Spowolniony komputer, zamulony internet - logi

**Posty:** 12 · przez **specomperpa** 03 Kwi 2011, 19:34

Witam, od jakiegoś czasu mój komputer spowolnił. Internet również nie działa jak należy - zacina się i zamula. W firefoxie pojawiła się taka ikonka, nazywa się to "apps":

Chcę to usunąć ale się nie da.

Co jakiś czas wyskakuje też taki błąd:

Logi:

Extras
OTL
GMER
DDS

**Posty:** 2183 · przez **NieWiem** 04 Kwi 2011, 11:59

Noo, coś tu jest na rzeczy.

Uruchom ponownie OTL i wklej w nim:

Kod: Zaznacz wszystko: :processes killallprocesses :services uigpezreflw :otl MOD - [2011-04-03 19:00:37 | 000,129,536 | RHS- | M] () -- C:\WINDOWS\system32\arking0.dll MOD - [2011-04-03 18:59:49 | 000,096,256 | RHS- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Temp\apiqq0.dll FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2 FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2 [2011-03-28 14:52:36 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\k9zk6n99.default\extensions\engine@conduit.com O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - File not found O4 - HKU\S-1-5-21-1214440339-1788223648-839522115-1003..\Run: [api32] C:\Documents and Settings\User\Ustawienia lokalne\Temp\apiqq.exe () O4 - HKU\S-1-5-21-1214440339-1788223648-839522115-1003..\Run: [King_ar] C:\WINDOWS\system32\arking.exe () O20 - Winlogon\Notify\cryptnet32: DllName - cryptnet32.dll - File not found O32 - AutoRun File - [2011-04-03 19:11:32 | 000,000,063 | RHS- | M] () - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2011-04-03 19:11:57 | 000,000,063 | RHS- | M] () - F:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\Shell\AutoRun\command - "" = I:\r3q63rok.exe O33 - MountPoints2\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\Shell\open\Command - "" = I:\r3q63rok.exe O33 - MountPoints2\{8d8d800a-836e-11df-b803-00608cf16c4e}\Shell\AutoRun\command - "" = F:\r3q63rok.exe -- [2010-10-25 08:53:56 | 000,139,264 | RHS- | M] () O33 - MountPoints2\{8d8d800a-836e-11df-b803-00608cf16c4e}\Shell\open\Command - "" = F:\r3q63rok.exe -- [2010-10-25 08:53:56 | 000,139,264 | RHS- | M] () O33 - MountPoints2\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\Shell\AutoRun\command - "" = I:\r3q63rok.exe O33 - MountPoints2\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\Shell\open\Command - "" = I:\r3q63rok.exe O33 - MountPoints2\{d0779914-8377-11df-a319-806d6172696f}\Shell\AutoRun\command - "" = r3q63rok.exe O33 - MountPoints2\{d0779914-8377-11df-a319-806d6172696f}\Shell\open\Command - "" = r3q63rok.exe :files autorun.inf /alldrives r3q63rok.exe /alldrives C:\WINDOWS\System32\arking0.dll C:\WINDOWS\System32\arking.exe :reg :commands [purity] [emptytemp] [emptyflash] [createrestorepoint]

Wybierz opcję wykonaj skrypt, zatwierdź restart. Pokaż raport z usuwania (po restarcie) i nowy log z OTL, ale jak będziesz go robił to w oknie na dole wklej takie hasło:

clearallrestorepoints

Autor postu otrzymał pochwałę

**Posty:** 12 · przez **specomperpa** 04 Kwi 2011, 14:00

kurde przypadkiem zamknąłem ten raport z usuwania

nowe logi:

Extras http://wklej.org/id/505738/

OTL http://www.wklej.org/id/505739/

**Posty:** 2183 · przez **NieWiem** 04 Kwi 2011, 14:13

wejdź do C:\_OTL, tam znajdź katalog z datą i godziną o której odpalałeś skrypt i poszukaj tam tego raportu

Masz podpiętego jakiegoś pendriva teraz?

**Posty:** 12 · przez **specomperpa** 04 Kwi 2011, 14:34

W jakiś sposób zniknął mi ten OTL z komputera, ściągnąłem jeszcze raz i zrobiłem od nowa:

raport z usuwania

Kod: Zaznacz wszystko: All processes killed ========== PROCESSES ========== ========== SERVICES/DRIVERS ========== Error: No service named uigpezreflw was found to stop! Service\Driver key uigpezreflw not found. ========== OTL ========== Prefs.js: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2 removed from extensions.enabledItems Prefs.js: engine@conduit.com:3.3.3.2 removed from extensions.enabledItems Folder C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\k9zk6n99.default\extensions\engine@conduit.com\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ not found. Registry value HKEY_USERS\S-1-5-21-1214440339-1788223648-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\api32 not found. File C:\Documents and Settings\User\Ustawienia lokalne\Temp\apiqq.exe not found. Registry value HKEY_USERS\S-1-5-21-1214440339-1788223648-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\King_ar not found. File C:\WINDOWS\system32\arking.exe not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32\ not found. File C:\autorun.inf not found. File F:\autorun.inf not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\ not found. File I:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3cd40b8e-840d-11df-a8b5-00608cf16c4e}\ not found. File I:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8d8d800a-836e-11df-b803-00608cf16c4e}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8d8d800a-836e-11df-b803-00608cf16c4e}\ not found. File F:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8d8d800a-836e-11df-b803-00608cf16c4e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8d8d800a-836e-11df-b803-00608cf16c4e}\ not found. File F:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\ not found. File I:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2167863-2d3e-11e0-aa61-00608cf16c4e}\ not found. File I:\r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d0779914-8377-11df-a319-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d0779914-8377-11df-a319-806d6172696f}\ not found. File r3q63rok.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d0779914-8377-11df-a319-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d0779914-8377-11df-a319-806d6172696f}\ not found. File r3q63rok.exe not found. ========== FILES ========== autorun.inf not found in C:\ autorun.inf not found in F:\ r3q63rok.exe not found in C:\ r3q63rok.exe not found in F:\ File\Folder C:\WINDOWS\System32\arking0.dll not found. File\Folder C:\WINDOWS\System32\arking.exe not found. ========== REGISTRY ========== ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Gość ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: User ->Temp folder emptied: 6957 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 46564590 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 642 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 2736200 bytes Total Files Cleaned = 47,00 mb [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 0 bytes User: Gość ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService User: User ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb Restore point Set: OTL Restore Point (0) OTL by OldTimer - Version 3.2.22.3 log created on 04042011_142603 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

OTL http://www.wklej.org/id/505767/
Extras http://www.wklej.org/id/505768/

podłączony tylko kabelek od telefonu

**Posty:** 2183 · przez **NieWiem** 04 Kwi 2011, 14:40

to trzeba było napisać, że po prostu tego nie ma.

nie widze nic więcej szkodliwego. w OTL kliknij przycisk Sprzątanie - i to by było na tyle

**Posty:** 12 · przez **specomperpa** 04 Kwi 2011, 14:48

ok, wielkie dzięki

**Posty:** 2183 · przez **NieWiem** 04 Kwi 2011, 14:50

Your welcome :wink:

Kto jest na forum