Komputer zwalnia po kontakcie z siecią, reklamy

[DriGerO]

Od wczoraj komputer dostaje muła gdy włączy się kartę sieciową i dostanie neta, oprócz  tego samo otwierające się karty w chrome.

FRST.txt

Addition.txt

Shortcut.txt

[jessica]

Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.
Otworzy się Notatnik - wklej do niego:

Task: {AEF1745E-AD3A-468F-8CCD-B480D0E5226F} - System32\Tasks\{87C610C2-990A-B46D-7539-9A4CF4C6B30B} => C:\Windows\CEOoEE.exe [2017-09-29] (Microsoft Corporation)
Task: {D8F28219-40F9-4315-B8E6-4918E9EDBECA} - System32\Tasks\{29BE7ED0-2514-7CDB-3BAA-198A98DC2ACE} => C:\Users\DriGerO\zadqEHeXgYua.exe [2017-09-29] (Microsoft Corporation)
C:\Users\DriGerO\zadqEHeXgYua.exe
C:\Windows\CEOoEE.exe
C:\Windows\YILsnkwYHgAei.exe
C:\Users\DriGerO\AppData\Local\dlEOuIob.exe
Task: {DA42BA96-3536-4826-841B-019638C319FB} - System32\Tasks\{71EEF61E-1369-E433-5D38-ECA4A1FC4185} => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://dzoper.com/cl/?guid=f923eet8u7zrpbb8xf71l4jrq22j21u7&prid=1&pid=4_1324_0
FirewallRules: [{510F94F9-8AC5-40BD-8429-056A21DB3550}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{AFB5E033-F92F-4568-8581-631B0BDD8015}] => (Allow) C:\Users\DriGerO\AppData\Local\dlEOuIob.exe
FirewallRules: [{023D21BF-F03B-41DA-80FE-701BD0773567}] => (Allow) C:\Windows\YILsnkwYHgAei.exe
FirewallRules: [{E01E4F34-0619-4D3C-A9B0-EE2D5F9C1E93}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7298D61C-D421-4EDD-B97C-03E010DFBF0D}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{51D1333E-52C9-40FF-9C8B-00FC90C6EB8B}] => (Allow) C:\Users\DriGerO\zadqEHeXgYua.exe
FirewallRules: [{5B310564-5853-4195-88D1-8DB24C1DD081}] => (Allow) C:\Windows\CEOoEE.exe
FirewallRules: [{9956A617-174A-4B9C-85F7-F9DD0D66F719}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8E25481C-4171-4FC1-B880-516C30C8043C}] => (Allow) C:\Users\DriGerO\AppData\Local\Windows.Config.Msi\msiexec64.exe
FirewallRules: [{177B2A43-D994-4A14-8FBC-93F3ECFF3A39}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{2ED14006-8DDC-40B4-ACA1-9C63E78A49DE}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F1457937-E26E-476D-92FC-9586F8C79E8C}] => (Allow) C:\Users\DriGerO\AppData\Local\Windows.Config.Msi\msiexec64.exe
FirewallRules: [{9EC03DF0-16CC-4972-B451-E7585D71FB43}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{FC7FFE3D-3B58-4270-B976-2475128AA6EF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5A01B042-7288-4BB7-9E22-D2C41FE5CA30}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{ACB9E50E-27C2-4EF7-BEE0-DB4AFA0D62D1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{63EDE691-0D1E-42AC-B828-497736CA7CDB}] => (Allow) C:\Users\DriGerO\AppData\Local\Windows.Config.Msi\msiexec64.exe
FirewallRules: [{592F6F74-ABEA-4465-902D-E9748AEF48C4}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{9A96721C-CBA0-4E6D-9090-E382A09379EC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4591492F-26C1-4826-8AE8-8656AFE910F2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{143AB5E6-A497-4895-B0E3-05C401FC1F4C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8CF7CF71-109D-44BC-B21E-D844BE3B94C5}] => (Allow) C:\Users\DriGerO\AppData\Local\Windows.Config.Msi\msiexec64.exe
FirewallRules: [{A9F5921F-954F-4E68-87A0-46A6EECB5773}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{D936E685-B33B-4EC6-8791-CCB21DC1727A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0D255AE1-16B0-459F-B187-E6C58FF651D2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{94D13E92-AE5A-4F16-AB46-3B41E9F92072}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F51BC4AE-9D48-44D2-A254-58C65D6079EB}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6B5DBF90-00F2-47D0-A183-8ED81342995B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{22B64F68-E4A0-4185-AC9B-4F52F7B2095A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{629DBCB0-D59B-43AC-AB59-3DCB54CFF747}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6B3DF7AD-00DA-4FD3-9781-1E1D0A5F3C2C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CBB9A463-593C-4BF8-847E-5D2DCEBEB9ED}] => (Allow) C:\Users\DriGerO\AppData\Local\Chrome Cleanup Tools\msiexec64.exe
FirewallRules: [{25C02D91-C3E1-45AB-8DED-07FB6EBD2102}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{09618313-DAA9-45A2-BB27-790D82639D77}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6C617F6C-7FD3-4BE8-8550-3DAAE51F0D9A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B28A6E39-98A9-4EEF-A063-3DB84E62EF52}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{614B5F07-9D4B-4197-88EB-999A4125E718}] => (Allow) C:\Users\DriGerO\AppData\Local\Chrome Cleanup Tools\msiexec64.exe
FirewallRules: [{52863735-026E-4E18-8A71-F555456B6A42}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{C2632015-4B48-416C-A72C-224C37E1647D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FB901A3E-8641-44EC-AF8F-740276F8F80D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{310AB166-7F7C-4E1F-918C-C7F1BC36BEA0}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BDA48A10-75B3-41C1-B33A-208BBD84D001}] => (Allow) C:\Users\DriGerO\AppData\Local\Chrome Cleanup Tools\msiexec64.exe
FirewallRules: [{029C8533-F793-47A7-9E0E-6A82BD11B0C6}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{826778E1-557F-437D-BDCC-92F2739E0E36}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{1076B547-45EF-4948-B6CA-930B9E233377}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3933653F-CA46-4E35-95BE-73B064FB482B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
C:\Windows\Minidump\*.dmp
C:\Users\DriGerO\AppData\Local\WMI.ini
Task: {10FFDFED-0C20-4108-B148-59E4D2EA93BB} - \SUPERAntiSpyware Scheduled Task 84265d70-748f-43c7-91b1-dd6fd1647480 -> Brak pliku <==== UWAGA
Task: {938D6B44-371B-4451-919B-63298DD04AA5} - \diffiticnetjka -> Brak pliku <==== UWAGA
Task: {9B8974FE-17BD-47E9-8893-C361B86E498A} - \SUPERAntiSpyware Scheduled Task 1f084a87-ccee-4851-b566-8582aa128aef -> Brak pliku <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
GroupPolicy: Ograniczenia ? <==== UWAGA
GroupPolicy\User: Ograniczenia ? <==== UWAGA
SearchScopes: HKU\S-1-5-21-2131416197-866700290-2125661845-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL =
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL+S. W FRST kliknij na Fix (NAPRAW).

