Windows 7 - chińskie reklamy i programy po instalacji Adobe Reader z Chomikuj

Question

Witam, złapałem jakiegoś syfa instalując adobe readera z chomika... Poinstalowały mi się jakieś chińskie reklamy, programy itp. Wrzucam logi z frst. Proszę o pomoc

Acorus 20 · Accepted Answer

Wykonaj w trybie awaryjnym. Otwórz notatnik systemowy i wklej: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw. Zapisując Fixlist kodowanie ustaw na UTF-8

krzychupar · Answer

Otwórz notatnik i wklej:
CloseProcess:
AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}
AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}
Task: {2242C124-E530-44F2-8C04-C37CAF404A83} - System32\Tasks\Opera scheduled Autoupdate 1455564918 => C:\Program Files (x86)\Opera\launcher.exe [2016-05-09] (Opera Software)
Task: {44BF93EA-7FBE-4C2B-8A68-78F6BA5FE67D} - System32\Tasks\Ghaneckugick Adapter => C:\Program Files (x86)\Ghaneckugick\Ghnadptsk.exe [2016-05-27] () <==== UWAGA
Task: {859238AE-B907-4CB5-AE4F-62BC1109FEE7} - System32\Tasks\{8AE1EFDB-44F2-471E-A873-B6ADC031D58B} => pcalua.exe -a C:\Users\Gabrylo\Desktop\package\LGMobileSupportTool.exe -d C:\Users\Gabrylo\Desktop\package
Task: {CD8707C6-2FE7-4318-AA74-BE4CA43A120C} - System32\Tasks\{F09E21B0-F9B1-45DD-99CE-6DCD29BE8437} => pcalua.exe -a "C:\Users\Gabrylo\Desktop\LG KDZ offline fix\KDZ_FW_UPD_EN\B2CAppSetup.exe" -d "C:\Users\Gabrylo\Desktop\LG KDZ offline fix\KDZ_FW_UPD_EN"
Task: {E79F3864-C2E4-4969-B2CC-F35F722E90EA} - System32\Tasks\{0A8D0331-316D-4F18-8417-C8F09E541D9A} => pcalua.exe -a C:\Users\Gabrylo\Desktop\KDZ_FW_UPD_EN\B2CAppSetup.exe -d C:\Users\Gabrylo\Desktop\KDZ_FW_UPD_EN
2016-05-29 20:59 - 2016-05-29 20:59 - 00115904 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMAntiInject.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00088416 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\zlib.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00488640 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\sqlite.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00100704 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\tinyxml.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00046784 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00070848 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll
2016-05-29 20:59 - 2016-02-28 00:55 - 00036128 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\oDayProtect.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00128192 _____ () c:\program files (x86)\tencent\qqpcmgr\11.5.17490.219\qmrtpcontroller.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00169152 _____ () c:\program files (x86)\tencent\qqpcmgr\11.5.17490.219\qmhipslogpolicy.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00137568 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libexpatw.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 02156896 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\GF.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00092512 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\xGraphic32.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00342368 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\arkGraphic.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00045408 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\jgImage.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00158048 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libpng.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00285024 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libjpegturbo.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00014176 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\jgIOStub.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00194912 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\xImage.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00083136 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\MemDefrag.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00337088 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\OperationFileCloudMgr.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00379232 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\DlForQd.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00251072 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMWlanMacDll.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00088416 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\zlib.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00137568 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\libexpatw.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00100704 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\tinyxml.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 02156896 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\GF.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00092512 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\xGraphic32.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00342368 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\arkGraphic.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00045408 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\jgImage.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00158048 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\libpng.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00285024 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\libjpegturbo.dll
