- This topic has 7 ответов, 2 участника, and was last updated 8 years, 1 month назад by
.
-
Сообщения
-
В Хроме при запуске всплывает вкладка fastlauncher.xyz. Пробовал AdwCleaner и Malwarebytes Anti-malware, но при следующем включении компьютера fastlauncher.xyz опять появляется.
Здравствуйте, добро пожаловать на Spyware-ru форум.
Запустите программу Блокнот и вставьте в открытое окно следующий текст
CreateRestorePoint: BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No FileToolbar: HKU\S-1-5-21-3569368135-1535760291-2820111162-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files\McAfee\SiteAdvisor\McChPlg.crxCHR HKLM\...\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] - hxxp://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3569368135-1535760291-2820111162-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx S2 mfemms; "C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe" [X] S3 mfesapsn; \??\C:\Program Files\McAfee\SiteAdvisor\mfesapsn.sys [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015.SP2b\WNt600x86\Sandra.sys [X] Task: {13760AB7-5D28-4ECC-9928-12D70C7F647F} - System32\Tasks\{0C4B6DD7-332A-463A-B6C7-0703C5855163} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe Task: {49D504E6-E7B8-40F7-8B82-4BCA44FE15D5} - System32\Tasks\{DD21AB1C-51B3-4D45-900C-43706E567858} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe Task: {82EB0838-438F-4C37-9640-2305DD9A816C} - System32\Tasks\{7D21A799-10DA-4CEC-BB9C-4F2767BBF064} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe Task: {843785A9-4E12-4647-B0E2-18ACFA12AAD5} - System32\Tasks\{4EEA20D6-E80D-43CC-918D-FE4DB58040AB} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe Task: {A6D3C9B7-630C-4E08-9F47-90E3308EBAE3} - System32\Tasks\{4818F909-5798-40C6-84EE-3A9696DBE49A} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe EmptyTemp: Reboot: Сохраните полученный файл в папку где находится программа FRST/FRST64 под именем fixlist
Запустите программу FRST и нажмите кнопку Fix.
Когда программа закончит работу появиться сообщение «Fix completed». Нажмите OK.
Откроется блокнот с содержимым файла fixlog.txt. Вставьте содержимое этого файла в ваш ответ.После этого выполните новую проверку программой FRST (перед нажатием клавиши Scan поставьте галочку в пункте Addition.txt) и оба её лога прикрепите к вашему ответу.
Fix result of Farbar Recovery Scan Tool (x86) Version: 25-09-2016
Ran by Олег (28-09-2016 12:33:59) Run:1
Running from C:\Users\Олег\Desktop
Loaded Profiles: Олег (Available Profiles: Олег)
Boot Mode: Normal==============================================
fixlist content:
*****************
CreateRestorePoint:
BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No FileToolbar: HKU\S-1-5-21-3569368135-1535760291-2820111162-1000 -> No Name — {91397D20-1446-11D4-8AF4-0040CA1127B6} — No File
Handler: dssrequest — {5513F07E-936B-4E52-9B00-067394E91CC5} — No File
Handler: sacore — {5513F07E-936B-4E52-9B00-067394E91CC5} — No File
Filter: application/x-mfe-ipt — {3EF5086B-5478-4598-A054-786C45D75692} — No File
CHR HKLM\…\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] — C:\Program Files\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM\…\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] — hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3569368135-1535760291-2820111162-1000\SOFTWARE\Google\Chrome\Extensions\…\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] — hxxp://clients2.google.com/service/update2/crx
S2 mfemms; «C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe» [X]
S3 mfesapsn; \??\C:\Program Files\McAfee\SiteAdvisor\mfesapsn.sys [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015.SP2b\WNt600x86\Sandra.sys [X]
Task: {13760AB7-5D28-4ECC-9928-12D70C7F647F} — System32\Tasks\{0C4B6DD7-332A-463A-B6C7-0703C5855163} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe
Task: {49D504E6-E7B8-40F7-8B82-4BCA44FE15D5} — System32\Tasks\{DD21AB1C-51B3-4D45-900C-43706E567858} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe
Task: {82EB0838-438F-4C37-9640-2305DD9A816C} — System32\Tasks\{7D21A799-10DA-4CEC-BB9C-4F2767BBF064} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe
Task: {843785A9-4E12-4647-B0E2-18ACFA12AAD5} — System32\Tasks\{4EEA20D6-E80D-43CC-918D-FE4DB58040AB} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe
Task: {A6D3C9B7-630C-4E08-9F47-90E3308EBAE3} — System32\Tasks\{4818F909-5798-40C6-84EE-3A9696DBE49A} => C:\Program Files\The King Of Fighters XIII\kofxiii.exe
EmptyTemp:
Reboot:
*****************Restore point was successfully created.
«HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5}» => key removed successfully.
