Den officiella Adware(och övrig oönskad reklam)-tråden[/Mod]

2015-02-14, 21:13 #**121**

Medlem

Reg: Mar 2012

Inlägg: 20

Här är loggen:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2015-02-14
Scan Time: 20:43:06
Logfile: m.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.14.05
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Pelle

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 331187
Time Elapsed: 8 min, 30 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, 1940, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818]

Modules: 0
(No malicious items detected)

Registry Keys: 15
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{c723a437-2eaf-466d-a95b-3fa0966bf88c}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{e806ac01-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BA6EB888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BA6EB 888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{e806ac0 1-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SE TTINGS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\ST ATS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\PhraseFinder_1.10.0.8, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfnfd_1_10_ 0_8, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4 d5a43-c64a-45ab-bdf4-804fe18ceafd}, Quarantined, [a4b9b26c6327a78fdcc44ec3db2a46ba],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2 797aa-b7ec-e311-8ed9-005056c00008}, Quarantined, [9ac38c92a1e9fa3c8d12020f3acb21df],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\PhraseFinder_1.10.0.8, Quarantined, [e87505191b6f4de999cd59361fe4a060],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{372ab9f0}, Quarantined, [342938e63f4b310559ed555f57ac24dc],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfsvc_1.10. 0.8, Quarantined, [95c8e33bacded660481b7e1135cee818],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Files: 20
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1 P1Q1L1T0D1P1E2Z\UTorrent Packages\uninstaller.exe, Quarantined, [0558a876286295a1475a9e881be7cd33],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Uninstall.exe, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10544484.Uninsta ll\uninstaller.exe, Quarantined, [83da55c91e6c0630722f3de952b00cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10829250.Uninsta ll\uninstaller.exe, Quarantined, [c697a17ded9d71c59908f72f50b2d12f],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, Quarantined, [be9faa74b7d348eec55fb5ffdf22e51b],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, Quarantined, [76e79886890161d55acaac083ec36d93],
PUP.Optional.PhraseFinder.A, C:\Windows\System32\drivers\pfnfd_1_10_0_8.sys, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, Quarantined, [09541e00e5a59f97515271a0e81d7d83],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Delete-on-Reboot, [afaee5390783ae885a3141d15baaac54],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Delete-on-Reboot, [4d106ab4cfbb9a9c99f2b75b0ff60000],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\terms-of-service.rtf, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\buildcrx-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Info-ZIP-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\JSON-simple-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\nsJSON-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Nustache-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\TaskScheduler-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\UAC-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Physical Sectors: 0
(No malicious items detected)

(end)

Citera

2015-02-14, 21:13 #**122**

Medlem

Reg: Oct 2013

Inlägg: 10 320

Citat:

Ursprungligen postat av mojjes1122

Ja det gjorde det. Skrev inlägget exakt samtidigt som svaret kom, haha.

Ok .

Hur går det ?

Citera

2015-02-14, 21:16 #**123**

Avstängd

Reg: Nov 2014

Inlägg: 132

Citat:

Ursprungligen postat av mojjes1122

Här är loggen:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2015-02-14
Scan Time: 20:43:06
Logfile: m.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.14.05
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Pelle

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 331187
Time Elapsed: 8 min, 30 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, 1940, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818]

Modules: 0
(No malicious items detected)