2016-05-29 20:59 - 2016-05-29 20:59 - 00014176 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\jgIOStub.dll
Hosts:
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\QQPCNetFlow.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRealTimeSpeedup.exe
(Tencent) C:\Program Files (x86)\Common Files\Tencent\QQDownload\130\Tencentdl.exe
HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe [362304 2016-05-29] (Tencent)
HKU\S-1-5-21-150406581-1433379135-3215439338-1000\...\MountPoints2: {0b0dff97-d1aa-11e5-968c-485b3997697c} - H:\Autorun.exe
HKU\S-1-5-21-150406581-1433379135-3215439338-1000\...\MountPoints2: {57a2011c-19a8-11e6-8c81-005056c00008} - H:\LG_PC_Programs.exe
HKU\S-1-5-21-150406581-1433379135-3215439338-1000\...\MountPoints2: {ca0088ef-d285-11e5-bd7b-485b3997697c} - F:\LG_PC_Programs.exe
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => Brak pliku
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1
HKU\S-1-5-21-150406581-1433379135-3215439338-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1
BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSWebMon64.dat [2016-05-29] (Tencent)
FF Plugin: @Microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @q-q.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\npQMExtensionsMozilla.dll [2016-05-29] (Tencent Technology (Shenzhen) Company Limited)
CHR HomePage: ChromeDefaultData -> hxxp://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqB3IoC3IsCE..&v=20160527&uid=9EBF4A0EA88DD20EE5D16F1165E8275D&ptid=amz&mode=loadm
CHR StartupUrls: ChromeDefaultData -> "hxxp://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqB3IoC3IsCE..&v=20160527&uid=9EBF4A0EA88DD20EE5D16F1165E8275D&ptid=amz&mode=loadm"
R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe [313936 2016-05-29] (Tencent)
U2 QQRepairc3a; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairc3a [147176 2016-05-29] ()
S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairFixSVC [147176 2016-05-29] ()
R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMUdisk64.sys [184952 2016-05-18] (Tencent)
R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQSysMonX64.sys [154744 2016-05-29] (电脑管家)
R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\softaal64.sys [44664 2016-05-29] (Tencent)
R1 SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\SRepairDrv [179320 2016-05-29] ()
R3 TAOAccelerator; C:\Windows\system32\Drivers\TAOAccelerator64.sys [99480 2016-05-29] (Tencent)
R1 TAOKernelDriver; C:\Windows\system32\Drivers\TAOKernel64.sys [147576 2016-05-29] (Tencent Technology(Shenzhen) Company Limited)
R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [97400 2016-05-29] (电脑管家)
R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TS888x64.sys [38520 2016-05-29] (Tencent)
R1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSDefenseBT64.sys [28984 2016-05-29] (Tencent)
R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TsNetHlpX64.sys [57976 2016-05-29] ()
S3 TSSKX64; C:\Windows\System32\drivers\tsskx64.sys [54904 2016-05-29] (电脑管家)
R4 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSSysKit64.sys [96888 2016-05-29] (电脑管家)
S3 andnetadb; System32\Drivers\lgandnetadb.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 vzandnetadb; System32\Drivers\lgvzandnetadb.sys [X]
S3 vzandnetdiag; system32\DRIVERS\lgvzandnetdiag64.sys [X]
S3 vzandnetmodem; system32\DRIVERS\lgvzandnetmdm64.sys [X]
2016-05-29 21:00 - 2016-05-29 21:00 - 00000000 ____D C:\Program Files\Common Files\Tencent
2016-05-29 21:00 - 2016-05-29 20:59 - 00147576 _____ (Tencent Technology(Shenzhen) Company Limited) C:\Windows\system32\Drivers\TAOKernel64.sys
2016-05-29 21:00 - 2016-05-29 20:59 - 00099480 _____ (Tencent) C:\Windows\system32\Drivers\TAOAccelerator64.sys
2016-05-29 21:00 - 2016-05-29 20:59 - 00054904 _____ (电脑管家) C:\Windows\system32\Drivers\TSSKX64.sys
2016-05-29 20:59 - 2016-05-29 21:39 - 00000000 ____D C:\ProgramData\TXQMPC
2016-05-29 20:59 - 2016-05-29 21:23 - 00000000 ____D C:\ProgramData\Tencent
2016-05-29 20:59 - 2016-05-29 21:05 - 00000000 ____D C:\Users\Gabrylo\AppData\Roaming\Tencent
2016-05-29 20:59 - 2016-05-29 20:59 - 00097400 _____ (电脑管家) C:\Windows\system32\Drivers\TFsFltX64.sys
2016-05-29 20:59 - 2016-05-29 20:59 - 00000000 ____D C:\Users\Gabrylo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-05-29 20:59 - 2016-05-29 20:59 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-05-29 20:57 - 2016-05-29 21:12 - 00000000 ____D C:\Users\Gabrylo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YSPackage
2016-05-29 20:57 - 2016-05-29 20:57 - 00293320 _____ (深圳市迅雷网络技术有限公司) C:\ProgramData\xldl.dll
2016-05-29 20:57 - 2016-05-28 11:50 - 5672448 ____N (Andrei Gourianov) C:\ProgramData\svchost.exe
2016-05-29 20:57 - 2016-05-29 20:57 - 0293320 _____ (深圳市迅雷网络技术有限公司) C:\ProgramData\xldl.dll
C:\ProgramData\svchost.exe
C:\ProgramData\xldl.dll
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść w folderze gdzie znajduje się FRST.exe
Uruchom FRST i kliknij w Fix/Napraw.

Promuję tematy:
02.03.2019 Błąd z aplikacją Epic Game Launcher, nie może się włączyć do końca. Nie działa.

Konto nie istnieje · Answer

Nic nie zmieniło oprócz strony startowej w chrome. Dorzucam nowe logi:

Konto nie istnieje · Answer

Działa, dziękuję. Edytowałem. Nie cytuj w całości postu poprzedzającego. Nie ma takiej potrzeby. RADU23

Acorus 20 · Answer

Pobierz >>>DelFix

Windows 7 - chińskie reklamy i programy po instalacji Adobe Reader z Chomikuj

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6