Dzień dobry od jakiegoś miesiąca mam problem iż po włączeniu komputera włącza mi się opera gx która jest moja główna przeglądarka i wyskakują jakieś reklamy
Czy wolisz polską wersję strony elektroda?
Nie, dziękuję Przekieruj mnie tamAndrzej Ch. napisał:Proszę zamieścić wymagane regulaminem logi z FRST? inaczej Ci nie pomożemy.
Kolobos napisał:Odinstaluj: WebAdvisor firmy McAfee
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
HKU\S-1-5-21-957835340-3546648872-3889026681-1001\...\Run: [karol] => cmd.exe /c start www.exinariuminix.info
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {2F4E085E-73CC-451C-B5AB-EA11D708B794} - System32\Tasks\karol => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v karol /t REG_SZ /d "cmd.exe /c start www.exinariuminix.info"
Task: {C0B3F72C-96E9-4482-BB3C-0097B607FF3C} - System32\Tasks\Opera GX scheduled Autoupdate 1616418376 => C:\Users\karol\AppData\Local\Programs\Opera GX\launcher.exe [3774160 2021-08-25] (Opera Software AS -> Opera Software)
Task: {C55A647C-8122-4E69-9BF8-6AB5CF0FCAF5} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1617179092 => C:\Users\karol\AppData\Local\Programs\Opera GX\launcher.exe [3774160 2021-08-25] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\karol\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [977824 2021-08-24] (McAfee, LLC -> McAfee, LLC)
S3 AALSvc; C:\AlphaAntiLeak\AAL\bin\server\AALSvc.exe [X]
S3 AALProtect; \??\C:\AlphaAntiLeak\AAL\bin\server\AALProtect.sys [X]
U3 aswbdisk; Brak ImagePath
S4 VOICEMOD_Driver; \SystemRoot\system32\drivers\vmdrv.sys [X]
2021-09-07 17:44 - 2021-09-07 17:44 - 000000000 ____D C:\Users\karol\Desktop\FRST-OlderVersion
2021-08-09 13:07 - 2021-08-09 13:07 - 000000000 ____D C:\ProgramData\McAfee
2021-08-09 13:07 - 2021-08-09 13:07 - 000000000 ____D C:\Program Files\McAfee
Po wykonaniu usun katalog C:\FRST i to wszystko.
Kolobos napisał:Odinstaluj: WebAdvisor firmy McAfee
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
HKU\S-1-5-21-957835340-3546648872-3889026681-1001\...\Run: [karol] => cmd.exe /c start www.exinariuminix.info
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {2F4E085E-73CC-451C-B5AB-EA11D708B794} - System32\Tasks\karol => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v karol /t REG_SZ /d "cmd.exe /c start www.exinariuminix.info"
Task: {C0B3F72C-96E9-4482-BB3C-0097B607FF3C} - System32\Tasks\Opera GX scheduled Autoupdate 1616418376 => C:\Users\karol\AppData\Local\Programs\Opera GX\launcher.exe [3774160 2021-08-25] (Opera Software AS -> Opera Software)
Task: {C55A647C-8122-4E69-9BF8-6AB5CF0FCAF5} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1617179092 => C:\Users\karol\AppData\Local\Programs\Opera GX\launcher.exe [3774160 2021-08-25] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\karol\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [977824 2021-08-24] (McAfee, LLC -> McAfee, LLC)
S3 AALSvc; C:\AlphaAntiLeak\AAL\bin\server\AALSvc.exe [X]
S3 AALProtect; \??\C:\AlphaAntiLeak\AAL\bin\server\AALProtect.sys [X]
U3 aswbdisk; Brak ImagePath
S4 VOICEMOD_Driver; \SystemRoot\system32\drivers\vmdrv.sys [X]
2021-09-07 17:44 - 2021-09-07 17:44 - 000000000 ____D C:\Users\karol\Desktop\FRST-OlderVersion
2021-08-09 13:07 - 2021-08-09 13:07 - 000000000 ____D C:\ProgramData\McAfee
2021-08-09 13:07 - 2021-08-09 13:07 - 000000000 ____D C:\Program Files\McAfee
Po wykonaniu usun katalog C:\FRST i to wszystko.