Diagnostyka laptopa - Logi i autoruns

[Naimad14]

Witam proszę o sprawdzenie logów i wgląd w autostart oraz porady co ewentualnie uczynić.

Log OTL: http://www.wklej.eu/index.php?id=a1c0f1e66f
Log OTL Extras: http://www.wklej.eu/index.php?id=878112b0bb

Log GMER: http://www.wklej.eu/index.php?id=d78b5d8fe8

Autoruns: http://www9.zippyshare.com/v/9387343/file.html

Z góry dziękuję.

[kominekl]

Autoruns.

W Autoruns odznacz, a następnie usuń (co się będzie dało):

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

AmIcoSinglun64
BCSSync
ETDWare
IgfxTray
Persistence

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

Adobe ARM
ATKMEDIA
ATKOSD2
HControlUser
NUSB3MON
SunJavaUpdateSched
WD Quick View

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

Wszystko.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components

Wszystko.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Akamai NetSession Interface
AlcoholAutomount
Google Update
Sony Ericsson PC Companion

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

Wszystko.

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

Wszystko.

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions

Wszystko.

Task Scheduler

Wszystko.

HKLM\System\CurrentControlSet\Services

AdobeARMservice
AFBAgent
ATKGFNEXSrv
LMS
Microsoft SharePoint Workspace Audit Service
MSSQL$SQLEXPRESS
npggsvc
nvsvc
nvUpdatusService
ose64
osppsvc
PnkBstrA
SkypeUpdate
Sony Ericsson PCCompanion
SQLWriter
StarWindServiceAE
UNS
WDBackup
WDDriveService
WDRulesService
WinDefend
wlidsvc
WMPNetworkSvc

HKLM\System\CurrentControlSet\Services

NPPTNT2
PortTalk
qkm
Tosrfcom
X6va003

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls

Wszystko.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls

Wszystko.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

Wszystko.

"Akamai" = Akamai NetSession Interface

Odinstaluj to oprogramowanie, oraz ewentualnie zbędne Ci.

Logi.

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

Kod: Zaznacz wszystko

:OTL

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-824699806-1959797451-325210591-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-824699806-1959797451-325210591-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Damian\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Damian\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)

:Files
C:\Users\Damian\AppData\Local\Google\Update
C:\Users\Damian\AppData\Local\Akamai
C:\ProgramData\McAfee
C:\Users\Damian\AppData\Roaming\7za.exe
C:\Windows\tasks\*.*
C:\Users\Damian\Desktop\AutoRuns.arn
C:\Users\Damian\Desktop\gmer.exe

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z ADWCleaner (z opcji Delete) otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p139531 + log nowe logi z OTL.

[Naimad14]

Log z usuwania OTL- http://www.wklej.eu/index.php?id=dc862e8f17

Log z ADWcleaner- http://www.wklej.eu/index.php?id=d34178449e

OTL- http://www.wklej.eu/index.php?id=206f9bdb00
Extras- http://www.wklej.eu/index.php?id=7631391b73

[kominekl]

Logi.

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL

O2:64bit: - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O9:64bit: - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9:64bit: - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9:64bit: - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9:64bit: - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O20:64bit: - Winlogon\Notify\AutorunsDisabled: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found

:Files
C:\temp
C:\Windows\stinger.sys
C:\Program Files (x86)\stinger
C:\Users\Damian\AppData\Roaming\cryptlib

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.

[Naimad14]

Log z usuwania- http://www.wklej.eu/index.php?id=b5449cfa1e

Log z OTL- http://www.wklej.eu/index.php?id=0883cf255b
Log Extras- http://www.wklej.eu/index.php?id=19b5baf25d

[mateo8898]

W OTL Sprzątanie

Przeczyść dysk oraz rejestr CCleaner

Odinstaluj starą wersję Javy:

Java(TM) 6 Update 35

i zainstaluj najnowszą http://www.instalki.pl/programy/download/Windows/biblioteki/Java.html