求救..弹广告网站 (附上hijackthis)

hijackthis.log (8.32 KB)

2014-4-1 04:28 AM, 下载次数: 8

kmpservice.png (6.63 KB)

2014-4-1 04:28 AM

引用:原帖由 阿俊Chun 於 2014-4-1 04:28 AM 发表
近排唔知咩事..有时上上下网会弹D广告网出黎..有时会弹d 黄色网...
不过装左Malwarebytes Anti-Malware之后佢都有帮我系咁档左D 广告网出黎..
但系唔想呢个情况继续系咁

令到我打机真系慢左好多...
情况类似呢 ...

引用:原帖由 LAHarry 於 2014-4-1 11:47 AM 发表



移除高危程式KMPlayer。

参考: http://computer.uwants.com/viewthread.php?tid=16398736&extra=page%3D1

引用:原帖由 LAHarry 於 2014-4-1 03:30 PM 发表
95.211.185.122 网站侦测报告: 正常
https://www.virustotal.com/en/url/8a59074623bd9e357b4cde40477d2538dbfe6491fb8967c3826c6a06b9589c12/analysis/

建议师兄都系先等版主帮你睇个Hijackthis log。

引用:原帖由 LAHarry 於 2014-4-1 11:47 AM 发表



移除高危程式KMPlayer。

参考: http://computer.uwants.com/viewthread.php?tid=16398736&extra=page%3D1

引用:
O4 - HKLM\..\Run: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe

O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Unknown owner - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (file missing)

引用:
:files
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe

引用:原帖由 SILVESTERABEND 於 2014-4-1 06:28 PM 发表
开机按F8,入安全模式做Fix checked & OTM 删除。
1. 执行Hijackthis > Do a system scan only > 勾选下列项目 > 按Fix Checked (fix checked时关闭所有browsers/程式) > 按"是"。

2. 下载/执行 OTM做删除。
cop ...

JRT.txt (630 Bytes)

2014-4-1 08:13 PM, 下载次数: 4

COMFIX.txt (24.04 KB)

2014-4-1 08:13 PM, 下载次数: 4

OTL.Txt (90.78 KB)

2014-4-1 08:13 PM, 下载次数: 3

引用:
:OTL
PRC - [2013/11/29 04:19:30 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013/11/21 19:27:44 | 000,049,456 | ---- | M] () -- C:\Program Files (x86)\Garena Plus\ggdllhost.exe
FF:64bit: - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule_x64.dll File not found
FF - HKCU\Software\MozillaPlugins\@qvod.com/QvodInsert: C:\Program Files (x86)\QvodPlayer\npQvodInsert.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9284e50-81fc-11da-a72b-0800200c9a66}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
CHR - plugin: Error reading preferences file
CHR - Extension: YoutubeAdblocker = C:\Users\CHUN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomelaegngpmfmelbgdpipbmfifndoio\1.0\
O2:64bit: - BHO: (BitSaveur) - {5E555D9D-EFA5-F0CC-FAE5-64779B228A86} - C:\ProgramData\BitSaveur\56.x64.dll File not found
O2:64bit: - BHO: (weebSAve) - {7A4B90FE-63C0-D6AC-6D2B-16C95BEADF6A} - C:\Program Files (x86)\weebSAve\0T.x64.dll File not found
O2:64bit: - BHO: (YoutubeAdblocker) - {F8D440F7-0049-EFDE-4A22-D55369D375BC} - C:\Program Files (x86)\YoutubeAdblocker\gzPCAS.x64.dll File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O13 - gopher Prefix: missing


:Files
C:\ProgramData\QvodPlayer
C:\ProgramData\BitSaveur
C:\ProgramData\HostIt
C:\ProgramData\weebSAve
C:\Program Files (x86)\weebSAve
C:\ProgramData\49252cc400a0e033


ipconfig /flushdns /c

:Commands
[EMPTYJAVA]
[PURITY]
[EMPTYTEMP]
[reboot]

引用:原帖由 SILVESTERABEND 於 2014-4-1 09:36 PM 发表
双按OTL.exe > 将下列档案copy & paste 到Custom Scans/Fixes框架内 > 按左上角[Run Fix];执行fix前要关闭浏览器。
成功fixed (删除)会有通知(Fix complete! Click OK to open the fix log.) >按OK > 重启电脑。

...

OTL.Txt (10.02 KB)

2014-4-1 09:50 PM, 下载次数: 4

引用:原帖由 SILVESTERABEND 於 2014-4-1 10:09 PM 发表
玩game/运作重有冇慢?