Logi Otl proszę o sprawdzenie.

[Gawron44]

Witam. Proszę o sprawdzenie logów z komputera mojego kuzyna. Komp bardzo zaśmiecony i pełen różnych toolbarów i innych śmieci. System Win 7 Home Premium sp1 x64
AdwCleaner: Dostępne tylko dla zarejestrowanych użytkowników
Otl:Dostępne tylko dla zarejestrowanych użytkowników
extras: Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

ADWCleaner.

Naciśnij w nim przycisk Uninstall.

"UnityWebPlayer" = Unity Web Player
"MozillaMaintenanceService" = Mozilla Maintenance Service
"ividi" = Unitech LLC toolbar
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"DX-Ball 1.09" = DX-Ball 1.09
"Chicken Invaders_is1" = Chicken Invaders v1.30
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

Odinstaluj.

Logi.

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-296571385-269334172-3084535481-1000\..\URLSearchHook: {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - No CLSID value found
IE - HKU\S-1-5-21-296571385-269334172-3084535481-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-296571385-269334172-3084535481-1000\..\SearchScopes\{3D92BC4A-4779-4DB9-9FD7-76F0F9B7EC19}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYPL&apn_uid=3dfc5886-05a6-4d67-a60d-f351d8162a72&apn_sauid=E3555DB5-BA89-4893-AE1E-0B4760502174
IE - HKU\S-1-5-21-296571385-269334172-3084535481-1000\..\SearchScopes\{63D8279C-5469-49A8-AFCC-15A287796009}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&cc=
FF - prefs.js..extensions.enabledAddons: addon%40defaulttab.com:2.2
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jakub\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jakub\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jakub\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
[2013-09-28 11:26:06 | 000,040,792 | ---- | M] () (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\ka8o3u7c.default\extensions\addon@defaulttab.com.xpi
[2013-06-30 10:44:04 | 000,233,016 | ---- | M] () (No name found) -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\ka8o3u7c.default\extensions\hdvc3@hdvidcodec.com.xpi
[2013-09-01 10:58:17 | 000,001,401 | ---- | M] () -- C:\Users\Jakub\AppData\Roaming\mozilla\firefox\profiles\ka8o3u7c.default\searchplugins\ividi.xml
[2013-09-19 11:19:27 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013-08-24 17:29:53 | 000,000,784 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml
CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo\3.0_0\
CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef\1.0_0\
CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: No name found = C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0\
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [KMCONFIG] C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe File not found
O4 - HKU\S-1-5-21-296571385-269334172-3084535481-1000..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-21-296571385-269334172-3084535481-1000..\Run: [Nokia Internet Modem] "C:\Program Files (x86)\Nokia\Nokia Internet Modem\Wellphone2.exe" /background File not found
O4 - HKU\S-1-5-21-296571385-269334172-3084535481-1000..\Run: [Steam] "D:\Program Files (x86)\Steam\Steam.exe" -silent File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261070~1.41\{c16c1~1\browse~1.dll) - File not found
[2013-09-28 11:16:26 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013-09-24 15:58:09 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ljkb
[2012-06-14 20:49:11 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Digiarty
[2012-04-09 18:21:31 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2011-07-31 18:32:57 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Leadertech
[2012-11-24 18:16:55 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Minecraft Skin Viewer
[2012-03-11 18:37:45 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Mount&Blade
[2012-09-21 20:00:59 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Mount&Blade Warband
[2012-12-29 18:41:08 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Mumble
[2012-01-16 16:03:50 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\OpenFM
[2011-09-02 08:38:45 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\OpenOffice.org
[2012-01-29 22:01:11 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Origin
[2011-11-01 11:23:59 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\pymclevel
[2011-07-30 17:47:50 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Rovio
[2012-11-11 20:22:58 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Samsung
[2012-09-30 15:47:10 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\skyz
[2013-04-08 18:01:58 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\SmartPCFix
[2012-11-02 11:55:47 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Sony
[2012-04-01 20:29:45 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\SPORE
[2012-12-29 15:25:27 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\TechSmith
[2012-04-21 19:06:56 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Temp
[2011-07-30 17:29:28 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Win7codecs
[2013-08-20 20:16:27 | 000,000,000 | ---D | M] -- C:\Users\Jakub\AppData\Roaming\Uniblue
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:07F6D9E4

:Services
gupdate
gupdatem

:Files
C:\Program Files (x86)\Google\Update
C:\Users\Jakub\AppData\Local\Google\Update
C:\Windows\tasks\*.*

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.