Od kilku dni avast w moim starym laptopie z XP, zachowuje się dość natrętnie wywalając mi z uporem maniaka komunikaty o zagrożeniu kilka razy na godzinę niezależnie od tego czy jestem na necie czy też nie, do tego na przeglądarce Delta-homes i inne podobne podstrony i toolbary, proszę o pomoc w oczyszczeniu komputera.
FRST:
Addition:
Z góry dziękuję za pomoc.
Odinstaluj Adobe Reader 7.0.5,AppCloudUpdater,Java 6 Update 29,NCH Toolbar,WinZipper.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.
Pokaż nowe logi z FRST.
Odinstalować mi się udało wszystko oprócz NCH toolbar - nie wiem jak to wywalić, - nowe skany, - już jest dużo lepiej - dziękuję za odp -
logi:
Frst- http://wklej.to/5PVEn
addition - http://wklej.to/jqRw2
Otwórz notatnik systemowy i wklej:
HKLM\...\Run: [ISUSPM Startup] = C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [249856 2005-08-11] (Macrovision Corporation)
HKLM\...\Run: [ISUSScheduler] = C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation)
HKLM\...\Run: [Adobe ARM] = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
URLSearchHook: HKU\S-1-5-21-132663628-1584827281-80318629-1006 - (No Name) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - No File
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL No File
BHO: No Name - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - No File
BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll No File
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll No File
Toolbar: HKLM - No Name - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - No File
Toolbar: HKU\S-1-5-21-132663628-1584827281-80318629-1006 - No Name - {C4069E3A-68F1-403E-B40E-20066696354B} - No File
Toolbar: HKU\S-1-5-21-132663628-1584827281-80318629-1006 - No Name - {C2DB4FE6-8409-45CE-8010-189A7B5CCE86} - No File
FF Extension: Security Protection - C:\Documents and Settings\Adrian\Dane aplikacji\Mozilla\Firefox\Profiles\2onsojdf.default\Extensions\detgdp@gmail.com [2014-12-29]
FF HKLM\...\Firefox\Extensions: [detgdp@gmail.com] - C:\Documents and Settings\Adrian\Dane aplikacji\Mozilla\Firefox\Profiles\2onsojdf.default\extensions\detgdp@gmail.com
CHR HomePage: Default - hxxp://www.delta-homes.com/?type=hpts=1419842447from=wpm12262uid=ST9160823AS_5NK0E425XXXX5NK0E425
CHR StartupUrls: Default - "hxxp://www.delta-homes.com/?type=hpts=1419842447from=wpm12262uid=ST9160823AS_5NK0E425XXXX5NK0E425"
CHR DefaultSearchKeyword: Default - delta-homes
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\39.0.2171.95\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (QUAKE LIVE) - C:\Documents and Settings\All Users\Dane aplikacji\id Software\QuakeLive\npquakezero.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
S4 HWDeviceService.exe; C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe -/service [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 tifm21; system32\drivers\tifm21.sys [X]
U1 WS2IFSL; No ImagePath
U3 ae1oacyl; No ImagePath
2014-12-29 11:54 - 2014-12-29 11:59 - 00000000 ___DC () C:\AdwCleaner
2014-12-29 09:52 - 2014-12-29 09:52 - 00000000 ____ D () C:\Program Files\Enigma Software Group
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.