Profilaktyka antywirusowa - laptop nr 2

[Naimad14]

Witam mam do przebadania drugi laptop ogólnie co można polepszyć żeby było szybciej.

LOG OTL: http://www.wklej.eu/index.php?id=a07e4e4c26
EXTRAS: http://www.wklej.eu/index.php?id=1592860ab8

Autoruns: http://www3.zippyshare.com/v/99909609/file.html

Dzięki z góry

[mateo8898]

Podaj brakujący log z Gmer otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

[kominekl]

W Autoruns oznacz, a następnie usuń (co się będzie dało) kolejno wpisy ATKMEDIA, RTHDVCPL, Microsoft Windows, Adobe PDF Link Helper, Java(tm) Plug-In 2 SSV Helper, Java(tm) Plug-In SSV Helper, Windows Live ID Sign-in Helper, wszystko z zakładki Task Scheduler, AdobeARMservice i WinDefend.

Następnie uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

Kod: Zaznacz wszystko

:OTL

DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Marek\AppData\Local\Temp\kwddikog.sys -- (kwddikog)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3336901601-351590385-2717654869-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3336901601-351590385-2717654869-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
[2012-04-07 15:44:31 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{BE75F423-FA95-467C-931B-45AA25DEB221}
[2012-04-07 15:03:12 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{1D03AEA7-631B-464C-BCC0-863A61F6E97B}
[2012-04-07 08:30:08 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{5EA88414-8208-45D5-9A1C-D82CF874FB1A}
[2012-04-06 21:05:54 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{890202B5-0053-4B50-AED3-EF0AF509D4F0}
[2012-04-06 07:52:54 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{55A2DD6A-C1BE-4769-89EA-4AA41299A028}
[2012-04-05 15:08:32 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{BFD9A5F3-9905-4461-8C2A-0D1D91E6E39A}
[2012-04-05 12:00:42 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{B1762BE2-C935-4BA7-8CE4-B7FE8E0E57F3}
[2012-04-05 12:00:19 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{C6511659-EF2F-47FA-A91E-314B188BD0AA}
[2012-04-05 08:37:32 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{BCB11F99-AD37-45DD-9083-49E6A80123DD}
[2012-04-05 08:36:51 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{F376FDC7-D920-4655-ABF4-437B3EA4302E}
[2012-04-04 19:41:51 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{101CABB3-61B5-43BD-B775-1EEC6846A427}
[2012-04-04 15:15:58 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{CD9CCBFD-C14C-4650-82E4-7483558958DB}
[2012-04-04 08:38:11 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{2DE99E9C-77AC-4347-A9A1-867B960D4328}
[2012-04-04 08:37:49 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{8084C25D-711E-4B85-A201-4B6DC69A6488}
[2012-04-04 08:22:37 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{ABBE73CC-4798-4A5D-98E1-A5663C1CB6DA}
[2012-04-04 08:22:08 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{99521A05-0FFD-42D2-AC59-B5C4E34147B1}
[2012-04-03 20:22:28 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{D0F36654-FB17-4211-8619-8EFC059C6092}
[2012-04-03 20:21:42 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{2E20E69F-5D0F-418C-97C0-8DE2F700C883}
[2012-04-03 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{31B273EE-52DD-428F-AF4F-64BAB2B820BC}
[2012-04-03 17:24:28 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{B4C26FB4-A796-4137-BA9D-C7E5689C364A}
[2012-04-03 12:08:14 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{B1F3D1CE-B0B2-4278-B623-AD7D4ED1182C}
[2012-04-03 12:07:33 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{FE26FF4A-2F6A-4179-AFFD-CECF3BB5E9C7}
[2012-04-02 21:19:32 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{6213D4B5-21A1-4DCB-B305-3589269EE5E9}
[2012-04-02 08:49:09 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{353095A6-5024-4FC7-A7BF-A443BB8535F1}
[2012-04-01 21:48:14 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{DFBF730E-87F3-400F-9F88-6A6CB3B162B1}
[2012-04-01 21:07:53 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{3E94F595-1A8F-47AE-948A-D7C33D902E57}
[2012-03-31 22:13:02 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{AA86116B-2B73-4F13-9445-28221384899C}
[2012-03-30 14:48:54 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{275CBE29-1E99-4D8F-A6B8-6CC7C513BEFA}
[2012-03-30 08:00:01 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{66A5CACC-1388-4D06-A2C0-61FFE61124B1}
[2012-03-29 08:17:08 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{01BED68F-BCD8-4214-9DCC-F0FA52948FF9}
[2012-03-28 21:01:10 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{53241421-6957-4238-9B07-FD28E47D1373}
[2012-03-28 21:00:55 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{07377F72-E011-46A4-87ED-0EC76FB1F719}
[2012-03-28 07:59:36 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{23714BC7-25A1-42AA-A46D-E3DEFC300745}
[2012-03-28 07:59:24 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{A23C0BC5-A14D-4317-B860-39B25E343443}
[2012-03-27 10:56:16 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{B9703E62-53BB-4452-8B83-750894374742}
[2012-03-27 10:55:53 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{B8CA8ACB-F564-4680-987D-E2AA89AFCE95}
[2012-03-26 20:38:38 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{DC638BF5-EEAA-4F18-B3ED-54576B2BBD29}
[2012-03-26 20:38:14 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{F98EB573-5F4D-4A95-BAC0-288F8B15A504}
[2012-03-26 08:07:21 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{4887166E-0403-4CAF-99EE-D851511CE363}
[2012-03-26 08:07:07 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{4386289B-F719-4665-B3A8-BF582B5A2F2D}
[2012-03-26 06:42:18 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{17C46EED-1CF3-4D5B-A1D9-C1B700537422}
[2012-03-25 10:08:32 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{8DC69AD6-85D8-4B0A-A6FF-293B3BB1CE84}
[2012-03-25 10:08:19 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{C808EFAD-ED8A-45E0-856D-94E6BCCEBE88}
[2012-03-24 13:28:27 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{14D53E05-9A99-428D-A7A1-7DAC5D520BD9}
[2012-03-23 14:18:00 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{95B30EC9-38C8-4F95-9E65-C5BB7FED6ECD}
[2012-03-23 14:17:37 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{FC56A9E5-030E-45C5-9CCD-C228646B09BE}
[2012-03-22 14:05:40 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{CCB5A9CB-4E73-4618-B484-745A714AF8BC}
[2012-03-22 14:05:28 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{8D079CE6-6547-43BC-ACD6-F6A7C76AF407}
[2012-03-21 23:01:00 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{91185181-5620-49FE-B58E-4AD9443243E4}
[2012-03-21 23:00:37 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{A6B2B6CF-D111-46DA-A37A-006E6FC8D788}
[2012-03-21 21:47:45 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{C8C90F84-D050-44E7-ADBB-6F594A7A3F2C}
[2012-03-21 21:47:31 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{684380B6-EBE2-481D-844A-5253F91E20DB}
[2012-03-21 07:45:06 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{5FD48694-9045-401F-B52E-00F7DC731712}
[2012-03-21 07:44:43 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{D1D27E71-4E4C-44B0-A102-6DB7F6192074}
[2012-03-21 07:44:43 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{A4D18ABE-05D3-407F-BF52-1CEF1ED1D56A}
[2012-03-20 15:15:10 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{DACEC8CC-F58F-4761-A1B3-494F8906A511}
[2012-03-20 15:14:47 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{D32A3466-08C9-46F5-AC96-1668AF76F203}
[2012-03-19 23:32:12 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{33780A3E-54A8-4C04-AA7E-E773B83EEECA}
[2012-03-19 23:31:50 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{9BD9169C-FD4A-4A08-8345-22BE43198D68}
[2012-03-19 09:16:30 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{4062A8DD-BCCA-4075-8D3D-39266B05BEB7}
[2012-03-19 09:16:08 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{87459F55-B3B1-43DD-B4FA-86E7208032B1}

:Files
C:\Users\Marek\AppData\Local\Temp
C:\Users\Marek\Desktop\AutoRuns.arn
C:\Windows\tasks\*.job
C:\Windows\ĽöŹ

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL + log, o którym mówił moderator.

[Naimad14]

Logi z usuwania: http://www.wklej.eu/index.php?id=ef9c786996

Log OTL: http://www.wklej.eu/index.php?id=82b146fd46
Extras: http://www.wklej.eu/index.php?id=31be7b367f

GMER: http://www.wklej.eu/index.php?id=f491a74621

[mateo8898]

W OTL wklej:

Kod: Zaznacz wszystko

:OTL
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
[2012-04-08 10:30:12 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\{11EAB113-5772-4296-BC5E-5A1737B126AC}

Klikasz Wykonaj skrypt, później Sprzątanie

Przeczyść dysk oraz rejestr CCleaner

Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport (po uruchomieniu odrzuć okres testowy)