Kom sie zawiesza i blue screen czasem

**Posty:** 76 · przez **kerli** 07 Maj 2010, 10:44

Gamer: http://wklej.org/id/329621/
OLT : http://wklej.org/id/329622/
Extras: http://wklej.org/id/329623/

Proszę o sprawdzenie logów

**Posty:** 1916 · przez **lamar** 07 Maj 2010, 13:51

Log z Gmera robiony w złych warunkach :

DRV - [2002-04-29 01:39:46 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

Usuń sptd.sys i daj nowego loga z Gmera.
programy-emulujace-napedy-wazne-vt117886.html

**Posty:** 76 · przez **kerli** 07 Maj 2010, 14:06

Gamer: http://wklej.org/id/329686/

**Posty:** 18165 · przez **wojtas** 07 Maj 2010, 18:40

zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i pokaż raport

**Posty:** 76 · przez **kerli** 07 Maj 2010, 19:45

prosze :
http://wklej.org/id/329905/ (data zła w logu ale nie zwracać uwagi )

**Posty:** 18165 · przez **wojtas** 07 Maj 2010, 20:08

masz jakieś pendrivy lub coś ? : jak tak to:
Przy podpiętym urządzeniu przenośnym, uruchom USBFix z opcji 5 i pokaż raport na forum.

