Zamulony komp otwierające się różne okienka

[Wojtasgls]

Dawno tak zasyfionego kompa nie widziałem. Proszę o naprawę

OTL

http://wklej.org/id/778679/

http://wklej.org/id/778680/

[wojtas]

jest używany BearShare ? jeśli nie proszę odinstalować


Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms}
IE - HKU\S-1-5-21-1390067357-179605362-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
IE - HKU\S-1-5-21-1390067357-179605362-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com
IE - HKU\S-1-5-21-1390067357-179605362-725345543-1004\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms}
O2 - BHO: (DataMngr) - {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll (MusicLab, LLC)
O2 - BHO: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
O3 - HKLM\..\Toolbar: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [Hotfix-KB5504305] C:\WINDOWS\system32\rundll81.exe ()
O4 - HKU\S-1-5-21-1390067357-179605362-725345543-1004..\Run: [Hotfix-KB5504305] C:\WINDOWS\system32\rundll81.exe ()
O4 - HKLM..\RunServices: [Hotfix-KB5504305] C:\WINDOWS\system32\rundll81.exe ()
O4 - HKU\S-1-5-21-1390067357-179605362-725345543-1004..\RunServices: [Hotfix-KB5504305] C:\WINDOWS\system32\rundll81.exe ()
O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~2\MediaBar\Datamngr\datamngr.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngr.dll (MusicLab, LLC)
O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~2\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC)
[2012-06-24 08:17:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\28196

:Files
C:\WINDOWS\system32\rundll81.exe
C:\Program Files\BearShare Applications\MediaBar

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

Autor postu otrzymał pochwałę

[Wojtasgls]

Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}\ not found.
HKU\S-1-5-21-1390067357-179605362-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-1390067357-179605362-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1390067357-179605362-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B939CF93-F2CB-443d-956C-DC523D85C9DB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B939CF93-F2CB-443d-956C-DC523D85C9DB}\ not found.
File C:\Program Files\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ deleted successfully.
File C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ not found.
File C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Cmaudio deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Hotfix-KB5504305 deleted successfully.
C:\WINDOWS\system32\rundll81.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1390067357-179605362-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Hotfix-KB5504305 deleted successfully.
File C:\WINDOWS\system32\rundll81.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\\Hotfix-KB5504305 deleted successfully.
File C:\WINDOWS\system32\rundll81.exe not found.
Registry value HKEY_USERS\S-1-5-21-1390067357-179605362-725345543-1004\Software\Microsoft\Windows\CurrentVersion\RunServices\\Hotfix-KB5504305 deleted successfully.
File C:\WINDOWS\system32\rundll81.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~1\BEARSH~2\MediaBar\Datamngr\datamngr.dll deleted successfully.
File C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngr.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~1\BEARSH~2\MediaBar\Datamngr\IEBHO.dll deleted successfully.
File C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll not found.
C:\Documents and Settings\All Users\Dane aplikacji\28196 folder moved successfully.
========== FILES ==========
File\Folder C:\WINDOWS\system32\rundll81.exe not found.
File\Folder C:\Program Files\BearShare Applications\MediaBar not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: adam
->Temp folder emptied: 1136044957 bytes
->Temporary Internet Files folder emptied: 60255580 bytes
->FireFox cache emptied: 13401995 bytes
->Flash cache emptied: 50109 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33237 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2143935 bytes
%systemroot%\System32 .tmp files removed: 2832932 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 555384 bytes
RecycleBin emptied: 128 bytes

Total Files Cleaned = 1 159,00 mb


OTL by OldTimer - Version 3.2.53.0 log created on 06242012_105140

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

OTL SCAN
http://wklej.org/id/778717/

[wojtas]

wydaje się być czysto