Problem - Spowolniona praca laptopa

Witam,

 

od jakiegoś czasu mam sposobność użytkować laptopa kolegi. Niestety nie był on formatowany dłuższy okres czasu, kolega nie chce dać zrobić formata… Jest to Windows 7 64bit. Chcę jakoś odratować cały ten syf który jest w procesach, liczę na Waszą pomoc ; )

 

Logi z programu FRST

 

 

FRST.txt

http://wklej.org/id/1543157/

Addition.txt

http://wklej.org/id/1543159/

Dzięki z góry za pomoc :slight_smile:

FRST - źle wklejony. 

Napisz proszę dokładnie co jest źle, bo pisałem wedle tego tematu:

http://forum.dobreprogramy.pl/nowy-log-obowi%C4%85zkowy-farbar-recovery-scan-tool-t478727/

Nie wklejłeś całego logu. 

Fakt, przepraszam… Już zrobione:

Komputer jest zaśmiecony w sposób niewiarygodny dawno czegoś takiego nie widziałem

 

Wstepnie działania:

 

1.   Do notatnika wklej i zapisz jako  fixlist.txt i  kliknij  Fix  w Interfejsie  FRST

Plik  fixlist.txt  umieść  obok  programu  FRST

CloseProcesses:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1987548984-474538341-1628195016-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&ts=1393423657&type=default&q={searchTerms}
HKU\S-1-5-21-1987548984-474538341-1628195016-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.com/?f=1&a=ast_ir_14_39_ff&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DtByEyD0C0DyEyCzytD0AtN0D0Tzu0SzyzyyBtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyB0FyD0AtD0AzytDtGzz0DyBzytGzzzyyDyDtG0D0BtBzytGyCzy0Ezz0CzzyE0E0AyCzyzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0C0DtDyByB0BzztGyB0Azy0EtGyE0CyByEtG0AtByC0BtG0E0D0DyEtC0ByBzztDtDzy0F2Q&cr=905227698&ir=
HKU\S-1-5-21-1987548984-474538341-1628195016-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=1EE70026C72B3D3A&affID=125032&tsp=5027
HKU\S-1-5-21-1987548984-474538341-1628195016-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX
HKU\S-1-5-21-1987548984-474538341-1628195016-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&ts=1393423657&type=default&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> DefaultScope {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_39_ff&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DtByEyD0C0DyEyCzytD0AtN0D0Tzu0SzyzyyBtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0FyD0AtD0AzytDtGzz0DyBzytGzzzyyDyDtG0D0BtBzytGyCzy0Ezz0CzzyE0E0AyCzyzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0C0DtDyByB0BzztGyB0Azy0EtGyE0CyByEtG0AtByC0BtG0E0D0DyEtC0ByBzztDtDzy0F2Q&cr=179966539&ir=
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1EE70026C72B3D3A&affID=125032&tsp=5027
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {16EDB203-3C2A-46A0-8CF9-B71362444B67} URL = http://rts.dsrlte.com/?q={searchTerms}&r=563
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_39_ff&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DtByEyD0C0DyEyCzytD0AtN0D0Tzu0SzyzyyBtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0FyD0AtD0AzytDtGzz0DyBzytGzzzyyDyDtG0D0BtBzytGyCzy0Ezz0CzzyE0E0AyCzyzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0C0DtDyByB0BzztGyB0Azy0EtGyE0CyByEtG0AtByC0BtG0E0D0DyEtC0ByBzztDtDzy0F2Q&cr=179966539&ir=
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1409730719&from=cor&uid=HITACHIXHTS545032B9A300_100412PBN3041TJXH4WRX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {9FA9BDBF-2723-4740-AAD2-B808C879CD6D} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_39_ff&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DtByEyD0C0DyEyCzytD0AtN0D0Tzu0SzyzyyBtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyB0FyD0AtD0AzytDtGzz0DyBzytGzzzyyDyDtG0D0BtBzytGyCzy0Ezz0CzzyE0E0AyCzyzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0C0DtDyByB0BzztGyB0Azy0EtGyE0CyByEtG0AtByC0BtG0E0D0DyEtC0ByBzztDtDzy0F2Q&cr=905227698&ir=
SearchScopes: HKU\S-1-5-21-1987548984-474538341-1628195016-1000 -> {A25AC313-DD19-4238-ACA2-401D6BEE4321} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_ir_14_30_ch&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DtByEyD0C0DyEyCzytD0AtN0D0Tzu0SzytAyEtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCyCyB0FyC0CyBtAtGyDtDtCtCtG0FtByDyBtGtC0AyEzytGtBtAzyzztAtAzztC0BtCtB0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0DtB0DtDyEtAyDtGyC0ByBtDtG0F0AyD0AtGtCtAtDyDtGyE0FyByCyC0A0E0Azy0Fzy0A2Q&cr=1375904526&ir=
FF Extension: Astromenda Search Addon - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\nhyzxzrb.default\Extensions\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183} [2014-09-23]
FF Extension: ClearThink 1.0.1 - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\nhyzxzrb.default\Extensions\{e5e8bd85-21de-4190-b364-33beb625e47f}.xpi [2014-11-27]
CHR Extension: (ClearThink) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\epaphgdmipnghjhhebklgdchejelobkg [2014-10-11]
CHR Extension: (Astromenda New Tab) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae [2014-10-11]
S2 MaintainerSvc3.38.8461645; C:\ProgramData\5fd2ca9d-b04a-4998-b7e8-2d30ebba8fbe\maintainer.exe [123632 2014-10-28] ()
S2 PennyBee; C:\Program Files (x86)\PennyBee\PennyBee.exe [X]
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [425104 2014-02-26] (Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION
Task: {15E84CE4-050D-4EEE-AC98-38D427D2B4AD} - \{37E052C9-982A-41F8-9528-2C230ED88FC7} No Task File <==== ATTENTION
Task: {298B7907-FC48-4DC4-9911-19EC7F093566} - \{1428831F-7B28-4AE3-9ADC-2B70071A9275} No Task File <==== ATTENTION
Task: {2D272FF1-7069-48FD-BF5A-5DCBD74C9A50} - \{C69D70AB-AB09-4577-AB83-44BBB36E85B6} No Task File <==== ATTENTION
Task: {3FD1AC6A-409A-4DCD-87A5-C6ED355EC5AE} - \{488F748A-93C4-4D1B-8CB7-E0E8559558DA} No Task File <==== ATTENTION
Task: {4B949714-E494-41E8-B0D7-6FBC141ADD97} - \{4F29D4BA-82EB-4B18-BB84-CDEFC0762519} No Task File <==== ATTENTION
Task: {70E7A7E4-8CCA-44FF-B96B-3F09DD90C78D} - \{F28693F2-7D8F-4070-8DA6-8E164524138A} No Task File <==== ATTENTION
Task: {7D9E4268-BEA1-43A5-A610-1D8E9537FB8F} - \{8B86B268-ED01-42CB-B8F2-89C7457FA99A} No Task File <==== ATTENTION
Task: {84FAA9BB-51AB-44AB-8BCB-6A16AB412E8E} - \Uninstaller_SkipUac_Administrator No Task File <==== ATTENTION
Task: {93866C07-5C90-49C1-8890-5A722CEDBB17} - \ASC7_PerformanceMonitor No Task File <==== ATTENTION
Task: {96AB2797-97E0-4758-8AF4-B04D119CDDCC} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-29] () <==== ATTENTION
Task: {A721AA9F-364C-4E2D-9B37-7EFA0A40E651} - \{B2A09B8A-4E99-41FC-ACDE-78577B978496} No Task File <==== ATTENTION
Task: {C1ECF906-D863-4D93-8F66-DBF4CF5C006E} - \Yahoo! Search Udpater No Task File <==== ATTENTION
Task: {CDC1CFAC-38C2-47C8-98BF-637C9174D56E} - \{0F594295-20D2-4EA2-B98C-288FAF30F3FB} No Task File <==== ATTENTION
Task: {CF3EDD28-B596-4183-A64E-3457311034D2} - \{C7A174BA-62B8-46F1-8F40-6854BFC35309} No Task File <==== ATTENTION
Task: {D4BBDE29-8BB0-4CCE-AC3E-053DD35E02B7} - \Adobe Flash Player Updater No Task File <==== ATTENTION
Task: {E0F63561-DED1-439E-BE6A-B8CF93C6542B} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-29] () <==== ATTENTION
Task: {E20C3F5A-5308-4C57-B83E-F31AE66FF984} - \Yahoo! Search No Task File <==== ATTENTION
Task: {E35FA014-6A93-4912-9878-90A8248AE92D} - \{339484F7-811C-473B-B900-158E4CB88D18} No Task File <==== ATTENTION
Task: {E8075C72-BB33-4F20-9BC6-0C62F72A49EA} - \{5E42DD65-DEFC-4CB3-BDC6-37265A34AE48} No Task File <==== ATTENTION
Task: {F10887ED-1F20-49C6-804D-5A64A8A163E5} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-29] () <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
DeleteQuarantine:
EmptyTemp:
  1. Przez panel sterowania odisntaluj :

Allyrics-23

Buzzdock

ClearThink

DirectX 9.0c Packages

IePluginService12.27.0.3326

Lollipop

Mobogenie

Optimizer Pro v3.2

PennyBeeUpdate

PC Speed Maximizer v3.2

RegClean-Pro

SpeedUpMyComputer

sweet-page uninstall

WindowsMangerProtect20.0.0.722

WinZipper

WSE_Astromenda

WSE_Lasaoren

Yahoo! Search

Funmoods

 

3. Pobierz  AdwClaner  uruchom go i kliknij  szukaj  a gdy ukatywni się przycisk  usuń  kliknij go.

 

Adwclaner:  http://www.bleepingcomputer.com/download/adwcleaner/

 

4. Wrzuć raport ze skryptu i z  Adwclaner  (Raport z Adwclaner znajduję sięw tym folderze: **C:\AdwCleaner) **i zrób nowe logi z FRST

 

FRSThttp://forum.dobreprogramy.pl/nowy-log-obowi%C4%85zkowy-farbar-recovery-scan-tool-t478727/

Logi z AdwCleaner po uruchomieniu komputera (logi wczytały się automatycznie)

http://wklej.org/id/1543281/

Nowy log z AdwCleaner

http://wklej.org/id/1543300/

Nowy log z FRST

http://wklej.org/id/1543304/

dzięki :slight_smile:

 

Będę tutaj ok. 19:30 - wtedy udziele dalszych instrukcji. 

Ok, czekam :slight_smile:

W logu nie ma już nic pdoerzanego - problem nadal wsytępuje?

 

W Przeglądarkach:

 

Ustawienia > Wyszukiwarki > Usuń  astromendarts.dsrlte.com  o ile jeszcze tam są.

Nie. Już wszystko śmiga. Dzięki za pomoc kolego!

 

 

Przepraszam że, tak późno odpwiadam.

 

Skoro wszystko jest OK to kończymy.

 

Pozdrawiam,

Michał.