Gość utworzono 21 listopada 2016 utworzono 21 listopada 2016 Witam mam problem. Automatycznie otwiera mi się strona http://altrk2.com/rndr/New_Blog_Vlad_XXL_Power_life_PL/?ap=1554&subid2=U0NCLTE1Mi04ZjU0NmRkZS1hZmU3LTExZTYtOGE1Mi0wY2M0N2E2ZDJmZWYtaXZzMjdvNGMtMW9pNDowOjEyODYwNjowOjUw&esub=-4AnVzAmQKAagEJ7aMagABAAEAAusWAhIGAlABAgYBAQAERLvMVAA&s_trk=CgjLUdyI_w9AthDHhd-eDRiI1svBBSCI1svBBQ** . Sprawdzałem logi FRST i nic nie znalazłem . Może coś przegapiłem. Logi: http://wklej.org/id/2963178/ http://wklej.org/id/2963179/ http://wklej.org/id/2963180/
Twój_Anioł_Stróż komentarz 21 listopada 2016 komentarz 21 listopada 2016 (edytowane) 1) Spróbuj odinstalować te programy: Update for PriceFountain (HKU\S-1-5-21-2217895229-425706620-771095409-1000\...\{345EEB85-FEED-DF82-B154-638D253A7DA0}) (Version: - Update for PriceFountain) <==== ATTENTION Host Service (HKU\S-1-5-21-2217895229-425706620-771095409-1000\...\Host Service) (Version: - ) <==== ATTENTION 2) Te skróty dam do usuwania, więc potem zrobisz nowe skróty w tych samych lokalizacjach Shortcut: C:\Users\baste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <===== Cyrillic Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <===== Cyrillic 3) Otwórz Notatnik i wklej w nim: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk C:\Users\baste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfох.lnk 2016-10-21 15:33 - 2016-11-07 14:18 - 00000000 ___HD C:\Users\baste\AppData\Local\Temp_ 2016-10-21 15:33 - 2016-11-07 14:14 - 00000000 ___HD C:\Windows\Temp_ 2016-10-21 15:32 - 2016-11-04 17:53 - 00000000 ___HD C:\Users\DefaultAppPool\AppData\Local\Temp_ 2016-10-21 15:32 - 2016-11-04 17:53 - 00000000 ___HD C:\Users\baste\AppData\LocalLow\Youtube AdBlock_ 2016-10-21 15:32 - 2016-11-03 19:35 - 00000000 ___HD C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock_ 2016-10-21 15:32 - 2016-11-03 19:35 - 00000000 ___HD C:\Program Files (x86)\Youtube AdBlock_ 2016-10-21 15:32 - 2016-10-22 12:38 - 00000000 ____D C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock 2016-10-21 14:28 - 2016-10-21 14:28 - 01622528 _____ C:\Users\baste\Downloads\ResetBrowser.exe 2016-10-20 21:06 - 2016-10-20 21:07 - 03516080 _____ (Enigma Software Group USA, LLC.) C:\Users\baste\Downloads\SpyHunter-Installer.exe 2016-10-20 19:33 - 2016-11-07 19:18 - 00000000 ____D C:\Users\baste\AppData\Roaming\Ghuqeght 2016-10-20 15:32 - 2016-10-20 19:34 - 00000000 ____D C:\Users\baste\AppData\Local\Pltarystnicult 2016-10-20 15:32 - 2016-10-20 19:34 - 00000000 ____D C:\Program Files (x86)\Phijswajerk 2016-10-20 15:32 - 2016-10-20 15:32 - 00000000 ____D C:\Users\Public\Thunder Network 2016-10-20 15:31 - 2016-11-07 14:05 - 00000000 _____ C:\TOSTACK 2016-10-20 15:30 - 2016-10-20 19:34 - 00000000 ____D C:\Program Files (x86)\afasfd 2016-10-20 15:28 - 2016-10-20 15:28 - 00000000 ____D C:\Users\baste\AppData\Roaming\BrowserModule U0 aswVmm; no ImagePath U3 idsvc; no ImagePath S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X] ShortcutTarget: Curse.lnk -> C:\Users\baste\AppData\Roaming\Curse Client\Bin\Curse.exe (No File) GroupPolicy: Restriction - Chrome <======= ATTENTION GroupPolicy\User: Restriction <======= ATTENTION HKLM\...\Providers\3bdy2h12: C:\Users\baste\AppData\Local\Google\Chrome\User Data_\local64spl.dll HKLM\...\Providers\3xz5635w: C:\Windows\Temp\local64spl.dll HKLM\...\Providers\418s1zx6: C:\Users\DefaultAppPool\AppData\Local\Temp\local64spl.dll HKLM\...\Providers\430npqck: C:\Windows\Temp_\local64spl.dll HKLM\...\Providers\8ttg7aky: C:\Windows\Temp\local64spl.dll HKLM\...