中广告病毒!?

hijackthis.log (10.26 KB)

2014-4-6 06:44 PM, 下载次数: 9

引用:原帖由 SILVESTERABEND 於 2014-4-6 06:57 PM 发表
1. 下载/执行WinSockFix for Win 7修正/重设winsocks > 重启电脑。

2. 下载/执行Junkware Removal Tool扫毒。执行扫毒前请关闭所有浏览器同程式。
(JRT会自动删除附於浏览器的恶意程式/档案/登录档)

2. 下载/ ...

JRT.txt (2.93 KB)

2014-4-6 07:48 PM, 下载次数: 4

AdwCleaner[S3].txt (2.92 KB)

2014-4-6 07:48 PM, 下载次数: 4

combofix.txt (22.02 KB)

2014-4-6 07:48 PM, 下载次数: 5

OTL.Txt (376.02 KB)

2014-4-6 07:48 PM, 下载次数: 4

引用:
:OTL
PRC - [2013/12/21 14:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2008/11/10 04:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
IE - HKU\S-1-5-21-1004032347-3036032706-30594501-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-1004032347-3036032706-30594501-1002\..\SearchScopes\{53599253-F46F-473C-BB71-6C8A3E8B6CC1}: "URL" =
IE - HKU\S-1-5-21-1004032347-3036032706-30594501-1002\..\SearchScopes\{948E0EAC-8864-4B8A-A90D-95471098D331}: "URL" =
IE - HKU\S-1-5-21-1004032347-3036032706-30594501-1002\..\SearchScopes\{A0E68E91-F004-4D03-A9DB-BABBEC98FDF5}: "URL" =
IE - HKU\S-1-5-21-1004032347-3036032706-30594501-1002\..\SearchScopes\{DB85B380-BFC9-436C-8762-2C42DF719191}: "URL" =
CHR - default_search_provider: WebSearch (Enabled)
CHR - Extension: YoutubeAdblocker = C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiikkblbdkipobhghjdgklnkbheocmip\1.0\
CHR - Extension: safEweb = C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdofjjlmbkacakgamifhggejjeogjclo\1.1\
CHR - Extension: safEweeB = C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\piankhfabimlklfjeeabpheomebbkbah\1.1\
O2:64bit: - BHO: (SNT) - {08028009-A857-DB38-BFC7-2D78AC47E3FD} - C:\Program Files (x86)\SNT\MY.x64.dll File not found
O2:64bit: - BHO: (YoutubeAdblocker) - {3D9C7353-5317-CEB7-47D2-14FDC7D32894} - C:\Program Files (x86)\YoutubeAdblocker\MUocRnXi.x64.dll File not found
O2:64bit: - BHO: (safEweeB) - {79F9820D-ADCD-DD06-8082-475A9B91C302} - C:\Program Files (x86)\safEweeB\oN.x64.dll File not found
O2:64bit: - BHO: (safEwweb) - {C32B665F-9C83-21AD-DD86-C29085BB8CAA} - C:\Program Files (x86)\safEwweb\VIP.x64.dll File not found
O2:64bit: - BHO: (SNT) - {CD837042-5367-3432-3F49-2489EEBC785A} - C:\Program Files (x86)\SNT\ht6khrmuJ.x64.dll File not found
O2 - BHO: (03FE1713-5991-A57E-BBE2-7F712DB90649 Class) - {03FE1713-5991-A57E-BBE2-7F712DB90649} - C:\Program Files (x86)\QvodPlayer\AddIn\{03FE1713-5991-A57E-BBE2-7F712DB90649}\QvodAddr.dll File not found
O4 - HKLM..\Run: [] File not found
O4 - Startup: C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PPS.lnk = File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9AF31CD0-1D78-46DB-8AF6-C5720C3AD8C9}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AAB7BEA6-1A4E-4EC1-8AF9-3F7F42F263F9}: DhcpNameServer = 192.168.1.1


:Files
C:\ProgramData\KuaiWan
C:\Program Files (x86)\Kuaiwan
C:\ProgramData\safEweeB
C:\Program Files (x86)\safEweeB
C:\ProgramData\Bsoft
C:\ProgramData\safEwweb
C:\Program Files (x86)\safEwweb
C:\Users\Kelly\Foxy.1.9.10.TC.Setup.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job


ipconfig /flushdns /c

:Commands
[EMPTYJAVA]
[PURITY]
[EMPTYTEMP]
[reboot]

引用:原帖由 SILVESTERABEND 於 2014-4-6 09:26 PM 发表
1. 下载/执行WinSockFix for Win 7修正/重设winsocks > 重启电脑。

2. 去程式集移除Firefox (不要保留旧设定) > 重启电脑 > 重新安装Firefox。


3.双按OTL.exe > 将下列档案copy & paste 到Custom Scans/Fix ...

引用:原帖由 kslxdde 於 2014-4-8 09:03 PM 发表

好似正常反拉