Zacinający się komputer

NiemaSkilla · 17 Czerwca 2014

Witam. Mam problem z tym że mój komputer się zacina jak zółw. Gdy klikam Start>Mój komputer to jest 5 sekund zanim się otwoży lub wyskakuje że explore.exe przestał działać. Kompa czyszcze regularnie co tydzień. Można jakoś to zmienić

Janusz. · 17 Czerwca 2014

Wykonaj logi OTL Poradnik dot. logów

NiemaSkilla · 17 Czerwca 2014

Prosze

OTL.Txt

Extras.Txt

NiemaSkilla · 18 Czerwca 2014

@Refresh

Rocki star12 · 18 Czerwca 2014

Przy okazji podaj specyfikacje PC'ta.

NiemaSkilla · 18 Czerwca 2014

2 gb ram

Zasilacz Cube 400 v

Procesor AMD atholn 3,10 GhZ

Karta graficzna : Ati radeon HD 5450

Rocki star12 · 18 Czerwca 2014

Odinstaluj : odkurzacz, java 7 update 55 i ściągnij najnowszą wersje.

We własne opcje skanowania (w OTL'u) wklej :


:OTL
SRV - File not found [Auto | Stopped] -- C:\Program Files\webget\updatewebget.exe -- (Update webget)
SRV - File not found [Auto | Stopped] -- C:\Program Files\BrowseMark\updateBrowseMark.exe -- (Update BrowseMark)

DRV - File not found [File_System | On_Demand | Stopped] -- C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys -- (WinRing0_1_2_0)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\klif.sys -- (TSP)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP2\WNt500x86\Sandra.sys -- (SANDRA)
DRV - File not found [Kernel | On_Demand | Running] -- C:\Windows\system32\PavTPK.sys -- (PavTPK.sys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService)
DRV - [2014-04-28 10:23:34 | 000,052,920 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw.sys -- ({9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw)
DRV - [2014-04-24 12:34:50 | 000,052,928 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw.sys -- ({b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw)

O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O36 - AppCertDlls: x64 - (c:\program files\browser tab search by ask\safetynut\x64\safetycrt.dll) -  File not found

:Commands
[emptytemp]

Zatwierdź skrypt, komputer się zresetuje i dostarcz log który pojawi się po włączeniu komputera.

Potem ściągnij na PC program HD Tune wejdź w zakładkę error scan, odznacz opcje 'Quick scan' i kliknij start. Troch to zajmie.

Krzysiekn · 19 Czerwca 2014

Hm... koledzy wyżej piszą o zaawansowanych czyszczeniach, a ja Ci mówię: rozważ przeinstalowanie systemu.

NiemaSkilla · 19 Czerwca 2014

All processes killed
========== OTL ==========
Service Update webget stopped successfully!
Service Update webget deleted successfully!
File C:\Program Files\webget\updatewebget.exe not found.
Service Update BrowseMark stopped successfully!
Service Update BrowseMark deleted successfully!
File C:\Program Files\BrowseMark\updateBrowseMark.exe not found.
Service WinRing0_1_2_0 stopped successfully!
Service WinRing0_1_2_0 deleted successfully!
File C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys not found.
Service TSP stopped successfully!
Service TSP deleted successfully!
File C:\Windows\system32\drivers\klif.sys not found.
Service SANDRA stopped successfully!
Service SANDRA deleted successfully!
File C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP2\WNt500x86\Sandra.sys not found.
Error: Unable to stop service PavTPK.sys!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavTPK.sys deleted successfully.
File C:\Windows\system32\PavTPK.sys not found.
Service IntcAzAudAddService stopped successfully!
Service IntcAzAudAddService deleted successfully!
File system32\drivers\RTKVHDA.sys not found.
Service {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw stopped successfully!
Service {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw deleted successfully!
C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw.sys moved successfully.
Service {b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw stopped successfully!
Service {b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw deleted successfully!
C:\Windows\System32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw.sys moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57472 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: tomek
->Temp folder emptied: 125116 bytes
->Temporary Internet Files folder emptied: 6897295 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 16257968 bytes
->Flash cache emptied: 57477 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 65871 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50662 bytes
RecycleBin emptied: 209286430 bytes
 
Total Files Cleaned = 222,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06192014_155537

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Prosze

Rocki star12 · 19 Czerwca 2014

Prawidlowo.

