logo elektroda
logo elektroda
X
logo elektroda

Gameorplay virus that starts in the browser at system startup

Krzysiek0294 2610 2
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 16980073
    Krzysiek0294
    Level 9  
    Hello, the girl's computer has a virus that starts the browser with the address gameorplay.info/nextpage.html every time I start Windows. I would like to ask for help on how to fight this virus. Attached I am sending the files FRST.txt and Addition.txt, as well as the appearance of this page. Hope they can help you find the problem and fix it. Thanks in advance.

    Gameorplay virus that starts in the browser at system startup
  • ADVERTISEMENT
  • Helpful post
    #2 16980081
    Kolobos
    IT specialist
    Odinstaluj:
    CCleaner
    McAfee Security Scan Plus

    Wykonaj Fixlist.txt dla FRST:
    Task: {2477DB72-5ACF-47FB-83B5-3B4737849F50} - System32\Tasks\{0EF16DEC-A9B9-4C98-8AE8-2AFDDC35B89F} => D:\Gry\The Sims 4\The Sims 4\Game\Bin\TS4_x64.exe [2017-12-13] (Electronic Arts Inc.)
    Task: {BDE68E4D-60CB-45F6-8B22-CDF189B06E1C} - System32\Tasks\Beata => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Beata /t REG_SZ /d "explorer.exe hxxp://ozirizsoos.info" D:\Gry\The Sims 4\The Sims 4\Game\Bin\TS4_x64.exe [2017-12-13] (Electronic Arts Inc.)
    (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe
    HKU\S-1-5-21-3065796782-2758223652-946617375-1001\...\Run: [AdobeBridge] => [X]
    HKU\S-1-5-21-3065796782-2758223652-946617375-1001\...\Run: [Beata] => explorer.exe hxxp://ozirizsoos.info C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (McAfee, Inc.)
    GroupPolicy: Ograniczenia - Chrome
  • #3 16980117
    Krzysiek0294
    Level 9  
    Thank you beautifully, it helped :)
ADVERTISEMENT