Złośliwa wyszukiwarka Sweet-page.com

lemfan · 22 Czerwiec 2014 14:00

Witam, za pomocą programu AdwCleaner 3.2.69 usunąłem wyszukiwarkę Sweet-page.com, a następnie wykonane zostało skanowanie dysków programem OTL 3.2.69. Proszę o podanie treści skryptów na podstawie wygenerowanych przez program Farbar Recovery Scan Tool raportów.Skrypty wklejone zostaną do OTL. Dziękuję Ci falcon89 za poradę.

http://wklej.org/id/1398775/

http://wklej.org/id/1398882/

Atis · 22 Czerwiec 2014 16:00

W panelu sterowania odinstaluj:

coupon downloader

Greener Web

Image Editor Packages

McAfee Security Scan Plus

Mipony Download Manager Packages

Right Backup

WindowsProtectManger20.0.0.401

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

() C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe
() C:\Program Files (x86)\Greener Web\bin\GreenerWeb.PurBrowse64.exe
() C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exe
() C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Users\Andrzej\AppData\Roaming\Mozilla\Firefox\Profiles\v24z6f0v.default\extensions\{a3f28269-ad17-41a8-b032-3e0313ef8979}.xpi []
CHR Extension: (McAfee Security Scan+) - C:\Users\Andrzej\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-06-22]
R2 Update Greener Web; C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe [318240 2014-06-22] ()
R2 Util Greener Web; C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe [318240 2014-06-22] ()
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61120 2014-06-11] (StdLib)
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}w64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}w64.sys [61120 2014-06-20] (StdLib)
C:\Program Files\McAfee Security Scan
C:\Windows\system32\Drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}w64.sys
C:\Users\Andrzej\Desktop\Mozilla-Thunderbird(13298).exe
C:\Windows\system32\Drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys
C:\Users\Andrzej\*.exe
C:\AdwCleaner
Task: {17D0E4AC-2514-4E1D-A7D8-9B892EE2B2F8} - System32\Tasks\{9B9DDFA2-1922-4981-B4C6-8A43E9CA1EAD} => C:\Users\Andrzej\Downloads\FileFormatConverters.exe
Task: {209580ED-EA9E-43BA-A0DC-B87C694CCCCC} - System32\Tasks\{036A8DA2-F73B-4ADA-A30A-3FB6CDA80760} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {25924209-4E32-44F1-B68D-A3450A8871FB} - System32\Tasks\{B11BA04D-8F8A-469D-B1AD-F1278DD1B440} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {435ACE0F-6161-430A-A35C-7C3E08304D2B} - System32\Tasks\Right Backup_startup => C:\Program Files (x86)\Right Backup\RightBackup.exe [2014-06-11] (Systweak)
Task: {4941555A-31CC-488D-BB0C-DE38A5B864F7} - System32\Tasks\{574F97A2-9162-4A00-B90A-52657E9C98CC} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {4C0269AF-C342-4E40-8982-72B39A8AC617} - System32\Tasks\{A959E39F-3DC9-4290-B246-9170211439E4} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {4F94D24B-C21B-430C-B25B-B23817CDCBD7} - System32\Tasks\{D75D8854-5ABA-499B-8DC7-1CB946A1484A} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {520921EC-5A40-4C35-A2A0-B1B0B8289286} - System32\Tasks\{BD54F26E-C701-4F9F-8BFC-D4EFD41990F2} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {52450E1B-DE3D-4574-98D1-5A7465C12866} - System32\Tasks\{25A3A0DF-5989-4BDE-A743-D3D5C0C9C3CA} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {564F6BE5-ECE6-4B42-8636-D9F2A0655208} - System32\Tasks\{C94FC589-5BFE-43FB-8975-F495D7D4882C} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {5BF5A416-EB22-49BF-86E1-53B1B84C83AC} - System32\Tasks\{34DAA423-3352-451C-A817-B2819B9EE171} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {61001118-E4B6-4C9E-AA77-59C85533E292} - System32\Tasks\{1CED57CA-2CED-4BE1-AE55-23835735DD70} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {67C06D12-49FB-4C52-B0B5-785B5EC1E570} - \Digital Sites No Task File <==== ATTENTION
Task: {682DE147-7846-4A31-9318-3B8C954E456E} - System32\Tasks\{1E55825D-B0C4-4E48-B3B0-4014EE87C67A} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {7C055040-C447-4104-87E3-328BA9400F29} - System32\Tasks\{FE41AE8B-DB71-4395-BCD5-DD44B7BC6967} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {7E963CBD-26DE-4669-B1D1-15C801CDC418} - System32\Tasks\{32BA16B4-EF30-4254-B8F4-E684EA434D12} => C:\Program Files\Opera_1215_int_Setup_x64.exe
Task: {8CCE2A00-0175-4353-98B0-9921339E830A} - System32\Tasks\{2D8764B1-A668-4BDC-A37B-33B74BE7D7F5} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {9CB7488B-45BE-4D1C-888D-0D499F198F0E} - System32\Tasks\{6C9E5A1A-1B5E-4939-8B57-D54F84310E54} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {AA634802-D31A-49D5-84AD-E73D539227DD} - System32\Tasks\{94115242-4FF1-48B6-8816-DD4D404F2B66} => D:\Programy\OFFICE11\EXCEL.EXE
Task: {BF7A0E81-263E-4E62-92EB-2B0509B20220} - \QtraxPlayer No Task File <==== ATTENTION
Task: {C28A7639-DDB5-4895-AE3E-B73724C76FAC} - \DSite No Task File <==== ATTENTION
Task: {FE9CBB11-8F24-4C54-B13A-1557350E8F33} - System32\Tasks\{97C44CE9-4489-4794-ADB9-60DB6A0A22C2} => C:\Program Files\Opera_1215_int_Setup_x64.exe

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.