Samoczynne otwieranie się przeglądarki, niedziałające programy

MeDe · 20 Lipiec 2015 13:29

Witam od dwóch dni mam problemy. Zaraz po starcie systemu, gdy już pokazuje się pulpit otwiera się przeglądarka z dziwną stroną, później już wszystko jest normalnie. Drugi problem to taki, że niektóre programy nie chcą się uruchomić np. CCleaner. Podaje logi:

FRST - http://www.wklej.org/id/1760086/

Addition - http://www.wklej.org/id/1760089/

OTL - http://www.wklej.org/id/1760090/

Extras - http://www.wklej.org/id/1760091/

Proszę o pomoc

Atis · 20 Lipiec 2015 15:53

Pobierz i uruchom AdwCleaner Kliknij Skanuj i później Usuń.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM-x32\...\Run: [CMD] => cmd.exe /c start http://zivlingamer.org && exit
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2852136663-1272744007-2044229173-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1437390416&z=4d5b666a36a90bb7284ad10gdz1c3mdc5tfe2z5z8w&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1437390416&z=4d5b666a36a90bb7284ad10gdz1c3mdc5tfe2z5z8w&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1437390416&z=4d5b666a36a90bb7284ad10gdz1c3mdc5tfe2z5z8w&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1437390416&z=4d5b666a36a90bb7284ad10gdz1c3mdc5tfe2z5z8w&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2852136663-1272744007-2044229173-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&ts=1437390429&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2852136663-1272744007-2044229173-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&ts=1437390429&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2852136663-1272744007-2044229173-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&ts=1437390429&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2852136663-1272744007-2044229173-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000DM003-1ER162_S4Y06XG8XXXXS4Y06XG8&ts=1437390429&type=default&q={searchTerms}
R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-06-24] (XTab system)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2283296 2014-11-04] (IObit)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
R1 wafd_vt_1_10_0_20; system32\drivers\wafd_vt_1_10_0_20.sys [X]
2015-07-20 13:07 - 2015-07-20 13:07 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-07-20 13:07 - 2015-07-20 13:07 - 00000000 ____ D () C:\Program Files (x86)\MiuiTab
2015-06-30 11:44 - 2015-06-30 11:44 - 00000000 ____ D () C:\Windows\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP
2015-07-17 19:09 - 2015-04-29 13:19 - 00000000 ___DC () C:\AdwCleaner
2014-11-12 22:49 - 2014-11-12 22:49 - 6000640 _____ () C:\Program Files (x86)\GUT45EC.tmp
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.