zainstaluj sobie Avire z darmowych , Nod'a 32 z płatnych

**Posty:** 76 · przez **kerli** 07 Maj 2010, 21:46

Kod: Zaznacz wszystko: ############################## | UsbFix V6.111 | User : Kamil (Administratorzy) # SPE5D2 Update on 03/05/2010 by El Desaparecido , C_XX & Chimay8 Start at: 22:36:21 | 2010-05-07 Website : http://pagesperso-orange.fr/NosTools/index.html Contact : FindyKill.Contact@gmail.com AMD Athlon(tm) Processor Microsoft Windows XP Professional (5.1.2600 32-bit) # Dodatek Service Pack 3 Internet Explorer 7.0.5730.13 Windows Firewall Status : Enabled A:\ -> Stacja dyskietek 3,5 cala C:\ -> Lokalny dysk stały # 29,6 Go (26,71 Go free) # NTFS D:\ -> Lokalny dysk stały # 44,92 Go (44,83 Go free) [Dane] # NTFS E:\ -> Dysk CD-ROM F:\ -> Dysk wymienny # 1,97 Go (1,53 Go free) # FAT ###################### | Listing of the present files C:\ | [2002-04-29 00:52|--a------|0] - C:\AUTOEXEC.BAT [2002-04-29 01:31|---hs----|232] - C:\boot.ini [2001-08-23 14:00|-rahs----|4952] - C:\Bootfont.bin [2002-04-29 00:52|--a------|0] - C:\CONFIG.SYS [2002-04-29 00:52|-rahs----|0] - C:\IO.SYS [2002-04-29 00:52|-rahs----|0] - C:\MSDOS.SYS [2008-04-13 22:13|-rahs----|47564] - C:\NTDETECT.COM [2008-04-14 00:02|-rahs----|251152] - C:\ntldr [?|?|?] - C:\pagefile.sys [2010-05-07 22:36|--a------|1175] - C:\UsbFix.txt ###################### | Listing of the present folders C:\ | [2002-04-29 01:28|d--------|0] - C:\Documents and Settings [2002-04-29 02:11|d--------|0] - C:\install [2010-05-07 14:25|d--------|0] - C:\Program Files [2002-04-29 01:29|d--hs----|0] - C:\RECYCLER [2002-04-29 02:11|d--hs----|0] - C:\System Volume Information [2010-05-07 22:36|d--------|0] - C:\UsbFix [2010-05-07 15:19|d--------|0] - C:\WINDOWS ###################### | Listing of the present files D:\ | [2003-03-27 00:12|-r-hs----|465] - D:\autorun.inf [2006-05-19 10:53|--a------|75982] - D:\callvoice.wav [2006-06-20 11:49|--a------|0] - D:\EW600APICfg.dat [2007-05-29 15:44|--a------|602112] - D:\HostAPI.dll [2007-05-29 15:45|--a------|1015808] - D:\HostAPI_AT.dll [2006-05-19 10:55|--a------|681] - D:\HuaWeiEVDO.exe.manifest [2006-05-19 10:54|--a------|114688] - D:\InstallHelper.dll [2006-12-01 11:30|--a------|4962] - D:\license.txt [2006-12-08 10:56|--a------|33272] - D:\logo.bmp [2008-12-08 18:35|-r-hs----|107045] - D:\m9ma.exe [2006-12-01 12:18|--a------|0] - D:\mfc42loc.dll [2006-12-01 12:18|--a------|1024000] - D:\mfc42u.dll [2007-04-07 21:06|--a------|1047552] - D:\mfc71u.dll [2007-05-29 15:43|--a------|917504] - D:\Mobile Connect.exe [2006-12-01 12:18|--a------|0] - D:\msvcp60.dll [2007-04-07 21:06|--a------|499712] - D:\msvcp71.dll [2007-04-07 21:06|--a------|348160] - D:\msvcr71.dll [2007-04-07 21:06|--a------|266293] - D:\msvcrt.dll [2006-10-14 18:14|--a------|26138] - D:\OperatorList.lst [2009-12-03 20:28|--a------|246] - D:\scheme.cfg [2002-04-29 00:56|--a------|1224] - D:\Silverlight0.log [2002-04-29 00:56|--a------|175916] - D:\SilverlightMSI.log [2006-05-19 10:54|--a------|211364] - D:\SMSvoice.wav [2006-12-01 16:29|--a------|396054] - D:\SplashWnd.bmp [2007-05-29 15:43|--a------|851] - D:\SysConfig.dat [2006-05-19 10:55|--a------|123] - D:\sysmagic.dat [2006-05-19 10:55|--a------|7739] - D:\sysresd.dat [2007-03-06 17:01|--a------|60840] - D:\sysrest.dat [2006-05-19 10:55|--a------|294912] - D:\vWTP.mdb ###################### | Listing of the present folders D:\ | [2010-01-17 23:35|d--------|0] - D:\Data [2010-01-17 23:35|d--------|0] - D:\Drivers [2009-12-18 19:46|d--------|0] - D:\Nowy folder [2003-03-27 00:02|d--------|0] - D:\Program Files [2002-04-29 01:30|d--hs----|0] - D:\RECYCLER [2009-12-02 14:58|d--hs----|0] - D:\System Volume Information [2009-12-19 22:21|d--------|0] - D:\Trucker ###################### | Listing of the present files F:\ | [2010-02-13 13:38|--a------|15924] - F:\Korallewski.docx [2010-01-24 14:42|--a------|8533628] - F:\17ea00e37456ee91123c4116c32a0391.jpg [2010-02-10 09:40|--a------|30208] - F:\Obrona.doc [2010-02-15 09:16|--a------|413] - F:\fghg.txt [2010-01-24 14:42|--a------|8533628] - F:\Kopia 17ea00e37456ee91123c4116c32a0391.jpg [2010-02-13 13:00|--a------|21231] - F:\Olejnikkk.docx [2008-03-10 07:39|--a------|25175] - F:\IGNACIUK (2).docx [2010-02-07 11:12|--a------|1037664] - F:\DI-524_qig_revALL_1-00_all_pl_20050524.pdf [2010-02-14 10:33|--a------|15094] - F:\ComboFix.txt [2010-05-07 19:27|--a------|6153352] - F:\mbam-setup.exe [2002-12-09 05:49|--a------|262144] - F:\021129b.rom [2002-07-04 14:46|-ra------|529908] - F:\AMINF335.EXE [2010-02-15 08:34|--a------|16258] - F:\222log.txt [2010-02-15 22:12|--a------|1852] - F:\fix_hlp.reg [2010-02-12 12:15|--a------|899] - F:\n (2).txt [2010-02-12 19:01|--a------|85209] - F:\244323.JPG [2010-02-15 09:19|--a------|1082] - F:\mbam-log-2010-02-15 (09-04-17).txt [2010-02-12 12:39|--a------|27871] - F:\Legalny_Windows.rar [2008-12-08 17:35|-r-hs----|107045] - F:\m9ma.exe [2005-09-17 23:48|--a------|29696] - F:\BugOff.exe [2007-02-14 15:27|--a------|51232] - F:\wwdc.exe [2010-05-07 14:03|--a------|6554] - F:\dsdgdgfd.log [2010-02-12 19:06|--a------|129] - F:\Nowy Dokument tekstowy (2).txt [2010-02-12 19:02|--a------|116155] - F:\4665565.JPG [2010-02-13 13:33|--a------|28554] - F:\log.txt [2010-05-07 14:31|--a------|15590766] - F:\K-Lite_Codec_Pack_583_Full[darmoweprogramy.org].exe [2003-03-26 23:12|--a------|1799] - F:\mbam-log-2003-03-26 (23-12-19).txt ###################### | Listing of the present folders F:\ | [2010-02-10 09:38|dr-hs----|0] - F:\RECYCLER [2010-05-07 10:24|d--------|0] - F:\nfthjftsjdfykedtyk [2010-02-12 13:44|d--------|0] - F:\NOD32 4 [2010-01-28 12:55|d--------|0] - F:\Legalny Windows [2010-02-07 19:26|d--------|0] - F:\ggggg [2009-03-26 20:53|dr-hs----|0] - F:\Recycled [2010-05-07 19:37|d--------|0] - F:\Malwarebytes' Anti-Malware ################## | ! End of report # UsbFix V6.111 ! |

