Dobra to inaczej... Podaj mi na nowo pliki z OTL, czyli wykonujesz tak jak na pocz?tku.
:Processes
killallprocesses
:OTL
O3 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [SYSTEM] C:\WINDOWS\system\explore.exe File not found
O4 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006..\Run: [PCSpeedUp] "C:\Program Files\Przyspiesz Komputer\PCSpeedUp.exe" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: RTHDBPL = C:\Documents and Settings\Jaros?aw ?akomski\Dane aplikacji\SystemProc\lsass.exe
:Files
C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\yuns32.exe
C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\update.exe
C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\csrss.exe
C:\WINDOWS\yunns32.dll
C:\WINDOWS\zlib1.dll
C:\FOUND.098
C:\FOUND.097
C:\FOUND.096
:Commands
[emptytemp]
[resethost]
Nic si? nie wykona?o...
Uruchom tryb awaryjny i wykonaj ten skrypt jeszcze raz
Przy ponownym uruchamianiu, uruchom system normalnie. I gdy b?dzie chcia? uruchomi? OTL to go uruchom.Code::Processes killallprocesses :OTL O3 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found. O3 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [SYSTEM] C:\WINDOWS\system\explore.exe File not found O4 - HKU\S-1-5-21-613561970-3666964600-2336767209-1006..\Run: [PCSpeedUp] "C:\Program Files\Przyspiesz Komputer\PCSpeedUp.exe" File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: RTHDBPL = C:\Documents and Settings\Jaros?aw ?akomski\Dane aplikacji\SystemProc\lsass.exe :Files C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\yuns32.exe C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\update.exe C:\Documents and Settings\Jaros?aw ?akomski\Menu Start\Programy\Autostart\csrss.exe C:\WINDOWS\yunns32.dll C:\WINDOWS\zlib1.dll C:\FOUND.098 C:\FOUND.097 C:\FOUND.096 :Commands [emptytemp] [resethost]
Po wykonaniu tego skryptu podaj log kt?ry powinno Ci utworzy? i podaj te? nowe logi.
:OTL
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll File not found
[2011-08-30 13:06:38 | 000,002,567 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\9k2p0um2.default\searchplugins\askcom.xml
[2010-01-20 11:16:28 | 000,000,939 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\9k2p0um2.default\searchplugins\conduit.xml
[2011-02-04 09:13:10 | 000,002,059 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\9k2p0um2.default\searchplugins\daemon-search.xml
[2011-01-20 20:37:05 | 000,001,244 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\9k2p0um2.default\searchplugins\winamp-search.xml
O3 - HKU\S-1-5-21-1864468181-2269347340-3441902297-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [autoclk] C:\Windows\autoclk.exe ()
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: Pobierz przy u?yciu FlashGet3 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: Pobierz wszystko przy u?yciu FlashGet3 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\oem\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{082ad92c-23c8-11e0-9428-1c6f65768c32}\Shell - "" = AutoRun
O33 - MountPoints2\{082ad92c-23c8-11e0-9428-1c6f65768c32}\Shell\AutoRun\command - "" = F:\MicroLauncher.exe
O33 - MountPoints2\{2e216a67-d108-11e0-96b1-96d69f6b9f39}\Shell - "" = AutoRun
O33 - MountPoints2\{2e216a67-d108-11e0-96b1-96d69f6b9f39}\Shell\AutoRun\command - "" = F:\Autoplay\AutoRun.exe
O33 - MountPoints2\{9e9867a3-3028-11e0-a3a6-1c6f65768c32}\Shell - "" = AutoRun
O33 - MountPoints2\{9e9867a3-3028-11e0-a3a6-1c6f65768c32}\Shell\AutoRun\command - "" = F:\AUTORUN.EXE
O33 - MountPoints2\{bce7823e-91e2-11e0-afbb-c28e9294cf3f}\Shell - "" = AutoRun
O33 - MountPoints2\{bce7823e-91e2-11e0-afbb-c28e9294cf3f}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{e16674b5-6dbf-11e0-bb9d-82cace1c2524}\Shell - "" = AutoRun
O33 - MountPoints2\{e16674b5-6dbf-11e0-bb9d-82cace1c2524}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
@Alternate Data Stream - 24 bytes -> C:\Windows:F619D028BA9D5F75
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:4EE74317
:Files
C:\Windows\autoclk.exe
C:\Windows\tasks\*.job
:Commands
[emptytemp]
[resethost]
:OTL
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"=-
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
"IPLA!"=-
"Sony Ericsson PC Companion"=-
:Commands
[resethosts]