Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Chromesearch.win - jak go usunąć?

dortka 22 Gru 2017 18:05 273 2
  • Pomocny post
    #2 22 Gru 2017 18:39
    Kolobos
    Spec od komputerów

    Odinstaluj i na przyszłość nie instaluj takich programów:
    Reimage Repair
    SpyHunter

    Nie mówiąc już o ściąganiu pirackich programów, które są zainfekowane...

    Obok frst.exe utwórz plik Fixlist.txt z zawartością:
    Task: {1137D665-DE90-41C8-AC1C-EF01EEABCB1F} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe [2017-12-22] (Enigma Software Group USA, LLC.)
    Task: {EBB03191-4301-4AA4-AE6B-D32060A6184F} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`29hfm [0]
    AlternateDataStreams: C:\Users\dorot\Desktop\IMG_20140221_114613.jpg:com.dropbox.attributes [168]
    (Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
    (reimage) C:\Program Files\Reimage\Reimage Repair\Reimage.exe
    HKU\S-1-5-21-1905331195-1508123982-445594042-1001\...\Policies\Explorer: []
    HKU\S-1-5-18\...\Run: [] => [X]
    GroupPolicy: Ograniczenia - Chrome <==== UWAGA
    HKU\S-1-5-21-1905331195-1508123982-445594042-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell15.msn.com/?pc=DCTE
    HKU\S-1-5-21-1905331195-1508123982-445594042-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell15.msn.com/?pc=DCTE
    SearchScopes: HKU\S-1-5-21-1905331195-1508123982-445594042-1001 -> DefaultScope {206AA725-CBDA-427E-A770-0E785646DCB6} URL =
    CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
    R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [769920 2013-01-14] (Enigma Software Group USA, LLC.)
    S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
    S3 WacHidRouterPro; \SystemRoot\System32\drivers\wachidrouter.sys [X]
    S3 wacomrouterfilter; \SystemRoot\System32\drivers\wacomrouterfilter.sys [X]
    2017-12-22 17:39 - 2017-12-22 17:40 - 000000140 _____ C:\WINDOWS\Reimage.ini
    2017-12-22 17:39 - 2017-12-22 17:40 - 000000000 ____D C:\rei
    2017-12-22 17:39 - 2017-12-22 17:39 - 000001888 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
    2017-12-22 17:39 - 2017-12-22 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
    2017-12-22 17:39 - 2017-12-22 17:39 - 000000000 ____D C:\Program Files\Reimage
    2017-12-22 10:22 - 2017-12-22 10:34 - 000000000 ____D C:\Users\dorot\Desktop\SpyHunter 4.24.3.4750 MultiPL Portable
    2017-12-22 10:11 - 2017-12-22 10:11 - 000003438 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
    2017-12-22 10:11 - 2017-12-22 10:11 - 000002359 _____ C:\Users\dorot\Desktop\SpyHunter.lnk
    2017-12-22 10:11 - 2017-12-22 10:11 - 000000000 ____D C:\Users\dorot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
    2017-12-22 10:11 - 2017-12-22 10:11 - 000000000 ____D C:\sh4ldr
    2017-12-22 10:11 - 2017-12-22 10:11 - 000000000 ____D C:\Program Files (x86)\Enigma Software Group
    2017-12-22 10:09 - 2017-12-22 10:11 - 000000000 ____D C:\WINDOWS\46B04D534E344388B6EE80FAB66AEF9B.TMP
    2017-12-22 09:45 - 2017-12-22 10:09 - 000000000 ____D C:\Users\dorot\Desktop\SpyHunter 4.12.13.4202 + Patch
    2017-12-20 15:17 - 2017-12-20 15:17 - 000000000 _____ C:\autoexec.bat
    2017-12-20 15:15 - 2017-12-20 15:15 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\dorot\Desktop\SpyHunter-Installer.exe
    2017-12-08 16:01 - 2017-12-08 16:29 - 173185294 _____ C:\Users\dorot\Downloads\SketchUP Pro 2017 17.0.18899 + crack.rar

    W FRST wybierz Napraw.

    Usuń katalog C:\FRST po wykonaniu i to wszystko.

    0