\Providers\97dxfgby: C:\Users\baste\AppData\Local\Google\Chrome\User Data\local64spl.dll [142848 2016-10-21] () HKLM\...\Providers\9dglpyuv: C:\Users\baste\AppData\Local\Google\Chrome\User Data\local64spl.dll [142848 2016-10-21] () HKLM\...\Providers\a1cp2fu1: C:\Users\DefaultAppPool\AppData\Local\Temp_\local64spl.dll HKLM\...\Providers\e5nmyn3r: C:\Users\baste\AppData\Local\Temp_\local64spl.dll HKLM\...\Providers\emvcutsf: C:\Program Files (x86)\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\eom38hf9: C:\Program Files (x86)\Youtube AdBlock\local64spl.dll HKLM\...\Providers\fb94ku38: C:\Users\baste\AppData\LocalLow\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\fojrvvua: C:\Program Files (x86)\Youtube AdBlock\local64spl.dll HKLM\...\Providers\hhd7m0cq: C:\Users\baste\AppData\Local\Temp_\local64spl.dll HKLM\...\Providers\j6oj5r54: C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock\local64spl.dll [142848 2016-10-21] () HKLM\...\Providers\jei713n3: C:\Program Files (x86)\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\kef7ynn3: C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock\local64spl.dll [142848 2016-10-21] () HKLM\...\Providers\msdzkorb: C:\Windows\Temp_\local64spl.dll HKLM\...\Providers\o0ed21qc: C:\Users\baste\AppData\LocalLow\Youtube AdBlock\local64spl.dll HKLM\...\Providers\o9onbvd8: C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\pgyhotcb: C:\Users\baste\AppData\Local\Temp\local64spl.dll HKLM\...\Providers\px3ec7uh: C:\Users\DefaultAppPool\AppData\Local\Temp_\local64spl.dll HKLM\...\Providers\rt11gq90: C:\Users\DefaultAppPool\AppData\Local\Temp\local64spl.dll HKLM\...\Providers\ruiciuiw: C:\Users\baste\AppData\Local\Temp\local64spl.dll HKLM\...\Providers\rz46krz1: C:\Users\DefaultAppPool\AppData\LocalLow\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\tm6moucz: C:\Users\baste\AppData\LocalLow\Youtube AdBlock\local64spl.dll HKLM\...\Providers\wsnh6unx: C:\Users\baste\AppData\LocalLow\Youtube AdBlock_\local64spl.dll HKLM\...\Providers\x3qp8x5t: C:\Users\baste\AppData\Local\Google\Chrome\User Data_\local64spl.dll ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File HKU\S-1-5-21-2217895229-425706620-771095409-1000\...\Run: [Host Service] => wscript "C:\Users\baste\AppData\Local\Host Service\launchall.js" <===== ATTENTION HKU\S-1-5-21-2217895229-425706620-771095409-1000\...\Run: [archApplication] => C:\Users\baste\AppData\Roaming\ArchiverApp\archApplication.exe [441856 2016-11-07] (PAYFWUJZI ucytmuc) C:\Users\baste\AppData\Local\Host Service C:\Users\baste\AppData\Roaming\ArchiverApp ShortcutWithArgument: C:\Users\baste\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> "hxxp://chatozov.ru/?utm_source=startlink03&utm_content=9f387b8b760902670039451ab10f1a8c&utm_term=B66BBD9D4E360DB8698477F02723FD99&utm_d=20160501" C:\Users\baste\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk HOSTS: EmptyTemp: >>Menu Notatnika >> Plik >> >>Zapisz jako >> Nazwa pliku: fixlist Zapisz jako typ: Dokumenty tekstowe Kodowanie: Unicode >>Zapisz Plik umieść w C:\Users\baste\Desktop Uruchom FRST i kliknij przycisk Fix (NAPRAW). 4) Uruchom FRST. W polu SEARCH (SZUKAJ) wklej: local64spl.dll kliknij na przycisk "Search Files (Szukaj Plików)". Raport z tego będzie tam, gdzie jest FRST. Uruchom FRST. 5) W polu SEARCH (SZUKAJ) wklej: local64spl.dll kliknij na przycisk "Search Registry" (Szukaj w Rejestrze). Raport z tego będzie tam, gdzie jest FRST. 6) Zrób nowe logi FRST - już bez Shortcut. .
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.