 

Zrób nowe logi FRST - już bez Shortcut.

 

jessi

[DriGerO]

Dzięki! 
Nie mogłem namierzyć tej koparki. Wydaje się być już ok. 
 

FRST.txt

Addition.txt

[jessica]

Tylko kosmetyka:

Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.
Otworzy się Notatnik - wklej do niego:

FirewallRules: [{43E5512C-2F5E-47E5-9F13-68313249BD7E}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{FD2FBADA-F322-44D8-815F-B6A25B8C76A5}] => (Allow) C:\Users\DriGerO\AppData\Local\Chrome Cleanup Tools\msiexec64.exe
FirewallRules: [{07CAE99E-85FE-4757-867A-6A9C1C3F570A}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{542FC213-1543-4ACF-8BA0-C547CF1F816E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{12E97B29-AEE1-4106-9B6A-6FF58CD4B1E6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2419A94D-547B-48DA-952E-94CA663C4B09}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B27305D5-8754-4EFC-A567-B60DCF7567CF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{061EB051-37C5-4C29-99DF-3A2A07E60377}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{497E0A49-E185-4B1A-8BEC-6B8DC2A68739}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E1879F8F-5717-463C-9F2E-D4CC7292DECC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{799F5548-1F42-49B9-B2F3-A268ADC5A1E2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D3799A7A-80EA-4F09-AA80-901E37C7F5CA}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{FC67893E-04C9-4F39-ABE7-7B88A1BA4242}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{C60F5D1A-3A5B-4131-B145-4998B78969B4}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{DEFA2635-B603-4ED0-95CE-26C79B6947FE}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{06FBDCB3-74A8-4D98-8264-0B878B317C76}] => (Allow) C:\Windows\SysWOW64\tracert.exe
FirewallRules: [{81CA0F2C-CA95-4BAC-9644-EC62BA211CC7}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{6C0081D4-8954-4F1B-B39F-2622B1C6391E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{98699B54-D1E5-4DAE-98AA-CA0BC1493A18}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0BB6FDC5-21D9-44AC-A29B-ED13713EB4E0}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2A73C4F7-F700-4F87-AD9A-5EB449E136EB}] => (Allow) C:\Users\DriGerO\AppData\Local\Chrome Cleanup Tools\msiexec64.exe
FirewallRules: [{1A33FFE5-F63F-46F8-B4A1-D3FFE696D814}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{A42568A8-23D7-43D5-B5CA-26D9B6F84569}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4574A563-402F-44D7-8160-419CEF6AAFA6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{11B748AE-20CD-4E25-92B4-14C5DD3406A6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL+S. W FRST kliknij na Fix (NAPRAW).

 

Powinno już być OK.

 

jessi