Wirus zmieniający numer konta

Dla specjalistów Bezpieczeństwo
#1

U mnie to samo się dzieje wirus zmienia numer konta proszę o pomoc .

 

FRST

http://wklej.to/bqHK3

Addition

http://wklej.to/kwQKh

 

Z góry bardzo dziękuje za rozwiązanie problemu  .

#2

Log Frst.txt nie jest kompletny.

#3

Może coś źle zrobiłem podaje nowe .

 

FRST

http://wklej.to/wm7ic

 

Addition

http://wklej.to/D0jmE

 

Shortcut

http://wklej.to/TpL00

 

Przepraszam za utrudnienia .

#4

Odinstaluj Akamai NetSession Interface,Deal Keeper,iWebar,Sense,Shopper-Pro,sweet-page uninstall,WindowsMangerProtect20.0.0.502.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

#5

FRST

http://wklej.to/01l6g

Addition

http://wklej.to/1rshU

Shortcut

http://wklej.to/wQi3r

#6

Otwórz Notatnik i wklej:

Task: {46C79670-8859-4EAC-A212-E9655255E57E} - \SYSTEM No Task File ==== ATTENTION
Task: {A6B8093C-7223-4EE1-819D-1ED1DCE9FE0C} - System32\Tasks\YTAUpdate = C:\PROGRA~2\YOUTUB~1\Updater.exe ==== ATTENTION
HKU\S-1-5-21-3037080823-2141532137-1604117031-1000\...\Run: [SPDriver] = C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.199\jsdrv.exe
HKU\S-1-5-21-3037080823-2141532137-1604117031-1000\...\Run: [Akamai NetSession Interface] = "C:\Users\Krzysztof\AppData\Local\Akamai\netsession_win.exe"
ShellIconOverlayIdentifiers: 00avast - {472083B0-C522-11CF-8763-00608CC02F24} = No File
BHO: YTAHelper - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - C:\ProgramData\YTAHelper\YTAHelper64.dll No File
BHO-x32: Deal Keeper - {1ec8187a-6435-44e3-bbe4-6ce6d3c69254} - C:\Program Files (x86)\Deal Keeper\DealKeeperbho.dll No File
BHO-x32: YTAHelper - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR HomePage: Default - hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default - "https://mysearch.avg.com?cid={4C1CB1DF-D700-4554-80F6-7B1BB4FCF586}mid=9261ea8006c147d2bc696939b22072a0-b80447272e08814951f0e541cd532555723035e7lang=plds=AVGcoid=avgtbavgpr=frd=2014-07-22 20:12:56v=3.1.0.6pid=wtusg=sap=hp"
CHR DefaultSearchKeyword: Default - mysearch.avg.com
CHR DefaultSearchProvider: Default - AVG Secure Search
CHR DefaultSearchURL: Default - https://mysearch.avg.com/search?cid={4C1CB1DF-D700-4554-80F6-7B1BB4FCF586}mid=9261ea8006c147d2bc696939b22072a0-b80447272e08814951f0e541cd532555723035e7lang=plds=AVGcoid=avgtbavgpr=frd=2014-07-22 20:12:56v=3.1.0.6pid=wtusg=sap=dspq={searchTerms}
CHR DefaultSuggestURL: Default - http://toolbar.avg.com/acp?q={searchTerms}o=1
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx []
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx []
S2 vToolbarUpdater3.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.1.0\ToolbarUpdater.exe [X]
S2 YouTubeAcceleratorService; C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe -start -scm [X]
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-07-22] (AVG Technologies)
S2 SPDRIVER_1.37.0.199; \\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.199\jsdrv.sys [X]
2014-09-05 16:14 - 2014-09-05 16:23 - 00000000 ____ D () C:\AdwCleaner
2014-08-28 17:33 - 2014-07-21 12:54 - 00000000 ____ D () C:\Program Files\Common Files\ShopperPro
2014-08-28 17:31 - 2014-07-17 15:37 - 00000000 ____ D () C:\Program Files (x86)\Deal Keeper
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl

#7

Dziękuję bardzo pomogło :slight_smile: