Wyskakujące reklamy

Dla specjalistów Bezpieczeństwo
#1

Tak jak w temacie :slight_smile: … co nie przycisnę jakiś link to wyskakuje reklama.

 

Logi :

 

http://wklej.to/o1abR

 

http://wklej.to/Sr2NJ

 

http://wklej.to/j6U1g

#2

Odinstaluj Adobe Reader 9.3 - Polish.Otwórz notatnik systemowy i wklej:

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [948672 2009-12-11] (Adobe Systems Incorporated)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1427728202from=coruid=ST9500420AS_5VJ8GGY8q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1427728202from=coruid=ST9500420AS_5VJ8GGY8q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1427728202from=coruid=ST9500420AS_5VJ8GGY8q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1427728202from=coruid=ST9500420AS_5VJ8GGY8q={searchTerms}
HKU\S-1-5-21-3305391605-2365650846-1078893068-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3305391605-2365650846-1078893068-1001 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Homepage: hxxp://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-24]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Rafal\AppData\Roaming\Mozilla\Firefox\Profiles\015fk2fk.default\extensions\searchengine@gmail.com
CHR StartupUrls: Default - "hxxp://www.sweet-page.com/?type=hpts=1427728202from=coruid=ST9500420AS_5VJ8GGY8"
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-30] (SysTool PasSame LIMITED) ==== ATTENTION
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

LOGI :

 

AdwCleaner : http://wklej.to/rcikt

 

FixLog : http://wklej.to/lRA1x

 

Frst : http://wklej.to/x4lHU

 

Addition : http://wklej.to/bJyRv

 

Shortcut : http://wklej.to/rNizO

#4

Otwórz notatnik systemowy i wklej:

SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (Bookmark Manager) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-11]
S2 pfsvc_1.10.0.11; "C:\Program Files (x86)\PhraseFinder_1.10.0.11\Service\pfsvc.exe" [X]
R1 pfnfd_1_10_0_11; C:\Windows\System32\drivers\pfnfd_1_10_0_11.sys [58232 2015-03-18] (Phrase Finder)
2015-05-11 16:06 - 2015-05-11 16:09 - 00000000 ____ D () C:\AdwCleaner

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Logi :

 

FRST : http://wklej.to/7VHC2

 

Addition : http://wklej.to/raZus

 

Shortcut : http://wklej.to/jDa9q