Windows XP SP3 - strasznie dużo reklam w przeglądarce, OTL do sprawdzenia

Witam,

mam problem z kompem, jak otwieram przegladarke CHROME to zaczyna sie masakra jednym slowem, z kazdej strony atakuja mnie reklamy, klikam w jakis link to otwieraja mi sie jakies okna z reklamami, w ogole nie da sie korzystac z internetu w takich warunkach...

Przesylam OTL do sprawdzenia i bardzo prosze was o pomoc.

http://wklej.org/id/1397120/
http://wklej.org/id/1397121/

Z gory bardzo wam dziekuje za pomoc i czekam na jakas odpowiedz...

Trzeba uzyć ADWcleaner, Malwarebytes anti-malware przeskanować komputer w poszukiwaniu wirusów, usunąć zbędne programy. Tyle a na początek.

Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

Daj w zalaczniku logi z FRST:
http://www.fixitpc.pl/topic/61-diagnostyka-ogólne-raporty-systemowe/#entry119294

uzylem adwcleaner wg powyzszej instrukcji,
uzylem Malwarebytes anti-malware

zrobilem nowy log OTL:
http://wklej.org/id/1397279/


zrobilem FRST:

http://wklej.org/id/1397280/
http://wklej.org/id/1397281/
http://wklej.org/id/1397282/


prosze o dalsza pomoc co dalej zrobic...

Odinstaluj:
PC Data App (HKLM\...\PCData App) (Version: - ) <==== ATTENTION
Software Version Updater (HKLM\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ATTENTION

Obok frst.exe utworz plik fixlist.txt z zawartoscia:
(Cherished Technololgy LIMITED) E:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe
(Cherished Technololgy LIMITED) E:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe
() E:\Program Files\PCDApp\dgen.exe
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-507921405-1993962763-1417001333-1003\...\Run: [LiveSupport] => "E:\Program Files\LiveSupport\LiveSupport.exe" /noshow /log
HKU\S-1-5-21-507921405-1993962763-1417001333-1003\...\Run: [DriverToolkit] => "E:\Program Files\DriverToolkit\DriverToolkit.exe" --autorun
AppInit_DLLs: E:\PROGRA~1\SupTab\SEARCH~1.DLL => E:\PROGRA~1\SupTab\SEARCH~1.DLL File Not Found
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&a...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&a...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
StartMenuInternet: IEXPLORE.EXE - E:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&t...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&a...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&a...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100902PBNC04EYD3SPWRX&q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SelectedSearchEngine: delta-homes
FF Homepage: hxxp://www.delta-homes.com/?type=hp&ts=1402558806&from=wpm0612&uid=HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
FF SearchPlugin: E:\Program Files\mozilla firefox\searchplugins\delta-homes.xml
FF SearchPlugin: E:\Program Files\mozilla firefox\searchplugins\webssearches.xml
FF Extension: Fast Start - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\Extensions\faststartff@gmail.com [2014-06-12]
FF Extension: Quick Start - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\Extensions\quick_start@gmail.com [2014-05-24]
FF Extension: shortcut - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\Extensions\shortcutff@gmail.com [2014-06-12]
FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\quick_start@gmail.com [2014-05-24]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\faststartff@gmail.com [2014-06-12]
FF HKLM\...\Firefox\Extensions: [shortcutff@gmail.com] - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\shortcutff@gmail.com
FF Extension: shortcut - E:\Documents and Settings\CaroNet\Dane aplikacji\Mozilla\Firefox\Profiles\iffvp1kc.default\extensions\shortcutff@gmail.com [2014-06-12]
FF StartMenuInternet: FIREFOX.EXE - E:\Program Files\Mozilla Firefox\firefox.exe http://www.delta-homes.com/?type=sc&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
CHR HomePage: hxxp://www.delta-homes.com/?type=hp&ts=1402558806&from=wpm0612&uid=HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
CHR StartMenuInternet: Google Chrome - E:\Program Files\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?type=sc&ts=14...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
R2 IePluginServices; E:\Documents and Settings\All Users\Dane aplikacji\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)
S2 ProtectMonitor; E:\Program Files\PCDApp\StartHelp.exe [97232 2014-05-09] () [File not signed]
R2 Wpm; E:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe [540304 2014-06-11] (Cherished Technololgy LIMITED)
R1 {55685567-4840-4a91-962b-49a412e9485a}t; E:\WINDOWS\System32\drivers\{55685567-4840-4a91-962b-49a412e9485a}t.sys [55224 2014-06-03] (StdLib)
R1 {b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}t; E:\WINDOWS\System32\drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}t.sys [55224 2014-05-22] (StdLib)
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () E:\awhD.tmp
2014-06-20 16:32 - 2014-06-20 16:32 - 00000687 _____ () E:\awhA.tmp
2014-06-20 16:13 - 2014-06-20 16:13 - 00000687 _____ () E:\awh7.tmp
2014-06-20 15:38 - 2014-06-20 15:41 - 00000000 ____D () E:\AdwCleaner
2014-06-20 09:22 - 2014-06-20 09:22 - 00000687 _____ () E:\awh1D.tmp
2014-06-19 21:23 - 2014-06-19 21:23 - 00000687 _____ () E:\awhC.tmp
2014-06-19 21:10 - 2014-06-19 21:10 - 00000687 _____ () E:\awhB.tmp
2014-06-19 20:53 - 2014-06-19 20:53 - 00000687 _____ () E:\awh11.tmp
2014-06-17 16:20 - 2014-06-17 16:20 - 00246784 _____ () E:\WINDOWS\system32\hfpapi.dll
2014-06-17 16:20 - 2014-06-17 16:20 - 00179200 ____N () E:\WINDOWS\system32\nethtsrv.exe
2014-06-17 16:20 - 2014-06-17 16:20 - 00159744 ____N () E:\WINDOWS\system32\netupdsrv.exe
2014-06-17 16:20 - 2014-06-17 16:20 - 00111104 _____ () E:\WINDOWS\system32\installd.exe
2014-06-17 16:20 - 2014-06-17 16:20 - 00108544 _____ () E:\WINDOWS\system32\hfnapi.dll
2014-06-18 15:24 - 2014-05-24 20:49 - 00000000 ____D () E:\Program Files\SupTab
2014-06-12 09:40 - 2014-05-24 20:49 - 00000000 ____D () E:\Documents and Settings\All Users\Dane aplikacji\WPM
2014-06-03 17:00 - 2014-06-05 00:10 - 00055224 _____ (StdLib) E:\WINDOWS\system32\Drivers\{55685567-4840-4a91-962b-49a412e9485a}t.sys
2014-05-24 20:50 - 2014-05-24 20:49 - 00000000 ____D () E:\Program Files\PCDApp
2014-05-24 20:50 - 2014-05-24 20:49 - 00000000 ____D () E:\Documents and Settings\All Users\Dane aplikacji\IePluginServices
2014-05-22 18:26 - 2014-05-24 23:08 - 00055224 _____ (StdLib) E:\WINDOWS\system32\Drivers\{b2db3058-74ee-4ace-bcd8-8cd0fbe3a4f6}t.sys
E:\Windows\Tasks\At1.job
E:\Windows\Tasks\At2.job
E:\Windows\Tasks\At3.job
E:\Windows\Tasks\At4.job

W FRST wybierz Fix.


Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/
oraz http://ftp.drweb.com/pub/drweb/cureit/launch.exe

Po wykonaniu daj nowy log z FRST.

przesylam nowe logi FRST:

http://wklej.org/id/1397362/

http://wklej.org/id/1397363/

http://wklej.org/id/1397364/


chcialbym jeszcze dodac ze jak wlacza chrome przegladarke to otwiera mi sie:
http://www.delta-homes.com/?type=sc&ts=140255...HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX

mam w ustawieniach ustawione ze po wlaczeniu ma sie otwierac strona www.interia.pl
bo tak chce i tez tam w ustawieniach jest opcja ustawienia wyszukiwarki to tam mam ustawione google.pl i nie ma tam zadnej innej, wszystkie usunalem, tylko google tam jest, wiec nigdzie w ustawieniach nie ma tego delta-homes a mimo wszystko wlasnie otwiera mi sie ta glupia wyszukiwarka :/


czekam na dalsza pomoc...

Wlacza sie bo taka masz ustawione strone domowa.

Uzyj http://www.bleepingcomputer.com/download/tfc/

Nowy fixlist.txt dla FRST:
CHR HomePage: hxxp://www.delta-homes.com/?type=hp&ts=1402558806&from=wpm0612&uid=HitachiXHTS545032B9A300_100902PBNC04EYD3SPWRX
S2 NetHttpService; E:\WINDOWS\system32\nethtsrv.exe [X]
S2 ServiceUpdater; E:\WINDOWS\system32\netupdsrv.exe [X]
S1 nethfdrv; \??\E:\WINDOWS\system32\drivers\nethfdrv.sys [X]
2014-06-20 18:42 - 2014-06-20 18:42 - 00000687 _____ () E:\awh10.tmp
2014-06-20 18:29 - 2014-06-20 18:29 - 00000687 _____ () E:\awhE.tmp

Po wykonaniu usun katalog C:\FRST w OTL wybierz Sprzatanie i to wszystko.

super, dziekuje ci bardzo za pomoca, jestem ci bardzo wdzieczny za szybka i fachowa pomoc...

