Zamulajacy komputer

**Posty:** 2 · przez **Dzoana** 09 Lis 2012, 20:39

komputer bardzo wolno chodzi, proszę o sprawdzenie moich logów.

**Posty:** 18165 · przez **wojtas** 10 Lis 2012, 16:24

odinstaluj:
"AVG Secure Search" = AVG Security Toolbar
"Softonic" = Softonic toolbar on IE

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={A61C2611-12C7-460F-B36C-36B25BF15886}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10002&barid={A61C2611-12C7-460F-B36C-36B25BF15886}
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=110823&tt=120912_ccp_3912_3&babsrc=HP_ss&mntrId=52c3e0f6000000000000000000000000
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110824&tt=4412_3&babsrc=HP_ss&mntrId=52c3e0f60000000000007edd08ef92b7
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110824&tt=4412_3&babsrc=SP_ss&mntrId=52c3e0f60000000000007edd08ef92b7
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{67FC7FFF-1F9E-479A-8FD0-96640A434A74}: "URL" = http://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={DF13A2DA-ED18-4CFC-8A1D-4217FFEB3891}&mid=e0f94a253080ed27becbd247ee2f36dd-b47f8218aea8848478aff9993aa185ac2e6e2669&lang=pl&ds=xn011&pr=sa&d=2012-09-25 00:37:35&v=13.0.0.7&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{AC969B43-9409-4227-BDB1-8000B3D0567A}: "URL" = http://uk.shopping.com/?linkin_id=8056359
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000.10002&st=1&barid={A61C2611-12C7-460F-B36C-36B25BF15886}&q={searchTerms}&barid={A61C2611-12C7-460F-B36C-36B25BF15886}
IE - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\SearchScopes\{F8DBF013-125D-45A6-8002-EEBBEE48D010}: "URL" = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=186
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?
FF - prefs.js..extensions.enabledItems: cacaoweb@cacaoweb.org:1.0.20
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.2.0
FF - prefs.js..extensions.enabledItems: ffxtlbra@softonic.com:1.5.0
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?affID=113480&tt=3112_6&babsrc=HP_ss&mntrId=52c3e0f60000000000007edd08ef92b7
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "http://www.bing.com/search?FORM=IPGTDF&PC=IPGTDF&q="
[2011/11/28 20:32:20 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Users\Sony\AppData\Roaming\mozilla\Firefox\Profiles\qb5tmemz.default\extensions\cacaoweb@cacaoweb.org
[2012/06/28 10:40:57 | 000,000,000 | ---D | M] (softonic.com) -- C:\Users\Sony\AppData\Roaming\mozilla\Firefox\Profiles\qb5tmemz.default\extensions\ffxtlbra@softonic.com
[2012/08/21 18:30:14 | 000,000,000 | ---D | M] (Bflix extension) -- C:\Users\Sony\AppData\Roaming\mozilla\Firefox\Profiles\qb5tmemz.default\extensions\info@thebflix.com
[2012/09/25 16:01:27 | 000,002,223 | ---- | M] () -- C:\Users\Sony\AppData\Roaming\mozilla\firefox\profiles\qb5tmemz.default\searchplugins\BabylonMngr.xml
[2012/10/29 21:40:50 | 000,002,536 | ---- | M] () -- C:\Users\Sony\AppData\Roaming\mozilla\firefox\profiles\qb5tmemz.default\searchplugins\browsemngr.xml
[2012/06/28 10:40:53 | 000,002,060 | ---- | M] () -- C:\Users\Sony\AppData\Roaming\mozilla\firefox\profiles\qb5tmemz.default\searchplugins\softonic.xml
[2012/07/25 20:38:14 | 000,004,113 | ---- | M] () -- C:\Users\Sony\AppData\Roaming\mozilla\firefox\profiles\qb5tmemz.default\searchplugins\sweetim.xml
[2012/11/08 21:31:32 | 000,003,573 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/10/29 21:40:37 | 000,002,349 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O3 - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKU\S-1-5-21-174240588-1471285736-23325304-1000\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [YouCam Service] "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s File not found
O4 - HKU\S-1-5-21-174240588-1471285736-23325304-1000..\Run: [Media Finder] "C:\Program Files (x86)\Media Finder\MF.exe" /opentotray File not found
O4 - HKU\S-1-5-21-174240588-1471285736-23325304-1000..\Run: [Mobile Partner] C:\Program Files (x86)\PLAY Web partner\PLAY Web partner File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Files
C:\Users\Sony\AppData\Local\Temp*.html

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Użyj AdwCleaner i kliknij w nim Delete (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzyła się po restarcie).

**Posty:** 2 · przez **Dzoana** 15 Lis 2012, 20:25

Zauważyłam że zaczął czasem się zawieszać i muszę go restartować