Dodaj do ulubionych

proszę o sprawdzenie loga

IP: *.static.masterinter.net 30.12.15, 11:59
wklej.org/id/1890567/
wklej.org/id/1890569/
problem z otwierającymi się nowymi zakładkami z reklamami...
podejrzenie idzie w kierunku starego routera tp-link, który chyba sieje po wszystkim, co łączy się przez wi-fi, gdyż taki sam problem jest na komputerach, komórkach a nawet na smart TV
Obserwuj wątek
    • Gość: Kolobos Re: proszę o sprawdzenie loga IP: *.dynamic.chello.pl 31.12.15, 19:00

      Router ma podmienione dnsy, wykonaj: www.elektroda.pl/rtvforum/topic2874173.html#13841246

      Zainstaluj: support.microsoft.com/en-us/kb/2545227

      Obok frst.exe utworz plik fixlist.txt z zawartoscia:
      Task: {02D8B09B-9377-4BEC-91FB-ACCC90978314} - System32\Tasks\{F1749B75-E31F-4F05-8F57-1A9017A795EC} => pcalua.exe -a D:\start.exe -d D:\
      Task: {CA5B3478-0315-4860-9850-9BC4A55522CC} - System32\Tasks\{2F8E0E96-B3D8-4DE1-9868-7329D01874C2} => pcalua.exe -a D:\CDSetup.exe -d D:\
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {166b4765-26ea-11e5-a290-448a5b46fa15} - E:\Setup.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {2a9d4de3-26c6-11e5-b29a-448a5b46fa15} - H:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {2a9d4e10-26c6-11e5-b29a-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {2a9d4e29-26c6-11e5-b29a-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {43b5f6a5-26e6-11e5-ba90-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {43b5f6b1-26e6-11e5-ba90-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {4b405be3-5ad5-11e4-be81-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {4b405be8-5ad5-11e4-be81-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {8d1040e1-26fa-11e5-af88-448a5b46fa15} - E:\Setup.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {8d104171-26fa-11e5-af88-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {8d1041bc-26fa-11e5-af88-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {8d1041c7-26fa-11e5-af88-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {aebbf911-26f7-11e5-bd65-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {aebbf954-26f7-11e5-bd65-448a5b46fa15} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {b9ce7c13-60c8-11e4-bc9d-54271eb9b388} - E:\AutoRun.exe
      HKU\S-1-5-21-2187324275-3442865787-2653721285-1000\...\MountPoints2: {ca7181af-508e-11e4-9214-806e6f6e6963} - D:\CDSetup.exe
      Tcpip\..\Interfaces\{5D3A34A7-A3C5-4025-A61C-7B649F83613F}: [DhcpNameServer] 80.243.191.66 8.8.8.8
      Tcpip\..\Interfaces\{9D60C145-D83D-48A9-8B84-5AEF7C507BE3}: [NameServer] 89.185.239.252 8.8.8.8
      U3 avopw4qw; C:\Windows\System32\Drivers\avopw4qw.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)
      S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
      S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
      S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
      S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
      S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
      S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
      S3 hwusb_cdcacm; system32\DRIVERS\ew_cdcacm.sys [X]
      S3 PCAMPR4; \??\C:\Windows\system32\PCAMPR4.SYS [X]
      S3 PCANDIS4; \??\C:\Windows\system32\PCANDIS4.SYS [X]
      2015-12-30 11:40 - 2015-11-22 14:37 - 00000000 ___DC C:\AdwCleaner
      EmptyTemp:

      W FRST wybierz Napraw.

      Usun katalog C:\FRST i to wszystko.

Nie masz jeszcze konta? Zarejestruj się


Nakarm Pajacyka