Zawieszka netu, wyłączanie się antyszpiegów, log OTL

[visjerr]

Witam,

Proszę o pomoc w takim problemie:

Net się zawiesza - muszę restart zrobić, żeby zaczął działać, do tego wyłączają się programy: Ad-Aware Live oraz Windows Defender.

Do tego przestały mi działać 2 gry - jedna brak możliwości uruchomienia jakiegoś obrazu (oryginalna) i kolejna nie chce się zalogować do sieci (oryginalna)

Link do logu:

http://www.wklejto.pl/58911

dzieki

[Engardo_Alvarez]

Proszę przeskanować komputer tym (pełny skan) ; http://www.dobreprogramy.pl/Malwarebyte … 13117.html

oraz tym (szybki i pełny skan) ; http://www.dobreprogramy.pl/DrWEB-CureI … 12976.html

[visjerr]

Otóż:

log z Malwarebytes:

http://www.wklejto.pl/59119

Dr. Web - Wykonano - nie znaleziono żadnych wirusów - taka info bez raportu.

[jessica]

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL @Alternate Data Stream - 24 bytes -> C:\Windows:4CB42E5575682EE7 [2010-02-27 08:54:58 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGR3000.html [2010-02-27 08:54:58 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempfz3000.html [2010-02-26 18:37:15 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempts3452.html [2010-02-26 18:37:15 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempqx3452.html [2010-02-26 06:50:11 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempDn3120.html [2010-02-26 06:50:11 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Temptj3120.html [2010-02-25 21:03:45 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempqQ3468.html [2010-02-25 21:03:45 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGX3468.html [2010-02-25 20:54:33 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempkH3640.html [2010-02-25 20:54:33 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempIc3640.html [2010-02-25 20:35:34 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempnz3392.html [2010-02-25 20:35:34 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempaF3392.html [2010-02-25 17:43:13 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempEa2692.html [2010-02-25 17:43:13 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempZY2692.html [2010-02-17 19:58:54 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempAi2112.html [2010-02-17 19:58:54 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempJo2112.html [2010-02-17 19:33:00 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempkU3032.html [2010-02-17 19:32:59 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGU3032.html [2010-02-16 18:13:27 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempEI3672.html [2010-02-16 18:13:27 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempIY3672.html [2010-02-14 14:20:37 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGp2868.html [2010-02-14 14:20:37 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempdV2868.html [2010-02-14 09:31:35 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TemptM1132.html [2010-02-14 09:31:35 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TemptS1132.html [2010-02-13 20:07:00 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempaw1188.html [2010-02-13 20:07:00 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TemptA1188.html [2010-02-13 18:51:35 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempwt2684.html [2010-02-13 18:51:35 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempjm2684.html [2010-02-12 09:16:14 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempqQ3068.html [2010-02-12 09:16:14 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempfp3068.html [2010-02-11 20:18:07 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempoM2916.html [2010-02-11 20:18:07 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempWP2916.html [2010-02-10 21:02:18 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempqy3068.html [2010-02-10 21:02:18 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempLn3068.html [2010-02-10 20:51:18 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempur3060.html [2010-02-10 20:51:18 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempBQ3060.html [2010-02-10 20:27:17 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TemprQ2088.html [2010-02-10 20:27:17 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempXu2088.html [2010-02-10 20:17:44 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGj1104.html [2010-02-10 20:17:44 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempnj1104.html [2010-02-09 20:16:18 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempMF2956.html [2010-02-09 20:16:18 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempDi2956.html [2010-02-09 20:02:09 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempXX2872.html [2010-02-09 20:02:09 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempro2872.html [2010-02-09 09:12:07 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempfz2972.html [2010-02-09 09:12:07 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Temphc2972.html [2010-02-08 20:06:19 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempqz2800.html [2010-02-08 20:06:19 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempAz2800.html [2010-02-08 19:56:34 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempTc2068.html [2010-02-08 19:56:34 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempov2068.html [2010-02-06 14:30:09 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempZY1160.html [2010-02-06 14:30:09 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TemptJ1160.html [2010-02-05 19:46:44 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempVP2120.html [2010-02-05 19:46:44 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempBx2120.html [2010-02-05 17:44:53 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGX2776.html [2010-02-05 17:44:53 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempJE2776.html [2010-02-05 09:10:58 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempWs3784.html [2010-02-05 09:10:58 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempzj3784.html [2010-02-04 20:06:00 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempVm2780.html [2010-02-04 20:06:00 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempVt2780.html [2010-02-04 17:08:52 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Temphe2764.html [2010-02-04 17:08:52 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempzP2764.html [2010-02-04 16:26:20 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempqE2952.html [2010-02-04 16:26:20 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempzd2952.html [2010-02-03 21:46:24 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempbs2752.html [2010-02-03 21:46:24 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempIE2752.html [2010-02-03 19:43:21 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempiX2516.html [2010-02-03 19:43:21 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempTZ2516.html [2010-02-02 21:27:47 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempgT2784.html [2010-02-02 21:27:47 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempGi2784.html [2010-02-01 18:35:49 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempLz3024.html [2010-02-01 18:35:49 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempUt3024.html [2010-01-31 21:01:38 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempKg2076.html [2010-01-31 21:01:38 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempPL2076.html [2010-01-29 19:25:27 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempbO3000.html [2010-01-29 19:25:26 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempuQ3000.html [2010-01-29 07:37:43 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempvI2640.html [2010-01-29 07:37:43 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempWo2640.html [2010-01-26 07:54:11 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempMJ2556.html [2010-01-26 07:54:11 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempnJ2556.html [2010-01-25 20:02:09 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempmY2712.html [2010-01-25 20:02:09 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempxu2712.html [2010-01-25 18:59:26 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempOo1240.html [2010-01-25 18:59:26 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TemplK1240.html :Commands [emptytemp] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