tylko nie umiem sobie poradzic jeszcze z tym DELTA-HOMES, no rece rozkladam juz :/ poprostu sie NIE DA

mam w ustawieniach w chrome:

"po uruchomieniu"
mam zaznaczona opcje: "Otwórz konkretną stronę lub zestaw stron."
i tam mam wpisana tylk ostrone www.interia.pl

nastepnie:
"wygląd"
mam zaznaczona opcje: "Pokaż przycisk strony startowej"
i tam tez mam wpisana strone www.interia.pl

nastepnie mamy "wyszukiwanie"
i tam mam wybrana wyszukiwarke google

gdzie jeszcze musze zmienic zeby te glupie delta-homes mi sie juz nie wlaczalo... ? :/

bardzo prosze jeszcze o pomoc z tym bo szukalem w google juz nawet jak zmienic w chrome strone domowa to wszedzie pisze ze w tym dziale "wygląd" mam zaznaczyc pierwsza opcje i wpisac tam strone domowa, no to tak zrobilem i dalej nic nie dalo, nadal delta-homes sie otwiera jak wlaczam przegladarke... :/


z gory bardzo dziekuje i czekam jeszcze na odpowiedz

Tutaj masz opis: https://support.google.com/chrome/answer/95314?hl=pl

Jezeli nie pomoze to wykonaj: https://support.google.com/chrome/answer/3296214?hl=en

UFFFF udalo sie po resecie ustawien przegladarki, inaczej sie nie dalo...

super, tak wiec jestem czysty

dzieki ci serdeczne jeszcze raz

udanego weekendu, pozdrawiam

witam was ponownie,

jak sie wali to wszystko na raz :/
na drugim kompie mam dokladnie to samo ehhh :/

pierwszy raz mi sie tak zdarzylo ze na dwoch kompach ten sam wirus ulokowal :/

bardzo was prosze jeszcze o pomoc zeby i z tym kompem sobie jakos poradzic, dlatego tez podpinam sie pod ten sam temat, mam nadzieje ze bedzie dobrze...

wiec zalaczam logi OTL na poczatek:

http://wklej.org/id/1399067/

http://wklej.org/id/1399075/



z gory bardzo wam dziekuje za pomoc i czekam na jakas odpowiedz...

Daj logi z FRST.

przesylam logi FRST:

http://wklej.org/id/1399092/

http://wklej.org/id/1399094/

http://wklej.org/id/1399095/



czekam na pomoc...

Odinstaluj:
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java(TM) 6 Update 5 (HKLM-x32\...\{3248F0A8-6813-11D6-A77B-00B0D0160050}) (Version: 1.6.0.50 - Sun Microsystems, Inc.)
Software Version Updater (HKLM-x32\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ATTENTION
WinZipper (HKLM-x32\...\WinZipper) (Version: 1.5.29 - Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION

Zainstaluj http://ninite.com/java/

Uzyj AdwCleaner.

