Irytujace reklamy

[patka89]

Hej

Problem jak w temacie, nie da się prawie w ogóle używać internetu...

Poniżej logi:

Addition: http://www.wklej.eu/index.php?id=2210db14c3

FRST: http://www.wklej.eu/index.php?id=57a0f0752d

Shortcut: http://www.wklej.eu/index.php?id=cc9fdc4d9f

Log: http://www.wklej.eu/index.php?id=33c474f6f7

Pozdrawiam i czekam na pomoc

[mateo8898]

Odinstaluj: do-search uninstall, pdfforge Toolbar v11.3. Następnie wklej do notatnika:

C:\Windows\Tasks\HPCeeScheduleForPati.job
C:\Program Files (x86)\Application Updater
C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e
C:\Program Files (x86)\Common Files\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e
C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [171520 2009-09-05] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [148888 2009-09-05] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SearchSettings] => C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1445360 2015-03-19] (Spigot, Inc.)
C:\Program Files (x86)\Common Files\Spigot
HKU\S-1-5-21-1427186274-561999737-1182089443-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
HKU\S-1-5-21-1427186274-561999737-1182089443-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKU\S-1-5-21-1427186274-561999737-1182089443-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
HKU\S-1-5-21-1427186274-561999737-1182089443-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
HKU\S-1-5-21-1427186274-561999737-1182089443-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
URLSearchHook: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\11.3\pdfforgeToolbarIE64.dll (Spigot, Inc.)
C:\Program Files (x86)\pdfforge Toolbar
URLSearchHook: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\11.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
SearchScopes: HKLM DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
SearchScopes: HKLM {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
SearchScopes: HKLM {CBB877FA-F81B-4CA2-9B89-6F956D300ABD} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKLM-x32 DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
SearchScopes: HKLM-x32 {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
SearchScopes: HKLM-x32 {CBB877FA-F81B-4CA2-9B89-6F956D300ABD} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 DefaultScope {CBB877FA-F81B-4CA2-9B89-6F956D300ABD} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
SearchScopes: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 {CBB877FA-F81B-4CA2-9B89-6F956D300ABD} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
BHO-x32: AOL Toolbar BHO {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll [2008-07-02] (AOL LLC)
C:\Program Files (x86)\AOL
Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\11.3\pdfforgeToolbarIE64.dll [2015-03-19] (Spigot, Inc.)
Toolbar: HKLM-x32 - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll [2008-07-02] (AOL LLC)
Toolbar: HKLM-x32 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\11.3\pdfforgeToolbarIE.dll [2015-03-19] (Spigot, Inc.)
Toolbar: HKU\S-1-5-21-1427186274-561999737-1182089443-1001 No Name - {DE9C389F-3316-41A7-809B-AA305ED9D922} - No File
CHR HomePage: Default hxxp://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7
CHR StartupUrls: Default "hxxp://do-search.com/?type=hp&ts=1429132273&from=cor&uid=ST9320423AS_5VH0PDZ7"
CHR DefaultSearchKeyword: Default do-search
CHR Extension: (Digital More) - C:\Users\Pati\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbikeckdeepggppdhakhkmljaikiao [2015-04-16]
R2 Update Mgr DigitalMore; C:\Program Files (x86)\Common Files\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\updater.exe [478992 2015-04-24] ()
2015-04-15 23:11 - 2015-04-15 23:11 - 00000000 ____D () C:\Users\Pati\AppData\Roaming\do-search
2015-04-15 23:11 - 2015-04-15 23:11 - 00000000 ____D () C:\Program Files (x86)\Digital More
EmptyTemp:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix. Powstanie plik fixlog.txt, który podajesz na forum.
Następnie podaj nowe logi z FRST.

Przeskanuj plik C:\Windows\system32\Drivers\http.sys na http://virustotal.com/ i podaj wyniki.

Podaj screenshot z HD Tune http://www.instalki.pl/programy/download/Windows/testowanie_i_diagnostyka/HD_Tune_Pro.html z zakładki Health

[patka89]

Addition: http://www.wklej.eu/index.php?id=40d4f7bc5b

FRST: http://www.wklej.eu/index.php?id=681ec644cf

Shortcut: http://www.wklej.eu/index.php?id=bdd82390fc

Fixlog: http://www.wklej.eu/index.php?id=e5489f9ce5

Pliku C:\Windows\system32\Drivers\http.sys nie odnaleziono, przeskanowany został plik C:\Windows\system32\Drivers\winmount.sys

Tylko dlatego, że jest to jedyny plik z roszerzeniem .sys w tym folderze,nic innego nie ma. Współczynnik wykrycia 0/54

HD Tune screen pod poniżwym adresem:

Kod: Zaznacz wszystko

http://www.freeupload.pl/image/img0348.jpg

[mateo8898]

Wklej do notatnika:

S2 Service Mgr DigitalMore; "C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\plugincontainer.exe" [X]
DeleteQuarantine:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix. Powstanie plik fixlog.txt, który podajesz na forum.

I oczywiście napisz, czy problem ustąpił.