Elektroda.com
Elektroda.com
X

Gameorplay virus that starts in the browser at system startup

Krzysiek0294 2208 2
This content has been translated flag-pl » flag-en View the original version here.
  • #1
    Krzysiek0294
    Level 9  
    Hello, the girl's computer has a virus that starts the browser with the address gameorplay.info/nextpage.html every time I start Windows. I would like to ask for help on how to fight this virus. Attached I am sending the files FRST.txt and Addition.txt, as well as the appearance of this page. Hope they can help you find the problem and fix it. Thanks in advance.

    Gameorplay virus that starts in the browser at system startup
  • Helpful post
    #2
    Kolobos
    IT specialist
    Odinstaluj:
    CCleaner
    McAfee Security Scan Plus

    Wykonaj Fixlist.txt dla FRST:
    Task: {2477DB72-5ACF-47FB-83B5-3B4737849F50} - System32\Tasks\{0EF16DEC-A9B9-4C98-8AE8-2AFDDC35B89F} => D:\Gry\The Sims 4\The Sims 4\Game\Bin\TS4_x64.exe [2017-12-13] (Electronic Arts Inc.)
    Task: {BDE68E4D-60CB-45F6-8B22-CDF189B06E1C} - System32\Tasks\Beata => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Beata /t REG_SZ /d "explorer.exe hxxp://ozirizsoos.info" D:\Gry\The Sims 4\The Sims 4\Game\Bin\TS4_x64.exe [2017-12-13] (Electronic Arts Inc.)
    (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe
    HKU\S-1-5-21-3065796782-2758223652-946617375-1001\...\Run: [AdobeBridge] => [X]
    HKU\S-1-5-21-3065796782-2758223652-946617375-1001\...\Run: [Beata] => explorer.exe hxxp://ozirizsoos.info C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (McAfee, Inc.)
    GroupPolicy: Ograniczenia - Chrome
  • #3
    Krzysiek0294
    Level 9  
    Thank you beautifully, it helped :)