PUP? Chrome trochę wariuje...

[Bakshish]

Witam serdecznie!
Problem dotyczy dziwnego zachowania google chrum, przekierowuje na jakiś niechciane strony itp. Poniżej potrzebne skany + log z adw cleanera i malwarebytes anti-malware. Z góry dziękuję za pomoc!

Addition.txt

AdwCleanerS1.txt

Extras.Txt

FRST.txt

GMER.txt

logi m bam.txt

OTL.Txt

Shortcut.txt

[jessica]

Otwórz Notatnik i wklej w nim:

 

C:\Users\euro\AppData\Roaming\wyUpdate AU
HKLM-x32\...\Run: [] => [X]
Task: C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\windows\TEMP\{6921D528-9D3A-4294-86B2-FC7897EE1679}.exe
Task: C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\windows\TEMP\{E2CEA9D0-DB0B-4BE3-98D2-F2979264DD2C}.exe
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Task: {C8851F6E-979A-4F7D-A53D-0A9CFFA0FB31} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\windows\TEMP\{E2CEA9D0-DB0B-4BE3-98D2-F2979264DD2C}.exe
Task: {16B70C08-991E-42F4-ACB9-046F8768514E} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\windows\TEMP\{6921D528-9D3A-4294-86B2-FC7897EE1679}.exe
HKU\S-1-5-21-2100001416-2170443706-2230923172-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-2100001416-2170443706-2230923172-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
C:\Program Files (x86)\AVG Secure Search
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a13277-374&apn_uid=1043981578034602&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a13277-374&apn_uid=1043981578034602&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
earchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a13277-374&apn_uid=1043981578034602&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {E24D0F05-5CA4-4296-9718-8DDE31B631CC} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKCU - {E300269F-D3AF-455A-81D3-170D890ADB1C} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=82F1CA3C-CBD5-4AE8-8698-5BA5D1244448&apn_sauid=E746018A-23BE-4EFF-B5F8-5EE1028EC239
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll No File
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys
C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
C:\Program Files (x86)\Greener Web
Reboot:

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. Powstanie plik fixlog.txt. Daj ten log.

 

Czy problem dalej aktualny?

 

jessi

[Bakshish]

Log w załączniku. Problem ustąpił, Malwarebytes nic nie znajduje. Dziękuję serdecznie jessi!
 

Fixlog.txt

[jessica]

Otwórz Notatnik i wklej w nim:

 

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST

 

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).

jessi