Mlynek

Pozostaje mi bardzo podziękować za poświęcony czas i pomoc. Nieczęsto spotyka się w sieci osoby o tak wysokiej kulturze jak Twoja, nie mówiąc już o wiedzy (która dla mnie jest kosmiczna). Pozdrawiam

Ok, jest Listing. Tak wiem, już mi kiedyś elegancko całą muzykę zutylizował. UsbFix.txt

Aj się popisałem. O takie zdolności psychokinetyczne nie mogę Cię posądzać, żebyś mi pendrive leżący w szufladzie ładnie zdiagnozowała . Sorki, źle Cię zrozumiałem. Jeśli mogę kontynuować w tym temacie to załączam, mam nadzieję, ostatni log. UsbFix.txt

Załączam log z USBFix, rozumiem, że nie trzeba było podłączać tych urządzeń? UsbFix.txt

Pięknie! W raporcie nic, przy ponownym uruchomieniu niczego już nie ma. Dzięki. Zanim zakończymy to proszę Cię jeszcze o jedno. Co w tym przypadku z nośnikami pamięci (pen/karta SD)? Czy uważasz, że coś na nich może siedzieć i co ewentualnie powinienem z nimi zrobić?

Załączam log OTL.Txt

Witam! Po skanowaniach - MBAM trochę wykrył, Avast już nic. Ręcznie wyczyściłem rejestr zgodnie ze wskazówkami, lecz nadal po starcie systemu pojawia się: Nie można znaleźć pliku skryptu "C:\Program Files (x86)\Common Files\ComObjects\data.js". mbam-log-2012-01-18 (17-44-39).txt

Ok, zrobione. Po restarcie komunikat Nie można znaleźć pliku skryptu "C:\Program Files (x86)\Common Files\ComObjects\data.js". Pierwszego loga wklejam, bo nie mogłem go załączyć. All processes killed ========== FILES ========== C:\Program Files (x86)\Common Files\ComObjects\uninstall folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\searchplugins folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\res\html folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\res\fonts folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\res\entityTables folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\res\dtd folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\res folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\plugins folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\modules folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\greprefs folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\extensions folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\dictionaries folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\defaults\profile\chrome folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\defaults\profile folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\defaults\pref folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\defaults\autoconfig folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\defaults folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\components folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects\chrome folder moved successfully. C:\Program Files (x86)\Common Files\ComObjects folder moved successfully. C:\Users\Klient\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully. C:\Users\Klient\AppData\Roaming\Mozilla\Extensions folder moved successfully. C:\Users\Klient\AppData\Roaming\Mozilla folder moved successfully. C:\Users\Klient\AppData\Local\AMozilla\AFirefox\Profiles\ff.profile\OfflineCache folder moved successfully. C:\Users\Klient\AppData\Local\AMozilla\AFirefox\Profiles\ff.profile folder moved successfully. C:\Users\Klient\AppData\Local\AMozilla\AFirefox\Profiles folder moved successfully. C:\Users\Klient\AppData\Local\AMozilla\AFirefox folder moved successfully. C:\Users\Klient\AppData\Local\AMozilla folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\OfflineCache folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\minidumps folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\extensions folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\chrome folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\bookmarkbackups folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\ABE\rules folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile\ABE folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles\ff.profile folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Profiles folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox\Crash Reports folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla\AFirefox folder moved successfully. C:\Users\Klient\AppData\Roaming\AMozilla folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Mozilla\ not found. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\MozillaPlugins\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\mozilla.org\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Klient ->Temp folder emptied: 2271552 bytes ->Temporary Internet Files folder emptied: 1594060 bytes ->Google Chrome cache emptied: 20195461 bytes ->Flash cache emptied: 6019 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 28992 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50601 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 23,00 mb OTL by OldTimer - Version 3.2.31.0 log created on 01172012_215340 Files\Folders moved on Reboot... C:\Users\Klient\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJOFQZZV\background_banner_stripe3[1].jpg moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IG7ITBHX\background_banner-right-part[1].jpg moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IG7ITBHX\background_banner_newbox[1].jpg moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEMJDP10\api[1].htm moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEMJDP10\background_button_green_full[1].png moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ADZ59KWH\api[1].htm moved successfully. C:\Users\Klient\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ADZ59KWH\list-item-plus[1].png moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... OTL.Txt

Witam serdecznie! Proszę o pomoc w następującym temacie. W przeciągu tygodnia kilka razy Avast informował o blokowaniu wyskakującej strony. Niestety nie mogę teraz znaleźć jej nazwy, ale pamiętam, że było tam coś w stylu datporn lub dativporn. AV poinformował, że źródłem tego jest plik update.exe*32 znajdujący się w lokalizacji C:\Program Files (x86)\Common Files\ComObjects. Znalazłem to również wśród procesów uruchomionych z opisem Firefox. (Firefox'a kiedyś miałem, ale go odinstalowałem) Proces jest ciągle aktywny i wyróżnia się wyższym obciążeniem pamięci. Log z Security Check Results of screen317's Security Check version 0.99.30 Windows 7 x64 (UAC is disabled!) Internet Explorer 9 `````````````````````````````` Antivirus/Firewall Check: avast! Free Antivirus WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Adobe Flash Player 10.0.32.18 Flash Player out of Date! Adobe Reader 9 Adobe Reader out of date! ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe Alwil Software Avast5 AvastSvc.exe Alwil Software Avast5 AvastUI.exe ``````````End of Log```````````` Reszta raportów w załącznikach. Proszę o podpowiedzi. Pzdr Extras.Txt OTL.Txt