 Sierpień 2014 19:28

Ad-Adware nie mogę odinstalować i uruchomić, to samo z avastem. Wyskakuje taki komunikat “Ten program blokowany jest przez zasady grupy. Aby uzyskać więcej informacji skontaktuj się z administratorem systemu”

Addition: http://www.wklej.eu/index.php?id=076f69714a

Atis · 12 Sierpień 2014 19:47

Odinstaluj a-squared Free 4.5.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM\...\RunOnce: [NSSInstallation] => C:\Windows\System32\Macromed\Shockwave 10\nssstub.exe [497016 2010-05-19] (Symantec Corporation)
HKLM\...\RunOnce: [aswAhAScr.dll] => "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll"
HKLM\...\RunOnce: [aswasOutExt.dll] => "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll"
HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [360448 2009-07-14] (Microsoft Corporation)
HKLM\...\RunOnce: [MSPCLOCK] => rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\RunOnce: [MSPQM] => rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\RunOnce: [MSKSSRV] => rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\RunOnce: [MSTEE.CxTransform] => rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interf (the data entry has 11 more characters).
HKLM\...\RunOnce: [MSTEE.Splitter] => rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interf (the data entry has 11 more characters).
HKLM\...\RunOnce: [WDM_DRMKAUD] => rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD. (the data entry has 17 more characters).
HKLM\...\RunOnce: [*Restore] => C:\Windows\System32\rstrui.exe [262656 2010-11-20] (Microsoft Corporation)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2014-05-12] (Malwarebytes Corporation)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Lavasoft <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Lavasoft <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-05-17] (Microsoft Corporation)
Startup: C:\Users\Adela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchbetter.com/?tpid=FF-Y&o=Y10027&pf=V7&trgb=ALL&p2=^BO5^aaa120^YY^PL&gct=hp&apn_ptnrs=^BO5&apn_dtid=^aaa120^YY^PL&apn_dbr=Launcher.exe_0_22.0.1471.70&apn_uid=13DBC93B-FC4A-44D4-A6F4-78F4726C1AD8&itbv=12.15.0.259&doi=2014-07-09&psv=&pt=tb
URLSearchHook: HKCU - (No Name) - {90b49673-5506-483e-b92b-ca0265bd9ca8} - No File
SearchScopes: HKCU - {5E7A4EFF-A7B1-42A0-9FAD-113BBC04EF2C} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=4B400318-722B-4993-84D8-5213AC7D08E1&apn_sauid=8C27A286-A1B8-48CA-A18E-A7007BEC47FC
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://startsear.ch/?aff=1&src=sp&cf=fec1c166-7dc5-11e1-935f-6cf04913383b&q={searchTerms}
SearchScopes: HKCU - {B6DAA114-6DDF-4a8d-81A7-F0F14C4146E5} URL = http://home.speedbit.com/search.aspx?aff=206&q={searchTerms}
BHO: SBCONVERT Class -> {3017FB3E-9A77-4396-88C5-0EC9548FB42F} -> C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll No File
Toolbar: HKCU - No Name - {90B49673-5506-483E-B92B-CA0265BD9CA8} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {724D43A0-0D85-11D4-9908-00400523E39A} - No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FF Extension: No Name - C:\Users\Adela\AppData\Roaming\Mozilla\Firefox\Profiles\u5smu2ni.default\Extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}chrome [2011-02-04]
S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\AdwCleaner
Task: {52DD7398-76AF-4E21-86CB-39B579EC04E4} - System32\Tasks\{97C529DC-9166-45BF-A4AB-087DBCC6603B} => Iexplore.exe http://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {541262BD-6763-432A-BB87-627C910C94F5} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~1\AD-AWA~1\AdAwareLauncher.exe
Task: {7F97E58E-BD11-4B76-9AFF-D6BCE07B17FB} - System32\Tasks\Install => C:\Windows\system32\Macromed\Shockwave 10\nssstub.exe [2010-05-19] (Symantec Corporation)
Task: C:\Windows\Tasks\Install.job => C:\Windows\System32\Macromed\Shockwave 10\nssstub.exe
CMD: del /f /s /q %TEMP%\*.*
Reboot:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.