Avast wykryl smieciuchy

[#ALVWTRANSIE]

Witam, od niedawa moj komputer zaczal sie zacinac. Mysle ze jest to spowodowane tym, ze Avast wykryl u mnie 16 smieciuchow. Jednak zeby to usunac trzeba zaplacic. Znacie inny sposob na ten problem?

[#ALVWTRANSIE]

http://wklej.to/cIp6q

http://wklej.to/3df6w

http://wklej.to/XkDNV

 

Przepraszam, po prostu zrobilem to co bylo na filmie :P

[Nezvik]

Wykonaj logi FRST. Poradnik znajdziesz w podpiętym temacie w tym dziale.

[#ALVWTRANSIE]

http://wklej.to/sDRih

http://wklej.to/RCbE9

[Janusz.]

FRST a nie OTL. Poradnik dot. logów

[Nezvik]

Stwórz nowy dokument tekstowy i nazwij go fixlist. Wklej do niego podaną zawartość, zapisz, umieść w tym samym folderze co FRST i kliknij wykonaj. Po tym wstaw wygenerowany log, po ponownym uruchomieniu komputera.

() C:\Program Files\webget\updatewebget.exe
() C:\Program Files\webget\bin\utilwebget.exe
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
AppInit_DLLs: c:\progra~1\sw-boo~1\assist~1.dll => c:\progra~1\sw-boo~1\assist~1.dll File Not Found
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.eazytosearch.info/?pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.eazytosearch.info/?pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.qone8.com/web/?type=ds&ts=1396272806&from=smt&uid=SAMSUNGXHM321HI_S24PJ9EB900415&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.qone8.com/web/?type=ds&ts=1396272806&from=smt&uid=SAMSUNGXHM321HI_S24PJ9EB900415&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1396272806&from=smt&uid=SAMSUNGXHM321HI_S24PJ9EB900415
SearchScopes: HKLM - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.eazytosearch.info/?l=1&q={searchTerms}&pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.qone8.com/web/?type=ds&ts=1396272806&from=smt&uid=SAMSUNGXHM321HI_S24PJ9EB900415&q={searchTerms}
SearchScopes: HKLM - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.eazytosearch.info/?l=1&q={searchTerms}&pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
SearchScopes: HKCU - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.eazytosearch.info/?l=1&q={searchTerms}&pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.eazytosearch.info/?l=1&q={searchTerms}&pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
FF user.js: detected! => C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\q52llntt.default\user.js
FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\q52llntt.default\searchplugins\WebSearch.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\qone8.xml
FF Extension: BitSSaver - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\q52llntt.default\Extensions\[email protected] [2014-05-23]
FF Extension: Searcch-NewTab - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\q52llntt.default\Extensions\[email protected] [2014-05-12]
CHR HomePage: hxxp://websearch.eazytosearch.info/?pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
CHR StartupUrls: "hxxp://websearch.eazytosearch.info/?pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL"
CHR DefaultSearchURL: http://websearch.eazytosearch.info/?l=1&q={searchTerms}&pid=724&r=2014/05/12&hid=14745629741644920175&lg=EN&cc=PL
CHR DefaultNewTabURL:
CHR Extension: (BitSSaver) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efcnnkinkedflepheefabiogkgmhhagn [2014-05-23]
CHR Extension: (Searcch-NewTab) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffjkflgolabobhfoldpnabpjaekedfnh [2014-05-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 Update webget; C:\Program Files\webget\updatewebget.exe [317720 2014-06-02] ()
R2 Util webget; C:\Program Files\webget\bin\utilwebget.exe [317720 2014-06-02] ()
R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys [55224 2014-05-19] (StdLib)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
2014-07-01 11:17 - 2014-07-01 11:17 - 00000000 ____D () C:\Program Files\JoniiCOupoN
2014-07-01 11:17 - 2014-05-23 08:07 - 00000000 ____D () C:\ProgramData\JoniiCOupoN
2014-07-01 11:17 - 2014-05-12 18:57 - 00000000 ____D () C:\ProgramData\859b0e8e21b1ae9a
2014-07-01 11:09 - 2014-05-12 18:57 - 00000000 ____D () C:\Program Files\save net
2014-06-07 10:41 - 2014-05-20 14:15 - 00000000 ____D () C:\Program Files\webget
2014-06-07 10:41 - 2014-05-12 18:58 - 00000000 ____D () C:\Program Files\SW-Booster
C:\Users\Jacek\AppData\Local\Temp\odk_setup.exe
save net (HKLM\...\{7DD5E91C-3864-77EC-7635-D14910C2A03E}) (Version: 4.3.0.1667 - savE net) <==== ATTENTION
SW-Booster (HKLM\...\S-702149676) (Version: 4.1.0.1806 - PremiumSoft) <==== ATTENTION
SW-Sustainer 1.80 (HKLM\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{c67abfdb}) (Version: - Certified Publisher) <==== ATTENTION
WPM17.8.0.3442 (HKLM\...\WPM) (Version: 17.8.0.3442 - Cherished Technololgy LIMITED) <==== ATTENTION
2014-05-20 13:04 - 2014-06-02 14:03 - 00317720 _____ () C:\Program Files\webget\updatewebget.exe
2014-05-20 15:16 - 2014-06-02 18:06 - 00317720 _____ () C:\Program Files\webget\bin\utilwebget.exe

Oprócz tego wyskakują dziwne błędy w dzienniku zdarzeń.

Naciśnij start --> uruchom ,a następnie wpisz chkdsk /r.

 

Po tym wykonaj nowe logi FRST.