Wolne uruchamianie się systemu i przycinanie

off · 12 Listopad 2011 20:17

Problem jest następujący:

komputer uruchamia się długo, szczególnie zaraz po załadowaniu się pulpitu trzeba długo czekać aż będzie można cokolwiek zrobić.

Malware znalazł jednego robaka, nic więcej CHYBA nie ma. (jeśli chodzi o infekcje)

Z góry dziękuję za pomoc.

OTL:

http://www.wklej.org/id/626168/

Extras:

http://www.wklej.org/id/626170/

Acorus · 13 Listopad 2011 07:33

Odinstaluj McAfee Security Scan Plus, vShare Plugin,vShare.tv plugin 1.3,XfireXO Toolbar.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKU\S-1-5-21-1614895754-1644491937-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= … =CT2504091 FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Web Search” FF - prefs.js…browser.search.defaultthis.engineName: “Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Web Search” [2011-11-07 22:19:21 | 000,000,000 | —D | M] (MyAshampoo Community Toolbar) – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\extensions{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} [2011-09-28 14:11:47 | 000,000,000 | —D | M] (Vuze Remote Community Toolbar) – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\extensions{ba14329e-9550-4989-b3f2-9732e92d17cc} [2011-11-09 22:27:57 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\extensions{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2011-03-06 14:24:12 | 000,000,000 | —D | M] (vShare) – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\extensions\vshare@toolbar [2011-09-27 21:24:04 | 000,000,879 | ---- | M] () – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\searchplugins\conduit.xml [2011-02-20 11:49:40 | 000,002,055 | ---- | M] () – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\searchplugins\daemon-search.xml [2011-07-11 19:04:02 | 000,000,633 | ---- | M] () – C:\Documents and Settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\r27121zr.default\searchplugins\startsear.xml O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - Reg Error: Value error. File not found O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM…\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - Reg Error: Value error. File not found O3 - HKLM…\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-1614895754-1644491937-682003330-1003…\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKU\S-1-5-21-1614895754-1644491937-682003330-1003…\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1614895754-1644491937-682003330-1003…\Toolbar\WebBrowser: (XfireXO Toolbar) - {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - Reg Error: Value error. File not found O3 - HKU\S-1-5-21-1614895754-1644491937-682003330-1003…\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O4 - HKLM…\Run: [DXDllRegExe] dxdllreg.exe File not found O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll () MsConfig - StartUpReg: AppleSyncNotifier - hkey= - key= - File not found MsConfig - StartUpReg: iTunesHelper - hkey= - key= - File not found MsConfig - StartUpReg: KernelFaultCheck - hkey= - key= - File not found MsConfig - StartUpReg: Raptr - hkey= - key= - File not found MsConfig - StartUpReg: UserFaultCheck - hkey= - key= - File not found [2011-11-12 19:35:43 | 000,000,250 | ---- | M] () – C:\WINDOWS\tasks\NUSchedule.job [2011-03-02 19:12:35 | 000,000,000 | —D | M] – C:\Documents and Settings\Robert\Dane aplikacji\OpenCandy [2011-09-15 06:26:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Robert\Dane aplikacji\PriceGong [2011-11-12 19:56:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Robert\Dane aplikacji\Raptr :Commands [emptytemp]

Kliknij Wykonaj skrypt .W OTL użyj opcji Sprzątanie.