Laptop wolno chodzi, duży ping

przez **arczieku** » 13 Maj 2012, 14:25

Witam.

Proszę o sprawdzenie logów z OTL
Coś mi strasznie wolno chodzi Laptop nie mówię że ping mam duży a łącze 6mbit Neo.

http://www.wklej.eu/index.php?id=0cdefdd7cc
http://www.wklej.eu/index.php?id=33abc8c7fe

przez **mateo8898** » 13 Maj 2012, 15:02

Podaj jeszcze brakujący log z Gmer

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

Z podłączonymi pamięciami przenośnymi użyj UsbFix z opcji Deletion i podaj utworzony log.

Odinstaluj Vuze Remote Toolbar, DAEMON Tools Toolbar. Następnie:
Uruchom OTL

w oknie Własne opcje skanowania/skrypt wklej:

Kod: Zaznacz wszystko: :OTL SRV - File not found [Disabled | Stopped] -- C:\Windows\reset.exe /s -- (.EsetTrialReset) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbmodem.sys -- (USBModem) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbdiag.sys -- (UsbDiag) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbbus.sys -- (usbbus) DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Arczi\AppData\Local\Temp\pgrcrpow.sys -- (pgrcrpow) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [File_System | Boot | Stopped] -- system32\DRIVERS\Lbd.sys -- (Lbd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) DRV - File not found [Kernel | Auto | Stopped] -- C:\Windows\system32\drivers\hardlock.sys -- (Hardlock) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbnet.sys -- (ewusbnet) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - File not found [Kernel | Disabled | Running] -- system32\DRIVERS\epfwtdi.sys -- (epfwtdi) DRV - File not found [Kernel | Disabled | Running] -- system32\DRIVERS\Epfwndis.sys -- (Epfwndis) DRV - File not found [Kernel | Disabled | Running] -- system32\DRIVERS\epfw.sys -- (epfw) DRV - File not found [Kernel | Disabled | Running] -- system32\DRIVERS\ehdrv.sys -- (ehdrv) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\cpu.sys -- (cpu) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\AmdLLD.sys -- (AmdLLD) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a5zc55hx) IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Polska Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&q=" FF - prefs.js..extensions.enabledItems: [email protected]:4.8 FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2 FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found [2010-11-03 18:18:24 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Arczi\AppData\Roaming\mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-04-26 06:30:03 | 000,000,000 | ---D | M] (InnoGames Polska Community Toolbar) -- C:\Users\Arczi\AppData\Roaming\mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} [2011-12-09 02:08:53 | 000,000,000 | ---D | M] (Vuze Remote Community Toolbar) -- C:\Users\Arczi\AppData\Roaming\mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2010-11-25 13:02:52 | 000,000,935 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\conduit.xml [2009-03-28 13:35:36 | 000,000,523 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\daemon-search.xml [2009-03-27 20:55:16 | 000,001,196 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\winamp-search.xml O4 - HKLM..\Run: [] File not found O4 - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000..\Run: [ChomikBox] C:\Program Files\ChomikBox\chomikbox.exe File not found O33 - MountPoints2\{09565413-4d7f-11e0-924a-dc529f6b4869}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn O33 - MountPoints2\{2f622100-5611-11df-be19-b5e6bdeba12c}\Shell\1\Command - "" = H:\.\recycled\info.exe O33 - MountPoints2\{2f622100-5611-11df-be19-b5e6bdeba12c}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\.\recycled\info.exe O33 - MountPoints2\{4a452273-161b-11e1-835a-de5bdffc9f15}\Shell\AutoRun\command - "" = H:\x2hjdx.exe O33 - MountPoints2\{4a452273-161b-11e1-835a-de5bdffc9f15}\Shell\open\Command - "" = H:\x2hjdx.exe O33 - MountPoints2\{5c551917-568f-11df-b7b5-a0c91bbc42a9}\Shell\auToPlay\cOmmaNd - "" = H:\orshxh.pif O33 - MountPoints2\{5c551917-568f-11df-b7b5-a0c91bbc42a9}\Shell\AutoRun\command - "" = H:\orshxh.pif O33 - MountPoints2\{5c551917-568f-11df-b7b5-a0c91bbc42a9}\Shell\EXplorE\ComMand - "" = H:\orshxh.pif O33 - MountPoints2\{5c551917-568f-11df-b7b5-a0c91bbc42a9}\Shell\Open\cOmmand - "" = H:\orshxh.pif O33 - MountPoints2\{cb9cddfe-9c72-11de-9283-001d0939cfaa}\Shell\AutoRun\command - "" = G:\y.bat O33 - MountPoints2\{cb9cddfe-9c72-11de-9283-001d0939cfaa}\Shell\open\Command - "" = G:\y.bat O33 - MountPoints2\{cb9cde04-9c72-11de-9283-001d0939cfaa}\Shell\AutoRun\command - "" = H:\y.bat O33 - MountPoints2\{cb9cde04-9c72-11de-9283-001d0939cfaa}\Shell\open\Command - "" = H:\y.bat O33 - MountPoints2\{f36c66ac-72fd-11de-90be-001f3adf675a}\Shell\AutoRun\command - "" = G:\kn6jhgc.cmd O33 - MountPoints2\{f36c66ac-72fd-11de-90be-001f3adf675a}\Shell\explore\Command - "" = G:\kn6jhgc.cmd O33 - MountPoints2\{f36c66ac-72fd-11de-90be-001f3adf675a}\Shell\open\Command - "" = G:\kn6jhgc.cmd [2012-05-13 14:16:01 | 000,000,462 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{5C7474A9-EAD4-4138-90C9-4DF421955367}.job [2012-05-13 14:01:00 | 000,000,256 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Messager.job [2012-05-13 14:00:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-05-13 11:55:00 | 000,000,972 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2012-05-13 00:00:00 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job O4 - HKLM..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr File not found :Files C:\Users\Arczi\AppData\Local\Temp*.html :Commands [resethosts] [clearallrestorepoints] [emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania + nowe logi z OTL.

