Internet zacina się i wyskakują kolejne okna

[inezka83]

witam

prosze o pomoc

od kilku dni internet strasznie się zacina i muli, wyskakują nowe okna z reklamami, ciężko w ogóle cos obejrzeć na necie

 

wklejam raporty

http://www.wklej.org/id/1553482/

http://www.wklej.org/id/1553483/

[Acorus]

Odinstaluj AppsHat Mobile Apps,Ask Toolbar,couponarific,HomeTab 7.2,MyPC Backup,Smileys We Love Toolbar for IE,webssearches uninstall,WindowsMangerProtect20.0.0.1277,Word Proser 1.10.0.1.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pokaż nowe logi z FRST.

[inezka83]

po pierwszym poscie przeskanowałam komputer avg i znalazł kilka zagrożeń, usunęłam to od razu

teraz mam nowe raporty

http://www.wklej.org/id/1553564/

http://www.wklej.org/id/1553565/

[krzych5610]

Otwórz notatnik i wklej:

  HKU\S-1-5-21-2526623661-4143962333-1513527057-1000…\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-2526623661-4143962333-1513527057-1000…\Policies\system: [DisableChangePassword] 0 HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKLM - No Name - {56e32636-e2b8-4b04-9a97-60581dd90f51} -  No File Toolbar: HKLM-x32 - HomeTab - {56e32636-e2b8-4b04-9a97-60581dd90f51} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll No File S2 vToolbarUpdater18.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.2.0\ToolbarUpdater.exe [X] S2 stdmfpam; \ ??\C:\Program Files (x86)\HomeTab\stdmfpam.dll [X] S1 wpnfd_1_10_0_1; system32\drivers\wpnfd_1_10_0_1.sys [X] 2014-12-10 10:49 - 2014-12-10 10:54 - 00000000 ____D () C:\AdwCleaner 2014-12-10 10:29 - 2014-12-10 10:29 - 00003132 _____ () C:\Windows\System32\Tasks{29B0B606-4A30-4FB5-82B6-777BBDEC8767} 2014-12-08 09:41 - 2014-12-08 09:41 - 00000000 ____D () C:\Program Files (x86)\D89E0C05-20C4-469D-B2A8-B6AC844C2875 2014-12-08 09:39 - 2014-12-10 08:27 - 00000000 ____D () C:\Program Files\010 2014-12-10 11:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-08 09:30 - 2011-07-30 07:10 - 00741028 _____ () C:\Windows\system32\perfh015.dat 2014-12-08 09:30 - 2011-07-30 07:10 - 00156312 _____ () C:\Windows\system32\perfc015.dat C:\Users\HP\AppData\Local\Temp\appshat_generic.exe C:\Users\HP\AppData\Local\Temp\i4jdel0.exe C:\Users\HP\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\ms.exe C:\Users\HP\AppData\Local\Temp\ochelper.exe C:\Users\HP\AppData\Local\Temp\Quarantine.exe C:\Users\HP\AppData\Local\Temp\setup_383.exe C:\Users\HP\AppData\Local\Temp\sqlite3.dll C:\Users\HP\AppData\Local\Temp\wordproser-setup-1.10.0.1.exe C:\Users\HP\AppData\Local\Temp\xGDz5.dll C:\Users\HP\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe Ask Toolbar (HKLM-x32…{4F524A2D-5637-006A-76A7-A758B70C0A06}) (Version: 12.10.6.54 - APN, LLC) <==== ATTENTION Ask Toolbar (HKLM-x32…{5347542D-5637-006A-76A7-A758B70C1500}) (Version: 12.21.0.3835 - APN, LLC) <==== ATTENTION Task: {09D2AAE1-4037-4C64-B95D-8293E3FEFAE6} - System32\Tasks\FCVFUWK => C:\Users\HP\AppData\Roaming\FCVFUWK.exe [2014-12-08] (Cinema VideoV05.12) <==== ATTENTION Task: {35804B9B-DA82-41ED-A4F1-F8CC9C173822} - System32\Tasks\SystemSockets\SystemSockets => C:\Program Files (x86)\HomeTab\WBrowserSockets.exe <==== ATTENTION Task: {55C745AC-773C-49FD-A710-A7A270F2646D} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\HomeTab\WHomepageKeeper.exe <==== ATTENTION Task: {640EAB6B-3B6A-4800-9A1A-564F8D9A8A58} - System32\Tasks\ATLQI => C:\Users\HP\AppData\Roaming\ATLQI.exe <==== ATTENTION Task: {A5701350-E95B-40AA-A330-6E4E5C72BDD3} - System32\Tasks\Browser Updater\Browser Updater => C:\Program Files (x86)\HomeTab\WRemoteUpdater.exe <==== ATTENTION Task: C:\Windows\Tasks\ATLQI.job => C:\Users\HP\AppData\Roaming\ATLQI.exe <==== ATTENTION Task: C:\Windows\Tasks\FCVFUWK.job => C:\Users\HP\AppData\Roaming\FCVFUWK.exe <==== ATTENTION emptytemp:   Zapisz jako fixlist.txt, umieść obok skanera FRST. Uruchom FRST i wykonaj polecenie FIX. Po restarcie pokaż fixlog i aktualny raport FRST bez Addition. Uruchom przeglądarkę Mozilla. Otwórz menu ( trzy paski z prawej u góry ). Wybierz Dodatki. Po otwarciu nowej karty wybierz i zainstaluj: - Bluhell Firewall 2.5.0 - Adblock Edge 2.1.7 - WOT.

