logo elektroda
logo elektroda
X
logo elektroda
REKLAMA
REKLAMA
Adblock/uBlockOrigin/AdGuard mogą powodować znikanie niektórych postów z powodu nowej reguły.

FRST logi - usunięcie niechcianych reklam oraz samo otwierających się stron.

91and1 19 Lut 2016 18:50 903 3
REKLAMA
  • #1 15451521
    91and1
    Poziom 10  
    Posty: 51
    Ocena: 2
    Proszę o sprawdzenie logów w celu usunięcia niechcianych reklam oraz samo otwierających się stron.
    Załączniki:
    • FRST_19-02-2016_18-33-41.txt (65.25 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • Addition_19-02-2016_18-33-41.txt (23.45 KB) Musisz być zalogowany, aby pobrać ten załącznik.
  • REKLAMA
  • Pomocny post
    #2 15451570
    Acorus 20
    Poziom 43  
    Posty: 10541
    Pomógł: 3247
    Ocena: 1063
    Odinstaluj McAfee Security Scan Plus, Microsoft Security Essentials. Otwórz notatnik systemowy i wklej:

    Cytat:
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-12-15]
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe (McAfee, Inc.)
    GroupPolicy: Ograniczenia - Chrome <======= UWAGA
    CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1422705406&from=cor&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1422705406&from=cor&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    HKU\S-1-5-21-1178071264-652236260-933383183-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    HKU\S-1-5-21-1178071264-652236260-933383183-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502
    HKU\S-1-5-21-1178071264-652236260-933383183-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1435052706&z=277aee1de9851fb05151f57gdz6c6w8e8w1o8m1e4z&from=ient06232&uid=WDCXWD5000LPVX-80V0TT0_WD-WX21A34A5502A5502&q={searchTerms}
    SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {D7D41569-9AF2-4067-BF76-5BCBEF3B831D} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1178071264-652236260-933383183-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
    FF DefaultSearchEngine: delta-homes
    FF SelectedSearchEngine: delta-homes
    FF Keyword.URL: hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQ5bAABFFgVHbQ1dVAFcFQIXcRQBAA9EDAYTJgwOVV1AFlFGeR9aFQQTR0cFME0FB18EURNNfXpNEk0eTFBREEtXDFYC&q={searchTerms}
    FF SearchPlugin: C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\searchplugins\ask-search.xml [2014-12-15]
    FF SearchPlugin: C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\searchplugins\default.xml [2016-02-10]
    FF SearchPlugin: C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\searchplugins\delta-homes.xml [2016-02-19]
    FF SearchPlugin: C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\searchplugins\omiga-plus.xml [2015-01-31]
    FF Extension: Default NewTab - C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\extensions\default_newtabff@gmail.com [2015-10-22] [Brak podpisu cyfrowego]
    FF Extension: YahooToolsProtected - C:\Users\Ela\AppData\Roaming\Mozilla\Firefox\Profiles\nsgrvstk.default\extensions\yahooprotected@gmail.com.xpi [2015-11-21] [Brak podpisu cyfrowego]
    CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
    CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggUI1gBVQ5BRRgXJQwATA1GFQQOeVgOVBRCEVMWdg1cUA4VRAwFIk0FA1oDB0VXfV5bFElXTwhgNUpMDlQUU2VRL1RXEg=="
    CHR StartupUrls: Default -> "hxxp://www.google.com/","hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggUI1gBVQ5BRRgXJQwATA1GFQQOeVgOVBRCEVMWdg1cUA4VRAwFIk0FA1oDB0VXfV5bFElXTwhgNUpMDlQUU2VRL1RXEg=="
    CHR DefaultSearchURL: Default -> hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQ5bAABFFgVHbQ1dVAFcFQIXcRQBAA9EDAYTJgwOVV1AFlFGeR9aFQQTQkcFME0FBloEURNNfXpNEk0eTFBREEtXDFYC&q={searchTerms}
    CHR DefaultSearchKeyword: Default -> searchinterneat-a.akamaihd.net
    CHR DefaultNewTabURL: Default -> hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAJAIQAMVgkVDAFGdQEVVQ5FEBgaIQ8NTApBRwAVdF0JVl0UGBNBNARaAktXUUEeJ1pNER8fHHZWM01XDFwDcUdMLVZL
    CHR HKLM\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] - hxxps://clients2.google.com/service/update2/crx
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe [289256 2015-12-02] (McAfee, Inc.)
    S2 Update Solution Real; "C:\Program Files (x86)\Solution Real\updateSolutionReal.exe" [X]
    S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
    S1 wfdrvr_vt_1_10_0_28; system32\drivers\wfdrvr_vt_1_10_0_28.sys [X]
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix/Napraw.
    Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.
  • REKLAMA
  • #3 15451878
    91and1
    Poziom 10  
    Posty: 51
    Ocena: 2
    Dzięki. Ale po tym zabiegu mam jeszcze problem z wyskakującym oknem z chińskimi znaczkami na 1-2 sekundy i okno znika. Zamieszczam jeszcze raz logi po czyszczeniu.
    Logi po czyszczeniu:
    Załączniki:
    • FRST(1).txt (56.09 KB) Musisz być zalogowany, aby pobrać ten załącznik.
REKLAMA