przez **arczieku** » 13 Maj 2012, 16:05

Proszę bardzo Log UsbFix http://www.wklej.eu/index.php?id=a789d24789
Odinstaluj Vuze Remote Toolbar, DAEMON Tools Toolbar - to już zrobione

Log OTL http://www.wklej.eu/index.php?id=87b3e67f9c

przez **kominekl** » 13 Maj 2012, 20:19

Nie naciskasz przy wykonywaniu skryptu

Skanuj, lecz

Wykonaj Skrypt.

Odinstaluj

DriverAgent (nie dość rzetelny) i USBFix.

Następnie uruchom OTL

w oknie Własne opcje skanowania/skrypt wklej:

Kod: Zaznacz wszystko: :OTL SRV - File not found [Disabled | Stopped] -- C:\Windows\reset.exe /s -- (.EsetTrialReset) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbmodem.sys -- (USBModem) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbdiag.sys -- (UsbDiag) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgusbbus.sys -- (usbbus) DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Arczi\AppData\Local\Temp\pgrcrpow.sys -- (pgrcrpow) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd) DRV - File not found [Kernel | System | Stopped] -- C:\Windows\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) DRV - File not found [Kernel | Auto | Stopped] -- C:\Windows\system32\drivers\hardlock.sys -- (Hardlock) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbnet.sys -- (ewusbnet) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\cpu.sys -- (cpu) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\AmdLLD.sys -- (AmdLLD) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a1bcmq8h) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Livebox\SearchURLHook\SearchPageURL.dll () IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes,DefaultScope = {2C21626B-0702-4FEC-A491-30BD2818E872} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{2C21626B-0702-4FEC-A491-30BD2818E872}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{74E49DD4-201B-42F6-887E-A31494B4C732}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Polska Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&q=" FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) [2010-11-03 18:18:24 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-04-26 06:30:03 | 000,000,000 | ---D | M] (InnoGames Polska Community Toolbar) -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} [2011-12-09 02:08:53 | 000,000,000 | ---D | M] (Vuze Remote Community Toolbar) -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2010-11-25 13:02:52 | 000,000,935 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\conduit.xml [2009-03-28 13:35:36 | 000,000,523 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\daemon-search.xml [2009-03-27 20:55:16 | 000,001,196 | ---- | M] () -- C:\Users\Arczi\AppData\Roaming\Mozilla\Firefox\Profiles\39o9s9bl.default\searchplugins\winamp-search.xml O3 - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found. O3 - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\Toolbar\WebBrowser: (no name) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr File not found O4 - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000..\Run: [ChomikBox] C:\Program Files\ChomikBox\chomikbox.exe File not found O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0) @Alternate Data Stream - 237 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:2BE9FEFC @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:08948D52 @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 :Files C:\Program Files\Google\Google Updater C:\Program Files\Google\Update C:\UsbFix C:\Program Files\ESET C:\Windows\tasks\*.job C:\Users\Arczi\AppData\Local\Temp*.html $Recycle.Bin /alldrives C:\aaw7boot.log C:\AutoMapaSetupLog.txt C:\error.txt C:\hijackthis.log C:\Temp C:\TMP C:\UsbFix.txt C:\version.txt C:\wepkeys.txt D:\Temp C:\UsbFix_Upload_Me_ARCZI-PC.zip :Reg [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ESET Online Scanner] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptyflash] [clearallrestorepoints] [emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL + log z Autoruns

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p138589 + log z TDSSKiller

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p120292.

przez **arczieku** » 19 Maj 2012, 17:07

Proszę oto Log z wykonania skryptu http://wklej.eu/index.php?id=8ee97c2317

przez **kominekl** » 20 Maj 2012, 11:18

A gdzie reszta logów?

przez **arczieku** » 17 Cze 2012, 10:13

Przepraszam trochę już lepiej chodził i nie miałem czasu na skanowanie =/
Teraz znów jest sytuacja że łapie "zawieszki"
Skany

OTL
http://wklej.eu/index.php?id=673047db7e
http://wklej.eu/index.php?id=f3b3cc47fe

przez **kominekl** » 17 Cze 2012, 14:27

Odinstaluj

HiJackThis (staroć), Ad-Aware (użyjemy czegoś innego) i DriverAgent (nierzetelny).

Następnie wejdź w START

URUCHOM

Msconfig

Usługi

odznacz usługę

Windows Defender.

Ponadto system jest pozbawiony pliku HOSTS. Włącz pokazywanie rozszerzeń: w Windows Explorer > Organizuj > Opcje folderów i wyszukiwania > Widok > odznacz Ukrywaj rozszerzenia znanych typów. Otwórz Notatnik i wklej w nim:

Kod: Zaznacz wszystko: 127.0.0.1 localhost ::1 localhost[/quote] Z menu Notatnika -> Plik -> Zapisz, jako -> Ustaw rozszerzenie na Wszystkie pliki -> Zapisz pod nazwą hosts bez żadnego rozszerzenia. Plik wstaw do folderu C:\Windows\System32\drivers\etc. Następnie uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej: [quote]:OTL DRV - File not found [File_System | Boot | Stopped] -- system32\DRIVERS\Lbd.sys -- (Lbd) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ale69ksr) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a0f9y4fg) IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE - HKU\S-1-5-21-3471815057-3795578254-2813589387-1000\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} FF - prefs.js..browser.search.defaultenginename: "v9" FF - prefs.js..browser.search.order.1: "v9" FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2 O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) :Files C:\Program Files\Google\GoogleToolbar C:\Users\Arczi\AppData\Local\adaware C:\ProgramData\Ad-Aware Browsing Protection C:\Program Files\Ad-Aware Antivirus C:\Users\Arczi\AppData\Roaming\Ad-Aware Antivirus $RECYCLE.BIN /alldrives C:\Windows\tasks\*.job C:\Windows\System32\SBRC.dat C:\Users\Arczi\Desktop\HiJackThis.msi C:\Users\Arczi\AppData\Local\Temp*.html C:\Users\Arczi\AppData\Roaming\ESET C:\Users\Arczi\AppData\Roaming\tmp :Reg [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=- "Windows Defender"=- "Windows Mobile-based device management"=- [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"=- [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"=- [HKEY_USERS\S-1-5-21-3471815057-3795578254-2813589387-1000\Software\Microsoft\Windows\CurrentVersion\Run] "AlcoholAutomount"=- [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] :Commands [emptyflash] [clearallrestorepoints] [emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL + log z TDSSKiller

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p120292 + log z ADWCleaner

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p139531.

przez **arczieku** » 17 Cze 2012, 17:13

Wszystko wykonane oprócz skryptu =/ ponieważ wklejam skrypt i chce go wykonać w OTL wywala niiebieski ekran "crash dump" psyhical mmeory

przez **mateo8898** » 17 Cze 2012, 20:13

Spróbuj w awaryjnym.

przez **arczieku** » 17 Cze 2012, 20:33

Nie idzie w awaryjnym to samo

przez **mateo8898** » 17 Cze 2012, 22:01

Spróbuj takiego skryptu:

Kod: Zaznacz wszystko: :OTL DRV - File not found [File_System | Boot | Stopped] -- system32\DRIVERS\Lbd.sys -- (Lbd) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ale69ksr) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a0f9y4fg) FF - prefs.js..browser.search.defaultenginename: "v9" FF - prefs.js..browser.search.order.1: "v9" FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2 :Files C:\Users\Arczi\AppData\Local\Temp*.html :Commands [resethosts]

kominekl napisał(a): Ad-Aware (użyjemy czegoś innego)

Dlaczego mu zalecasz odinstalowanie Ad-Aware?? To całkiem niezły antywirus.

przez **arczieku** » 17 Cze 2012, 22:36

Ten poszedł co podaleś łap Loga
http://wklej.eu/index.php?id=ead1873435
http://wklej.eu/index.php?id=5bbbd3d7fa

przez **mateo8898** » 17 Cze 2012, 22:41

OK, podaj jeszcze nowe logi robione opcją Skanuj i log z Gmer

otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

przez **arczieku** » 18 Cze 2012, 16:22

http://wklej.eu/index.php?id=5bbbd3d7fa OTL
Gmer jak robie szukaj wywala crash i niebieski ekran w awaryjnym to samo....

Laptop wolno chodzi, duży ping

Laptop wolno chodzi, duży ping

Re: LOG - proszę o sprawdzenie

Re: LOG - proszę o sprawdzenie

Re: LOG - proszę o sprawdzenie

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Re: Laptop wolno chodzi, duży ping

Kto jest na forum