Prośba o sprawdzenie logów pod kątem wirusow/keylogerow.

[crused]

Witam, proszę o sprawdzenie logów czy wszystko jest w porządku, nie znam się za bardzo ale co to jest? to poniżej.

 

 

FRST - http://wklejto.pl/771938

 

Addition - http://wklejto.pl/771939

 

Shortcut - http://wklejto.pl/771940

 

==================== Internet Explorer - Witryny zaufane i z ograniczeniami ===============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Wykryto więcej niż wyliczono: 7941 witryn.

IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2641795252-1688151887-1789240365-1000\...\123simsen.com -> www.123simsen.com

Wykryto więcej niż wyliczono: 7941 witryn.

 

[jessica]

Te "restricted" to zablokowane strony, a więc już nie powinny się otwierać.

 

Dla mnie podejrzane są tylko te obiekty:
 

Cytat

 

2019-07-18 13:11 - 2019-07-18 13:11 - 000000000 ____D C:\KPRM

2019-07-14 21:13 - 2019-07-15 00:38 - 000000000 ____D C:\Users\Seba\Documents\Rifbot

 

Ten drugi to prawdopodobnie szpieg z Tibii.

 

jessi

[crused]

2 godziny temu, jessica napisał:

Te "restricted" to zablokowane strony, a więc już nie powinny się otwierać.

 

Dla mnie podejrzane są tylko te obiekty:
 

Ten drugi to prawdopodobnie szpieg z Tibii.

 

jessi

 

KPRM to jest pozostałości po skanie z ESET Online Skanner

Rifbot tam jest tylko folder z notatnikiem.