Otóż dostałem laptopa, ale strasznie muli, system się uruchamia to zanim aplikacje się pojawią na pulpicie z minuta mija, tak samo otwieranie wielu z nich, jak przeglądarka internetowa.
odinstaluj aktualnego antywirusa zainstaluj baidu antivirus i zrób nim skan. dodatkowo: MBAM/Emsisoft emergency kit/adwcleaner.
Odinstaluj jeden program antywirusowy, Avast lub F-Secure.
W panelu sterowania odinstaluj:
Hold Page
McAfee Security Scan Plus
omiga-plus uninstall
PC Speed Maximizer v3.2
PennyBeeUpdate
Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1190870756-1818600318-3052447167-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1190870756-1818600318-3052447167-1002 -> {E31C93B4-2D29-4282-9A83-EF3E2CBF9624} URL =
BHO-x32: No Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3gm2t9r.default\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF Extension: Hold Page 1.0.1 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3gm2t9r.default\Extensions\{c88279d3-91dd-4bd9-ad38-681f71d6e36d}.xpi [2014-12-28]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3gm2t9r.default\extensions\faststartff@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKU\S-1-5-21-1190870756-1818600318-3052447167-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://isearch.omiga-plus.com/?type=sc&ts=1419713690&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9KD500632
CHR Extension: (Hold Page) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oneffdhofljmikcgfdanogcpiebjcmin [2014-12-29]
2013-07-03 00:26 - 2013-07-03 00:26 - 0000000 ____ H () C:\ProgramData\DP45977C.lfl
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - \Microsoft\Windows\Live\Roaming\SynchronizeWithStorage No Task File <==== ATTENTION
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Odinstaluj testową wersje Malwarebytes, bo należało zainstalować tylko darmowy skaner.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2015-01-30 17:52 - 2015-01-30 18:06 - 00000000 ____ D () C:\AdwCleaner
2015-01-30 17:18 - 2015-01-30 17:18 - 00000000 ____ D () C:\ProgramData\Kaspersky Lab Setup Files
2015-01-29 20:39 - 2015-01-29 20:39 - 00000000 ____ D () C:\AVAST Software
2015-01-30 23:48 - 2014-12-28 22:03 - 00000000 ____ D () C:\Program Files (x86)\F-Secure
2015-01-30 23:39 - 2014-12-28 22:05 - 00000000 ____ D () C:\ProgramData\F-Secure
2015-01-30 22:50 - 2013-10-05 12:30 - 00000000 ____ D () C:\ProgramData\AVAST Software
DeleteQuarantine:
Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST
Usuń stare punkty przywracania: Przywracanie systemu i kopie w tle
Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK