Zamykajace/znikajace okno przegladarki, spowolnienie pracy komputera

Dla specjalistów Bezpieczeństwo
#1

OTL:

#2

Otwórz notatnik systemowy i wklej:

Task: {4F403AFB-2C27-4981-8646-336EA0CCC06E} - System32\Tasks\{0C67FC47-C71C-4224-A4BF-F2F7AE2CC005} = Firefox.exe http://ui.skype.com/ui/0/6.11.0.102/pl/eula
Task: {EB02381F-D652-4B1C-894A-712498C62C51} - \Microsoft\Windows\MUI\LPRemove No Task File ==== ATTENTION
IFEO: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\ccleaner.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\consolcu.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\dw20.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\gamebooster.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\mspview.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\originuninstall.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\proflwiz.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\volpanlu.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "D:\Programy\AVG PC TuneUp 2014\TUAutoReactivator64.exe"
BootExecute: autocheck autochk * autocheck turegopt /AM
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-1436509681-2893843065-3312250385-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=dsts=1383158464from=coruid=WDCXWD5000AAKX-00U6AA0_WD-WCC2ELD0471604716q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=dsts=1383158464from=coruid=WDCXWD5000AAKX-00U6AA0_WD-WCC2ELD0471604716q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=dsts=1383158464from=coruid=WDCXWD5000AAKX-00U6AA0_WD-WCC2ELD0471604716q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=dsts=1383158464from=coruid=WDCXWD5000AAKX-00U6AA0_WD-WCC2ELD0471604716q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [cekcjpgehmohobmdiikfnopibipmgnml] - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ [Not Found]
S2 HPSLPSVC; C:\Users\Mateusz\AppData\Local\Temp\7zS4F2D\hpslpsvc64.dll [X]
S3 catchme; \\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \\C:\Users\Mateusz\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 TuneUpUtilitiesDrv; \\D:\Programy\AVG PC TuneUp 2014\TuneUpUtilitiesDriver32.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-12-28 17:49 - 2014-12-28 17:49 - 00000000 ____ D () C:\AdwCleaner
2015-01-05 12:15 - 2013-12-15 22:14 - 00003030 _____ () C:\Windows\System32\Tasks\{0C67FC47-C71C-4224-A4BF-F2F7AE2CC005}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Zrobiłem komputer podniósł się a tu dalszy log

#4

Skasuj folder C:\FRST

#5

Skasowany, nie wiem czy to juz wszystko, ale już zauważalna poprawa jest Także DZIEKUJE :slight_smile: