Użycie procesora ponad normę

[kura14005]

Witam od wczoraj mój procesor zużywa 100 % przy włączonym pulpicie,w procesach zadań znalazłem "cgminer.exe" którego udało mi się usunąć ale dalej użycie jest 100 %.Nie mam pojęcia dlaczego.

 

Wykonałem kilka skanów np Microsoft Security Trojan Remover AdwCleanerem i CClenerem jednak bez efektu jedynie co to właśnie to że usunięto cgminer.

 

Zrobiłem logi z FRST 

 

@edit 

 

Przeglądarka zabiera 90 % procesora,posiadam Opere 

FRST.txt

Addition.txt

[Nezvik]

W folderze, w którym znajduje się FRST, utwórz plik tekstowy o nazwie fixlist i wklej do niego podaną zawartość:

 

CloseProcesses:
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
HKU\S-1-5-21-675449578-2723546286-3601851342-1000\...\Run: [HP-CFG-Host] => C:\Users\Mati\AppData\Roaming\HPData_653\cfghost.exe [6005760 2015-02-15] ()
C:\Users\Mati\AppData\Roaming\HPData_653
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKU\S-1-5-21-675449578-2723546286-3601851342-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKU\S-1-5-21-675449578-2723546286-3601851342-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKU\S-1-5-21-675449578-2723546286-3601851342-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
HKU\S-1-5-21-675449578-2723546286-3601851342-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
HKU\S-1-5-21-675449578-2723546286-3601851342-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKU\S-1-5-21-675449578-2723546286-3601851342-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=pl-PL&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.google.pl%2F&OSP=http%3A%2F%2Fwww.bing.com%2Fsearch%3Fq%3D%7BsearchTerms%7D%26src%3DIE%2DSearchBox%26FORM%3DIE10SR
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1202&cd=2XzuyEtN2Y1L1QzutDtDtByEtBtCtBzyyCyEyCyCtCzy0EyBtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=921853897&ir=
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-675449578-2723546286-3601851342-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKU\S-1-5-21-675449578-2723546286-3601851342-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1202&cd=2XzuyEtN2Y1L1QzutDtDtByEtBtCtBzyyCyEyCyCtCzy0EyBtN0D0Tzu0CyBtCyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=921853897&ir=
SearchScopes: HKU\S-1-5-21-675449578-2723546286-3601851342-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
SearchScopes: HKU\S-1-5-21-675449578-2723546286-3601851342-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-675449578-2723546286-3601851342-1000 -> {D5A7F857-B1D2-4F77-A4D2-B91FF692409B} URL = http://rts.dsrlte.com/?affID=na&q={searchTerms}&r=377
FF NewTab: hxxp://do-search.com/newtab/?type=nt&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
FF DefaultSearchEngine: do-search
FF SelectedSearchEngine: do-search
FF Homepage: hxxp://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
FF Keyword.URL: 
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\do-search.xml [2015-04-02]
FF Extension: clickit - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\Extensions\[email protected] [2015-01-04]
FF Extension: coopunk - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\Extensions\[email protected] [2015-01-04]
FF Extension: Fast Start - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\Extensions\[email protected] [2015-04-02]
FF Extension: Fun2SAVE - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\Extensions\[email protected] [2015-04-02]
FF Extension: HaPpye2SavE - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\Extensions\[email protected] [2015-04-02]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\Mati\AppData\Roaming\Mozilla\Firefox\Profiles\s93gndgp.default\extensions\[email protected]
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719
CHR StartupUrls: Default -> "hxxp://do-search.com/?type=hp&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719"
CHR DefaultSearchKeyword: Default -> do-search
CHR DefaultSearchURL: Default -> http://do-search.com/web/?type=ds&ts=1427931903&from=cor&uid=SAMSUNGXHD103UJ_S13PJ90S318719&q={searchTerms}
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
S3 OSFMount; \??\C:\Program Files (x86)\Counter-Strike Global Offensive\image\x64\OSFMount.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-04-02 01:46 - 2015-04-02 01:46 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-02 01:45 - 2015-04-02 01:45 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\do-search
2015-03-30 15:33 - 2015-03-30 15:33 - 00002952 _____ () C:\Windows\System32\Tasks\{E71864A7-4123-4694-AC84-6C7B861850F4}
2015-03-03 21:31 - 2015-03-03 21:31 - 00003186 _____ () C:\Windows\System32\Tasks\{35ACE624-1495-4AEC-B71A-61A9BA5AECC9}
2015-03-13 17:42 - 2015-02-14 16:21 - 00000000 ____D () C:\ProgramData\16357748266645406941
2015-03-07 18:04 - 2015-01-24 23:06 - 00000020 _____ () C:\Users\Mati\AppData\Roaming\appdataFr3.bin
2015-03-05 17:57 - 2015-01-05 12:40 - 00000000 ____D () C:\ProgramData\EnjOyCouponu
2015-03-05 17:56 - 2015-01-05 12:40 - 00000000 ____D () C:\ProgramData\MinimuumPRice
EmptyTemp:

UWAGA! FIX PRZEZNACZONY TYLKO DLA DANEGO UŻYTKOWNIKA. WYKONANIE FIXU BEZ ZALECEŃ MOŻE SPOWODOWAĆ USZKODZENIE SYSTEMU.

 

Zapisz plik, otwórz FRST, kliknij w nim FIX. Po restarcie komputera wykonaj nowe logi FRST.