Bardzo powolny komputer wirusy ?

[naffie]

Czesc, mój komputer chodzi powoli, zawiesza się, duży ping prosze o sprawdzenie logów
Otl http://www.wklej.net/id/389/
Extras http://www.wklej.net/id/390/
Dziękuję

[wojtas]

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=2&cf=beeff122-1f68-11e1-a550-0017a4404db6
IE - HKLM\..\SearchScopes\{1CE0FA45-74B6-4666-B9D5-E962DF7E0B61}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=beeff122-1f68-11e1-a550-0017a4404db6&q={searchTerms}
IE - HKU\S-1-5-21-2002376201-3391117933-1206472450-500\..\SearchScopes\{BF0B96F7-83DA-44BD-879B-D7E3E5EA1718}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=beeff122-1f68-11e1-a550-0017a4404db6&q={searchTerms}
IE - HKU\S-1-5-21-2002376201-3391117933-1206472450-500\..\SearchScopes\{E083EEE3-9C43-453F-A1BE-DAD58D00D7C5}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=YYYYYYYYPL&apn_uid=07133E6B-C01C-4116-943F-7F4C141D3844&apn_sauid=19B5B967-692A-4B1B-A886-80256E95C0EF
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.15.9.100013
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
[2012-11-10 13:04:59 | 000,002,571 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\2re0wx8b.default\searchplugins\askcom.xml
O3 - HKU\S-1-5-21-2002376201-3391117933-1206472450-500\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2002376201-3391117933-1206472450-500\..\Toolbar\WebBrowser: (StartSearchToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.)
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.)
O33 - MountPoints2\{0e3a6b68-b467-11df-a0dc-0017a4404db6}\Shell - "" = AutoRun
O33 - MountPoints2\{0e3a6b68-b467-11df-a0dc-0017a4404db6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{1a26566e-df2c-11de-9e87-0017a4404db6}\Shell - "" = AutoRun
O33 - MountPoints2\{1a26566e-df2c-11de-9e87-0017a4404db6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2c7dddc0-e5d3-11de-9e9c-0017a4404db6}\Shell - "" = AutoRun
O33 - MountPoints2\{2c7dddc0-e5d3-11de-9e9c-0017a4404db6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{414ff310-df06-11de-9e83-0017a4404db6}\Shell - "" = Autorun
O33 - MountPoints2\{414ff310-df06-11de-9e83-0017a4404db6}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2008-04-14 18:21:39 | 000,023,040 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{a2616106-fc94-11de-9edf-0017a4404db6}\Shell - "" = AutoRun
O33 - MountPoints2\{a2616106-fc94-11de-9edf-0017a4404db6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a2616108-fc94-11de-9edf-0017a4404db6}\Shell\AutoRun\command - "" = E:\r3q63rok.exe
O33 - MountPoints2\{a2616108-fc94-11de-9edf-0017a4404db6}\Shell\open\Command - "" = E:\r3q63rok.exe
O33 - MountPoints2\{a66b4743-de0a-11de-9e6f-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{a66b4743-de0a-11de-9e6f-806d6172696f}\Shell\AutoRun\command - "" = D:\autorun.exe -- [2010-04-22 09:54:24 | 000,217,600 | R--- | M] ()
O33 - MountPoints2\{ed231194-df2a-11de-9e85-0017a4404db6}\Shell - "" = AutoRun
O33 - MountPoints2\{ed231194-df2a-11de-9e85-0017a4404db6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1


:Files
C:\Program Files\StartSearch plugin

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Użyj AdwCleaner i kliknij w nim Delete (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzyła się po restarcie).