LeoBonhart

Wszystko zrobione, dziękuję za naprawdę profesjonalną pomoc. Temat można zamknąć.

Tym razem staralem trzymac sie sekwencji, oto co z tego wyszlo: 07082011_212011.txt Ad-Report-SCAN3.txt

Zadziałało. Loga z OTL fix nie jestem w stanie dodac - 'Nie masz uprawnien by wgrywać ten rodzaj pliku'??? Podziękowania i pozdrowienia Log z OTL fix: All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\Windows\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry value HKEY_USERS\S-1-5-21-3485257981-137355879-1672897492-1005_Classes\exefile\shell\open\command\\'' updated successfully. File "C:\Users\shannon\AppData\Local\teg.exe" -a "%1" %* not found. Registry key HKEY_USERS\S-1-5-21-3485257981-137355879-1672897492-1005_Classes\.exe\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-3485257981-137355879-1672897492-1005_Classes\exefile\ deleted successfully. HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully! C:\Users\shannon\AppData\Local\wjyj7l673vh84f2ra13a2543nc82t06128w4cg moved successfully. C:\ProgramData\wjyj7l673vh84f2ra13a2543nc82t06128w4cg moved successfully. C:\Users\shannon\AppData\Local\158k3.dll moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User: Default User User: Public User: shannon ->Flash cache emptied: 258863 bytes User: TEMP User: TEMP.shannon-PC Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: shannon ->Temp folder emptied: 655532543 bytes ->Temporary Internet Files folder emptied: 801574829 bytes ->Java cache emptied: 969591 bytes ->Google Chrome cache emptied: 110161278 bytes ->Apple Safari cache emptied: 6576128 bytes ->Flash cache emptied: 0 bytes User: TEMP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32768 bytes User: TEMP.shannon-PC ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32768 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 52663709 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 3264286861 bytes Total Files Cleaned = 4,665.00 mb OTL by OldTimer - Version 3.2.26.1 log created on 07082011_130459 Files\Folders moved on Reboot... Registry entries deleted on Reboot... OTL.Txt Ad-Report-SCAN1.txt Ad-Report-CLEAN1.txt

Problem jak w temacie, laptop z systemem Windows 7 32-bit. Z relacji właściciela wywnioskowałem że wszystko się zaczęło prawdopodobnie od jakiegoś rogue security software, ale laptop dotarł do mnie już w obecnym stanie, czyli brak możliwości uruchomienia jakichkolwiek plików exe. Przy każdej probie pojawia się okno z wyborem programu do otwarcia pliku. Prawdopodobnie właściciel "przez przypadek" pozbył się płytek z System Recovery więc zależy mi żeby to jednak naprawić. Logi z OTL: OTL.Txt Extras.Txt