[visjerr]

Witaj Jessi,

Raport z usuwania:

http://www.wklejto.pl/59218

log z OTL:

http://www.wklejto.pl/59217

[jessica]

Nie wiem, co tworzy te pliki.

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL [2010-03-01 20:23:51 | 000,002,432 | ---- | M] () – C:\Users\sezi\AppData\Local\TempRr3572.html [2010-03-01 20:23:51 | 000,002,089 | ---- | M] () – C:\Users\sezi\AppData\Local\Tempkz3572.html [2010-03-01 20:19:06 | 000,002,432 | ---- | M] () – C:\Users\sezi\AppData\Local\TempzW3184.html [2010-03-01 20:19:06 | 000,002,089 | ---- | M] () – C:\Users\sezi\AppData\Local\TempHs3184.html [2010-03-01 18:40:39 | 000,002,432 | ---- | M] () – C:\Users\sezi\AppData\Local\TempnE3420.html [2010-03-01 18:40:39 | 000,002,089 | ---- | M] () – C:\Users\sezi\AppData\Local\Tempqw3420.html [2010-03-01 00:06:18 | 000,002,432 | ---- | M] () – C:\Users\sezi\AppData\Local\TempAn3156.html [2010-03-01 00:06:18 | 000,002,089 | ---- | M] () – C:\Users\sezi\AppData\Local\TempAs3156.html :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

jessi

[visjerr]

Raport z usuwania:

http://www.wklejto.pl/59297

log:

http://www.wklejto.pl/59298

[jessica]

[2010-03-02 19:44:55 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\TempeN3580.html [2010-03-02 19:44:55 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempMU3580.html [2010-03-02 19:31:39 | 000,002,432 | ---- | C] () – C:\Users\sezi\AppData\Local\Tempxl3852.html [2010-03-02 19:31:39 | 000,002,089 | ---- | C] () – C:\Users\sezi\AppData\Local\TempKC3852.html

Spróbuj usuwać je ręcznie,

jessi

[visjerr]

Czy te pliki będą się tworzyły przy każdym uruchomieniu kompa?

Ręcznie usunąłem ale z tempen3580 był “problem” bo kazał wyłączyć gg był otwarty w tym komunikatorze.