Blokada komputera - "Wirus Ukash" - logi z OTL

[Auronel]

Witam, bardzo proszę o pomoc w usunięciu blokady z komputera, sama sobie z tym nie poradzę, a komputer jest mi bardzo potrzebny do pracy, próbowałam usunąć Go Anti malware ale nie dało się ;(

Poniżej zamieszczam logi z OTLa, pierwsze to te z filtracją, drugie to pełne skany z wszystkimi opcjami. Jeśli będziecie potrzebowali jakichkolwiek informacji to proszę tylko napisać, staram się odświeżać forum kiedy tylko mogę...

EXTRAS
LOG


EXTRAS2
LOG2



Pozdrawiam

[Atis]

Odinstaluj:
DAEMON Tools Toolbar
Freecorder Toolbar
uTorrentBar Toolbar
Complitly

Do okna Własne opcje skanowania / skrypt wklej:

:OTL
DRV - File not found [File_System | On_Demand | Stopped] -- -- (StarOpen)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\Drivers\SSPORT.sys -- (SSPORT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\pfsvgae.sys -- (pfsvgae)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPANEL.SYS -- (Cardex)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://search.searchonme.com/?q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKCU\..\SearchScopes\{00015CD2-5EB1-4141-9B72-FC74E586A143}: "URL" = http://searchhub.eu?q={searchTerms}&ib=&hl=pl
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
IE - HKCU\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://search.searchonme.com/?q={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "SearchOnMe"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..keyword.URL: "http://search.searchonme.com/?q="
[2012-02-16 17:33:23 | 000,000,000 | ---D | M] (Freecorder Community Toolbar) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
[2011-11-11 23:53:19 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
[2012-03-10 10:50:31 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011-05-06 17:08:59 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\engine@conduit.com
[2012-03-12 01:31:31 | 000,000,000 | ---D | M] (TheBflix) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\info@bflix.info
[2012-03-12 01:30:57 | 000,000,448 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\searchplugins\SearchOnMe.xml
O2 - BHO: (no name) - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - No CLSID value found.
O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Documents and Settings\Administrator\Dane aplikacji\Media Finder\Extensions\IEPlugin32.dll (Media Finder)
O4 - HKLM..\Run: [WSManHTTPConfig] C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\912\WSManHTTPConfig.exe ()
O4 - HKCU..\Run: [EA Core] "X:\Gry\EADM\Core.exe" -silent File not found
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm File not found
[2012-08-09 15:29:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\hellomoto

:Files
C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\912

:Commands
[emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.
Pokaż raport z usuwania i nowy log Skanuj.