https://exinariuminix.info/ problem z przegladarka

[pietro84]

Witam,

mam problem z przegladarka ktorej uzywam czyli google chrome, od jakiegos czasu przypelatal sie nieproszony gosc w postaci wyskakujacego okna ze strony https://exinariuminix.info/, dzieje sie tak przy kazdym uruchomieniu komputera. Probowalem dzialac cos AdwCleanaerem ale nie potrafi on do konca rozwiazac tego problemu, niby cos usuwa ale problem ciagle powraca. Zalaczam logi ze skanu FRST. Z gory dziekuje za poswiecony czas i pomoc.

Addition.txt FRST.txt Shortcut.txt

[iJuliusz]

Witaj @pietro84

 

Usunę niepotrzebne wpisy w rejestrze

 

Wykonaj poniższe polecenia:

• Naciśnij przycisk → Kopiuj fixlist do schowka
• Uruchom FRST64 i kliknij Napraw (Fix)
• Czekaj cierpliwie, aż program zakończy naprawę i system uruchomi się ponownie
• Po restarcie w katalogu z FRST64 pojawi się plik fixlog.txt - wstaw go w odpowiedzi

Fixlist.txt

start::
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3447346220-464151205-1614285797-1001\...\Run: [PC] => explorer.exe hxxp://exinariuminix.info (Brak pliku) <==== UWAGA
Task: {04656978-8717-4686-BF2E-010040F81851} - \Overwolf Updater Task -> Brak pliku <==== UWAGA
Task: {B64C8906-F8AD-4692-AFFD-ED2AE9E86CDA} - \NNdVwWhojm -> Brak pliku <==== UWAGA
Task: {FDFEEA6C-3845-471A-AEB0-805309AF830E} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe  (Brak pliku)
Task: {8A747BD7-0F22-4637-AF5E-5726E77654BD} - System32\Tasks\Driver Booster Run (One-Time) => G:\Program Files (x86)\IObit\Driver Booster\6.0.2\BenefitMy.exe  /db (Brak pliku)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Brak pliku)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Brak pliku)
Task: {04582342-963B-4597-AD90-8DDDE7CC63AE} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe  Display (Brak pliku)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe  ReadyToReboot (Brak pliku)
Task: {17CCEE24-2639-4DC1-83C9-59BF6753D417} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC RebootDialog (Brak pliku)
Task: {E66C3B9F-A4D4-49F1-9499-41B1D91484F0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery RebootDialog (Brak pliku)
Task: {1A437065-3D16-4D69-B0E0-8589612A75E2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => %systemroot%\system32\MusNotification.exe  Display (Brak pliku)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Brak pliku)
Task: {C4BF4A6C-9F8B-4D04-A227-BCB8948D4E19} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3447346220-464151205-1614285797-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Brak pliku)
Task: {61ED4038-E8F7-4E43-AAA5-8AD673F570E9} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3447346220-464151205-1614285797-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Brak pliku)
Task: {6F8B1AA9-BF60-4167-84E0-77C8E2037945} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3447346220-464151205-1614285797-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Brak pliku)
Task: {6F22C5CD-9FCB-4BF1-A873-2232CDCE745C} - System32\Tasks\PC => C:\Windows\system32\cmd.exe [339968 2024-12-11] (Microsoft Windows -> Microsoft Corporation) -> /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v PC /t REG_SZ /d "explorer.exe hxxp://exinariuminix.info" <==== UWAGA
Task: {45AB983F-CA73-42C2-B20D-68FD64B8A64B} - System32\Tasks\S-1-5-21-3447346220-464151205-1614285797-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe  (Brak pliku)
FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi => nie znaleziono
CHR Notifications: Default -> hxxps://new.magicadsroute.com; hxxps://tubepornclassic.com
CustomCLSID: HKU\S-1-5-21-3447346220-464151205-1614285797-1001_Classes\CLSID\{0827D883-485C-4D62-BA2C-A332DBF3D4B0}\localserver32 -> "C:\Users\PC\AppData\Local\Microsoft\OneDrive\21.230.1107.0004\FileCoAuth.exe" => Brak pliku
CustomCLSID: HKU\S-1-5-21-3447346220-464151205-1614285797-1001_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32 -> C:\Users\PC\AppData\Local\Microsoft\OneDrive\21.230.1107.0004\FileSyncShell64.dll => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} =>  -> Brak pliku