Registry Keys: 15
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{c723a437-2eaf-466d-a95b-3fa0966bf88c}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{e806ac01-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BA6EB888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BA6EB 888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{e806ac0 1-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SE TTINGS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\ST ATS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\PhraseFinder_1.10.0.8, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfnfd_1_10_ 0_8, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4 d5a43-c64a-45ab-bdf4-804fe18ceafd}, Quarantined, [a4b9b26c6327a78fdcc44ec3db2a46ba],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2 797aa-b7ec-e311-8ed9-005056c00008}, Quarantined, [9ac38c92a1e9fa3c8d12020f3acb21df],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\PhraseFinder_1.10.0.8, Quarantined, [e87505191b6f4de999cd59361fe4a060],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{372ab9f0}, Quarantined, [342938e63f4b310559ed555f57ac24dc],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfsvc_1.10. 0.8, Quarantined, [95c8e33bacded660481b7e1135cee818],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Files: 20
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1 P1Q1L1T0D1P1E2Z\UTorrent Packages\uninstaller.exe, Quarantined, [0558a876286295a1475a9e881be7cd33],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Uninstall.exe, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10544484.Uninsta ll\uninstaller.exe, Quarantined, [83da55c91e6c0630722f3de952b00cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10829250.Uninsta ll\uninstaller.exe, Quarantined, [c697a17ded9d71c59908f72f50b2d12f],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, Quarantined, [be9faa74b7d348eec55fb5ffdf22e51b],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, Quarantined, [76e79886890161d55acaac083ec36d93],
PUP.Optional.PhraseFinder.A, C:\Windows\System32\drivers\pfnfd_1_10_0_8.sys, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, Quarantined, [09541e00e5a59f97515271a0e81d7d83],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Delete-on-Reboot, [afaee5390783ae885a3141d15baaac54],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Delete-on-Reboot, [4d106ab4cfbb9a9c99f2b75b0ff60000],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\terms-of-service.rtf, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\buildcrx-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Info-ZIP-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\JSON-simple-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\nsJSON-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Nustache-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\TaskScheduler-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\UAC-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Physical Sectors: 0
(No malicious items detected)

(end)

Det där ser bra ut. Hur gick det?

Citera

2015-02-14, 21:17 #**124**

Medlem

Reg: Mar 2012

Inlägg: 20

Har gjort klart steg 3 samt startat om datorn. Nu är det bara Hitman kvar, men skulle jag göra den också eller skulle jag strunta i den? Det var ju lite delade meningar om det

Citera

2015-02-14, 21:18 #**125**

Avstängd

Reg: Nov 2014

Inlägg: 132

Citat:

Ursprungligen postat av mojjes1122

Har gjort klart steg 3 samt startat om datorn. Nu är det bara Hitman kvar, men skulle jag göra den också eller skulle jag strunta i den? Det var ju lite delade meningar om det

Skippa den. Den kommer ändå inte göra nån skillnad så.. Hur gick det?

Citera

2015-02-14, 21:20 #**126**

Medlem

Reg: Mar 2012

Inlägg: 20

ÅÅÅHHH nu kommer det ingen mer reklam!!!

Tack så JÄTTE JÄTTE mycket för hjälpen allihopa!

MEN, på avinstallera program finns fortfarande det där skumma programet "utorrent packages" kvar.

Citera

2015-02-14, 21:21 #**127**

Medlem

Reg: Oct 2013

Inlägg: 10 320

Citat:

Ursprungligen postat av mojjes1122

Här är loggen:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2015-02-14
Scan Time: 20:43:06
Logfile: m.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.14.05
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Pelle

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 331187
Time Elapsed: 8 min, 30 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, 1940, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818]

Modules: 0
(No malicious items detected)

