Zepsuty regedit i taskmgr.

[lobo2078]

WinUI.exe zawiesza mi cały komputer,prosze o sprawdzenie logów:

Exrtas http://www.wklej.org/id/974691/

OTL http://www.wklej.org/id/974692/

[ordynat]

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-21-3442551221-4212288732-2953917342-1000..\Run: [Windows UI] C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\Administrator\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\Administrator\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe) - C:\Users\pawel\AppData\Roaming\WinUI\WinUI.exe (Mozilla Corporation)
[2013-03-04 02:36:33 | 000,000,000 | ---D | C] -- C:\Users\pawel\AppData\Roaming\WinUI
[2013-02-11 05:43:11 | 000,000,000 | ---D | C] -- C:\Users\pawel\AppData\Roaming\Babylon
[2013-02-11 05:43:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013-02-23 06:54:41 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\WinUI

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.