Dodano Dzisiaj, 08:16:
zrobiłem również skan combofix:

Kod: Zaznacz wszystko: ComboFix 10-05-07.07 - Kamil 2010-05-08 9:57.1.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.639.356 [GMT 2:00] Uruchomiony z: c:\documents and settings\Kamil\Pulpit\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\autorun.inf c:\documents and settings\Administrator\xmlUpdater.exe c:\documents and settings\Default User\xmlUpdater.exe c:\documents and settings\Kamil\xmlUpdater.exe c:\windows\system32\config\systemprofile\xmlUpdater.exe c:\windows\system32\msconfig.exe D:\autorun.inf . ((((((((((((((((((((((((( Pliki utworzone od 2010-04-08 do 2010-05-08 ))))))))))))))))))))))))))))))) . 2010-05-07 21:20 . 2010-05-07 21:20 -------- d--h--w- c:\windows\system32\GroupPolicy 2010-05-07 21:05 . 2010-05-07 21:05 -------- d-----w- c:\documents and settings\Kamil\Dane aplikacji\Avira 2010-05-07 21:04 . 2010-03-01 08:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys 2010-05-07 21:04 . 2010-02-16 12:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2010-05-07 21:04 . 2009-05-11 10:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2010-05-07 21:04 . 2009-05-11 10:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2010-05-07 21:04 . 2010-05-07 21:04 -------- d-----w- c:\program files\Avira 2010-05-07 21:04 . 2010-05-07 21:04 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Avira 2010-05-07 20:54 . 2010-05-07 20:54 -------- d--h--w- c:\windows\PIF 2010-05-07 20:33 . 2010-05-07 20:36 -------- d-----w- C:\UsbFix 2010-05-07 20:27 . 2008-07-22 09:39 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys 2010-05-07 13:19 . 2010-05-07 13:19 0 ----a-w- c:\windows\nsreg.dat 2010-05-07 13:19 . 2010-05-07 13:19 -------- d-----w- c:\documents and settings\Kamil\Ustawienia lokalne\Dane aplikacji\Mozilla 2010-05-07 12:25 . 2010-02-10 17:13 165376 ----a-w- c:\windows\system32\unrar.dll 2010-05-07 12:25 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll 2010-05-07 12:25 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll 2010-05-07 12:25 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll 2010-05-07 12:25 . 2010-05-07 12:25 -------- d-----w- c:\documents and settings\Kamil\Dane aplikacji\Winamp 2010-05-07 12:25 . 2010-03-14 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll 2010-05-07 12:25 . 2010-05-07 12:25 -------- d-----w- c:\program files\K-Lite Codec Pack . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-04-29 14:39 . 2003-03-26 22:03 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 14:39 . 2003-03-26 22:02 20952 ----a-w- c:\windows\system32\drivers\mbam.sys . ------- Sigcheck ------- [-] 2008-07-22 . E88631E21A9CACA06104802F9E915115 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys [-] 2008-07-22 . 8CD81261DA6BD4BCFBD857A25220A1FB . 689152 . . [5.82] . . c:\windows\system32\comctl32.dll [-] 2008-07-22 . 5FB59F2506787A7E036B7C2EFF1CCE24 . 2190208 . . [5.1.2600.5512] . . c:\windows\system32\ntoskrnl.exe [-] 2008-07-22 . 5F1CCDF37F28A88D0473B0C9EA1E0D58 . 487424 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll [-] 2008-07-22 . 808DE3BFBABD3737BF331661D919E32B . 893952 . . [7.00.6000.20815] . . c:\windows\system32\wininet.dll [-] 2008-07-22 . B49A80A502FD86B2F05BC7BBD723DDAB . 1528832 . . [6.00.2900.5512] . . c:\windows\explorer.exe [-] 2008-07-22 . 0277E1A3E8B337555A45943808451981 . 40448 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe c:\windows\System32\wscntfy.exe ... - brak elementu !! c:\windows\System32\regsvc.dll ... - brak elementu !! . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DriveSpace"="c:\program files\Drive Space Indicator\DrvSpace.exe" [2008-07-20 395716] "OODefragTray"="c:\windows\system32\oodtray.exe" [2007-05-11 2512392] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "VisualTaskTips"="c:\program files\Utilities\VisualTaskTips\VisualTaskTips.exe" [2007-09-05 36352] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_3"="advpack.dll" [2008-07-22 124928] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMConfigurePrograms"= 1 (0x1) "NoResolveTrack"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoResolveTrack"= 1 (0x1) [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] 2006-11-16 19:00 344064 ----a-w- c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2008-06-10 02:27 144784 ----a-w- c:\program files\Java\jre1.6.0_07\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VisualTaskTips] 2007-09-05 09:20 36352 ----a-w- c:\program files\Utilities\VisualTaskTips\VisualTaskTips.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R1 vcdrom;Virtual CD-ROM Device Driver;c:\program files\System\CPL Bonus\vcdrom.sys [2002-04-29 8576] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-05-07 135336] S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?] --- Inne Usługi/Sterowniki w Pamięci --- *NewlyCreated* - SRSERVICE *NewlyCreated* - SSMDRV *NewlyCreated* - VCDROM . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.allegro.pl/ Trusted Zone: google.com\mail FF - ProfilePath - c:\documents and settings\Kamil\Dane aplikacji\Mozilla\Firefox\Profiles\rpzspjr7.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.allegro.pl/ . - - - - USUNIĘTO PUSTE WPISY - - - - HKLM-Run-Cmaudio - cmicnfg.cpl AddRemove-BugOff - c:\documents and settings\Kamil\Pulpit\BugOff.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-05-08 10:00 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*] "OODEFRAG10.00.00.01WORKSTATION"="3CBC874025E44364CE5A735B9DE621156F30DF10D2254AFAF9B9265C8C00EF7E3F68D502D8D269E87FAC08E4F4433A49B49297747B26ECEC36E923B16E6E3CE21E0455BA09B30794887A8E67644320EEA10ECE7A6C415F907E8CF8DC245C0E1ACC4DE471BB11A0FECEBDBAED707ABA6A25F62A4CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C9DB7CE019D40AA5CBA7FD869164D6794BA7FD869164D6794A6171C11EC38DE3DBCCC63B1A923C26BFCF6529ADA1AD02DB2BF3D9599A4B442B5517D0E314A3CAB57C9A0AB434C8C293B8DEB381FC4D924952EB817D5CBE3322BD49AC82BB948A0A5CD5886D068A194B8933366F196F7379777830E92C903F7B7CE1C8038D0B8D968B9856E69492E4D3272099F79BACA2690AF0169A3C24516F29C0B3478CDF3B99254F9929C64703919F621E7508006790F4E6B9CD1FDF2D2A6FE46E98211F868CCC657A96C533A8290D505C3075A70F8D2AFD19D5868E93AD0188226DE9F57D4F19C96EACE547194F1A4913C9F5FE5B353119566E811981C24F144760A23B6AB90C90393ADC911A04ADDF76012CB547C3A96EAF6252C848888F968EAF4664EE3ED23BC64E6B8279DD75FBCC1C67B4169E249DCD02791C5DA17FD9B9605DBECB3FEE0B6A1CB4B5642926CB7749F73C1D3E012C97BF93D882B1E3562901319F297F2A1B99324CFD48E20AA96146F5B825A79C262801DCE0D5A223591F3ECD5D4D026E5E088A8B86CC1DEA4D9BC7AFC425EA40DACEF068BA68A577C56E1D16E1EE2AD949CCE071AFA60DDC8D691FEC553879188025B1C59BFA3A96BAD7EF8E5EA95D0F4B03D6330F33562E936362B4B1EBE223192D9BAC5D24FB6456B6F095FEB740A35B4AA5156DC4DE5BE7356A0431FB2E9665D8633FE6F7E52B1B5E12223E6D10B6893755C90D0781360E11F7708E3D5B36BB7FEC8DABC6382BF87045220B540B5010E7D82037C4D4BCEA341BA988EDDFC67CEE6B2507175805E2F8BA0E6C318A15BB726B47924A3246AB272E91959C477E51DE31F7A5970BCE1512E842B15759B32785AD9E09C1A647BDB6E77CF8DC88756F5222C9AD452D882E1A8EC46BC38A1290C85CB4BD010092B3F6FC9280CECC88C804F6E14D85FAA5EAD3B39B5E407E7C30198D8ECBEACC309533B3CAF467586BEB29D6DEEED1D3EF25328BE9ACAC556ECBC0842A27958F707DE141F99C4EEC38ADDC3A6D6AED8D0A644B746B840A387F1F64C3EE8A53F3EFA7FC4B33D212535ECA1FC099B4D9F56C149350EF8A910CB83BAE2F7617ED2E320A61B32960D2CC4C9758879B10D4673EF7BF046E880BEA5B6E8CB0C53D24A681497E845424A59106A2228CE30466204C1C9BD933AD1A84E06338B0EA6041B8059EC830C04B0C6E8F745A2D5D3E5D117AC7874" . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(416) c:\windows\system32\SETUPAPI.dll c:\windows\system32\sfc_os.dll c:\windows\system32\Ati2evxx.dll - - - - - - - > 'lsass.exe'(472) c:\windows\system32\scecli.dll c:\windows\system32\SETUPAPI.dll . Czas ukończenia: 2010-05-08 10:02:13 ComboFix-quarantined-files.txt 2010-05-08 08:02 Przed: 28 357 701 632 bajtów wolnych Po: 28 337 950 720 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /noexecute=alwaysoff - - End Of File - - BB1627B4C62325685B0D1B87B7462041