Registry Keys: 15
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{c723a437-2eaf-466d-a95b-3fa0966bf88c}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{e806ac01-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BA6EB888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BA6EB 888-8424-4C93-8E71-6050C714CFBE}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{e806ac0 1-e7a5-4949-af7c-7e6e5775035b}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SE TTINGS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.StrongSignal.A, HKU\S-1-5-21-2649077999-574888270-1147084252-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\ST ATS\{C723A437-2EAF-466D-A95B-3FA0966BF88C}, Quarantined, [ff5e5cc2167400362ca9a75a55aed927],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\PhraseFinder_1.10.0.8, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfnfd_1_10_ 0_8, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4 d5a43-c64a-45ab-bdf4-804fe18ceafd}, Quarantined, [a4b9b26c6327a78fdcc44ec3db2a46ba],
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2 797aa-b7ec-e311-8ed9-005056c00008}, Quarantined, [9ac38c92a1e9fa3c8d12020f3acb21df],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\PhraseFinder_1.10.0.8, Quarantined, [e87505191b6f4de999cd59361fe4a060],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURREN TVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{372ab9f0}, Quarantined, [342938e63f4b310559ed555f57ac24dc],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfsvc_1.10. 0.8, Quarantined, [95c8e33bacded660481b7e1135cee818],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service, Delete-on-Reboot, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Files: 20
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1 P1Q1L1T0D1P1E2Z\UTorrent Packages\uninstaller.exe, Quarantined, [0558a876286295a1475a9e881be7cd33],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Uninstall.exe, Quarantined, [3f1e819da4e60630824cc05c5ca60cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10544484.Uninsta ll\uninstaller.exe, Quarantined, [83da55c91e6c0630722f3de952b00cf4],
PUP.Optional.InstallCore, C:\Users\Pelle\AppData\Local\Temp\10829250.Uninsta ll\uninstaller.exe, Quarantined, [c697a17ded9d71c59908f72f50b2d12f],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, Quarantined, [be9faa74b7d348eec55fb5ffdf22e51b],
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, Quarantined, [76e79886890161d55acaac083ec36d93],
PUP.Optional.PhraseFinder.A, C:\Windows\System32\drivers\pfnfd_1_10_0_8.sys, Quarantined, [9cc121fda7e353e36afbf49b7b886898],
PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, Quarantined, [09541e00e5a59f97515271a0e81d7d83],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Delete-on-Reboot, [afaee5390783ae885a3141d15baaac54],
PUP.Optional.ReMarkable.A, C:\Users\Pelle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Delete-on-Reboot, [4d106ab4cfbb9a9c99f2b75b0ff60000],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe, Delete-on-Reboot, [95c8e33bacded660481b7e1135cee818],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\terms-of-service.rtf, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\buildcrx-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Info-ZIP-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\JSON-simple-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\nsJSON-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\Nustache-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\TaskScheduler-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.PhraseFinder.A, C:\Program Files (x86)\PhraseFinder_1.10.0.8\3rd Party Licenses\UAC-license.txt, Quarantined, [c09dbf5f1278fb3bcbf68a015ea59d63],
PUP.Optional.StrongSignal.A, C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp, Quarantined, [bda0d6483f4b80b60e59ccc043c08a76],

Physical Sectors: 0
(No malicious items detected)

(end)

Följ bara instruktionerna ifrån MBAM , det borde ha sagt att den tar bort genom omstart = delete on reboot .

Citera

2015-02-14, 21:22 #**128**

Medlem

Reg: Mar 2012

Inlägg: 20

Citat:

Ursprungligen postat av 1FF

Följ bara instruktionerna ifrån MBAM , det borde ha sagt att den tar bort genom omstart = delete on reboot .

Jag deletade dom själv från karantänen, sen startade jag om datorn

Citera

2015-02-14, 21:22 #**129**

Avstängd

Reg: Nov 2014

Inlägg: 132

Citat:

Ursprungligen postat av mojjes1122

ÅÅÅHHH nu kommer det ingen mer reklam!!!

Tack så JÄTTE JÄTTE mycket för hjälpen allihopa!

MEN, på avinstallera program finns fortfarande det där skumma programet "utorrent packages" kvar.

Använd Revo Uinstaller för att kunna ta bort det.

Citera

2015-02-14, 21:24 #**130**

Medlem

Reg: Oct 2013

Inlägg: 10 320

Citat:

Ursprungligen postat av mojjes1122

Har gjort klart steg 3 samt startat om datorn. Nu är det bara Hitman kvar, men skulle jag göra den också eller skulle jag strunta i den? Det var ju lite delade meningar om det

Min erfarenhet säger mig att den är alltid bra att också köra eftersom när det gäller malware så vet man inte vad som är rätt eller fel men det vet skannrarna , givetvis , så ingen av oss vet med full säkerhet om den är onödig förrän efteråt .

Citera

2015-02-14, 21:24 #**131**

Avstängd

Reg: Nov 2014

Inlägg: 132

Citat:

Ursprungligen postat av mojjes1122

Jag deletade dom själv från karantänen, sen startade jag om datorn

Bra att du fick bort det!

. Posta här igen om den kommer tillbaka.

Citera

2015-02-14, 21:27 #**132**

Avstängd

Reg: Nov 2014

Inlägg: 132

Citat:

Ursprungligen postat av 1FF

Min erfarenhet säger mig att den är alltid bra att också köra eftersom när det gäller malware så vet man inte vad som är rätt eller fel men det vet skannrarna , givetvis , så ingen av oss vet med full säkerhet om den är onödig förrän efteråt .

Den är onödig, Den är bara bra för att ta bort Ransomwares. Kolla för henne gick det bara bort bara när hon körde MBAM, JRT, Adwcleaner.

Citera

Den officiella Adware(och övrig oönskad reklam)-tråden[/Mod]

Stöd Flashback