Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Dns Unlocker + inne - Jak usunąć?

bocher 10 Gru 2015 11:19 744 9
  • #1 10 Gru 2015 11:19
    bocher
    Poziom 6  

    Witam, mam problem z dns unlocerem i reklamami. Słyszałem że każdy tego typu problem należy rozwiązać indywidualnie. Dlatego zamieszczam logi z Dr.Web CureIt! i Malwarebytes Anti-Malware i proszę o pomoc.

    0 9
  • #4 10 Gru 2015 11:57
    Kolobos
    Spec od komputerów

    Masz sporo niezainstalowanych urzadzen w menadzerze urzadzen, zrob cos z tym.

    Do tego cryptowall zaszyfrowal Ci pliki, mozesz sprobowac odzyskac przy pomocy:
    https://support.kaspersky.com/pl/viruses/disinfection/10556#block1 o ile obsluguje ten
    wariant. Na przyszlosc nie uruchamiaj zainfekowanych plikow, unikniesz utraty danych.

    Obok frst.exe utworz plik fixlist.txt z zawartoscia:
    Task: {186EA943-EE54-4DD2-9285-7834104BC79F} - System32\Tasks\Trojan Remover => C:\Program Files\Loaris\Trojan Remover\ltr.exe
    AlternateDataStreams: C:\Users\Justyniuniunia\Local Settings:init
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebExaminer => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebProxy => ""="service"
    HKU\S-1-5-21-1679027375-1170543844-39372760-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-1679027375-1170543844-39372760-1000\...\Run: [uTorrent] => "C:\Users\Justyniuniunia\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Brak pliku
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+bvm.html [2015-12-08] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+bvm.txt [2015-12-08] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+gsn.html [2015-12-08] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+gsn.txt [2015-12-08] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+iwf.html [2015-12-07] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+iwf.txt [2015-12-07] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+lsm.html [2015-12-08] ()
    Startup: C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how_recover+lsm.txt [2015-12-08] ()
    BootExecute: autocheck autochk * sdnclean64.exe
    CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
    CHR HKU\S-1-5-21-1679027375-1170543844-39372760-1000\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
    BHO: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll => Brak pliku
    BHO-x32: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\VSGN.dll => Brak pliku




