Internet zamula jak przez modem gdy jest to 60Mbs-security error Gdata

Dla specjalistów Bezpieczeństwo
#1

Witam, 

Jak w temacie, internet spowalnia i ostatnio wyskakuje Internet security Error Gdata: Failed to connect to Engines(0x1). Resoult Code -1.

 

Dodam ze pare dniwczesniej znalazl wirusa: Adwarew.Swift.Browse.AD(EngineA) webget utilwebget

 

http://wklej.to/gA9Xj

 

prosze o sprawdzenie logów.

 

pozdrawiam

Piotr

#2

Odinstaluj Webget.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

#3

Addition:

http://wklej.to/3g82z

 

FRST:

http://wklej.to/OxPqI

#4

Otwórz Notatnik i wklej:

Task: {1D44B59E-1D59-4A1C-8F8F-FAE902502E44} - System32\Tasks\{CCB7166E-8B10-43DE-A344-A3381A3E2287} = Chrome.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsProgressBar
Task: {92E7B6CE-B043-4A01-9500-FEAC9E9BA770} - System32\Tasks\{FD1CE2AE-B573-447D-8098-1EACDEDE58E9} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.115/en/abandoninstall?page=tsMain
Task: {D96B1D3D-AE72-4DD2-B93E-C0304D50E71A} - System32\Tasks\{BC96A46F-D8F9-44FF-A48C-B29AA3FC6855} = Chrome.exe http://ui.skype.com/ui/0/5.10.0.116/pl/go/help.faq.installer?LastError=1618
HKLM-x32\...\Run: [] = [X]
HKU\.DEFAULT\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) ==== ATTENTION
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) ==== ATTENTION
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) ==== ATTENTION
HKU\S-1-5-21-2403903409-1008024966-985570049-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) ==== ATTENTION
HKU\S-1-5-21-2403903409-1008024966-985570049-1003\...\Winlogon: [Shell] C:\Windows\explorer.exe [3079168 2009-04-11] (Microsoft Corporation) ==== ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.search.yahoo.com/?type=714647fr=spigot-yhp-ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {3AC1C7D8-9AE3-4DF0-B76E-4813D10320C6} URL = http://uk.search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=714647p={searchTerms}
S3 catchme; \\C:\ComboFix\catchme.sys [X]
2014-07-21 20:41 - 2014-07-21 20:55 - 00000000 ____ D () C:\AdwCleaner
C:\Users\Piotr\plec.vbs

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.