Fast Browser Search

dawidowski · 3 Listopad 2009 07:23

Witam.

Mam problem z wyszukiwarką Fast Browser Search. Zainstalowała mi się na kompie i za nic nie mogę jej usunąć. Może ktoś będzie w stanie mi pomóc.

http://www.wklej.org/id/193843/

jessica · 3 Listopad 2009 07:53

W logu nie widzę tego “Fast Browser”.

Są za to inne “kwiatki”, więc:

jessi

dawidowski · 3 Listopad 2009 08:43

Log z OTL:

http://www.wklej.org/id/193885/

Log ze SRENG:

http://www.wklej.org/id/193886/

jessica · 3 Listopad 2009 09:23

Nazbierało się tego …

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL IE - HKU\S-1-5-21-2955869684-2281525743-693604089-1006…\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll (Vendio Services, Inc.) FF - prefs.js…browser.search.defaultenginename: “Fast Browser Search” FF - prefs.js…browser.search.defaulturl: “http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=” FF - prefs.js…browser.search.order.1: “Fast Browser Search” FF - prefs.js…keyword.URL: “http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={1D7DA164-6D64-A218-E76E-C22D2D5D39E2}&q=” [2009-08-02 08:31:08 | 00,000,886 | ---- | M] () – C:\Documents and Settings\Marian\Dane aplikacji\Mozilla\Firefox\Profiles\y19m4zt6.default\searchplugins\conduit.xml [2009-11-02 08:47:05 | 00,003,700 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.png [2009-11-02 08:47:05 | 00,001,963 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.xml [2009-11-02 08:47:04 | 00,000,000 | —D | M] – C:\Documents and Settings\Marian\Dane aplikacji\Mozilla\Firefox\Profiles\y19m4zt6.default\extensions{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} FF - prefs.js…extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.4.0 O2 - BHO: (SearchSettings Class) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll (Vendio Services, Inc.) O2 - BHO: (no name) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - No CLSID value found. O3 - HKU\S-1-5-21-2955869684-2281525743-693604089-1006…\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\S-1-5-21-2955869684-2281525743-693604089-1006…\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\S-1-5-21-2955869684-2281525743-693604089-1006…\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found. O4 - HKLM…\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe (Vendio Services, Inc. O28 - HKLM ShellExecuteHooks: {B03A4BE6-5E5A-483E-B9B3-C484D4B20B72} - C:\WINDOWS\system32\softqq0.dll () O28 - HKLM ShellExecuteHooks: {BB4C402F-882A-4526-8C08-51278EA437C1} - C:\WINDOWS\system32\afmain0.dll () O28 - HKLM ShellExecuteHooks: {BD344AF4-67AB-4E19-A630-7435587D320B} - C:\WINDOWS\system32\ahndoor0.dll () O28 - HKLM ShellExecuteHooks: {C5F43BEF-CE2F-46D8-AFE6-A647BACD1F09} - C:\WINDOWS\system32\haozs1.dll () O33 - MountPoints2{27b6a6e0-fc0d-11dd-b552-0012f0d39888}\Shell\AutoRun\command - “” = E:\qphdin.com – File not found O33 - MountPoints2{27b6a6e0-fc0d-11dd-b552-0012f0d39888}\Shell\open\Command - “” = E:\qphdin.com – File not found O33 - MountPoints2{2a965a30-5864-11da-adcf-0012f0d39888}\Shell\AutoRun\command - “” = G:\yudald.bat – File not found O33 - MountPoints2{2a965a30-5864-11da-adcf-0012f0d39888}\Shell\open\Command - “” = G:\yudald.bat – File not