spowolniony system

[mateo8898]

Witam ponownie proszę o pomoc z logami komputer bardzo wolno chodzi .
OTL http://www.wklej.eu/index.php?id=1f343d73f8

Gmer http://www.wklej.eu/index.php?id=58c48ef7f7

[mateo8898]

To jeszcze przydałby się brakujący log Extras z OTL.

[bk1979]

mam problem ze znalezieniem go albo nie zrobił albo nie wiem...

[mateo8898]

Ustaw prawidłowo OTL otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p107754 i utworzą się obydwa logi.

[bk1979]

otl http://www.wklej.eu/index.php?id=de5473b1df
ex http://www.wklej.eu/index.php?id=f9f9009380

[mateo8898]

1. Odinstaluj: Qtrax Player, WebCake 3.00, Search-NewTAb, Bundled software uninstaller, Search Assistant WebSearch 1.74, Winamp Toolbar, Lollipop
2. Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\dk\USTAWI~1\Temp\kfdcrfoc.sys -- (kfdcrfoc)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\ANDROIDUSB.sys -- (HTCAND32)
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=944&systemid=2&apn_uid=0616359028404110&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=708&r=2013/08/16&hid=3946352634&lg=EN&cc=PL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pur-esult.info/?pid=708&r=2013/08/16&hid=3946352634&lg=EN&cc=PL
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pur-esult.info/?pid=708&r=2013/08/16&hid=3946352634&lg=EN&cc=PL
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=6CF800112FBF563E&affID=123884&tt=070813_wt4&tsp=4969
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\..\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}: "URL" = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=944&systemid=2&apn_uid=0616359028404110&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\..\SearchScopes\{BA08E1E0-2446-4C3F-ACCC-861E6229DEC8}: "URL" = http://search.aol.pl/aol/search?s_it=tb50winamp&q={searchTerms}
IE - HKU\S-1-5-21-823518204-583907252-1801674531-1003\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.pur-esult.info/?l=1&q={searchTerms}&pid=708&r=2013/08/16&hid=3946352634&lg=EN&cc=PL
FF - prefs.js..browser.search.defaultenginename: "AOL Search"
FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch"
FF - prefs.js..browser.search.defaulturl: "http://search.winamp.com/search/search?query={searchTerms}&invocationType=winamp-ff&s_qt=sb&tb_uuid=20130616175654596&tb_oid=15-06-2013&tb_mrud=16-06-2013&query="
FF - prefs.js..browser.search.order.1: "WebSearch"
FF - prefs.js..browser.search.order.1,S: S", "WebSearch"
FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch"
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&s_qt=ab&s_it=winamp-ff&tb_uuid=20130616175654596&tb_oid=15-06-2013&tb_mrud=16-06-2013&q="
[2013-06-16 23:59:01 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\extensions\{8b9fe9be-f7dd-451e-ac96-0e568e0ecc10}
[2013-08-08 18:55:23 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\extensions\[email protected]
[2013-07-14 23:31:02 | 000,000,000 | ---D | M] (WebCake) -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\extensions\[email protected]
[2013-08-16 21:07:24 | 000,000,000 | ---D | M] (savensharae) -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\extensions\[email protected]
[2013-08-16 21:07:24 | 000,000,000 | ---D | M] (Search-NewTAb) -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\extensions\[email protected]
[2013-08-17 21:13:14 | 000,002,533 | ---- | M] () -- C:\Documents and Settings\dk\Dane aplikacji\Mozilla\Firefox\Profiles\f5dp7hxn.default\searchplugins\aol-search.xml
O3 - HKLM\..\Toolbar: (no name) - {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKU\S-1-5-21-823518204-583907252-1801674531-1003..\Run: [se] C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized File not found
O20 - AppInit_DLLs: (c:\progra~1\websea~1\sprote~1.dll) - c:\Program Files\WebSearch\sprotector.dll ()
[2013-09-07 14:12:51 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2013-09-07 14:12:41 | 000,000,324 | ---- | M] () -- C:\WINDOWS\tasks\YourFile DownloaderUpdate.job
[2013-08-24 19:26:10 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\PixillionSevenDays.job
[2013-08-24 19:26:05 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\PhotoPadSevenDays.job
[2013-08-24 19:25:16 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\VideoPadSevenDays.job
[2013-08-24 19:25:10 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\PhotoStageSevenDays.job
[2013-06-12 15:35:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\1834B

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
"uTorrent"=-

:Commands
[resethosts]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Podajesz log z usuwania.
3. Użyj AdwCleaner http://forum.instalki.pl/otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967-15.html#p139531 z opcji Clean i podaj utworzony log.
4. Wykonaj nowe logi z OTL.

Kolejność jak podałem.

[mateo8898]

Lolipop sie nie chce odinstalować
otl z usuwania All processes killed
http://www.wklej.eu/index.php?id=9d18a7ddab

http://www.wklej.eu/index.php?id=b377820da5
adwCleaner

otl http://www.wklej.eu/index.php?id=3274836a36
ex http://www.wklej.eu/index.php?id=eb15114999
WIELKIE DZIĘKI ZA POMOC

[mateo8898]

Usuwanie w OTL wykonaj tym razem w trybie awaryjnym. Wklej w OTL:

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\ANDROIDUSB.sys -- (HTCAND32)
FF - prefs.js..browser.search.defaultenginename: "AOL Search"
O3 - HKLM\..\Toolbar: (no name) - {15a0413e-9f45-4d45-9a75-2c20b15b5b51} - No CLSID value found.
[2013-09-07 22:51:06 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2013-08-24 19:26:10 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\PixillionSevenDays.job
[2013-08-24 19:26:05 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\PhotoPadSevenDays.job
[2013-08-24 19:25:16 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\VideoPadSevenDays.job
[2013-08-24 19:25:10 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\PhotoStageSevenDays.job

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
"uTorrent"=-

:Commands
[resethosts]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Podajesz log z usuwania + nowe logi z OTL.

[mateo8898]

http://www.wklej.eu/index.php?id=1bfb5dcbc4 Skrypt z usuwania z OTL

http://www.wklej.eu/index.php?id=597101a335 otl
http://www.wklej.eu/index.php?id=878193543e extras

[mateo8898]

Teraz poszło.

Wklej w OTL:

:OTL
O4 - HKU\S-1-5-21-823518204-583907252-1801674531-1003..\Run: [se] C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized File not found

Klikasz Wykonaj skrypt, następnie Sprzątanie

W AdwCleaner Uninstall

Przeczyść dysk oraz rejestr CCleaner

Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport (po uruchomieniu odrzuć okres testowy)

[bk1979]

http://www.wklej.eu/index.php?id=c3d4f4c605
masakra

[mateo8898]

Nie masakra, większość w punktach przywracania lub w kwarantannie Comodo. Opróżnij jeszcze kwarantannę Malwarebytes.