Jak usunąć Live Security Platinum

[matirus]

http://wklej.to/Jj3Nx OTL
http://wklej.to/Umgxn EXTRAS

[Acorus]

Odinstaluj Free_Lunch_Design Toolbar,HijackThis 2.0.2,McAfee Security Scan Plus,Norton Security Scan,uTorrentBar Toolbar,vShare.tv plugin 1.3.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL

SRV - File not found [Auto | Stopped] -- C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
IE - HKLM\..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1708250
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
IE - HKCU\..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=13DFE5FC-C613-41AF-8166-D08BABCB7082&apn_sauid=D328A6CB-66FD-4B7B-A318-B9315C7E797A
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1708250
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "Free Lunch Design Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1708250&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&q="
[2012-05-30 14:19:32 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Bodzio\AppData\Roaming\mozilla\Firefox\Profiles\s5ei5s05.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011-04-07 18:34:30 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Bodzio\AppData\Roaming\mozilla\Firefox\Profiles\s5ei5s05.default\extensions\engine@conduit.com
[2012-01-03 16:27:44 | 000,002,333 | ---- | M] () -- C:\Users\Bodzio\AppData\Roaming\Mozilla\Firefox\Profiles\s5ei5s05.default\searchplugins\askcom.xml
[2009-05-31 19:45:28 | 000,000,896 | ---- | M] () -- C:\Users\Bodzio\AppData\Roaming\Mozilla\Firefox\Profiles\s5ei5s05.default\searchplugins\conduit.xml
[2011-07-11 20:04:02 | 000,000,633 | ---- | M] () -- C:\Users\Bodzio\AppData\Roaming\Mozilla\Firefox\Profiles\s5ei5s05.default\searchplugins\startsear.xml
O4 - HKLM..\Run: [recinfo] RecInfo.exe File not found
O4 - HKCU..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" File not found
O4 - HKCU..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h File not found
[2012-07-16 09:00:51 | 000,000,000 | ---D | C] -- C:\Users\Bodzio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
[2012-07-15 12:04:19 | 000,000,000 | ---D | C] -- C:\ProgramData\036DFF980286BAD7C25DDDB7C2E33E28
[2012-07-15 20:42:26 | 000,000,560 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Bodzio.job
[2012-07-16 09:00:51 | 000,002,006 | ---- | C] () -- C:\Users\Bodzio\Desktop\Live Security Platinum.lnk

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.
Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.

[matirus]

http://wklej.to/f9oxZ Raport z usuwania
http://wklej.to/bNKuZ Nowy skan

[Acorus]

Użyj AdwCleaner http://general-changelog-team.fr/outils/289-adwcleaner z funkcji Delete(w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).
Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL

O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

:Files
C:\ProgramData\036DFF980286BAD7C25DDDB7C2E33E28

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie. .Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free
Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa "Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje."
Zainstaluj aktualizacje do programow wskazanych przez Security Check
analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.

[matirus]

Dzięki za pomoc