**Posty:** 18165 · przez **wojtas** 08 Maj 2010, 18:46

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL

:Files
D:\m9ma.exe
F:\m9ma.exe
F:\Recycled

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdź reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera + USBFIX

**Posty:** 76 · przez **kerli** 08 Maj 2010, 22:31

czyszczenie : http://wklej.org/id/330508/
Skan OLT : http://wklej.org/id/330509/
Extras: http://wklej.org/id/330510/
USBFix: http://wklej.org/id/330521/

**Posty:** 18165 · przez **wojtas** 10 Maj 2010, 21:26

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
O32 - AutoRun File - [2010-05-08 17:09:08 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-05-08 17:09:08 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-05-08 00:24:02 | 000,000,000 | RHSD | M] - F:\autorun.inf -- [ FAT ]

:Files
C:\autorun.inf
D:\autorun.inf
F:\RECYCLER
F:\autorun.inf
D:\RECYCLER
C:\RECYCLER

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij w Run Fix. I potwierdź reset kompa .
zrób skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) zapisz sobie raport z niego.

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia komputera + USBFIX + raport z MBAM

**Posty:** 76 · przez **kerli** 11 Maj 2010, 09:12

OLT : http://wklej.org/id/331884/
http://wklej.org/id/331885/

Dodano Dzisiaj, 08:47:
MBAM : http://wklej.org/id/331899/

**Posty:** 18165 · przez **wojtas** 11 Maj 2010, 20:05

nic więcej nie widać

Kto jest na forum