Brak sieci, chociaż ping działa

Przyczyna dysfunkcji sieci = rozwalony łańcuch Winsock, nieobecny na dysku 32-bitowy plik Adpeak (modyfikacja Winsock przeprowadzona przez adware ScorpionSaver):

Winsock: Catalog9 01 C:\windows\system32\AdpeakProxy.dll File Not found ()
Winsock: Catalog9 02 C:\windows\system32\AdpeakProxy.dll File Not found ()

Winsock: Catalog9 03 C:\windows\system32\AdpeakProxy.dll File Not found ()

Winsock: Catalog9 04 C:\windows\system32\AdpeakProxy.dll File Not found ()

Winsock: Catalog9 16 C:\windows\system32\AdpeakProxy.dll File Not found ()

Winsock: Catalog9-x64 01 C:\windows\system32\AdpeakProxy64.dll [439296] (Adpeak, Inc.)

Winsock: Catalog9-x64 02 C:\windows\system32\AdpeakProxy64.dll [439296] (Adpeak, Inc.)

Winsock: Catalog9-x64 03 C:\windows\system32\AdpeakProxy64.dll [439296] (Adpeak, Inc.)

Winsock: Catalog9-x64 04 C:\windows\system32\AdpeakProxy64.dll [439296] (Adpeak, Inc.)

Winsock: Catalog9-x64 16 C:\windows\system32\AdpeakProxy64.dll [439296] (Adpeak, Inc.)

To nie wszystko. Tu jest multum instalacji adware, co odpowiada detekcjom MBAM, ale nie usuwaj na razie nic via MBAM, gdyż tu inna poprawniejsza metoda zostanie dobrana (deinstalacje). Niewiarygodna ilość śmieci. Akcja adresująca wszystko co powiedziane:

1. Otwórz Notatnik i wklej w nim:

() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
S2 bonanzadealslive; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-12-01] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-12-01] (BonanzaDeals)
R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [512504 2013-12-03] ()
R2 VideoDownloadConverter_4zService; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [42504 2012-12-05] (COMPANYVERS_NAME)
S3 TDEIO; \??\C:\Windows\SysWOW64\sysprep\BOOTPRIO\tdeio64.sys [x]
HKLM\...\Run: [] - [x]
HKLM-x32\...\Run: [VideoDownloadConverter Search Scope Monitor] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [42536 2012-12-05] (MindSpark)
HKLM-x32\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [30096 2012-12-05] (VER_COMPANY_NAME)
HKLM-x32\...\Run: [sweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-10-04] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=A874446D5722A0DA
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66016
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=hp&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (MindSpark)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.dosearches.com/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=sc&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm073YYpl&ptnrS=HJxdm073YYpl&si=pconverter&ptb=E3BD0802-79A1-43A0-ACA7-69D62A3E017C&ind=2013012517&n=77fc2225&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={607F7794-6149-11E2-914C-E840F29FFD2E}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=A874446D5722A0DA
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=66016
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=wpc&utm_campaign=rg&utm_content=ds&from=wpc&uid=TOSHIBAXMQ01ABD050_32MBFBSOSXX32MBFBSOS&ts=1383778978&type=default&q={searchTerms}
SearchScopes: HKCU - {AD072F87-F1D8-43BB-BB12-F546AE696E92} URL = http://search.softonic.com/INF00046/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=245
SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm073YYpl&ptnrS=HJxdm073YYpl&si=pconverter&ptb=E3BD0802-79A1-43A0-ACA7-69D62A3E017C&ind=2013012517&n=77fc2225&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={607F7794-6149-11E2-914C-E840F29FFD2E}
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.4.9\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com)
BHO-x32: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (MindSpark)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: smartdownloader Class - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - C:\Program Files (x86)\PutLockerDownloader\smarterdownloader.dll (TODO: )
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
BHO-x32: BonanzaDeals - {fe063412-bea4-4d76-8ed3-183be6220d17} - C:\Program Files (x86)\BonanzaDeals\BonanzaDealsIE.dll (BonanzaDeals)
Toolbar: HKLM-x32 - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark)
Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.4.9\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
Toolbar: HKCU - No Name - {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - No File
Hosts: 46.23.70.78 pagead2.googlesyndication.com
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll (MindSpark)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\crawlersrch.xml
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Task: {1FC3684B-68D3-4D37-8AE1-7628A90FECBC} - System32\Tasks\{3F7509AB-29F1-4A67-BEE9-1EF362DCA595} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.10.0.116.259&LastError=12002
Task: {41DBA834-653A-4F21-8F0F-98CF7CBE3AA4} - \Program aktualizacji online firmy Adobe. No Task File
Task: {4F7F93B0-2965-42EF-9629-E64CFFBC596B} - System32\Tasks\DSite => C:\Users\Patrycja\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-04-05] ()
Task: {66718B37-FE98-439F-844E-94BFFE95B1BE} - System32\Tasks\BonanzaDealsUpdate => C:\Program
Task: {88F6018B-7350-4FB0-AFEC-BC9DBEAA67A0} - System32\Tasks\Sk-Enhancer-S-5499298658 => c:\programdata\wintersoft\sk-enhancer\Sk-Enhancer.exe
Task: {9C9C7922-CA60-4722-ACE1-4DBDCCE8454F} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-12-01] (BonanzaDeals)
Task: {BC6F5F17-5C19-4F4C-9600-2FBA6373E9EE} - System32\Tasks\AdobeFlashPlayerUpdate => C:\windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {BE2E6E94-65ED-4BDA-9DD4-E34A79D27DBD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect
Task: {FF69E77D-E927-45B3-8AC9-2C6312064737} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-12-01] (BonanzaDeals)
Task: C:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\windows\Tasks\Sk-Enhancer-S-5499298658.job => c:\programdata\wintersoft\sk-enhancer\Sk-Enhancer.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AdpeakProxy => ""="service"
C:\Windows\system32\AdpeakProxy64.dll
C:\Windows\Koston 360 Flip.dat
C:\Program Files (x86)\Gophoto.it
C:\Program Files (x86)\PutLockerDownloader
C:\Program Files (x86)\Mobogenie
C:\ProgramData\IBUpdaterService
C:\ProgramData\Microsoft\Windows\DRM\Server
C:\Users\wangzhisong
C:\Users\Patrycja\daemonprocess.txt
C:\Users\Patrycja\AppData\Local\cache
C:\Users\Patrycja\AppData\Local\Google
C:\Users\Patrycja\AppData\Local\Mobogenie
C:\Users\Patrycja\AppData\Roaming\File Scout
C:\Users\Patrycja\AppData\Roaming\PerformerSoft
C:\Users\Patrycja\Documents\Mobogenie
Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Google /f
Reg: reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search" /f
CMD: netsh winsock reset

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. Powstanie plik fixlog.txt.

Jeśli FRST nie wymusi resetu systemu, zrób to ręcznie, bo komenda resetu Winsock tego wymaga. Następnie:

2. Przez Panel sterowania odinstaluj adware:

Babylon Chrome Toolbar, Babylon toolbar, Bonanza Deals, BrowserProtect, Delta toolbar, Level Quality Watcher, Notificatoin, ScorpionSaver, ScorpionSaver Services, surfa anD kkeep, SweetIM Bundle by SweetPacks, SweetIM for Messenger 3.7, Toolbar 4.7 by SweetPacks, Update for PDF Creator, Update Manager for SweetPacks 1.1, VideoDownloadConverter Toolbar, Yontoo 1.10.03, YoutubeAdblocker.

3. Wyczyść Firefox: menu Pomoc > Informacje dla pomocy technicznej > Zresetuj program Firefox. Reset nie naruszy zakładek i haseł.

4. Uruchom AdwCleaner. Zastosuj Szukaj, a po tym Usuń. Powstanie folder C:\AdwCleaner z raportem z usuwania.

5. Uruchom TFC - Temp Cleaner.

6. Zrób nowy skan FRST (bez Addition). Dołącz plik fixlog.txt i log z AdwCleaner.

.

velvet · 19 Grudnia 2013

Czy warto zainstalować prewencyjnie hosts z adv cleaner?

Wszystkie punkty wykonane.

Edytowane: Tak, sieć wróciła.

Edytowane 19 Grudnia 2013 przez velvet

picasso · 19 Grudnia 2013

Wszystko zrobione. Drobne poprawki. Otwórz Notatnik i wklej w nim:

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wolnelektury-pl.xml
2013-12-19 14:12 - 2012-12-05 17:45 - 00707728 _____ (MindSpark) C:\Program Files (x86)\4zUninstall VideoDownloadConverter.dll
2013-12-19 14:12 - 2012-12-05 17:45 - 00178136 _____ () C:\Program Files (x86)\4zres.dll
2013-11-23 00:59 - 2013-12-19 14:08 - 00000000 ____D C:\Program Files (x86)\Notificatoin
Reg: reg add "HKCU\Software\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {6DEFE52D-6B8E-4A76-9820-DF8C1C07467A} /f
Reg: reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {6DEFE52D-6B8E-4A76-9820-DF8C1C07467A} /f
Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {6DEFE52D-6B8E-4A76-9820-DF8C1C07467A} /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. Powstanie plik fixlog.txt. Przedstaw go.

Czy warto zainstalować prewencyjnie hosts z adv cleaner?

Nie radzę. Gruby plik HOSTS może prowadzić do zawieszeń systemu i sieci. Przykład z forum: KLIK. Ów Hosts_Anti_Adwares_PUPs to program instalowany właśnie przez AdwCleaner.

.

Zaloguj się

Brak sieci, chociaż ping działa

Rekomendowane odpowiedzi

velvet

Odnośnik do komentarza

picasso

Odnośnik do komentarza

velvet

Odnośnik do komentarza

picasso

Odnośnik do komentarza

Jeśli chcesz dodać odpowiedź, zaloguj się lub zarejestruj nowe konto

Zarejestruj nowe konto

Zaloguj się

Ostatnio przeglądający 0 użytkowników

Przeglądaj

Cała aktywność