Witam, Od paru dni mam problem z wirusem Sale charger ads. Robiłem scan i clear AdwCleaner (teraz juz nic nie wykrywa) i potem scan Malwarebytes (wykryło tylko rogue.multiple). Dołączam logi z OTL i FRST. Pozdrawiam

Odinstaluj Adobe Download Assistant, ASUS WebStorage Sync Agent, avast! Free Antivirus. Otwórz notatnik systemowy i wklej: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix. Reset Chrome:

Jak usunąć wirusa Sale charger ads z Windows 8.1?

#2 14709424 21 Maj 2015 10:05

Acorus 20 Acorus 20

Poziom 43

Posty: 10541

Pomógł: 3247

Ocena: 1063

Post #2

14709424 21 Maj 2015 10:05

Odinstaluj Adobe Download Assistant, ASUS WebStorage Sync Agent, avast! Free Antivirus. Otwórz notatnik systemowy i wklej:

Cytat:
Task: {26605380-60B9-4F24-9A8F-73D15258245B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1555830463-1417614318-2398388407-1002Core => C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-13] (Facebook Inc.)
Task: {3ED661B5-3E63-4E1B-848F-84BF28E755DD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1555830463-1417614318-2398388407-1002UA => C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-13] (Facebook Inc.)
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1555830463-1417614318-2398388407-1002Core.job => C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1555830463-1417614318-2398388407-1002UA.job => C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKU\S-1-5-21-1555830463-1417614318-2398388407-1002\...\Run: [Facebook Update] => C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-13] (Facebook Inc.)
HKU\S-1-5-21-1555830463-1417614318-2398388407-1002\...\MountPoints2: {231c4bd4-7192-11e3-be9f-dc85de92f1d4} - "F:\iLinker.exe"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
2015-05-20 16:14 - 2015-05-20 16:14 - 00768512 _____ (Reimage®) C:\Users\Monika\Downloads\ReimageRepair.exe
2015-05-20 16:03 - 2015-05-20 18:35 - 00000000 ____D () C:\AdwCleaner
C:\ProgramData\SetStretch.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Uruchom jako administrator FRST i kliknij w Fix. Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl