Witam,
To mój pierwszy post na forum - więc proszę o wyrozumialość.
Od jakiegoś czasu mam problem z komputerem, spowolniony strasznie jest.
System muli, internet - przeglądarka - działa jak chce… często sie zacina…
Zamiast wyszukiwarki google.pl w prawym górnym rogu, wyskakuje jakiś: “key-find”?
Wklejam logi zgodnie z tematem :“nowy log obowiązkowy”
FRST
http://www.wklej.org/id/1656489/
Addition
http://www.wklej.org/id/1656500/
co z tym zrobić, bo nie mam cierpliwości tak pracować…
Może być problem z dyskiem-Uruchom- CrystalDiskInfo- zmień ustawienia (Funkcje, Advanced Feature, Wartość Raw i ustaw 10 [DEC]) pokaż okno z programu wszystkie parametry
Odinstaluj Spybot - Search & Destroy.Otwórz notatnik systemowy i wklej:
Task: {52BCD646-7AC5-4E00-BAE3-DEA58247C8F9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates = C:\Program Files\Spybot - Search amp; Destroy 2\SDUpdate.exe
Task: {7AA47E53-49E8-4C8F-8B8E-1EB849968538} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization = C:\Program Files\Spybot - Search amp; Destroy 2\SDImmunize.exe
Task: {88B57832-1364-48D5-94ED-BD9F11612FAF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system = C:\Program Files\Spybot - Search amp; Destroy 2\SDScan.exe
HKLM\...\Run: [SDTray] = C:\Program Files\Spybot - Search Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3896093609-3828695099-1347470095-1000\...\MountPoints2: {113dc383-b46e-11e4-be6f-1c6f65ac09d2} - F:\LGAutoRun.exe
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1425203889from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1425203889from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
HKU\S-1-5-21-3896093609-3828695099-1347470095-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
HKU\S-1-5-21-3896093609-3828695099-1347470095-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCE
HKU\S-1-5-21-3896093609-3828695099-1347470095-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCE
HKU\S-1-5-21-3896093609-3828695099-1347470095-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3896093609-3828695099-1347470095-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
SearchScopes: HKU\S-1-5-21-3896093609-3828695099-1347470095-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=MaxtorX6Y080L0_Y2V2PSCEts=1425203949type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3896093609-3828695099-1347470095-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=MaxtorX6Y080L0_Y2V2PSCEts=1425203949type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3896093609-3828695099-1347470095-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCEq={searchTerms}
SearchScopes: HKU\S-1-5-21-3896093609-3828695099-1347470095-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=MaxtorX6Y080L0_Y2V2PSCEts=1425203949type=defaultq={searchTerms}
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\XTab\SupTab.dll (Thinknice Co. Limited)
FF SelectedSearchEngine: key-find
FF Homepage: hxxp://www.key-find.com/?type=hpppts=1425203923from=coruid=MaxtorX6Y080L0_Y2V2PSCE
FF SearchPlugin: C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\searchplugins\key-find.xml
FF Extension: FF Toolbar - C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\Extensions\fftoolbar2014@etech.com [2015-03-02]
FF Extension: RandomDealApp - C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\Extensions\gnfjnohlqiwv@dbuwygicfjnghp.org [2015-02-21]
FF Extension: Search Enginer - C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\Extensions\searchengine@gmail.com [2015-03-01]
FF HKLM\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\extensions\searchengine@gmail.com
FF HKLM\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\m\AppData\Roaming\Mozilla\Firefox\Profiles\7xd96sbp.default\extensions\fftoolbar2014@etech.com
R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 SDScannerService; C:\Program Files\Spybot - Search Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
2015-03-01 10:59 - 2015-03-01 10:59 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-03-01 10:59 - 2015-03-01 10:59 - 00000000 ____ D () C:\Program Files\XTab
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
A skanowałeś, np. Avastem i Malwarebytes
czyściłeś CCleanerem? Może coś pomoże?
Próbowałem skanować avastem, kasperskym - i nic nie dawało.
Acorus: po zastosowaniu Twoich wskazówek, robię wklejkę.
http://www.wklej.org/id/1656576/
Mam nadzieję, ze teraz będzie ok.
Skasuj folder C:\FRST
Sprawdź jeszcze dysk.