PUP.Optional.InternetProgram.A - problem z usunięciem

Tomasz_XX · 16 Maj 2015 20:45

Witam, od kilku dni próbuję pozbyć się PUP.Optional.InternetProgram.A i nie mogę.

Główny problem polega na samoczynnym otwieraniu się niechcianych stron i reklam.

Adblock Plus nie daje rady.

Proszę o wsparcie.

Tomasz

Raport z Malwarebytes

http://www.wklej.org/hash/b7b9c71a920/

Raport z FRST

http://www.wklej.org/hash/8927d281082/

http://www.wklej.org/hash/a2068d7def4/

http://www.wklej.org/hash/7eba66771f2/

Atis · 16 Maj 2015 21:10

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> {ADE86A6D-9873-40C4-985B-EFC8D13D3878} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {ADE86A6D-9873-40C4-985B-EFC8D13D3878} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-806320893-4223048945-2333086849-1001 -> {ADE86A6D-9873-40C4-985B-EFC8D13D3878} URL = 
SearchScopes: HKU\S-1-5-21-806320893-4223048945-2333086849-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = 
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-19 __alt__ ddc_dss_bd_com&p={searchTerms}
FF Extension: Internet Program - C:\Users\Zbigniew Kornafel\AppData\Roaming\Mozilla\Firefox\Profiles\602r5kdj.default\Extensions\{a0359156-7390-4e15-991d-a4bdee7633bb}.xpi [2015-01-21]
CHR Extension: (Bookmark Manager) - C:\Users\Zbigniew Kornafel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-16]
2015-05-14 21:47 - 2014-02-10 02:00 - 00000000 ____ D () C:\ProgramData\McAfee
2015-05-14 21:47 - 2014-02-10 02:00 - 00000000 ____ D () C:\Program Files (x86)\McAfee
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.