REKLAMA

Fixlog.txt

Zainfekowany Pendrive - zamiast folderów - skróty.

Zrobiłem wszytkie skrypty tak jak pisałeś. Tu log z FRST:


Pobierz plik - link do postu

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-02-2014 01
Ran by Kamil at 2014-02-22 15:54:37 Run:1
Running from C:\Users\Kamil\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {4B1F10FC-E661-497B-9CA5-CC358BB31628} - \bench-sys No Task File
Task: {A4A2097A-608B-44DC-8FA0-1F513D687A0A} - System32\Tasks\bench-Updater removing
HKLM\...\Run: [home] - wscript.exe //B " C:\Users\Kamil\AppData\Local\Temp\home.vbe " & lt; ===== ATTENTION
HKU\S-1-5-21-2773732609-2441911179-595238108-1001\...\Run: [home] - wscript.exe //B " C:\Users\Kamil\AppData\Local\Temp\home.vbe " & lt; ===== ATTENTION
Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe ()
Startup: C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe ()
GroupPolicy: Group Policy on Chrome detected & lt; ======= ATTENTION
CHR HomePage: hxxp://searchfunmoods.com/?f=1 & a=iro...2XzutBtFtBtFtCtFyEtDyB & cr=1067762159
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
S2 Update FindRight; " C:\Program Files (x86)\FindRight\updateFindRight.exe " [X]
S2 Util FindRight; " C:\Program Files (x86)\FindRight\bin\utilFindRight.exe " [X]
2014-02-22 14:25 - 2014-02-22 14:31 - 00000000 ____D () C:\AdwCleaner
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B1F10FC-E661-497B-9CA5-CC358BB31628} = & gt; Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B1F10FC-E661-497B-9CA5-CC358BB31628} = & gt; Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bench-sys = & gt; Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A4A2097A-608B-44DC-8FA0-1F513D687A0A} = & gt; Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4A2097A-608B-44DC-8FA0-1F513D687A0A} = & gt; Key deleted successfully.
C:\Windows\System32\Tasks\bench-Updater removing = & gt; Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bench-Updater removing = & gt; Key deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\home = & gt; Value deleted successfully.
HKU\S-1-5-21-2773732609-2441911179-595238108-1001\Software\Microsoft\Windows\CurrentVersion\Run\\home = & gt; Value deleted successfully.
C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe = & gt; Moved successfully.
C:\Users\Przemek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\home.vbe not found.
C:\Windows\system32\GroupPolicy\Machine = & gt; Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini = & gt; Moved successfully.
CHR HomePage: hxxp://searchfunmoods.com/?f=1 & a=iro...2XzutBtFtBtFtCtFyEtDyB & cr=1067762159 == & gt; The Chrome " Settings " can be used to fix the entry.
HKLM\SOFTWARE\Policies\Google = & gt; Key deleted successfully.
Update FindRight = & gt; Service not found.
Util FindRight = & gt; Service deleted successfully.
" C:\AdwCleaner " = & gt; File/Directory not found.


The system needs a manual reboot.

==== End of Fixlog ====