[inezka83]

juz jest o niebo lepiej

 

nowe raporty

http://wklej.org/id/1554667/

http://wklej.org/id/1554668/

[krzych5610]

Otwórz notatnik i wklej:

  CloseProcesses: HKU\S-1-5-21-2526623661-4143962333-1513527057-1000…\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-2526623661-4143962333-1513527057-1000…\Policies\system: [DisableChangePassword] 0 HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKLM - No Name - {56e32636-e2b8-4b04-9a97-60581dd90f51} -  No File Toolbar: HKLM-x32 - HomeTab - {56e32636-e2b8-4b04-9a97-60581dd90f51} - C:\Program Files (x86)\HomeTab\IE\HomeTab.dll No File FF Extension: SmileysWeLove: Smileys for use with Facebook, GMail, and more - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\920y7viv.default-1373394000714\Extensions\jid1-FB1bBgFMk5H6Wg@jetpack.xpi [2014-12-08] FF Extension: Ask Toolbar - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\920y7viv.default-1373394000714\Extensions\toolbar_SGT-V7@apn.ask.com.xpi [2014-04-01] S2 vToolbarUpdater18.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.2.0\ToolbarUpdater.exe [X] S2 stdmfpam; ??\C:\Program Files (x86)\HomeTab\stdmfpam.dll [X] S1 wpnfd_1_10_0_1; system32\drivers\wpnfd_1_10_0_1.sys [X] 2014-12-10 10:49 - 2014-12-10 10:54 - 00000000 ____D () C:\AdwCleaner 2014-12-10 10:29 - 2014-12-10 10:29 - 00003132 _____ () C:\Windows\System32\Tasks{29B0B606-4A30-4FB5-82B6-777BBDEC8767} 2014-12-08 09:39 - 2014-12-10 08:27 - 00000000 ____D () C:\Program Files\010 2014-12-10 11:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-08 09:30 - 2011-07-30 07:10 - 00741028 _____ () C:\Windows\system32\perfh015.dat 2014-12-08 09:30 - 2011-07-30 07:10 - 00156312 _____ () C:\Windows\system32\perfc015.dat C:\Users\HP\AppData\Local\Temp\appshat_generic.exe C:\Users\HP\AppData\Local\Temp\i4jdel0.exe C:\Users\HP\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\HP\AppData\Local\Temp\ms.exe C:\Users\HP\AppData\Local\Temp\ochelper.exe C:\Users\HP\AppData\Local\Temp\Quarantine.exe C:\Users\HP\AppData\Local\Temp\setup_383.exe C:\Users\HP\AppData\Local\Temp\sqlite3.dll; C:\Users\HP\AppData\Local\Temp\wordproser-setup-1.10.0.1.exe C:\Users\HP\AppData\Local\Temp\xGDz5.dll C:\Users\HP\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe emptytemp: Zapisz jako fixlist.txt, umieść obok skanera FRST. Uruchom FRST i wykonaj polecenie FIX. Po restarcie usuń folder C:\FRST i wygenerowane raporty. Uruchom ponownie AdwCleaner i wykonaj polecenie odinstaluj.

[inezka83]

dziekuje za pomoc