Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

FRST - prośba o podanie dobrego fixlist.

aśkaes 23 Cze 2015 15:25 1065 6
  • CControls
  • #2 23 Cze 2015 15:49
    Acorus 20
    Spec od komputerów

    Odinstaluj McAfee Security Scan Plus, YAC(Yet Another Cleaner!). Otwórz notatnik systemowy i wklej:

    Cytat:
    CloseProcesses:
    AlternateDataStreams: C:\Windows:21AA9B273B88756A
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-16]
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...mp;from=wpm05063&uid=ST9500420AS_5VJ21LFJ
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...mp;from=wpm05063&uid=ST9500420AS_5VJ21LFJ
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKU\S-1-5-21-2520659195-3991987107-2288590474-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...mp;from=wpm05063&uid=ST9500420AS_5VJ21LFJ
    HKU\S-1-5-21-2520659195-3991987107-2288590474-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.wolframalpha.com/?trackid=sp-005
    HKU\S-1-5-21-2520659195-3991987107-2288590474-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...mp;from=wpm05063&uid=ST9500420AS_5VJ21LFJ
    SearchScopes: HKLM -> {2de06457-88b8-4989-9288-5fe9c2584ab8} URL = https://www.wolframalpha.com/input/?i={searchTerms}&trackid=sp-005
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&am...=wpm05063&uid=ST9500420AS_5VJ21LFJ&q={searchTerms}




    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> {2de06457-88b8-4989-9288-5fe9c2584ab8} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2520659195-3991987107-2288590474-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&ut...G6A&ts=1420373293&type=default&q={searchTerms}
    BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
    BHO: Jungle Net -> {dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36} -> C:\Program Files\Jungle Net\Extensions\dcfb5bfe-1f58-4b1d-96a7-3c7bbae51b36.dll No File
    Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
    R2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2015-06-10] (Elex do Brasil Participações Ltda)
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
    R2 Service Mgr JungleNet; C:\ProgramData\31f7a620-acbd-4f84-82db-5e231b8ad5de\plugincontainer.exe [652040 2015-06-23] ()
    R2 Update Mgr JungleNet; C:\Program Files\Common Files\31f7a620-acbd-4f84-82db-5e231b8ad5de\updater.exe [572680 2015-06-23] ()
    S2 Update SmarterPower; "C:\Program Files\SmarterPower\updateSmarterPower.exe" [X]
    S2 Util SmarterPower; "C:\Program Files\SmarterPower\bin\utilSmarterPower.exe" [X]
    R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [226024 2015-06-10] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlKit; C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [96424 2015-06-10] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlMon; C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [43536 2015-06-10] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [71744 2015-06-10] (Elex do Brasil Participações Ltda)
    R1 iSafeNetFilter; C:\windows\System32\DRIVERS\iSafeNetFilter.sys [44712 2015-04-17] (Elex do Brasil Participações Ltda)
    S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
    2015-06-23 14:28 - 2015-06-23 14:28 - 00000000 ____D C:\Program Files\Jungle Net
    2015-06-23 14:26 - 2015-04-17 04:43 - 00044712 _____ (Elex do Brasil Participações Ltda) C:\windows\system32\Drivers\iSafeNetFilter.sys
    2015-06-23 14:19 - 2015-06-23 14:19 - 00000000 ____D C:\Users\Asia\AppData\Roaming\Elex-tech
    2015-06-23 14:11 - 2015-06-23 14:17 - 00000000 ____D C:\AdwCleaner
    2015-06-06 18:36 - 2015-06-06 18:36 - 00000000 __SHD C:\found.001
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix.

    0
  • CControls
  • #3 23 Cze 2015 17:18
    aśkaes
    Poziom 2  

    zrobiłam wszystko tak jak napisałeś, ale reklamy z Jungle Net ciągle wyskakują :c

    0
  • #4 23 Cze 2015 17:36
    Acorus 20
    Spec od komputerów

    W jakiej przeglądarce? Pokaż nowy log z FRST bez Addition.

    0
  • #7 23 Cze 2015 18:15
    aśkaes
    Poziom 2  

    Pomogło, wielkie dzięki! :)
    FRST - prośba o podanie dobrego fixlist.

    0