Logi ;)

Chłodziarz · 3 Maja 2013

Witam. Zauważyłem, że Freszu wszedł na mpc, więc dodaje logi, żeby sprawdzic czy wszystko jest ok. Czy nie ma jakiś pozostałości po poprzednich antywirach i ogólnie

OTL.Txt

Extras.Txt

Fr3shMak3r · 3 Maja 2013

W logach nic ciekawego .

Wejdź do Edycji Rejestru znajdź i skasuj ten klucz :

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2

Chłodziarz · 3 Maja 2013

Wszedłem tam ale nie ma tego mountpoints2 ;p dobra mniejsza z tym

Mam jeszcze problemik bo jak włączam komputer to mija kilka sekund zanim pojawi sie logo producenta płyty. Raz sie normalnie wlącza, czyli od razu a raz trzeba czekac kilka sekund. Wie ktoś o co chodzi? ;p

Mobo: msi b75a-g43

Fr3shMak3r · 3 Maja 2013

Logo w sensie że z poziomu BIOSA czy systemu ?

Chłodziarz · 3 Maja 2013

Biosa. Po prostu wcześniej od razu było a teraz trzeba czekać koło 5 sekund, moze troszke wiecej

Fr3shMak3r · 3 Maja 2013

Hmm to już mi ciężko powiedzieć to nie jest związane z systemem .

A czy to już takie istotne ?

Chłodziarz · 3 Maja 2013

Tak tylko sie zapytałem ;P Problemu z tym nie mam tylko według mnie troche to dzwine ale 5 sek. w tą czy w tamtą to bez różnicy

Chłodziarz · 3 Maja 2013

Fresz, mozesz ogarnac z laptopa?

OTL.Txt

Extras.Txt

Fr3shMak3r · 4 Maja 2013

Uruchom OTL i w Oknie Własne Opcje Skanowania :

:OTL
MOD - [2013/03/26 12:00:47 | 002,569,168 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
MOD - [2013/03/26 11:58:33 | 002,232,272 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
SRV - [2013/03/26 12:00:47 | 002,569,168 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
SRV - [2012/03/12 11:05:33 | 000,232,288 | ---- | M] () [Auto | Running] -- C:\ProgramData\MobileBrServ\mbbService.exe -- (Mobile Broadband HL Service)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKU\S-1-5-21-3208515226-2010266281-175035788-1000..\Run: [Mega Manager] C:\Users\UpdatusUser\Desktop\Megaupload\Mega Manager\MegaManager.exe /Tray File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-3208515226-2010266281-175035788-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-3208515226-2010266281-175035788-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Pobierz za pomocą Mega Manager... - C:\Users\KRYS\Desktop\Megaupload\Mega Manager\mm_file.htm File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O18 - Protocol\Handler\ms-help - No CLSID value found
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2]

:Files
C:\Windows\tasks\HP Photo Creations Messager.job
C:\Users\KRYS\AppData\Local\unins000.msg
C:\Users\KRYS\AppData\Local\unins000.dat
C:\Users\KRYS\AppData\Local\unins000.exe
C:\Users\KRYS\AppData\Roaming\BabMaint.exe
C:\Users\KRYS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
C:\ProgramData\BrowserProtect
C:\Users\KRYS\AppData\Roaming\Delta
C:\Users\KRYS\AppData\Roaming\BabSolution

:Commands
[emptytemp]

I klik na wykonaj skrypt zatwierdź restart i pokazujesz log z usuwania.

Pobierz AdwCleaner i użyj Opcji Delete po restarcie pokazujesz log z AdwCleaner .

Chłodziarz · 5 Maja 2013

adwcleaner :AdwCleanerS1.txt

a z otl niechcący wyłączyłem ale bylo, ze wszystko usunięto

Fr3shMak3r · 6 Maja 2013

Log z usuwania znajduje sie w

C:/_OTL

Chłodziarz · 6 Maja 2013

Na razie trzeba przerwać bo laptopa nie ma ;p Bedzie dopiero w piątek, więc sie odezwe

Chłodziarz · 10 Maja 2013

All processes killed

========== OTL ==========

Releasing module c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll

File move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll scheduled to be moved on reboot.

Releasing module c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll

File move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll scheduled to be moved on reboot.

Service BrowserProtect stopped successfully!

Service BrowserProtect deleted successfully!

File move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe scheduled to be moved on reboot.

Service Mobile Broadband HL Service stopped successfully!

Service Mobile Broadband HL Service deleted successfully!

C:\ProgramData\MobileBrServ\mbbService.exe moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.

Registry value HKEY_USERS\S-1-5-21-3208515226-2010266281-175035788-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Mega Manager deleted successfully.

Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_USERS\S-1-5-21-3208515226-2010266281-175035788-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.

Registry value HKEY_USERS\S-1-5-21-3208515226-2010266281-175035788-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Pobierz za pomocą Mega Manager...\ deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!

Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.

Starting removal of ActiveX control {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\ not found.

Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.

File Protocol\Handler\ms-help - No CLSID value found not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll deleted successfully.

File move failed. c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll scheduled to be moved on reboot.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.

========== REGISTRY ==========

Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully.

========== FILES ==========

C:\Windows\tasks\HP Photo Creations Messager.job moved successfully.

C:\Users\KRYS\AppData\Local\unins000.msg moved successfully.

C:\Users\KRYS\AppData\Local\unins000.dat moved successfully.

C:\Users\KRYS\AppData\Local\unins000.exe moved successfully.

C:\Users\KRYS\AppData\Roaming\BabMaint.exe moved successfully.

C:\Users\KRYS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect folder moved successfully.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\content scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\components scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8} scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect\2.6.1125.80 scheduled to be moved on reboot.

Folder move failed. C:\ProgramData\BrowserProtect scheduled to be moved on reboot.

C:\Users\KRYS\AppData\Roaming\Delta folder moved successfully.

C:\Users\KRYS\AppData\Roaming\BabSolution\Shared folder moved successfully.

C:\Users\KRYS\AppData\Roaming\BabSolution folder moved successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Flash cache emptied: 57472 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: KRYS

->Temp folder emptied: 724097 bytes

->Temporary Internet Files folder emptied: 385048 bytes

->Java cache emptied: 6571718 bytes

->FireFox cache emptied: 34843579 bytes

->Google Chrome cache emptied: 8240622 bytes

->Flash cache emptied: 1614 bytes

User: Public

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 18237194 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 68099 bytes

RecycleBin emptied: 2285165 bytes

Total Files Cleaned = 68.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 05052013_195946

Files\Folders moved on Reboot...