Elektroda.pl
Elektroda.pl
X
Elektroda.pl
Advanced Search
Elektroda.pl
Please add exception to AdBlock for elektroda.pl.
If you watch the ads, you support portal and users.

[Solved] Usuwanie niechcianego programu WebCompanion i optymalizacja komputera

Jarek2001Pazgan 05 Nov 2021 19:02 225 7
| New topic
  • #1
    Jarek2001Pazgan
    Level 4  
    Witajcie! Ostatnio na moim komputerze pojawił program WebCompanion, którego nie mogę usunąć. Nie dawno pobierałem wiele rzeczy i mój komputer znacząco zwolnił, więc wnioskuję, że WebCompanion nie jest jedynym niechcianym programem na moim dysku. Mogę wykonać skan programem FRST i załączyć wyniki.
    Attachments:
  • #2
    Kolobos
    IT specialist  
    > Mogę wykonać skan programem FRST i załączyć wyniki.

    Super, tylko po co w ogole piszesz skoro nie zamiesciles logow? WebCompanion nie zainstalowal sie sam, na przyszlosc uwazaj co robisz i nie instaluj PUP/PUA.
  • #3
    Jarek2001Pazgan
    Level 4  
    @Kolobos przepraszam, już załączam logi.
  • Helpful post
    #4
    Kolobos
    IT specialist  
    Aktualizuj W10 do najnowszej wersji.

    Odinstaluj:
    Combo Cleaner
    Defraggler
    run_a687a version 1.0
    Web Companion

    Fixlist.txt dla FRST:
    CloseProcesses:
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=IT201116&iDate=2021-11-05 04:47:57&iid=6c3582fa-e453-4a99-8457-c524e2128562&bName=
    SearchScopes: HKU\S-1-5-21-207733703-1379432147-3067955160-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
    IE trusted site: HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\webcompanion.com -> hxxp://webcompanion.com
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\StartupApproved\Run: => "Web Companion"
    (LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
    (Microleaves LTD -> Advanced Windows Manager) C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe <6>
    C:\Program Files (x86)\AW Manager\
    HKLM\...\Run: [Combo Cleaner] => "D:\Szef\ComboCleaner.exe" -minimized
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\Szef\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Medal] => C:\Users\Szef\AppData\Local\Medal\update.exe [1901144 2021-05-16] (Ferox Games B.V. -> )
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [8520168 2021-11-05] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
    Task: {41569658-1C80-4529-910F-195AB4C973AC} - System32\Tasks\AdvancedWindowsManager #2 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {54D71BE3-C113-46E6-95F1-EF5FE2A382B2} - System32\Tasks\AdvancedWindowsManager #1 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {7E2C5611-2129-4FC5-97A0-C68CF2423E72} - System32\Tasks\AdvancedWindowsManager #6 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {9BB9E5D6-6A2B-4151-97CF-CA2C74F699A8} - System32\Tasks\Opera GX scheduled Autoupdate 1604228741 => C:\Users\Szef\AppData\Local\Programs\Opera GX\launcher.exe [3963600 2021-10-19] (Opera Software AS -> Opera Software)
    Task: {A07B6857-88A6-4A80-985B-96A19461FC10} - System32\Tasks\AdvancedWindowsManager #4 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {A19844D6-56DB-443E-B7BD-5E0B7247CAA9} - System32\Tasks\AdvancedWindowsManager #5 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {BB00BAD1-045A-47DF-A256-7D030E0587CF} - System32\Tasks\AdvancedWindowsManager #3 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {F69B8F28-06DD-4777-AE3F-3EBCD3CD9AEC} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AW Manager\Windows Manager\Windows Updater.exe [1010800 2021-04-12] (Microleaves LTD -> AW Manager) <==== UWAGA
    R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [28136 2021-11-05] (LAVASOFT SOFTWARE CANADA INC -> )
    S2 ComboCleaner.Guard; D:\Szef\ComboCleaner.Guard.exe [X]
    S2 ComboCleaner.WinService; D:\Szef\ComboCleaner.WinService.exe [X]
    2021-11-05 18:25 - 2021-11-05 18:25 - 000000607 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Combo Cleaner.lnk
    2021-11-05 18:18 - 2021-11-05 18:18 - 003593000 _____ (RCS LT) C:\Users\Szef\Downloads\CCSetup.exe
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003932 _____ C:\Windows\system32\Tasks\AdvancedUpdater
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #6
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #5
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #4
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #3
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #2
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #1
    2021-11-05 18:09 - 2021-11-05 18:09 - 000000000 ____D C:\Program Files (x86)\run_a687a
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Users\Szef\AppData\Roaming\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Users\Szef\AppData\Local\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\ProgramData\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Program Files (x86)\Lavasoft
    2021-11-05 17:46 - 2021-11-05 17:46 - 000000000 ____D C:\Users\Szef\AppData\Local\AdvinstAnalytics
    2021-11-05 17:46 - 2021-11-05 17:46 - 000000000 ____D C:\Program Files (x86)\AW Manager
    2021-10-26 17:16 - 2021-10-26 17:16 - 000004222 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1604228741

    Uzyj tez AdwCleaner i usun to co wykryje.
  • Helpful post
    #6
    Kolobos
    IT specialist  
    Trudno, to tylko puste wpisy.
  • #7
    Jarek2001Pazgan
    Level 4  
    @Kolobos w takim razie bardzo dziękuję za pomoc i zamykam temat.
  • #8
    Jarek2001Pazgan
    Level 4  
    @Kolobos w takim razie bardzo dziękuję za pomoc i zamykam temat.