Teraz prosze o skan z programu HD Tune.

Przy okazji podeslij nowe logi OTL extras i OTL.

NiemaSkilla · 19 Czerwca 2014

Prosze. HP tune jest wszystko zielone

Extras.Txt

OTL.Txt

NiemaSkilla · 20 Czerwca 2014

Refresh

Rocki star12 · 20 Czerwca 2014

Znajdź plik :

C:\Windows\System32\drivers\APPFCONT.DAT

Wejdź na strone virusototal i wrzuć go tam potem udostępnij wynik.

We własne polecenia w OTL wklej :

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\..\SearchScopes\{1C1BEA74-6072-45C7-B4C9-81BF46D90485}: "URL" = http://www.bing.com/search?FORM=U218DF&PC=U218&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{67059EE4-1542-4C80-ABFE-1ADC8AAAABD1}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
DRV - File not found [Kernel | On_Demand | Running] -- C:\Windows\system32\PavTPK.sys -- (PavTPK.sys)
O27 - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\jumpflip: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchinstaller.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchsettings.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchsettings64.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\umbrella.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\volaro: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\vonteera: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\websteroids.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\websteroidsservice.exe: Debugger - C:\Windows\System32\tasklist.exe (Microsoft Corporation)

:Files
C:\Users\tomek\AppData\Roaming\OpenCandy

:Commands
[emptytemp]

Zatwierdź, zrób restart dostarcz fixloga który pojawi się po resecie kompa.

mateuszwoz · 20 Czerwca 2014

najlepiej zrób formata wgraj na nowo serwer puzniej zainstaluj cclener i jakiegoś antyvirusa a puzniej defragmentacje

Rocki star12 · 20 Czerwca 2014

najlepiej zrób formata wgraj na nowo serwer puzniej zainstaluj cclener i jakiegoś antyvirusa a puzniej defragmentacje

W pierw sformatuj swój mózg. Jak masz tak pomagać to nie pomagaj w ogóle. Leci raport.

NiemaSkilla · 21 Czerwca 2014

https://www.virustotal.com/pl/file/44fe26a60b8f4a14d4c262c3afcd60bab6b507a424847e2da61f5f4451e2e2f5/analysis/1403335264/ Link pliku. Zaraz wrzóce pliki

@Edit

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1C1BEA74-6072-45C7-B4C9-81BF46D90485}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1C1BEA74-6072-45C7-B4C9-81BF46D90485}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67059EE4-1542-4C80-ABFE-1ADC8AAAABD1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67059EE4-1542-4C80-ABFE-1ADC8AAAABD1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Error: Unable to stop service PavTPK.sys!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavTPK.sys deleted successfully.
File C:\Windows\system32\PavTPK.sys not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe\ deleted successfully.
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.
========== FILES ==========
C:\Users\tomek\AppData\Roaming\OpenCandy\B1030AC48ED84BD6A77CC70047066C10 folder moved successfully.
C:\Users\tomek\AppData\Roaming\OpenCandy\03A30ECCF78F4E1F9D7E2306C541F0F0 folder moved successfully.
C:\Users\tomek\AppData\Roaming\OpenCandy folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: tomek
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2451541 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 295296195 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3706 bytes
RecycleBin emptied: 168210 bytes
 
Total Files Cleaned = 284,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06212014_092315

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\tasklist.exe scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Rocki star12 · 21 Czerwca 2014

Problem nadal wystepuje?

Niestety jest to prawdopodobnie wina sprzetu, zmiana by sie przydala.

Zaloguj się

👋 Witaj na MPCForum!

Zacinający się komputer

Pytanie

16 odpowiedzi na to pytanie

Rekomendowane odpowiedzi

Zarchiwizowany