Problem przy pobieraniu plikow

[adamek]

witam

mam laptop acer procesor 1.60 ghz ram 1 giga windows xp

przy pobieraniu obojetnie jakiego pliku przy 99% pobierania wyskakuje blad "pobieranie nie powiodlo sie".

Nie moge wstawic logow bo ten blad sie pojawia kiedy chce pobrac frst.

jakies wskazowki?

[jessica]

spróbuj pobrać w Trybie Awaryjnym (F8 przed startem Systemu).

 

jessi

[adamek]

Sciagnalem z googlechrome.Mozille odinstalowalem.

Laptop strasznie przycina.

Czekam na wiadomosci

Adam

Shortcut.txt

FRST.txt

Addition.txt

.txt

[jessica]

https://www.pcrisk.pl/narzedzia-usuwania/8141-bytefence-redirect

1) Spróbuj odinstalować te program:

ByteFence Anti-Malware (HKLM\...\ByteFence) (Version: 2.4.0.0 - Byte Technologies LLC) <==== UWAGA

 

2) Otwórz Notatnik i wklej w nim:

 

Task: C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\WINDOWS\TEMP\{40CBA561-8591-4ED6-87E6-2B7482023CD4}.exe <==== UWAGA
Task: C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\WINDOWS\TEMP\{1B599C18-53E6-44A9-B0DF-B4FF951E5E30}.exe <==== UWAGA
ShortcutWithArgument: C:\Documents and Settings\Użytkonik\Pulpit\Program uruchamiający aplikacje Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Documents and Settings\Użytkonik\Menu Start\Programy\Google Chrome\Program uruchamiający aplikacje Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Documents and Settings\Użytkonik\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Program uruchamiający aplikacje Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
HKU\S-1-5-21-1844237615-651377827-1606980848-1004\...\Run: [byteFence] => C:\Program Files\ByteFence\ByteFence.exe [1719264 2016-08-07] (Byte Technologies LLC)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP
HKU\S-1-5-21-1844237615-651377827-1606980848-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxps://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D2%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP" <======= UWAGA
HKU\S-1-5-21-1844237615-651377827-1606980848-1004\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxps://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D2%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP" <======= UWAGA
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP&p={searchTerms}
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=agc511&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {c701def8-c53d-4778-b4c4-2fc607a38c20} URL = hxxps://blekko.com/ws/?q={searchTerms}&source=149e2f4c
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=agc511&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> {c701def8-c53d-4778-b4c4-2fc607a38c20} URL = hxxps://blekko.com/ws/?q={searchTerms}&source=149e2f4c
SearchScopes: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP&p={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll => Brak pliku
BHO: Brak nazwy -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Brak pliku
Toolbar: HKLM - Brak nazwy - {95B7759C-8C7F-4BF1-B163-73684A933233} -  Brak pliku
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll Brak pliku
Toolbar: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> Brak nazwy - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  Brak pliku
Toolbar: HKU\S-1-5-21-1844237615-651377827-1606980848-1004 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll Brak pliku
FF DefaultSearchEngine: Yahoo! Powered
FF SelectedSearchEngine: Yahoo! Powered
FF Homepage: hxxps://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_instlki_16_35&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutDtBtDtD0F0F0A0A0A0A0A0A0E0D0C0AtN0D0Tzu0StCyBtDtBtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyE0AyBzy0E0B0EtGyCtBtBtBtGtCyC0BzytGtCtAzztDtGtD0CtD0FyEzztAzzyB0CyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtByCyE0CtAyDzytGyEtBtC0AtGyEtCyD0CtG0Azz0F0BtG0E0AyBtCtCzz0C0DyDyD0A0A2QtN0A0LzuyEtN1B2Z1V1T1S1NzutBtAyBtB%26cr%3D1116279763%26a%3Dwbf_instlki_16_35%26os_ver%3D5.1%26os%3DWindows%2BXP
FF SearchPlugin: C:\Documents and Settings\Użytkonik\Dane aplikacji\Mozilla\Firefox\Profiles\6zwmdi5c.default\searchplugins\blekko-avast.xml [2015-01-07]
FF SearchPlugin: C:\Documents and Settings\Użytkonik\Dane aplikacji\Mozilla\Firefox\Profiles\6zwmdi5c.default\searchplugins\yahoo! powered.xml [2016-08-29]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2014-08-27]
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [254280 2016-08-29] ()
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_cdcecm; system32\DRIVERS\ew_jucdcecm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
RemoveDirectory: C:\Program Files\ByteFence
C:\Documents and Settings\All Users\Dane aplikacji\ByteFence
C:\Program Files\Mozilla Firefoxavg-secure-search.xml
HOSTS:
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

W logach nie widzę żadnej infekcji.

 

jessi

[adamek]

dzieki jessi za pomoc.Zrobilem jak zalecilas usunalem ten program i usunalem frst te wpisy.

szybciej przegladam stronki

Temat do zamkniecia.

Dzieki 

pozdrawiam

Adam