Wirus w przeglądarce internetowej


(kjeraska) #1

Witam,

mam problem z wyskakującymi reklamami w przeglądarce internetowej. Poniżej wklejam logi FRST i Addition.

Pozdrawiam :) 

 

FRST:

http://wklej.org/id/1750243/

Addition:

http://wklej.org/id/1750244/


(Atis) #2

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Torpedo.lnk [2015-06-10]
C:\Users\user\AppData\Local\Torpedo
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150415
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150415
HKU\S-1-5-21-188445683-3829879776-437638077-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150415
URLSearchHook: [S-1-5-21-188445683-3829879776-437638077-1007] ATTENTION ==> Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-188445683-3829879776-437638077-1007 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Homepage: hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
FF Extension: Assist Point - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5oa585ne.default\Extensions\{8ceb4edd-3ac5-43a5-ab62-09de8d261a64}.xpi [2015-04-17]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
CHR Extension: (Assist Point) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gddfnoocepfjlafagonbpkmocgofkdna [2015-04-16]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKU\S-1-5-21-188445683-3829879776-437638077-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
U4 BthHFSrv; No ImagePath
2015-06-27 19:51 - 2015-07-02 00:21 - 00000000 ____ D C:\AdwCleaner
2015-06-27 17:20 - 2015-04-15 17:12 - 00000000 ____ D C:\ProgramData\c716fd70-872c-4aaa-a07f-e248365d7f56
2015-03-29 16:07 - 2015-03-29 16:07 - 0000000 _____ () C:\Users\user\AppData\Local\{1CCA4E2E-F39E-4A72-AD54-B36E17FFF541}
CustomCLSID: HKU\S-1-5-21-188445683-3829879776-437638077-1002_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-188445683-3829879776-437638077-1002_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-188445683-3829879776-437638077-1002_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-188445683-3829879776-437638077-1002_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
EmptyTemp:

Uruchom FRST i kliknij Fix.


(kjeraska) #3

Niestety problem nie zniknął.

Wklejam ponownie nowe logi FRST i Addition.

 

FRST:

http://wklej.org/id/1750331/

Addition:

http://wklej.org/id/1750334/


(Atis) #4

Skasuj folder C:\FRST

Resetowanie ustawień przeglądarki Chrome


(kjeraska) #5

Niestety ale dalej ten sam problem… :( 


(Atis) #6

Odinstaluj Chrome zaznaczając usunięcie danych przeglądania za pomocą Geek Uninstaller Free: KLIK

Najpierw możesz wyeksportować zakładki: KLIK

Później zainstaluj: KLIK