HKCR\CLSID\{D5FEC983-01DB-414A-9456-AF95AC9ED7B5} => key not found.
«HKCR\PROTOCOLS\Handler\dssrequest» => key removed successfully.
HKCR\CLSID\{5513F07E-936B-4E52-9B00-067394E91CC5} => key not found.
«HKCR\PROTOCOLS\Handler\sacore» => key removed successfully.
HKCR\CLSID\{5513F07E-936B-4E52-9B00-067394E91CC5} => key not found.
«HKCR\PROTOCOLS\Filter\application/x-mfe-ipt» => key removed successfully.
HKCR\CLSID\{3EF5086B-5478-4598-A054-786C45D75692} => key not found.
«HKLM\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho» => key removed successfully.
«HKLM\SOFTWARE\Google\Chrome\Extensions\pchfckkccldkbclgdepkaonamkignanh» => key removed successfully.
«HKU\S-1-5-21-3569368135-1535760291-2820111162-1000\SOFTWARE\Google\Chrome\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo» => key removed successfully.
mfemms => service removed successfully.
mfesapsn => service removed successfully.
SANDRA => service removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{13760AB7-5D28-4ECC-9928-12D70C7F647F}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13760AB7-5D28-4ECC-9928-12D70C7F647F}» => key removed successfully.
C:\Windows\System32\Tasks\{0C4B6DD7-332A-463A-B6C7-0703C5855163} => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0C4B6DD7-332A-463A-B6C7-0703C5855163}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{49D504E6-E7B8-40F7-8B82-4BCA44FE15D5}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49D504E6-E7B8-40F7-8B82-4BCA44FE15D5}» => key removed successfully.
C:\Windows\System32\Tasks\{DD21AB1C-51B3-4D45-900C-43706E567858} => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DD21AB1C-51B3-4D45-900C-43706E567858}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82EB0838-438F-4C37-9640-2305DD9A816C}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82EB0838-438F-4C37-9640-2305DD9A816C}» => key removed successfully.
C:\Windows\System32\Tasks\{7D21A799-10DA-4CEC-BB9C-4F2767BBF064} => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7D21A799-10DA-4CEC-BB9C-4F2767BBF064}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{843785A9-4E12-4647-B0E2-18ACFA12AAD5}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{843785A9-4E12-4647-B0E2-18ACFA12AAD5}» => key removed successfully.
C:\Windows\System32\Tasks\{4EEA20D6-E80D-43CC-918D-FE4DB58040AB} => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4EEA20D6-E80D-43CC-918D-FE4DB58040AB}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A6D3C9B7-630C-4E08-9F47-90E3308EBAE3}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A6D3C9B7-630C-4E08-9F47-90E3308EBAE3}» => key removed successfully.
C:\Windows\System32\Tasks\{4818F909-5798-40C6-84EE-3A9696DBE49A} => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4818F909-5798-40C6-84EE-3A9696DBE49A}» => key removed successfully.=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 93516649 B
Java, Flash, Steam htmlcache => 53973 B
Windows/system/drivers => 265786442 B
Edge => 0 B
Chrome => 171436195 B
Firefox => 30607 B
Opera => 0 BTemp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66911 B
LocalService => 0 B
NetworkService => 123686 B
Олег => 4292313611 BRecycleBin => 16052 B
EmptyTemp: => 4.5 GB temporary data Removed.================================
The system needed a reboot.
==== End of Fixlog 12:39:02 ====
Вероятно fastlauncher.xyz зловред перенастроил ваш профиль. Попробуйте следующее:
1. сохраните все ваши закладки (сделайте экспорт)
2. откройте каталог C:\Users\Олег\AppData\Local\Google\Chrome\User Data
3. в нем найдите Default и переименуйте в Default123
4. запустите Хром и проверьте в работе
- Для ответа в этой теме необходимо авторизоваться.