fixlist.txt dla FRST:
Task: {C9C96B1A-CF2A-45B5-8BA5-C7F0BA953904} - System32\Tasks\AmiUpdXp => C:\Users\Rafał\AppData\Local\SwvUpdater\Updater.exe [2014-02-02] () <==== ATTENTION
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\RafaB
\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\dup.exe
() C:\Windows\SysWOW64\nethtsrv.exe
() C:\Windows\SysWOW64\netupdsrv.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKU\S-1-5-21-2141528989-2265606301-1251213687-1000\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Rafał\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source...VMX&ts=1393409917&type=default&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_source...VMX&ts=1393409917&type=default&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe http://www.delta-homes.com/?type=sc&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_plPL426
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_plPL426
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} http://download13.managerzone.com/soccer-3d/PowerLoader.cab
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} http://sdlc-esd.sun.com/ESD40/JSCDL/jre/6u5-b...-windows-i586-jc.cab&BHost=javadl.sun.com
FF NewTab: hxxp://www.delta-homes.com/newtab/?type=nt&ts=1402579885&from=wpm0612&uid=HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
FF DefaultSearchEngine: delta-homes
FF SelectedSearchEngine: delta-homes
FF Homepage: hxxp://www.delta-homes.com/?type=hp&ts=1402579885&from=wpm0612&uid=HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml
FF Extension: Widget context - C:\Users\Rafał\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-02-16]
FF StartMenuInternet: FIREFOX.EXE - c:\program files (x86)\mozilla firefox\firefox.exe http://www.delta-homes.com/?type=sc&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
CHR HomePage: hxxp://www.delta-homes.com/?type=hp&ts=1402579885&from=wpm0612&uid=HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
CHR StartupUrls: "hxxp://www.delta-homes.com/?type=hp&ts=1402579885&from=wpm0612&uid=HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX"
CHR NewTab: "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: delta-homes
CHR DefaultSearchProvider: delta-homes
CHR DefaultSearchURL: http://search.delta-homes.com/web/?type=ds&am...XHTS545032B9A300_100906PBPC04FDD7VPVMX&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Quick Sidebar) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ainbkicbloikcngphmjfpjdemblcojdd [2014-06-12]
CHR Extension: (Extended Protection) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo [2014-06-12]
CHR Extension: (Quick start) - C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-06-12]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?type=sc&ts=14...HitachiXHTS545032B9A300_100906PBPC04FDD7VPVMX
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [761968 2014-06-12] (Cherished Technololgy LIMITED)
R2 NetHttpService; C:\Windows\SysWOW64\nethtsrv.exe [180224 2014-06-17] () [File not signed]
R2 ServiceUpdater; C:\Windows\SysWOW64\netupdsrv.exe [159744 2014-06-17] () [File not signed]
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [425104 2014-02-26] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [540304 2014-06-11] (Cherished Technololgy LIMITED)
R1 nethfdrv; C:\Windows\system32\drivers\nethfdrv.sys [46160 2014-06-17] (nethfdrv)
2014-06-22 19:07 - 2014-06-22 19:07 - 00000687 _____ () C:\awh35C6.tmp
2014-06-17 05:28 - 2014-06-17 05:28 - 00046160 _____ (nethfdrv) C:\Windows\system32\Drivers\nethfdrv.sys
2014-06-17 05:27 - 2014-06-17 05:27 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-17 05:27 - 2014-06-17 05:27 - 00180224 _____ () C:\Windows\SysWOW64\nethtsrv.exe
2014-06-17 05:27 - 2014-06-17 05:27 - 00159744 _____ () C:\Windows\SysWOW64\netupdsrv.exe
2014-06-17 05:27 - 2014-06-17 05:27 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-17 05:27 - 2014-06-17 05:27 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 15:31 - 2014-06-22 18:21 - 00000000 ____D () C:\Users\Rafał\AppData\Roaming\337Games
2014-06-12 15:31 - 2014-06-12 15:31 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-06-22 18:21 - 2014-02-02 17:00 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-06-22 15:04 - 2014-02-02 16:58 - 00000356 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-06-22 14:25 - 2014-02-26 12:18 - 00000000 ____D () C:\Program Files (x86)\WinZipper
2014-06-17 20:03 - 2014-02-02 16:58 - 00000000 ____D () C:\Users\Rafał\AppData\Roaming\newnext.me
2014-06-12 15:31 - 2014-02-02 16:59 - 00000000 ____D () C:\ProgramData\WPM
2014-05-24 21:41 - 2014-05-14 15:19 - 00000000 ____D () C:\Program Files (x86)\RichMediaViewV1
2014-05-24 21:36 - 2014-02-02 17:00 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-24 21:35 - 2014-02-02 16:56 - 00000000 ____D () C:\Users\Rafał\AppData\Local\Lollipop
2014-05-24 21:34 - 2014-04-25 12:49 - 00000000 ____D () C:\Program Files (x86)\MediaBuzzV1
2014-05-24 21:34 - 2014-02-28 00:30 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-05-24 21:34 - 2014-02-23 22:10 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-05-24 21:34 - 2014-02-18 21:56 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerV1
2014-05-24 21:33 - 2014-03-23 16:54 - 00000000 ____D () C:\Program Files (x86)\MediaWatchV1
2014-05-24 21:32 - 2014-02-02 16:57 - 00000000 ____D () C:\Users\Rafał\AppData\Roaming\nationzoom
2014-05-24 21:13 - 2014-02-02 17:00 - 00000000 ____D () C:\Users\Rafał\AppData\Roaming\iSafe
2014-05-24 21:10 - 2014-02-02 16:42 - 00000000 ____D () C:\Program Files (x86)\20Dollars2Surf
2014-05-24 21:05 - 2014-02-02 16:58 - 00000000 ____D () C:\Users\Rafał\AppData\Local\Mobogenie
2014-05-24 21:05 - 2014-02-02 16:57 - 00000000 ____D () C:\Program Files (x86)\Mobogenie


Zrob skan przy pomocy mbam. Uzyj tez tfc.exe:
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

jak wszytsko zrobilem to dac jakies logi ?

Dodano po 59 [minuty]:

nowe logi FRST:

http://wklej.org/id/1399240/

http://wklej.org/id/1399241/

http://wklej.org/id/1399242/


czekam na pomoc co dalej... :/

Usun:
C:\AdwCleaner
C:\FRST
I to wszystko.

dziekuje ci serdecznie jeszcze raz, jestes wielki kolego

milego wieczoru zycze i pozdrawiam