Zamulona przeglądarka

[Devorious88]

Siema , problem polega na tym ,że linki otwierają się wolno a gdy np w chromie otwieram nową kartę i powinny się wyświetlić najczęsciej odwiedzane strony laduje sie ona 3 sek, po przywracaniu systemu wszystko dziala normalnie a na drugi dzien znow to samo.
OTL.txt
http://www.wklej.eu/index.php?id=df0ce0f6e8
Extras.txt
http://www.wklej.eu/index.php?id=89e1c11f51
Tdsksiller
http://www.wklej.eu/index.php?id=2512d44472

[kominekl]

"Browsers Protector" = Browsers Protector
"conduitEngine" = Conduit Engine
"Driver Updater" = Carambis Driver Updater
"uTorrentBar Toolbar" = uTorrentBar Toolbar
"vShare.tv plugin" = vShare.tv plugin 1.3

Odinstaluj to oprogramowanie.

Logi.

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

Kod: Zaznacz wszystko

:OTL

DRV:[b]64bit:[/b] - File not found [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.01)
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=ga-870a-usb3l&r=17360811kd595661w04h05gj794566
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=ga-870a-usb3l&r=17360811kd595661w04h05gj794566
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=vlt&from=vlt&uid=WDC_WD5000AAKS-22V1A0_WD-WCAWFD65495954959&ts=1348917465
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=3b758b1d-19ea-11e1-af0d-50e5493ca359&q={searchTerms}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=110808&tt=270912_ctrl2_3912_8&babsrc=HP_ss&mntrId=1254041400000000000050e5493ca359
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=vlt&from=vlt&uid=WDC_WD5000AAKS-22V1A0_WD-WCAWFD65495954959&ts=1348917465
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110808&tt=270912_ctrl2_3912_8&babsrc=SP_ss&mntrId=1254041400000000000050e5493ca359
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{2D5F5597-0287-4f91-8CFA-2DEFF5FE78D8}: "URL" = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{B50F6CCB-895F-4E15-8D5A-5C9C26D7A1E8}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100480&babsrc=SP_ss&mntrId=1254041400000000000050e5493ca359
IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes\{B7433DDF-AAFE-49d7-B845-4910025CC4DC}: "URL" = http://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?affID=110808&tt=270912_ctrl2_3912_8&babsrc=HP_ss&mntrId=1254041400000000000050e5493ca359"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?affID=110808&tt=270912_ctrl2_3912_8&babsrc=KW_ss&mntrId=1254041400000000000050e5493ca359&q="
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found
FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPBrowserExt: C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Marcin\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Marcin\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
[2012-10-05 18:33:13 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Marcin\AppData\Roaming\mozilla\Firefox\Profiles\jpkq6160.default\extensions\[email protected]
[2012-09-29 20:03:18 | 000,002,225 | ---- | M] () -- C:\Users\Marcin\AppData\Roaming\mozilla\firefox\profiles\jpkq6160.default\searchplugins\BabylonMngr.xml
[2012-07-02 16:45:43 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-04-20 21:19:46 | 000,000,000 | ---D | M] (z) -- C:\Program Files (x86)\mozilla firefox\extensions\{be66a85a-f1ef-d171-8da8-12bc57eb7318}
[2012-09-29 20:03:16 | 000,000,000 | ---D | M] (Browser Manager) -- C:\PROGRAMDATA\BROWSER MANAGER\2.2.643.41\{16CDFF19-861D-48E3-A751-D99A27784753}\FIREFOXEXTENSION
[2012-09-29 20:03:07 | 000,002,362 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012-09-29 13:17:48 | 000,000,402 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
CHR - Extension: vshare plugin = C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\
CHR - Extension: uTorrentControl2 = C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\
O4 - HKU\S-1-5-21-920218767-2332886376-933549004-1000..\Run: [RMFon]  File not found
O4 - Startup: C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WTW.lnk =  File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.7.2)

:Files
C:\Users\Marcin\AppData\Local\Google\Update
C:\Windows\tasks\*.*

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z ADWCleaner (z opcji Delete) otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p139531 + log z TDSSKiller otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p120292 + nowe logi z OTL + log z Autoruns otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p138589.

[Devorious88]

OTL usuwanie:
http://www.wklej.eu/index.php?id=061e826ccd
ADWcleaner:
http://www.wklej.eu/index.php?id=e6e3fe5d9e
TDSSKiller:
http://www.wklej.eu/index.php?id=7f631f7721
OTL.txt:
http://www.wklej.eu/index.php?id=990c0ab2fa
Extras
http://www.wklej.eu/index.php?id=b51029800a
Co do programu autoruns przy próbie zapisania ,nic się nie dzieje a na pulpicie nie pokazuje się żaden plik, w folderze z tym programem również nie ma.

[kominekl]

Co do programu autoruns przy próbie zapisania ,nic się nie dzieje a na pulpicie nie pokazuje się żaden plik, w folderze z tym programem również nie ma.

Spróbuj w trybie awaryjnym.

ADWCleaner.

Uninstall.

Logi.

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL

IE - HKU\S-1-5-21-920218767-2332886376-933549004-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
O4 - HKU\S-1-5-21-920218767-2332886376-933549004-1000..\Run: [Google Update] "C:\Users\Marcin\AppData\Local\Google\Update\GoogleUpdate.exe" /c File not found
O4 - Startup: C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WTW.lnk = File not found

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.