AlternateDataStreams: C:\Users\PC\Downloads\0x52_URM.zip:shield [115]
AlternateDataStreams: C:\Users\PC\Downloads\Addition.txt:shield [186]
AlternateDataStreams: C:\Users\PC\Downloads\Awakened-PoE-Trade-Setup-3.23.10001.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Awakened-PoE-Trade-Setup-3.23.10005.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\DODIVVVV.torrent:shield [196]
AlternateDataStreams: C:\Users\PC\Downloads\Downloader_Diablo2_enUS.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Downloader_Diablo2_Lord_of_Destruction_enUS.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Downloader_Diablo2_Lord_of_Destruction_plPL (1).exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\EAappInstaller.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Faster_Overworld_Traversal_v0.0.3.zip-14-0-0-3-1732282248.zip:shield [278]
AlternateDataStreams: C:\Users\PC\Downloads\file-viewer-pro.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\FPSFix_v0.0.2.zip-2-0-0-2-1731942528.zip:shield [235]
AlternateDataStreams: C:\Users\PC\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\FRST64.exe:shield [256]
AlternateDataStreams: C:\Users\PC\Downloads\hwmonitor_1.51.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\jre-8u401-windows-x64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\MovaviPhotoEditorSetupC_Wxw8k9t_.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\NordInstaller.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\OperaGXSetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\ProjectD2Installer.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Rebalanced_Encounter_Rate_v0.0.1.zip-5-0-0-1-1731943149.zip:shield [273]
AlternateDataStreams: C:\Users\PC\Downloads\RogueKiller_portable64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\RogueKiller_portable64.exe:shield [201]
AlternateDataStreams: C:\Users\PC\Downloads\SetupExitLag-5.9.4-x64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Shortcut.txt:shield [186]
AlternateDataStreams: C:\Users\PC\Downloads\Sidekick-2024.1228.1929.zip:shield [163]
AlternateDataStreams: C:\Users\PC\Downloads\Sidekick-windows-stable-Setup.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\Sidekick-windows-stable-Setup.exe:shield [620]
AlternateDataStreams: C:\Users\PC\Downloads\VisualStudioSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\vlc-3.0.21-win64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\windowsdesktop-runtime-7.0.17-win-x64.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\yuzu_install.exe:BDU [0]
AlternateDataStreams: C:\Users\PC\Downloads\[antyuumosaku (malcorond)] Atashi ga Nuite Ageyo kka [English] [Colorized] [SDTLs] [SPDSD] [Digital].zip.torrent:shield [251]
CustomCLSID: HKU\S-1-5-21-3447346220-464151205-1614285797-1001_Classes\CLSID\{0827D883-485C-4D62-BA2C-A332DBF3D4B0}\localserver32 -> "C:\Users\PC\AppData\Local\Microsoft\OneDrive\21.230.1107.0004\FileCoAuth.exe" => Brak pliku
CustomCLSID: HKU\S-1-5-21-3447346220-464151205-1614285797-1001_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32 -> C:\Users\PC\AppData\Local\Microsoft\OneDrive\21.230.1107.0004\FileSyncShell64.dll => Brak pliku
RemoveProxy:
Hosts:
end::

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany wyłącznie pod ten system, proszę nie stosować na swoich systemach.

Pozdrawiam serdecznie
Juliusz

[pietro84]

Po wykonaniu naprawy problem jak na razie zniknal. Bardzo dziekuje za pomoc.

Fixlog.txt

[iJuliusz]

Dziękuję

 

Otwórz przeglądarkę Chrome

Wpisz w pasku wpisz
chrome://settings/content/notifications
Sprawdź adresy w sekcji Zezwolono na wysyłanie powiadomień i usuń te, których nie znasz

 

Usuń programy oczyszczające programem KPRM

 

KpRm

Platforma: Windows 7, Windows 8/8.1, Windows 10 32-bit i 64-bit
Licencja: freeware

Strona domowa

Pobierz

 

Uruchom, kliknij Yes i zaznacz opcje: Delete Tools, Registry Backup, Create Restore Point, Delete now.

 

 

 

Kliknij Run

 

To wszystko

 

Pozdrawiam serdecznie
Juliusz