Strong signal ads

Dla specjalistów Bezpieczeństwo
#1

Witam, mam problem z ciągle wykakującymi reklamami. Bardzo proszę o pomoc w usunięciu tego problemu.

 

http://www.wklej.org/id/1715813/  frst

http://www.wklej.org/id/1715814/  addition

http://www.wklej.org/id/1715815/ shortcut

#2

Otwórz notatnik systemowy i wklej:

Task: {073DFD12-A73E-4E27-8550-E28BB83C5D7A} - System32\Tasks\{550FC297-71F5-4B6D-9F0C-EE8C508B8BD3} = pcalua.exe -a C:\Users\Kosi\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=slbnew ==== ATTENTION
Task: {535335CD-4D0C-4E54-942B-B3F87FE30362} - System32\Tasks\CGHAMW = C:\Users\Kosi\AppData\Roaming\CGHAMW.exe ==== ATTENTION
Task: {8FFF42D9-DBB0-45E3-AD56-01DB260180E7} - System32\Tasks\{010D5944-9B14-4FE4-BCD8-FD862F8F1E3E} = pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe"
Task: {98402555-35AA-48A4-9D20-8FAAB3E13EF8} - System32\Tasks\TAZNBEW = C:\Users\Kosi\AppData\Roaming\TAZNBEW.exe ==== ATTENTION
Task: C:\Windows\Tasks\CGHAMW.job = C:\Users\Kosi\AppData\Roaming\CGHAMW.exe ==== ATTENTION
Task: C:\Windows\Tasks\TAZNBEW.job = C:\Users\Kosi\AppData\Roaming\TAZNBEW.exe ==== ATTENTION
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3821639074-2584431793-1503291930-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (Bookmark Manager) - C:\Users\Kosi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
U3 a18l7y6p; C:\Windows\System32\Drivers\a18l7y6p.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero size file/folder)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-05-16 13:03 - 2015-05-16 13:20 - 00000000 ____ D () C:\AdwCleaner
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\Kosi\AppData\Roaming\CGHAMW
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\Kosi\AppData\Roaming\TAZNBEW
2014-12-04 15:08 - 2014-12-04 15:07 - 0628496 _____ (CMI Limited) C:\Users\Kosi\AppData\Local\nsf4B69.tmp
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

zrobiłam wszystko jak w instrukcji niestety reklamy dalej wyskakują 

#4

Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl a jak nie pomoże to 

odinstaluj Chrome zaznaczając usunięcie danych przeglądania.

#5

Dziękuję pięknie za pomoc :slight_smile: