Komputer przycina się przy uruchamianiu aplikacji / narzędzi / linków

[grenade1]

Witam,

 

Komputer laguje przy włączaniu programów lub narzędzi w nich zawartych. Równie denerwującym objawem infekcji jest zacinanie się podczas pisania - piszę, a komputer w pewnym momencie zamarza i dopiero po chwili uzupełnia brakujące znaki. Proszę o pomoc.

 

Pozdrawiam

 

P.S. Po ponad półgodzinnym skanie GMER-em, Windows pokazał Blue Screena.

Addition.txt

Extras.Txt

FRST.txt

OTL.Txt

[muzyk75]

Otwórz notatnik i wklej:

 

HKLM-x32\...\Run: [DATAMNGR] - C:\PROGRA~2\SEARCH~2\Datamngr\DATAMN~2.EXE
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\MUSICT~1\Datamngr\x64\mgrldr.dll  [23616 2013-09-24] ()
AppInit_DLLs-x32: c:\progra~2\musict~1\datamngr\mgrldr.dll c:\progra~3\wincert\win32c~1.dll [7168 2013-09-22] ()
HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Music Toolbar\Datamngr\apcrtldr.dll [486464 2013-09-24] () <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Music Toolbar\Datamngr\x64\apcrtldr.dll [659008 2013-09-24] () <===== ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchamong.com/searchview.php?source=6987e315b363f4b09672a1cda71caea8&query={searchTerms}&cat=webs&bar=true
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchamong.com/searchview.php?source=6987e315b363f4b09672a1cda71caea8&query={searchTerms}&cat=webs&bar=true
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a9397--15857&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a9397--15857&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a9397--15857&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKLM-x32 - {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://www.searchamong.com/searchview.php?source=6987e315b363f4b09672a1cda71caea8&query={searchTerms}&cat=webs&bar=true
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=876&systemid=2&v=a9397--15857&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=876&systemid=2&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=6cb8136e00000000000090004e2b61b2
SearchScopes: HKCU - {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://www.searchamong.com/searchview.php?source=6987e315b363f4b09672a1cda71caea8&query={searchTerms}&cat=webs&bar=true
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={F7D375C4-0920-4237-97BB-DFBB9644C80E}&mid=ce21e53061f047d0b99ab9fcdf052c2c-aa0262105896e7ab319033490f6499dc6ed8d1e2&lang=pl&ds=AVG&pr=pr&d=2012-11-16 14:32:38&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2002} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=876&systemid=2&apn_uid=8356155112324553&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
SearchScopes: HKCU - {CCB0653E-900B-45D1-B639-D0880D1B4EFE} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ333YYPL&apn_uid=CCF1B5C8-3DC6-4DFA-9F09-A5CA04A7FC39&apn_sauid=8F6AFDB8-1C5B-4A65-8ABD-6BFCFE3CFB47
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL =
SearchScopes: HKCU - {F3FA2FFB-B826-4269-B8B2-F7BF33ABD7ED} URL = http://www.mysearchresults.com/search?c=2402&t=01&q={searchTerms}
BHO-x32: SearchAmong Toolbar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files (x86)\SearchAmong Toolbar\SearchAmongToolbar.dll ()
BHO-x32: Search-Results Toolbar - {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll No File

BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll No File
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Paul\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll No File
Toolbar: HKLM-x32 - SearchAmong Toolbar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files (x86)\SearchAmong Toolbar\SearchAmongToolbar.dll ()
Toolbar: HKLM-x32 - Search-Results Toolbar - {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - C:\PROGRA~2\SEARCH~2\Datamngr\SRTOOL~1\searchresultsDx.dll No File

Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll No File
FF user.js: detected! => C:\Users\Paul\AppData\Roaming\Mozilla\Firefox\Profiles\20jncrxv.default-1362162834526\user.js
FF SearchEngineOrder.1: Ask Search
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Ask.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml

FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1

FF Extension: No Name - C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR RestoreOnStartup: "hxxp://search.bearshare.net?appid=876", "hxxp://www.search.ask.com/?o=APN10641A&gct=hp&d=2-876&v=a9397--15857&t=4"

CHR HKLM-x32\...\Chrome\Extension: [ddkpepdilbfaccbiljmaflabkcbgjfin] - C:\Program Files (x86)\Search Results Toolbar\Datamngr\chromeExtension.crx

CHR HKLM-x32\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files (x86)\DefaultTab\DefaultTab.crx

CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\14.2.0.1\avg.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 DatamngrCoordinator; C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe [3420224 2013-09-24] (Musiclab LLC.)

R2 vToolbarUpdater14.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [968880 2013-02-19] ()
S2 DefaultTabUpdate; "C:\Users\Paul\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe" [x]
S0 AVGIDSHA; system32\DRIVERS\avgidsha.sys [x]
2013-11-14 20:18 - 2013-10-02 17:45 - 00000000 ____D C:\ProgramData\Datamngr
2013-10-27 15:35 - 2013-05-10 10:40 - 00000000 ____D C:\Program Files (x86)\DefaultTab

HKLM-x32\...\Run: [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY

HKLM-x32\...\Run: [vProt] - "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
C:\Users\Paul\AppData\Local\Temp\APNSetup.exe
C:\Users\Paul\AppData\Local\Temp\BackupSetup.exe
C:\Users\Paul\AppData\Local\Temp\Extract.exe
C:\Users\Paul\AppData\Local\Temp\Installhelper.dll
C:\Users\Paul\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Paul\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\Paul\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Paul\AppData\Local\Temp\setup.exe
C:\Users\Paul\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Paul\AppData\Local\Temp\SP52412.exe
C:\Users\Paul\AppData\Local\Temp\SP52503.exe
C:\Users\Paul\AppData\Local\Temp\SP55068.exe
C:\Users\Paul\AppData\Local\Temp\SP55086.exe
C:\Users\Paul\AppData\Local\Temp\SP55094.exe
C:\Users\Paul\AppData\Local\Temp\SP55101.exe
C:\Users\Paul\AppData\Local\Temp\SP55102.exe
C:\Users\Paul\AppData\Local\Temp\SP55104.exe
C:\Users\Paul\AppData\Local\Temp\SP55107.exe
C:\Users\Paul\AppData\Local\Temp\SP55109.exe
C:\Users\Paul\AppData\Local\Temp\SP55150.exe
C:\Users\Paul\AppData\Local\Temp\SP55151.exe
C:\Users\Paul\AppData\Local\Temp\TorchSetupFull.exe
C:\Users\Paul\AppData\Local\Temp\wget.exe
 

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix.

 

Pobierz ADW-Cleaner: "Dział pomocy doraźnej"-->"Dezynfekcja: zbiór narzędzi usuwających"-->"Pobierz" . Po uruchomieniu kliknij "szukaj" , po zakończeniu skanu "usuń".  Reset komputera.

 

Pobierz: TFC Temp File Cleaner by Oldtimer: "Dział pomocy doraźnej"-->"Dezynfekcja kroki finalizujące temat"-->"Czyszczenie lokalizacji tymczasowych" Naciśnij "start" i rozpocznie się usuwanie plików tymczasowych.

 

Odinstaluj poprzez "Panel sterowania": Babylon, DefaultTab, Java 6 Update 22, SearchAmong Toolbar, Datamngr.

 

Google Chrome: zresetuj  wtyczeki. W pasku adresów wpisz chrome://plugins i ENTER. Na liście wtyczek wybierz dowolną i kliknij Wyłącz. Następnie wtyczkę ponownie włącz.

 

Firefox reset wtyczek: kliknij pomarańczowy napis "Firefox"-->"Pomoc"-->"Informacje dla pomocy technicznej'-->"Resetuj program Firefox"

 

Wykonaj nowe logi OTL, FRST.

[grenade1]

Dziękuję, wykonałem wg podanych instrukcji. Przepraszam, ale nie mogłem odpowiedzieć wcześniej. Załączam nowe logi.

FRST.txt

OTL.Txt

[muzyk75]

Otwórz notatnik i wklej:

 

AppInit_DLLs:   [ ] ()
AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll [ ] ()
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
CHR RestoreOnStartup: "hxxp://search.bearshare.net?appid=876", "hxxp://www.search.ask.com/?o=APN10641A&gct=hp&d=2-876&v=a9397--15857&t=4", "hxxp://www.google.com"
 

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix.

 

Czy wszystko działa tak jak trzeba ?