Witam
proszę o pomoc w zrobieniu porządku na komputerze. Ponoć załącz “szaleć” po wgraniu oprogramowania do telefonu komórkowego (który został już usunięty). Za wszelką pomoc dziękuję, pozdrawiam.
Log FRST
W panelu sterowania odinstaluj Update for PDF Reader.
Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Odinstaluj Update for PDF Reader.Otwórz notatnik systemowy i wklej:
Task: {B0424C2D-0480-4C28-AE44-49AA12628350} - System32\Tasks\QtraxPlayer = 4089683096.portal.qtrax.com
Task: C:\Windows\Tasks\DSite.job = C:\Users\Hp\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hpppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
HKU\S-1-5-21-470321989-1734978461-3974814034-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hpppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAX
HKU\S-1-5-21-470321989-1734978461-3974814034-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
SearchScopes: HKLM - {4145992F-E731-48BF-B75D-1A2C703D7ED4} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=HPNTDF
SearchScopes: HKU\.DEFAULT - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1427401632from=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {4145992F-E731-48BF-B75D-1A2C703D7ED4} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547550A9E384_J2110051HBJEGAHBJEGAXts=1427401650type=defaultq={searchTerms}
BHO: No Name - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - No File
BHO: No Name - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
BHO: No Name - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - No File
Toolbar: HKU\S-1-5-21-470321989-1734978461-3974814034-1000 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF SearchPlugin: C:\Users\Hp\AppData\Roaming\Mozilla\Firefox\Profiles\ylau1edp.default\searchplugins\delta.xml [2013-06-04]
FF SearchPlugin: C:\Users\Hp\AppData\Roaming\Mozilla\Firefox\Profiles\ylau1edp.default\searchplugins\do-search.xml [2015-03-24]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2014-09-25]
FF Extension: Digital More - C:\Users\Hp\AppData\Roaming\Mozilla\Firefox\Profiles\ylau1edp.default\Extensions\{0cef6b7e-0113-4906-bfe9-170f19737b97}.xpi [2015-03-27]
FF HKU\S-1-5-21-470321989-1734978461-3974814034-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [nohfdhapjjlndfgjnmdlcabloeembdkj] - C:\Users\Hp\AppData\Roaming\BabSolution\CR\delta2.crx [Not Found]
R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158816 2015-03-16] (XTab system)
R2 Service Mgr DigitalMore; C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\plugincontainer.exe [584432 2015-03-27] ()
R2 Update Mgr DigitalMore; C:\Program Files\Common Files\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\Updater.exe [514288 2015-03-27] ()
R2 vToolbarUpdater18.1.9; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-12] (AVG Secure Search)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-26] (SysTool PasSame LIMITED)
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_cdcecm; system32\DRIVERS\ew_jucdcecm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
2015-03-26 21:27 - 2015-03-26 21:27 - 00000000 ____ D () C:\Users\Hp\AppData\Roaming\do-search
2015-03-26 21:27 - 2015-03-26 21:27 - 00000000 ____ D () C:\Program Files\Digital More
2013-12-16 10:27 - 2014-06-28 09:48 - 0003740 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
log z clenera
Wciąż pojawiają się reklamy, gdy wchodzę na jakąkolwiek stronę to przekierowuje mnie na reklamy i “brzydkie” strony.
A wykonałeś prawidłowo skrypt? Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl
Reset Firefoxa: https://support.mozilla.org/pl/kb/przywracanie-domyslnych-ustawien-firefoksa-latwe-r
Wszystko było robione wg instrukcji. Wydaje mi się, że już jest ok 
Po raz kolejny dziękuję za pomoc Acorus. Pozdrawiam