Szanowni użytkownicy … Jestem po reinstalacji systemu. Nie gram w żadne gry , nie instaluje tego czego nie chce , bądz tego co jest podejrzane.
Proszę sobie wyobrazić , że nie potrafię nawet spokojnie przejrzeć portalu Allegro , bo reklamy pojawiają sie i z prawej i z lewej , z góry i zdołu … i większosć czasu zajmuje mi szukanie krzyżyka i zamykanie okna … To jest parodia … Dosłownie mam obrzydzenie do tego typu reklamowania i narzucani się …
Czy ktoś może mi pomóc … ? \
Ponadto pojawił mi się jeszcze jedne problem , z oknem iż jest problem ze skryptem … że skrypt nie odpowiada itp , że należy go zamknąc itp … Czy ktos wie co zrobić ?
Proszę nie pisać , aby zainstalować AD Blocka itp , bo korzystałem z tego typu programów , potrzebuje , konkretnej i rzeczowej porady … Jeżeli ktos ma jakieś pomysły to prosze o pomoc… Dziękuje …
Acorus
3 Maj 2015 18:03
#4
Odinstaluj PriceFountain (remove only).Otwórz notatnik systemowy i wklej:
Task: {EFCD98EE-A7D9-4ECB-9F1A-82E807640B7B} - System32\Tasks\Price Fountain = C:\Users\Marek\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: C:\Windows\Tasks\Price Fountain.job = C:\Users\Marek\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\...\Run: [pricefountainw.exe] = C:\Users\Marek\AppData\Local\PriceFountain\pricefountainw.exe [464384 2015-04-16] (Price Fountain)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1427044428from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1427044428from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpppts=1427044495from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpppts=1427044495from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1427044428from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1427044428from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsppts=1427044495from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalkiutm_medium=installerutm_campaign=instalki
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpppts=1427044495from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCX
HKU\S-1-5-21-2576099913-486740994-3886346786-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsppts=1427044495from=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXq={searchTerms}
SearchScopes: HKU\S-1-5-21-2576099913-486740994-3886346786-1000 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXts=1427044513type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2576099913-486740994-3886346786-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXts=1427044513type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2576099913-486740994-3886346786-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXts=1427044513type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2576099913-486740994-3886346786-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXts=1427044513type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2576099913-486740994-3886346786-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HITACHIXHTS547550A9E384_J216008BJH3PMCJH3PMCXts=1427044513type=defaultq={searchTerms}
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll [2015-03-16] (Thinknice Co. Limited)
BHO-x32: PriceFountain - {b608cc98-54de-4775-96c9-097de398500c} - C:\Users\Marek\AppData\Local\PriceFountain\PriceFountainIE.dll [2015-03-12] ()
FF Extension: PriceFountain - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\q32a39gk.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi [2015-04-19]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\q32a39gk.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\q32a39gk.default\extensions\fftoolbar2014@etech.com
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-16] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-22] (SysTool PasSame LIMITED) ==== ATTENTION
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
U4 VBoxAswDrv; \\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-04-19 15:42 - 2015-04-23 21:47 - 00000000 ____ D () C:\Users\Marek\AppData\Local\PriceFountain
2015-04-19 15:42 - 2015-04-20 19:42 - 00000292 _____ () C:\Windows\Tasks\Price Fountain.job
2015-04-19 15:42 - 2015-04-19 15:42 - 00003244 _____ () C:\Windows\System32\Tasks\Price Fountain
2015-04-19 15:42 - 2015-04-19 15:42 - 00000000 ____ D () C:\Users\Marek\AppData\Roaming\PriceFountain
2015-04-19 15:42 - 2015-04-19 15:42 - 00000000 ____ D () C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
po potraktowaniu go Adwcleaner : http://www.wklej.org/id/1702662/ , czy mozna cos jeszcze zrobić ? Wyczyścić , usunąć ?