    Toolbar: HKLM - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - Brak pliku
    Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - Brak pliku
    Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\VSGN.dll Brak pliku
    S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
    S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
    S2 SpyEmrgHealth; C:\Program Files\NETGATE\Spy Emergency\SpyEmergencyHealth.exe [X]
    S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\Dr.Fone for Android\DriverInstall.exe" [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    2015-12-08 22:21 - 2015-12-08 22:21 - 00009569 _____ C:\Users\Justyniuniunia\Desktop\Howto_RESTORE_FILES.html
    2015-12-08 22:21 - 2015-12-08 22:21 - 00002766 _____ C:\Users\Justyniuniunia\Desktop\Howto_RESTORE_FILES.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Public\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Public\Downloads\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\Downloads\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\Documents\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+bvm.html
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Public\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Public\Downloads\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\Downloads\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\Documents\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+bvm.txt
    2015-12-08 22:16 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+bvm.txt
    2015-12-08 22:14 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+bvm.html
    2015-12-08 22:14 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+bvm.txt
    2015-12-08 22:14 - 2015-12-08 22:14 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+bvm.html
    2015-12-08 22:14 - 2015-12-08 22:14 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+bvm.txt
    2015-12-08 22:13 - 2015-12-08 22:16 - 00009569 _____ C:\Users\Public\Documents\how_recover+bvm.html
    2015-12-08 22:13 - 2015-12-08 22:16 - 00002766 _____ C:\Users\Public\Documents\how_recover+bvm.txt
    2015-12-08 22:13 - 2015-12-08 22:14 - 00009569 _____ C:\ProgramData\how_recover+bvm.html
    2015-12-08 22:13 - 2015-12-08 22:14 - 00002766 _____ C:\ProgramData\how_recover+bvm.txt
    2015-12-08 22:13 - 2015-12-08 22:13 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_yrunbwylx.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Public\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Public\Downloads\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\Downloads\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\Documents\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+gsn.html
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Public\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Public\Downloads\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\Downloads\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\Documents\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+gsn.txt
    2015-12-08 12:27 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+gsn.txt
    2015-12-08 12:26 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+gsn.html
    2015-12-08 12:26 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+gsn.txt
    2015-12-08 12:26 - 2015-12-08 12:26 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+gsn.html
    2015-12-08 12:26 - 2015-12-08 12:26 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+gsn.txt
    2015-12-08 12:25 - 2015-12-08 12:27 - 00009569 _____ C:\Users\Public\Documents\how_recover+gsn.html
    2015-12-08 12:25 - 2015-12-08 12:27 - 00002766 _____ C:\Users\Public\Documents\how_recover+gsn.txt
    2015-12-08 12:25 - 2015-12-08 12:26 - 00009569 _____ C:\ProgramData\how_recover+gsn.html
    2015-12-08 12:25 - 2015-12-08 12:26 - 00002766 _____ C:\ProgramData\how_recover+gsn.txt
    2015-12-08 12:25 - 2015-12-08 12:25 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_wjblxkelp.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Public\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Public\Downloads\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\Downloads\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\Documents\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+lsm.html
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Public\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Public\Downloads\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\Downloads\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\Documents\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+lsm.txt
    2015-12-08 10:03 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+lsm.txt
    2015-12-08 10:00 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Public\Documents\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:03 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Public\Documents\how_recover+lsm.txt
    2015-12-08 10:00 - 2015-12-08 10:03 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+lsm.txt
    2015-12-08 10:00 - 2015-12-08 10:00 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:00 - 00009569 _____ C:\ProgramData\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:00 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+lsm.txt
    2015-12-08 10:00 - 2015-12-08 10:00 - 00002766 _____ C:\ProgramData\how_recover+lsm.txt
    2015-12-08 09:59 - 2015-12-08 09:59 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_ignfpqrtq.txt
    2015-12-08 09:57 - 2015-12-08 09:57 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+rsv.html
    2015-12-08 09:57 - 2015-12-08 09:57 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+rsv.html
    2015-12-08 09:57 - 2015-12-08 09:57 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+rsv.txt
    2015-12-08 09:57 - 2015-12-08 09:57 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+rsv.txt
    2015-12-08 09:56 - 2015-12-08 09:57 - 00009569 _____ C:\ProgramData\how_recover+rsv.html
    2015-12-08 09:56 - 2015-12-08 09:57 - 00002766 _____ C:\ProgramData\how_recover+rsv.txt
    2015-12-08 09:56 - 2015-12-08 09:56 - 00009569 _____ C:\Users\Public\Documents\how_recover+rsv.html
    2015-12-08 09:56 - 2015-12-08 09:56 - 00002766 _____ C:\Users\Public\Documents\how_recover+rsv.txt
    2015-12-08 09:55 - 2015-12-08 09:55 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_kapyadmue.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 00009569 _____ C:\Users\Public\Documents\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 00009569 _____ C:\ProgramData\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 00002766 _____ C:\Users\Public\Documents\how_recover+dld.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+dld.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+dld.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 00002766 _____ C:\ProgramData\how_recover+dld.txt
    2015-12-08 08:13 - 2015-12-08 08:13 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_jdkcwgbiy.txt
    2015-12-07 23:51 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Public\how_recover+iwf.html
    2015-12-07 23:51 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Public\Downloads\how_recover+iwf.html
    2015-12-07 23:51 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Justyniuniunia\how_recover+iwf.html
    2015-12-07 23:51 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Justyniuniunia\Downloads\how_recover+iwf.html
    2015-12-07 23:51 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Justyniuniunia\Documents\how_recover+iwf.html
    2015-12-07 23:51 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Public\how_recover+iwf.txt
    2015-12-07 23:51 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Public\Downloads\how_recover+iwf.txt
    2015-12-07 23:51 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Justyniuniunia\how_recover+iwf.txt
    2015-12-07 23:51 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Justyniuniunia\Downloads\how_recover+iwf.txt
    2015-12-07 23:51 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Justyniuniunia\Documents\how_recover+iwf.txt
    2015-12-07 23:46 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+iwf.html
    2015-12-07 23:46 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\how_recover+iwf.txt
    2015-12-07 23:46 - 2015-12-07 23:46 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+iwf.html
    2015-12-07 23:46 - 2015-12-07 23:46 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\how_recover+iwf.txt
    2015-12-07 23:45 - 2015-12-07 23:45 - 00009569 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+iwf.html
    2015-12-07 23:45 - 2015-12-07 23:45 - 00002766 _____ C:\Users\Justyniuniunia\AppData\LocalLow\how_recover+iwf.txt
    2015-12-07 23:32 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+iwf.html
    2015-12-07 23:32 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\how_recover+iwf.txt
    2015-12-07 23:32 - 2015-12-07 23:32 - 00009569 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+iwf.html
    2015-12-07 23:32 - 2015-12-07 23:32 - 00002766 _____ C:\Users\Justyniuniunia\AppData\Local\Apps\how_recover+iwf.txt
    2015-12-07 23:31 - 2015-12-07 23:51 - 00009569 _____ C:\Users\Public\Documents\how_recover+iwf.html
    2015-12-07 23:31 - 2015-12-07 23:51 - 00002766 _____ C:\Users\Public\Documents\how_recover+iwf.txt
    2015-12-07 23:31 - 2015-12-07 23:32 - 00009569 _____ C:\ProgramData\how_recover+iwf.html
    2015-12-07 23:31 - 2015-12-07 23:32 - 00002766 _____ C:\ProgramData\how_recover+iwf.txt
    2015-12-07 23:30 - 2015-12-07 23:30 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_yqaiqktlg.txt
    2015-12-07 18:00 - 2015-12-07 18:00 - 00009569 _____ C:\Users\Public\Documents\how_recover+ukn.html
    2015-12-07 18:00 - 2015-12-07 18:00 - 00009569 _____ C:\ProgramData\how_recover+ukn.html
    2015-12-07 18:00 - 2015-12-07 18:00 - 00002766 _____ C:\Users\Public\Documents\how_recover+ukn.txt
    2015-12-07 18:00 - 2015-12-07 18:00 - 00002766 _____ C:\ProgramData\how_recover+ukn.txt
    2015-12-07 17:58 - 2015-12-07 17:58 - 00000253 _____ C:\Users\Justyniuniunia\Documents\recover_file_bcjxmmynf.txt
    2015-12-05 19:41 - 2015-12-07 23:45 - 00046446 _____ C:\Users\Justyniuniunia\AppData\LocalLow\HELP_YOUR_FILES.PNG.vvv
    2015-12-10 11:41 - 2015-09-21 18:02 - 00000000 ____D C:\AdwCleaner
    2015-12-08 22:14 - 2015-12-08 22:16 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+bvm.html
    2015-12-08 22:14 - 2015-12-08 22:16 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+bvm.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+dld.txt
    2015-12-08 12:26 - 2015-12-08 12:27 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+gsn.html
    2015-12-08 12:26 - 2015-12-08 12:27 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+gsn.txt
    2015-12-07 23:32 - 2015-12-07 23:51 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+iwf.html
    2015-12-07 23:32 - 2015-12-07 23:51 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+iwf.txt
    2015-12-08 10:00 - 2015-12-08 10:03 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:03 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+lsm.txt
    2015-12-08 09:57 - 2015-12-08 09:57 - 0009569 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+rsv.html
    2015-12-08 09:57 - 2015-12-08 09:57 - 0002766 _____ () C:\Users\Justyniuniunia\AppData\Local\how_recover+rsv.txt
    2015-05-07 21:01 - 2015-12-07 23:45 - 0001230 _____ () C:\Users\Justyniuniunia\AppData\Local\Temp-log.txt.vvv
    2015-12-08 22:13 - 2015-12-08 22:14 - 0009569 _____ () C:\ProgramData\how_recover+bvm.html
    2015-12-08 22:13 - 2015-12-08 22:14 - 0002766 _____ () C:\ProgramData\how_recover+bvm.txt
    2015-12-08 08:14 - 2015-12-08 08:14 - 0009569 _____ () C:\ProgramData\how_recover+dld.html
    2015-12-08 08:14 - 2015-12-08 08:14 - 0002766 _____ () C:\ProgramData\how_recover+dld.txt
    2015-12-08 12:25 - 2015-12-08 12:26 - 0009569 _____ () C:\ProgramData\how_recover+gsn.html
    2015-12-08 12:25 - 2015-12-08 12:26 - 0002766 _____ () C:\ProgramData\how_recover+gsn.txt
    2015-12-07 23:31 - 2015-12-07 23:32 - 0009569 _____ () C:\ProgramData\how_recover+iwf.html
    2015-12-07 23:31 - 2015-12-07 23:32 - 0002766 _____ () C:\ProgramData\how_recover+iwf.txt
    2015-12-08 10:00 - 2015-12-08 10:00 - 0009569 _____ () C:\ProgramData\how_recover+lsm.html
    2015-12-08 10:00 - 2015-12-08 10:00 - 0002766 _____ () C:\ProgramData\how_recover+lsm.txt
    2015-12-08 09:56 - 2015-12-08 09:57 - 0009569 _____ () C:\ProgramData\how_recover+rsv.html
    2015-12-08 09:56 - 2015-12-08 09:57 - 0002766 _____ () C:\ProgramData\how_recover+rsv.txt
    2015-12-07 18:00 - 2015-12-07 18:00 - 0009569 _____ () C:\ProgramData\how_recover+ukn.html
    2015-12-07 18:00 - 2015-12-07 18:00 - 0002766 _____ () C:\ProgramData\how_recover+ukn.txt
    EmptyTemp:

    W FRST wybierz Napraw.

    0
  • #5 10 Gru 2015 12:02
    Jacol2084
    Poziom 10  

    Gridin Soft Anti-Malware ,spróbuj tym programem tylko pełna wersja wszystko usuwa mi pomogło.

    Moderowany przez dt1:

    Po co polecać płatny program, skoro darmowe radzą sobie równie dobrze?

    0
  • #6 10 Gru 2015 12:12
    bocher
    Poziom 6  

    Nie mam juz reklam ale w każdym dosłownie folderze i podfolderze mam pliki : how_recover+bvm.html i txt.

    0
  • #7 10 Gru 2015 12:12
    Kolobos
    Spec od komputerów

    @Jacol2084 zbedny i do tego platny program, nie ma zastosowania w tym przypadku. Jak widzisz autor przeskanowal juz przy pomocy cureit oraz mbam i usunal to co wykryly oba programy.

    @bocher utworzyla je infekcja szyfrujaca pliki.

    0
  • #8 10 Gru 2015 12:16
    bocher
    Poziom 6  

    Jest na to jakiś sposób? Program który mi podałeś nie potrafi tego rozszyfrować.

    0
  • #10 10 Gru 2015 12:31
    bocher
    Poziom 6  

    Wiec pozostało czekać aż ktoś znajdzie na to sposób... Dzięki za pomoc

    0