Wyskakujace reklamy:-( raporty olt

toktumi · 21 Grudzień 2014 11:07

witam serdecznie i proszę o pomoc,

za bardzo wszystkiego pewnie nie rozumiem ale mam nadzieje, że dobrze robię.

czyli mam teraz czekać na waszą odpowiedź , skrypt?

z góry dziekuję , karolina

przedstawiam moje raport olt.txt :

http://wklej.org/id/1563872/

oraz olt.extras:

http://wklej.org/id/1563881/

Acorus · 21 Grudzień 2014 11:23

Odinstaluj McAfee Security Scan Plus.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

toktumi · 21 Grudzień 2014 11:44

dzięki za pomoc!

zrobiłam wszystko, oto raporty z farbara:

first:

http://wklej.org/id/1563914/

i addition:

http://wklej.org/id/1563916/

co mam dalej robić?

Acorus · 21 Grudzień 2014 13:07

Otwórz Notatnik i wklej:

Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Programmi\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Programmi\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
Toolbar: HKU\S-1-5-21-3682795676-2682444678-3057938357-1006 - No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-01-02]
FF Extension: No Name - C:\Programmi\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-04-25]
FF Extension: No Name - C:\Documents and Settings\Kaska\Dati applicazioni\Mozilla\Firefox\Profiles\qywesm4g.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [Not Found]
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR Plugin: (Adobe Acrobat) - C:\Programmi\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Programmi\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U4) - C:\Programmi\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
S3 EagleXNt; \\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S3 MBAMSwissArmy; \\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
U1 WS2IFSL; No ImagePath
2014-12-20 02:21 - 2014-12-20 02:38 - 00000000 ____ D () C:\AdwCleaner
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Programmi\McAfee Security Scan
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Menu Avvio\Programmi\McAfee Security Scan Plus
2014-12-02 14:58 - 2014-12-09 15:12 - 00001747 _____ () C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk
2014-12-02 14:58 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Dati applicazioni\McAfee Security Scan
C:\Documents and Settings\Kaska\sqlite3.dll
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

toktumi · 21 Grudzień 2014 13:41

wszystko zrobione, nestety zaraz po restarcie komputera natychmiast wyskakuja reklamy znowu, ech

tak czy siak bardzo dziekuje

jeśli ktos ma zna inne rozwiązanie bardzo prosze o pomoc:-)

na górze tematu wstawiłam raporty z olt, moze ta droga zadziala?

dalej robić?

Acorus · 21 Grudzień 2014 14:20

Pokaż nowe logi z FRST.

toktumi · 21 Grudzień 2014 14:36

nowe logi nie są tymi ,które już pokazałam? czy mam wszystko zrobić jeszcze raz?skąd mam je wziąsc?

Acorus · 21 Grudzień 2014 15:10

Uruchom FRST i kliknij Scan.

toktumi · 21 Grudzień 2014 15:42

oto nowe logi:

first

http://wklej.org/id/1564154/

oraz addition

http://wklej.org/id/1564157/

Acorus · 21 Grudzień 2014 16:10

Otwórz Notatnik i wklej:

HKLM\...\Run: [rec_pl_1] = C:\Programmi\rec_pl_1\rec_pl_1.exe [3977384 2014-12-16] ()
HKU\S-1-5-21-3682795676-2682444678-3057938357-1006\...\Run: [Odkurzacz] = C:\Programmi\Odkurzacz\odkurzacz.exe [916480 2014-10-06] (FranmoSoftware)
Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Programmi\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Programmi\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
Toolbar: HKU\S-1-5-21-3682795676-2682444678-3057938357-1006 - No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-01-02]
FF Extension: No Name - C:\Programmi\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-04-25]
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR Plugin: (Adobe Acrobat) - C:\Programmi\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Google Update) - C:\Programmi\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U4) - C:\Programmi\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
CHR Extension: (Yann Arthus-Bertrand) - C:\Documents and Settings\Kaska\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc [2012-11-11]
S3 McComponentHostService; C:\Programmi\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
2014-12-20 02:21 - 2014-12-20 02:38 - 00000000 ____ D () C:\AdwCleaner
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Programmi\McAfee Security Scan
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Menu Avvio\Programmi\McAfee Security Scan Plus
2014-12-02 14:58 - 2014-12-09 15:12 - 00001747 _____ () C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk
2014-12-02 14:58 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Dati applicazioni\McAfee Security Scan
C:\Documents and Settings\Kaska\sqlite3.dll

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

toktumi · 21 Grudzień 2014 17:44

oto fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 21-12-2014
Ran by Kaska at 2014-12-20 19:10:04 Run:2
Running from C:\Documents and Settings\Kaska\Desktop\first
Loaded Profile: Kaska (Available profiles: Kaska)
Boot Mode: Normal

