Przekierowania na inne strony - internet

[x007]

Proszę o pomoc i analizę logów.

 

 

FRST.txt Shortcut.txt Addition.txt

[jessica]

Nie widzę tu żadnej infekcji.

 

Tylko kosmetyka:

Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.
Otworzy się Notatnik - wklej do niego:

Spoiler

Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
GroupPolicy: Ograniczenia ? <==== UWAGA
S0 edevmon; system32\DRIVERS\edevmon.sys [X]
S3 MDA_NTDRV; \??\C:\Windows\system32\MDA_NTDRV.sys [X]
FirewallRules: [TCP Query User{17DA4C27-264B-48B6-872A-6C804288AC40}D:\sdi_r1809\sdi_x64_r1809.exe] => (Allow) D:\sdi_r1809\sdi_x64_r1809.exe Brak pliku
FirewallRules: [UDP Query User{746A2703-014D-4FAB-A6A7-B6CF6926EB63}D:\sdi_r1809\sdi_x64_r1809.exe] => (Allow) D:\sdi_r1809\sdi_x64_r1809.exe Brak pliku
FirewallRules: [TCP Query User{E61F9866-1787-4F90-B2D8-A0CF14CA39A4}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe Brak pliku
FirewallRules: [UDP Query User{AF201354-78DB-44DF-98A3-35F11428C101}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe Brak pliku
FirewallRules: [TCP Query User{8A42084F-1C72-4400-886F-32BEEDB0E9E0}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe Brak pliku
FirewallRules: [UDP Query User{68FDE0A7-61C1-45EE-BC2A-778825FBA11A}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe Brak pliku
FirewallRules: [TCP Query User{A8C94197-C579-4FA2-B51D-A2170E821780}C:\program files\java\jre1.8.0_191\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\javaw.exe Brak pliku
FirewallRules: [UDP Query User{B34BB8EF-9861-445B-B5A0-1FA5D41F3415}C:\program files\java\jre1.8.0_191\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\javaw.exe Brak pliku
FirewallRules: [TCP Query User{8453E601-0CF2-4E5E-93D6-70A75201C39D}C:\program files\java\jre1.8.0_191\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\javaw.exe Brak pliku
FirewallRules: [UDP Query User{75761E67-9783-4013-B958-6C7B70C3E4C7}C:\program files\java\jre1.8.0_191\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\javaw.exe Brak pliku
FirewallRules: [TCP Query User{35F49AC5-F0F1-4991-AF19-AC678196A671}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe Brak pliku
FirewallRules: [UDP Query User{7D557BD5-AA69-47DB-B189-FC920154D161}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe Brak pliku
FirewallRules: [TCP Query User{4471CC59-AB63-4EA6-89BD-3C2D9267B647}D:\idm\sdi_r1811\sdi_x64_r1811.exe] => (Allow) D:\idm\sdi_r1811\sdi_x64_r1811.exe Brak pliku
FirewallRules: [UDP Query User{4EA16007-05E2-46BF-8730-70C81A302B32}D:\idm\sdi_r1811\sdi_x64_r1811.exe] => (Allow) D:\idm\sdi_r1811\sdi_x64_r1811.exe Brak pliku
FirewallRules: [TCP Query User{A4ED5018-2594-4F92-85CD-30F58654933F}D:\idm\sdi_r1811\sdi_x64_r1811.exe] => (Allow) D:\idm\sdi_r1811\sdi_x64_r1811.exe Brak pliku
FirewallRules: [UDP Query User{109352D4-9A98-4A26-B6F9-C0963758D6B0}D:\idm\sdi_r1811\sdi_x64_r1811.exe] => (Allow) D:\idm\sdi_r1811\sdi_x64_r1811.exe Brak pliku
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Media Server.lnk
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL+S.
W FRST kliknij na Fix (NAPRAW).

 

jessi