found O33 - MountPoints2{4625f0b1-dafb-11dd-b4f9-0012f0d39888}\Shell\AutoRun\command - “” = E:\yb12j.cmd – File not found O33 - MountPoints2{4625f0b1-dafb-11dd-b4f9-0012f0d39888}\Shell\open\Command - “” = E:\yb12j.cmd – File not found O33 - MountPoints2{6a122a70-adac-11de-b74f-0012f0d39888}\Shell\AutoRun\command - “” = E:\yudald.bat – File not found O33 - MountPoints2{6a122a70-adac-11de-b74f-0012f0d39888}\Shell\open\Command - “” = E:\yudald.bat – File not found O33 - MountPoints2{7bed7c30-3169-11dd-b3aa-0012f0d39888}\Shell\AutoRun\command - “” = G:\yudald.bat – File not found O33 - MountPoints2{7bed7c30-3169-11dd-b3aa-0012f0d39888}\Shell\open\Command - “” = G:\yudald.bat – File not found O33 - MountPoints2{823413d1-8052-11da-ae6a-4d6564696130}\Shell\AutoRun\command - “” = E:\fbak.exe – File not found O33 - MountPoints2{823413d1-8052-11da-ae6a-4d6564696130}\Shell\open\Command - “” = E:\fbak.exe – File not found O33 - MountPoints2{95617c80-628f-11da-aded-0012f0d39888}\Shell\AutoRun\command - “” = E:\fbak.exe – File not found O33 - MountPoints2{95617c80-628f-11da-aded-0012f0d39888}\Shell\open\Command - “” = E:\fbak.exe – File not found O33 - MountPoints2{97154790-6f29-11db-b079-0012f0d39888}\Shell\AutoRun\command - “” = E:\86l2qw.bat – File not found O33 - MountPoints2{97154790-6f29-11db-b079-0012f0d39888}\Shell\open\Command - “” = E:\86l2qw.bat – File not found O33 - MountPoints2{aa01dd30-5271-11de-b64c-0012f0d39888}\Shell\AutoRun\command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd30-5271-11de-b64c-0012f0d39888}\Shell\open\Command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd33-5271-11de-b64c-0012f0d39888}\Shell\AutoRun\command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd33-5271-11de-b64c-0012f0d39888}\Shell\open\Command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd3c-5271-11de-b64c-0012f0d39888}\Shell\AutoRun\command - “” = G:\9u.exe – File not found O33 - MountPoints2{aa01dd3c-5271-11de-b64c-0012f0d39888}\Shell\open\Command - “” = G:\9u.exe – File not found O33 - MountPoints2{aa01dd41-5271-11de-b64c-0012f0d39888}\Shell\AutoRun\command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd41-5271-11de-b64c-0012f0d39888}\Shell\open\Command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd43-5271-11de-b64c-0012f0d39888}\Shell\AutoRun\command - “” = E:\8.exe – File not found O33 - MountPoints2{aa01dd43-5271-11de-b64c-0012f0d39888}\Shell\open\Command - “” = E:\8.exe – File not found O33 - MountPoints2{b571af50-a28c-11de-b723-0012f0d39888}\Shell\AutoRun\command - “” = 86.exe O33 - MountPoints2{b571af50-a28c-11de-b723-0012f0d39888}\Shell\open\Command - “” = 86.exe O33 - MountPoints2{b7fdd5e0-e11e-11dc-b2d6-4d6564696130}\Shell\AutoRun\command - “” = E:\hkn6k.bat – File not found O33 - MountPoints2{b7fdd5e0-e11e-11dc-b2d6-4d6564696130}\Shell\open\Command - “” = E:\hkn6k.bat – File not found O33 - MountPoints2{b9d77d80-2069-11de-b5cc-4d6564696130}\Shell\AutoRun\command - “” = E:\cqxj.exe – File not found O33 - MountPoints2{b9d77d80-2069-11de-b5cc-4d6564696130}\Shell\open\Command - “” = E:\cqxj.exe – File not found O33 - MountPoints2{bcbb95e4-be07-11de-b78a-0012f0d39888}\Shell\AutoRun\command - “” = E:\yudald.bat – File not found O33 - MountPoints2{bcbb95e4-be07-11de-b78a-0012f0d39888}\Shell\open\Command - “” = E:\yudald.bat – File not found :Files C:\Program Files\Search Settings C:\WINDOWS\expiorer.exe C:\WINDOWS\AhnRpta.exe C:\WINDOWS\system32\nmdfgds0.dll C:\WINDOWS\system32\haozs1.dll C:\WINDOWS\system32\afmain0.dll C:\autorun.inf C:\WINDOWS\System32\nmdfgds1.dll C:\yudald.bat C:\WINDOWS\System32\olhrwef.exe C:\9b9w3.exe C:\3n8awsyg.exe C:\hjvjte.exe C:\b00ijwpu.exe C:\wcgswa.exe C:\qbr2q.exe C:\nds0q.exe C:\se12ydam.exe C:\2sm66r.exe C:\s3ek.exe C:\ycvvj.exe C:\vlvtdflx.exe C:\1di1w.exe C:\r2g20.exe C:\f9o8o.exe C:\ctu8r.exe C:\sp1jensi.exe C:\WINDOWS\System32\nmdfgds1.dll C:\WINDOWS\System32\nmdfgds0.dll C:\WINDOWS\System32\nmdfgds2.dll C:\WINDOWS\System32\nmdfgds3.dll C:\WINDOWS\System32\ciuytr1.dll C:\WINDOWS\System32\ciuytr0.dll C:\WINDOWS\System32\haozs2.dll C:\WINDOWS\System32\haozs1.dll C:\WINDOWS\System32\haozs0.dll C:\WINDOWS\System32\afmain1.dll C:\WINDOWS\System32\afmain0.dll C:\WINDOWS\System32\e8main0.dll C:\WINDOWS\System32\softqq0.dll C:\WINDOWS\System32\ahndoor0.dll :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{F0626A63-410B-45E2-99A1-3F2475B2D695}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{00EF2092-6AC5-47C0-BD25-CF2D5D657FEB}] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] “cdoosoft”=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] “{C5F43BEF-CE2F-46D8-AFE6-A647BACD1F09}”=- “{BB4C402F-882A-4526-8C08-51278EA437C1}”=- “{BD344AF4-67AB-4E19-A630-7435587D320B}”=- “{B03A4BE6-5E5A-483E-B9B3-C484D4B20B72}”=- [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{08B0E5C0-4FCB-11CF-AAA5-00401C608501}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{2318C2B1-4965-11D4-9B18-009027A5CD4F}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{6A87B991-A31F-4130-AE72-6D0C294BF082}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{917623D1-D8E5-11D2-BE8B-00104B06BDE3}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{92780B25-18CC-41C8-B9BE-3C9C571A8263}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{9ECB9560-04F9-4BBC-943D-298DDF1699E1}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{AA58ED58-01DD-4D91-8333-CF10577473F7}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{BDF3E430-B101-42AD-A544-FADC6B084872}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E2E2DD38-D088-4134-82B7-F2BA38496583}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{FB5F1910-F110-11D2-BB9E-00C04F795683}] :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchom OTL ponownie, tym razem wywołaj opcję Run Scan.

Pokaż nowy log OTL.txt oraz log z czyszczenia.

jessi

dawidowski · 3 Listopad 2009 10:04

Log z czyszczenia OTL

http://www.wklej.org/id/193926/

Nowy log z OTL:

http://www.wklej.org/id/193932/

jessica · 3 Listopad 2009 10:28

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

Kliknij w Run Fix.

Logu już nie musisz dawać.

Ale Ci przybyło miejsca na dysku po tym usuwaniu!

W OTL kliknij na “Clean Up” - to go usunie.

Usuń kopie szkodników z folderu “System Volume Information” poprzez chwilowe wyłączenie “Przywracania Systemu”:

jessi

dawidowski · 3 Listopad 2009 13:52

DZIĘKUJĘ ZA POMOC. Wszystko działa jak dawniej, pozdrawiam