Witam, od wczorajszego wieczora mam problem z wyskakującymi reklamami w Firefoxie.
Logi:
FRST:
http://www.wklej.org/id/1677860/
Addition:
Otwórz notatnik systemowy i wklej:
Task: {1EAAD6AE-0F2B-478D-AB93-60C4AB8A7659} - System32\Tasks\eKBQl1RECZjLR = C:\Users\PC\AppData\Roaming\eKBQl1RECZjLR.exe
Task: {D2F50268-6DAB-4673-8929-8D1C4DDA097C} - System32\Tasks\VkocB1qsHXsD = C:\Users\PC\AppData\Roaming\VkocB1qsHXsD.exe
Task: {BF159EF3-1977-463E-8EC5-D3AE9870D7CD} - System32\Tasks\ext_coupons_updating_service = C:\Program Files\ext coupons\ext_coupons_updating_service.exe
Task: C:\Windows\Tasks\eKBQl1RECZjLR.job = C:\Users\PC\AppData\Roaming\eKBQl1RECZjLR.exe
Task: C:\Windows\Tasks\ext_coupons_notification_service.job = C:\Program Files\ext coupons\ext_coupons_notification_service.exeç/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='ext coupons' /appid='73143' /srcid='2913' /bic='0094134419c2debcc24df52e92deb8cc' /verifier='995bef4ed297dc92560daf62f6b53dba' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif
Task: C:\Windows\Tasks\ext_coupons_updating_service.job = C:\Program Files\ext coupons\ext_coupons_updating_service.exe¬ /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=ext_coupons_updating_service /funurl=http:/stats.buildomserv.com
Task: C:\Windows\Tasks\VkocB1qsHXsD.job = C:\Users\PC\AppData\Roaming\VkocB1qsHXsD.exe
HKLM\...\Run: [HP Software Update] = C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM\...\Run: [] = [X]
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Te-Tris_Trzeba_y_ Acapella_LOT2011.wav.lnk
ShortcutTarget: Te-Tris_Trzeba_y_ Acapella_LOT2011.wav.lnk - C:\ProgramData\{fcafb674-e657-809b-fcaf-fb674e65d9d3}\Te-Tris_Trzeba_y_ Acapella_LOT2011.wav.exe (No File)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
FF Extension: AVG Safe Search - C:\Program Files\AVG\AVG10\Firefox4 [2013-10-25]
FF HKU\S-1-5-21-3418006709-445644994-3244611690-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
U3 aidhtqz3; C:\Windows\system32\Drivers\aidhtqz3.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero size file/folder)
2015-03-13 23:25 - 2015-04-02 02:31 - 00000000 ____ D () C:\Program Files\UnIIDeaLsa
2015-03-13 23:25 - 2015-04-02 02:31 - 00000000 ____ D () C:\Program Files\Plurk Smile
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Users\PC\AppData\Roaming\eKBQl1RECZjLR
2015-03-31 10:14 - 2015-03-31 10:14 - 0005655 _____ () C:\Users\PC\AppData\Roaming\VkocB1qsHXsD
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Odinstaluj Chrome zaznaczając usunięcie danych przeglądania.