Po szczesliwym usunieciu platinum security komputer strasznie szwankuje, wolno dziala, czesto sie zacina, okienka po klikniecu prawym klawiszem nie znikaja zawsze. Ponizej daje logi}
ADW http://www.wklej.org/id/1074511/
OTL http://www.wklej.org/id/1074512/
extras http://www.wklej.org/id/1074514/
Zeus2
(Zeus__)
27 Czerwiec 2013 11:52
#2
Własne opcje skanowania / skrypt i wklej
:OTL IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK13/1 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK13/1 IE:64bit: - HKLM…\SearchScopes{D944BB61-2E34-4DBF-A683-47E505C587DC}: “URL” = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com %2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} IE:64bit: - HKLM…\SearchScopes{E30F3F73-DC7F-4B84-942A-DB0D3C43A46E}: “URL” = http://www.amazon.com/s/ref=azs_osd_iea … -keywords={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK13/1 IE - HKLM…\SearchScopes{D944BB61-2E34-4DBF-A683-47E505C587DC}: “URL” = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com %2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} IE - HKLM…\SearchScopes{E30F3F73-DC7F-4B84-942A-DB0D3C43A46E}: “URL” = http://www.amazon.com/s/ref=azs_osd_iea … -keywords={searchTerms} IE - HKU.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mysearchresults.com/?c=9001&t=03 IE - HKU.DEFAULT…\SearchScopes{233F678A-6245-49FA-8CA5-C36E1B5FABCC}: “URL” = http://search.conduit.com/Results.aspx ? … urce=45&q={searchTerms} IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mysearchresults.com/?c=9001&t=03 IE - HKU\S-1-5-18…\SearchScopes{233F678A-6245-49FA-8CA5-C36E1B5FABCC}: “URL” = http://search.conduit.com/Results.aspx ? … urce=45&q={searchTerms} IE - HKU\S-1-5-21-3427776570-3243914383-1725174157-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK13/1 IE - HKU\S-1-5-21-3427776570-3243914383-1725174157-1001…\SearchScopes{5A65A860-E47A-4A10-A672-BA56BA6AC1F0}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3286042&CUI=UN23971961191913521&UM=2 IE - HKU\S-1-5-21-3427776570-3243914383-1725174157-1001…\SearchScopes{D944BB61-2E34-4DBF-A683-47E505C587DC}: “URL” = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com %2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} IE - HKU\S-1-5-21-3427776570-3243914383-1725174157-1001…\SearchScopes{E30F3F73-DC7F-4B84-942A-DB0D3C43A46E}: “URL” = http://www.amazon.com/s/ref=azs_osd_iea … -keywords={searchTerms} 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}: C:\Program Files\Updater By SweetPacks\Firefox O2 - BHO: (no name) - {878B8524-AED5-4870-9A96-A515440DAC75} - No CLSID value found. O3 - HKU.DEFAULT…\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKU.DEFAULT…\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKU\S-1-5-18…\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKU\S-1-5-18…\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKU\S-1-5-21-3427776570-3243914383-1725174157-1001…\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O4 - HKU.DEFAULT…\Run: [searchProtect] \SearchProtect\bin\cltmng.exe File not found O4 - HKU\S-1-5-18…\Run: [searchProtect] \SearchProtect\bin\cltmng.exe File not found :FILES C:\windows\tasks\GoogleUpdateTaskMachineCore.job C:\windows\tasks\GoogleUpdateTaskMachineUA.job :COMMANDS [emptytemp]
wykonaj skrypt
Czy korzystasz z Itunes ? Bo jeśli jest iTunes czy np torrent to również dołączony do tego pakiet Bonjour, któy stale wykorzystuje połączenie z internetem.
Zauważyłem wpis z aplikacji IncrediMail który jest czasem wykorzystywany do wysyłania poczty. Czy go instalowałeś? Bądź czy z niego korzystasz ?
[2013/06/21 17:00:09 | 000,033,792 | ---- | C] (IncrediMail, Ltd.) – C:\windows\SysNative\ImHttpComm.dll
Proszę przeskanować komputer malwerbytes Antymalware nic nie usuwaj i podaj raport po skanowaniu na forum