    Dodano po 44 [sekundy]:

    Aktualizuj W10 do najnowszej wersji.

    Odinstaluj:
    Combo Cleaner
    Defraggler
    run_a687a version 1.0
    Web Companion

    Fixlist.txt dla FRST:
    CloseProcesses:
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=IT201116&iDate=2021-11-05 04:47:57&iid=6c3582fa-e453-4a99-8457-c524e2128562&bName=
    SearchScopes: HKU\S-1-5-21-207733703-1379432147-3067955160-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
    IE trusted site: HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\webcompanion.com -> hxxp://webcompanion.com
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\StartupApproved\Run: => "Web Companion"
    (LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
    (Microleaves LTD -> Advanced Windows Manager) C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe <6>
    C:\Program Files (x86)\AW Manager\
    HKLM\...\Run: [Combo Cleaner] => "D:\Szef\ComboCleaner.exe" -minimized
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\Szef\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Medal] => C:\Users\Szef\AppData\Local\Medal\update.exe [1901144 2021-05-16] (Ferox Games B.V. -> )
    HKU\S-1-5-21-207733703-1379432147-3067955160-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [8520168 2021-11-05] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
    Task: {41569658-1C80-4529-910F-195AB4C973AC} - System32\Tasks\AdvancedWindowsManager #2 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {54D71BE3-C113-46E6-95F1-EF5FE2A382B2} - System32\Tasks\AdvancedWindowsManager #1 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {7E2C5611-2129-4FC5-97A0-C68CF2423E72} - System32\Tasks\AdvancedWindowsManager #6 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {9BB9E5D6-6A2B-4151-97CF-CA2C74F699A8} - System32\Tasks\Opera GX scheduled Autoupdate 1604228741 => C:\Users\Szef\AppData\Local\Programs\Opera GX\launcher.exe [3963600 2021-10-19] (Opera Software AS -> Opera Software)
    Task: {A07B6857-88A6-4A80-985B-96A19461FC10} - System32\Tasks\AdvancedWindowsManager #4 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {A19844D6-56DB-443E-B7BD-5E0B7247CAA9} - System32\Tasks\AdvancedWindowsManager #5 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {BB00BAD1-045A-47DF-A256-7D030E0587CF} - System32\Tasks\AdvancedWindowsManager #3 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [482624 2021-04-09] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
    Task: {F69B8F28-06DD-4777-AE3F-3EBCD3CD9AEC} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AW Manager\Windows Manager\Windows Updater.exe [1010800 2021-04-12] (Microleaves LTD -> AW Manager) <==== UWAGA
    R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [28136 2021-11-05] (LAVASOFT SOFTWARE CANADA INC -> )
    S2 ComboCleaner.Guard; D:\Szef\ComboCleaner.Guard.exe [X]
    S2 ComboCleaner.WinService; D:\Szef\ComboCleaner.WinService.exe [X]
    2021-11-05 18:25 - 2021-11-05 18:25 - 000000607 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Combo Cleaner.lnk
    2021-11-05 18:18 - 2021-11-05 18:18 - 003593000 _____ (RCS LT) C:\Users\Szef\Downloads\CCSetup.exe
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003932 _____ C:\Windows\system32\Tasks\AdvancedUpdater
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #6
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #5
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #4
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #3
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #2
    2021-11-05 18:09 - 2021-11-05 18:09 - 000003928 _____ C:\Windows\system32\Tasks\AdvancedWindowsManager #1
    2021-11-05 18:09 - 2021-11-05 18:09 - 000000000 ____D C:\Program Files (x86)\run_a687a
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Users\Szef\AppData\Roaming\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Users\Szef\AppData\Local\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\ProgramData\Lavasoft
    2021-11-05 17:47 - 2021-11-05 17:47 - 000000000 ____D C:\Program Files (x86)\Lavasoft
    2021-11-05 17:46 - 2021-11-05 17:46 - 000000000 ____D C:\Users\Szef\AppData\Local\AdvinstAnalytics
    2021-11-05 17:46 - 2021-11-05 17:46 - 000000000 ____D C:\Program Files (x86)\AW Manager
    2021-10-26 17:16 - 2021-10-26 17:16 - 000004222 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1604228741

    Uzyj tez AdwCleaner i usun to co wykryje.
| New topic