Utils.cdneurope.com/js/mo.js Avast wykrywa wirusa

Dla specjalistów Bezpieczeństwo
#1

Witam

#2

Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pokaż logi FRST.txt i Addition .txt(zaznacz okienko Addition)

#3

Podaje logi frst addition.txt i first.txt

Addition.txt

FRST.txt

#4

Odinstaluj Gadu-Gadu 10 (GG 10.5) Packages.Otwórz Notatnik i wklej:

Task: {627F1AA3-0AFD-44DA-A5E9-5E6452ABD83A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-689867186-46619534-1735315232-1000Core = C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-21] (Facebook Inc.)
Task: {7F3BAFC1-8CA0-4644-90D3-1F2A1794D66C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-689867186-46619534-1735315232-1000UA = C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-21] (Facebook Inc.)
Task: {8569BF97-C4A6-45D1-B167-3E376E7B0AFA} - System32\Tasks\Game_Booster_AutoUpdate = D:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe ==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-689867186-46619534-1735315232-1000Core.job = C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-689867186-46619534-1735315232-1000UA.job = C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-689867186-46619534-1735315232-1000\...\Run: [Akamai NetSession Interface] = C:\Users\admin\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Extension: Site Matcher - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bhqw9h24.default-1391029974149\Extensions\sitematcher@sitematcher.com [2014-05-07]
FF Extension: Settings Manager - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bhqw9h24.default-1391029974149\Extensions\{E729C6EC-E9FF-E59F-355C-EC59F2795E4E} [2014-05-18]
FF Extension: MEGA - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bhqw9h24.default-1391029974149\Extensions\firefox@mega.co.nz.xpi [2014-04-17]
CHR DefaultSearchKeyword: ask.com
CHR DefaultSearchProvider: default-search.net
CHR DefaultSearchURL: http://www.default-search.net/search?sid=476aid=132itype=aver=12692tm=340src=dsp={searchTerms}
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 WinRing0_1_2_0; \\D:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]
S3 wolf; \\D:\AeriaGames\WolfTeam-PL\avital\wolf64.sys [X]
S3 X6va021; \\C:\Windows\SysWOW64\Drivers\X6va021 [X]
2014-07-07 19:34 - 2014-07-07 19:39 - 00000000 ____ D () C:\AdwCleaner

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Problem został rozwiązany. Dzięki za pomoc :slight_smile: