Strony długo się ładują

[PonyDesu]

Cześć. Mam nadzieję, że wybrałem dobre subforum.

 

Od jakiegoś czasu strony strasznie powoli się ładują, mam wrażenie, że przez przypadek zainstalowałem jakiś syf na komputerze. Mógłby ktoś sprawdzić?

 

W załączniku raporty, jak to napisano tutaj https://www.fixitpc.pl/topic/61-diagnostyka-og%C3%B3lne-raporty-systemowe/

 

Edit: Raport z GMER:

GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-05-26 16:39:41
Windows 6.1.7600  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP6T0L0-6 ST500DM002-1BD142 rev.KC45 465,76GB
Running: gmer.exe; Driver: C:\Users\DOMOWY\AppData\Local\Temp\kwrdrpow.sys


---- Threads - GMER 2.1 ----

Thread   C:\Windows\system32\svchost.exe [632:4992]                                                                                                                            000007fefca98e80
Thread   C:\Windows\System32\spoolsv.exe [1500:2848]                                                                                                                           000007fef67810c8
Thread   C:\Windows\System32\spoolsv.exe [1500:2860]                                                                                                                           000007fef6746144
Thread   C:\Windows\System32\spoolsv.exe [1500:2864]                                                                                                                           000007fef6525fd0
Thread   C:\Windows\System32\spoolsv.exe [1500:2868]                                                                                                                           000007fef6493438
Thread   C:\Windows\System32\spoolsv.exe [1500:2872]                                                                                                                           000007fef65263ec
Thread   C:\Windows\System32\spoolsv.exe [1500:2880]                                                                                                                           000007fef6a75e5c
Thread   C:\Windows\System32\spoolsv.exe [1500:2884]                                                                                                                           000007fef6aa4828
Thread   C:\Windows\System32\spoolsv.exe [1500:2916]                                                                                                                           000000000268e0bc
Thread   C:\Windows\System32\spoolsv.exe [1500:3320]                                                                                                                           00000000026881fc
Thread   C:\Windows\system32\svchost.exe [1536:1648]                                                                                                                           000007fef9ee3060
Thread   C:\Windows\system32\svchost.exe [1536:2096]                                                                                                                           000007fef9ee5570
Thread   C:\Windows\system32\svchost.exe [1536:2196]                                                                                                                           000007fef8912940
Thread   C:\Windows\system32\svchost.exe [1536:1416]                                                                                                                           000007fef62d2888
Thread   C:\Windows\system32\svchost.exe [1536:2752]                                                                                                                           000007fef62d2a40
Thread   C:\Windows\system32\Dwm.exe [2900:3036]                                                                                                                               000007fef5e1abf0
Thread   C:\Windows\system32\svchost.exe [2968:3108]                                                                                                                           000007fef3418470
Thread   C:\Windows\system32\svchost.exe [2968:3112]                                                                                                                           000007fef3422418
Thread   C:\Windows\system32\svchost.exe [2968:4276]                                                                                                                           000007fef87d5b84
Thread   C:\Windows\SysWOW64\ntdll.dll [3456:3460]                                                                                                                             000000000041689b
Thread   C:\Windows\SysWOW64\ntdll.dll [2484:616]                                                                                                                              0000000000ca7c7b
Thread   C:\Windows\SysWOW64\ntdll.dll [1724:1748]                                                                                                                             0000000000c0e362
Thread   C:\Windows\SysWOW64\ntdll.dll [1724:2044]                                                                                                                             0000000000c0e0d3
Thread   C:\Windows\SysWOW64\ntdll.dll [1724:2040]                                                                                                                             0000000000c0e0d3
Thread   C:\Windows\SysWOW64\ntdll.dll [3016:1284]                                                                                                                             0000000001378fb2
---- Processes - GMER 2.1 ----

Process  C:\Users\DOMOWY\AppData\Local\Temp\Rar$EXa0.218\gmer.exe (*** suspicious ***) @ C:\Users\DOMOWY\AppData\Local\Temp\Rar$EXa0.218\gmer.exe [1984](2014-05-26 14:38:25)  0000000000400000

---- EOF - GMER 2.1 ----
 

FRST_25-05-2014_21-37-35.txt

Addition.txt

OTL.Txt

Extras.Txt

[picasso]

Zabrakło raportu FRST Shortcut. I nie przymierzaj się do użycia pobranego ComboFix, nie ma podstaw.

 

Jest tu aktywne adware BrowserDefeder (w formie odpadków po niedokładnie odinstalowanym zespole adware Delta Toolbar), ale to wgląda na starą instalację i raczej nie ma wpływu na opisywane objawy, bo równie dobrze problem może tworzyć COMODO Internet Security. I widzę, że pobierałeś programy z portali, tzn. "Asystentów pobierania" zamiast poprawnych instalatorów zasadniczych: KLIK. Na teraz wykonaj doczyszczanie śieci:

 

1. Otwórz Notatnik i wklej w nim:

 

AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll => C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll [2521040 2013-05-23] ()
Task: {7B9C3D05-6CE4-4B11-9D8C-5CC7D9E886A2} - System32\Tasks\Opera D7 => C:\Program Files (x86)\Opera\launcher.exe
Task: {EA5D98BE-4A15-41E0-817A-FD4E29145375} - System32\Tasks\Opera D6 => C:\Program Files (x86)\Opera\launcher.exe
Task: {F5451A3C-D369-4BFB-9430-D217461686AB} - System32\Tasks\EPUpdater => C:\Users\DOMOWY\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe 
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A8F8BC5FF47B3FA2&affID=119821&tsp=4950
FF SelectedSearchEngine: AVG Secure Search
C:\Program Files (x86)\Mozilla Firefox\extensions
C:\Program Files (x86)\Przyspiesz
C:\Program Files (x86)\Opera
C:\ProgramData\BrowserDefender
C:\Users\DOMOWY\AppData\Roaming\OpenCandy
C:\Users\DOMOWY\Downloads\kED(11810).exe
C:\Users\DOMOWY\Downloads\Realtek-High-Definition-Audio-Codecs(21164).exe
C:\Users\DOMOWY\Downloads\YouTube-Downloader(27896).exe
C:\Users\DOMOWY\Downloads\setup_przyspiesz_ndw554hqu.exe
C:\Users\DOMOWY\Downloads\SoftonicDownloader_dla_anki.exe
Reg: reg add "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes" /v DefaultScope /t REG_SZ /d {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reboot:

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij w Fix. System zostanie zresetowany. W tym samym katalogu skąd uruchamiano FRST powstanie plik fixlog.txt.

 

2. Uruchom TFC - Temp Cleaner.

 

3. Zrób nowy log FRST z opcji Scan (bez Addition, ale dostarcz brakujący Shortcut). Dołącz też plik fixlog.txt.

 

 

 

 

.