Przekierowywanie na offers.bycontext.com/


(Humex98) #1

Witam, mam problem z moją przeglądarką a mianowicie co każde kliknięcie przekierowuje mnie pod:

http://offers.bycontext.com

Czy ktoś wie jak mam to usunąć? Proszę o pomoc.


(krzych5610) #2

Pobierz na pulpit AdwCleaner - https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Po uruchomieniu wykonaj polecenia szukaj i usuń.

Po restarcie pobierz na pulpit skaner FRST ( wersja musi być odpowiednia do zainstalowanego systemu operacyjnego )

Uruchom skaner FRST a wygenerowane raporty FRST i Addition zapisz na http://www.wklej.org

w poście na forum podaj linki do wklejek.


(Humex98) #3

http://www.wklej.org/id/1545741/ - FRST


(Acorus) #4

Odinstaluj YAC(Yet Another Cleaner!).Otwórz Notatnik i wklej:

HKLM\...\Run: [Chew7Hale] = C:\Windows\System32\hale.exe [2169856 2014-11-10] ()
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-1584932870-3724982387-1751340687-1000\...\MountPoints2: {9cefcf49-76fb-11e4-a1d3-d43d7e546830} - F:\autorun.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
FF Extension: 170503FA33494F17BC86001888A5C8E2 - C:\Users\lu\AppData\Roaming\Mozilla\Firefox\Profiles\gtncw1g0.default\Extensions\{170503FA-3349-4F17-BC86-001888A5C8E2} [2014-11-30]
FF Extension: SourceApp 1.0.1 - C:\Users\lu\AppData\Roaming\Mozilla\Firefox\Profiles\gtncw1g0.default\Extensions\{21b5abe9-a6e9-4a3b-ae74-84488fe21796}.xpi [2014-11-30]
CHR Extension: (SourceApp) - C:\Users\lu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdjmohdbjkkkaaghdlefebkhembbflme [2014-11-26]
CHR Extension: (nflehelhgpjjhfiigceaplnmgiblnclo) - C:\Users\lu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nflehelhgpjjhfiigceaplnmgiblnclo [2014-11-30]
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2014-12-01] (Elex do Brasil Participações Ltda)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [248488 2014-12-01] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2014-12-01] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [65704 2014-12-01] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [49320 2014-11-03] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
S3 MSICDSetup; \\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \\E:\NTIOLib_X64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-12-02 16:52 - 2014-12-02 17:00 - 00000000 ____ D () C:\AdwCleaner
2014-12-02 15:45 - 2014-12-02 15:45 - 00003270 _____ () C:\Windows\System32\Tasks\{25B8DE4A-7793-46FD-8D2F-618133EC23DC}
2014-12-01 16:19 - 2014-12-01 16:19 - 00000000 ____ D () C:\Program Files (x86)\Elex-tech
2014-12-01 16:19 - 2014-11-03 10:04 - 00049320 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2014-11-30 19:02 - 2014-11-30 19:02 - 00003140 _____ () C:\Windows\System32\Tasks\{7E936B54-78B1-4176-8F53-E1CBED499239}
2014-11-26 10:21 - 2014-11-26 10:21 - 00002974 _____ () C:\Windows\System32\Tasks\{C4467CD4-9D84-4FE3-AF81-ADE59B48E457}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Humex98) #5

Bardzo Wam dziękuję :wink: Pomogło :smiley:


(Acorus) #6

Skasuj folder C:\FRST