==============================================

Content of fixlist:

{\rtf1\ansi\ansicpg1252\deff0\deflang1040{\fonttbl{\f0\fswiss\fcharset238{*\fname Arial;}Arial CE;}}
{*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\lang1045\f0\fs20 HKLM\…\Run: [rec_pl_1] => C:\Programmi\rec_pl_1\rec_pl_1.exe [3977384 2014-12-16] ()\par
HKU\S-1-5-21-3682795676-2682444678-3057938357-1006\…\Run: [Odkurzacz] => C:\Programmi\Odkurzacz\odkurzacz.exe [916480 2014-10-06] (FranmoSoftware)\par
Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk\par
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Programmi\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)\par
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =\par
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =\par
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =\par
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Programmi\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)\par
Toolbar: HKU\S-1-5-21-3682795676-2682444678-3057938357-1006 -> No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File\par
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-01-02]\par
FF Extension: No Name - C:\Programmi\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-04-25]\par
FF Extension: No Name - C:\Programmi\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]\par
CHR Plugin: (Adobe Acrobat) - C:\Programmi\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll No File\par
CHR Plugin: (Google Earth Plugin) - C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll No File\par
CHR Plugin: (Google Update) - C:\Programmi\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File\par
CHR Plugin: (Java™ Platform SE 7 U4) - C:\Programmi\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll No File\par
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File\par
CHR Extension: (Yann Arthus-Bertrand) - C:\Documents and Settings\Kaska\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc [2012-11-11]\par
S3 McComponentHostService; C:\Programmi\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)\par
2014-12-20 02:21 - 2014-12-20 02:38 - 00000000 ____ D () C:\AdwCleaner\par
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Programmi\McAfee Security Scan\par
2014-12-09 15:12 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Menu Avvio\Programmi\McAfee Security Scan Plus\par
2014-12-02 14:58 - 2014-12-09 15:12 - 00001747 _____ () C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk\par
2014-12-02 14:58 - 2014-12-09 15:12 - 00000000 ____ D () C:\Documents and Settings\All Users\Dati applicazioni\McAfee Security Scan\par
C:\Documents and Settings\Kaska\sqlite3.dll\par
}

{\rtf1\ansi\ansicpg1252\deff0\deflang1040{\fonttbl{\f0\fswiss\fcharset238{*\fname Arial;}Arial CE;}} => Error: No automatic fix found for this entry.
{*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\lang1045\f0\fs20 HKLM\…\Run: [rec_pl_1] => C:\Programmi\rec_pl_1\rec_pl_1.exe [3977384 2014-12-16] ()\par => Error: No automatic fix found for this entry.
HKU\S-1-5-21-3682795676-2682444678-3057938357-1006\Software\Microsoft\Windows\CurrentVersion\Run\Odkurzacz => Value not found.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk\par not found.
C:\Programmi\McAfee Security Scan\3.8.150\SSScheduler.exe\par not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => Value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => Value not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key could not be deleted. Error: -1073741772
HKCR\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key could not be deleted. Error: -1073741772
HKU\S-1-5-21-3682795676-2682444678-3057938357-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\Toolbar: HKU\S-1-5-21-3682795676-2682444678-3057938357-1006 -> No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File\par => Value not found.
HKCR\CLSID\Toolbar: HKU\S-1-5-21-3682795676-2682444678-3057938357-1006 -> No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File\par => Key could not be deleted. Error: -1073741772
C:\Programmi\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => not found.
C:\Programmi\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => not found.
C:\Programmi\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => not found.
C:\Programmi\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll not found.
C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll not found.
C:\Programmi\Google\Update\1.3.21.123\npGoogleUpdate3.dll not found.
C:\Programmi\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll not found.
C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll not found.
C:\Documents and Settings\Kaska\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc\par directory not found.
McComponentHostService => Service deleted successfully.
“C:\AdwCleaner\par” => File/Directory not found.
“C:\Programmi\McAfee Security Scan\par” => File/Directory not found.
“C:\Documents and Settings\All Users\Menu Avvio\Programmi\McAfee Security Scan Plus\par” => File/Directory not found.
“C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk\par” => File/Directory not found.
“C:\Documents and Settings\All Users\Dati applicazioni\McAfee Security Scan\par” => File/Directory not found.
“C:\Documents and Settings\Kaska\sqlite3.dll\par” => File/Directory not found.
} => Error: No automatic fix found for this entry.

==== End of Fixlog ====

Acorus · 21 Grudzień 2014 18:45

Jak ty to wklejasz,że taki zniekształcony ten fixlist.txt

toktumi · 21 Grudzień 2014 19:05

skopiowałam bezpośrednio w forum a normalnie kopiuję z fixloga do wklej.org,tak jak tu:

http://wklej.org/id/1564372/