Prośba o sprawdzenie loga - system wolno chodzi

Witam, jeśli ktoś mógłby sprawdzić mi tego loga

http://www.wklej.eu/index.php?id=eed3fba9ec

Podaj logi z OTL otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p107754 i GMER otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

log z OTL

http://wklej.eu/index.php?id=ee182ab37c


http://wklej.eu/index.php?id=8008330eef

Odinstaluj Ask Toolbar (VDownloader Toolbar), SUPERAntiSpyware Free Edition (słabizna), Przyspiesz Komputer (bujda), Reganam Toolbar (Conduit Engine).

Następnie uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

Kod:

:OTL

IE - HKLM\..\URLSearchHook: {db9d7a78-a76c-4bf2-97c6-258925ee1542} - C:\Program Files\Reganam\tbRega.dll (Conduit Ltd.)
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default
IE - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\URLSearchHook: {db9d7a78-a76c-4bf2-97c6-258925ee1542} - C:\Program Files\Reganam\tbRega.dll (Conduit Ltd.)
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..extensions.enabledItems: [email protected]:3.13.1.18107
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=VD&o=14778&locale=en_US&apn_uid=39B66704-6E3F-4BA2-B267-24A8A741CE72&apn_ptnrs=VX&apn_sauid=74ACDE8A-0496-48B4-8CD3-34B3EFD576DA&apn_dtid=YYYYYYYYPL&&q="
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
[2011-08-30 20:05:23 | 000,000,000 | ---D | M] (VDownloader Toolbar) -- C:\Users\madzia\AppData\Roaming\mozilla\Firefox\Profiles\b6nvabuy.default\extensions\[email protected]
[2011-11-04 17:18:30 | 000,002,571 | ---- | M] () -- C:\Users\madzia\AppData\Roaming\Mozilla\Firefox\Profiles\b6nvabuy.default\searchplugins\askcom.xml
[2009-07-18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Users\madzia\AppData\Roaming\Mozilla\Firefox\Profiles\b6nvabuy.default\searchplugins\BearShareWebSearch.xml
[2010-10-25 07:57:33 | 000,002,921 | ---- | M] () -- C:\Users\madzia\AppData\Roaming\Mozilla\Firefox\Profiles\b6nvabuy.default\searchplugins\daemon-search.xml
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
O3 - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - Startup: C:\Users\madzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartupFaster [2010-01-18 16:34:42 | 000,000,000 | -H-D | M]
O33 - MountPoints2\{18e13e0a-2b64-11de-846d-001e37e4b51d}\Shell\AutoRun\command - "" = 0w.com
O33 - MountPoints2\{18e13e0a-2b64-11de-846d-001e37e4b51d}\Shell\explore\Command - "" = 0w.com
O33 - MountPoints2\{18e13e0a-2b64-11de-846d-001e37e4b51d}\Shell\open\Command - "" = 0w.com
[2011-11-05 16:22:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-11-05 14:46:59 | 000,000,312 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
[2011-11-05 14:46:58 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
@Alternate Data Stream - 97 bytes -> C:\ProgramData\TEMP:3325D6E9
@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:5F7539FF

:Files
C:\Program Files\Google\Update
C:\Users\madzia\Desktop\Silent Runners
C:\Program Files\Common Files\AskToolbarInstaller.exe
C:\Users\madzia\Desktop\Silent Runners.zip
C:\ProgramData\.zreglib

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=-
"RtHDVCpl"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania + nowe logi z OTL.

Da się jakoś otworzyć log z usuwania? Bo zamknąłem a nie skopiowałem http://wklej.eu/index.php?id=0ac2e09a48

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL

SRV - File not found [On_Demand | Stopped] -- -- (gupdatem) Usługa Google Update (gupdatem)
SRV - File not found [Auto | Stopped] -- -- (gupdate) Usługa Google Update (gupdate)
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=VD&o=14778&locale=en_US&apn_uid=39B66704-6E3F-4BA2-B267-24A8A741CE72&apn_ptnrs=VX&apn_sauid=74ACDE8A-0496-48B4-8CD3-34B3EFD576DA&apn_dtid=YYYYYYYYPL&q="
O2 - BHO: (no name) - {db9d7a78-a76c-4bf2-97c6-258925ee1542} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {db9d7a78-a76c-4bf2-97c6-258925ee1542} - No CLSID value found.
O3 - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-510830853-4062788340-2367858009-1000\..\Toolbar\WebBrowser: (no name) - {DB9D7A78-A76C-4BF2-97C6-258925EE1542} - No CLSID value found.

:Services
gupdatem
gupdate

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. W OTL Sprzątanie.

Przeczyść dysk i rejestr CCleaner`em https://www.instalki.pl/download/programy/windows/narzedzia/narzedzia-systemowe/ccleaner/.
Wykonaj pełne skanowanie Malwarebytes`em Anti-Malware https://www.instalki.pl/download/programy/windows/bezpieczenstwo/antyspyware/malwarebytes/, jeśli coś znajdzie usuń i daj raport.
Odinstaluj starą wersję programu do odczytu .PDF Adobe Reader 8.1.0 - Polish i zainstaluj najnowszą http://www.instalki.pl/programy/downloa ... eader.html.
Odinstaluj starą wersję Java`y Java(TM) 6 Update 2 i zainstaluj najnowszą http://www.instalki.pl/programy/downloa ... %29_6.html.
Zaktualizuj Firefoksa do najnowszej wersji (Firefox Pomoc Sprawdź dostępność aktualizacji..).

http://wklej.eu/index.php?id=c94ba25230

Wykonaj resztę instrukcji.