Ponowna prośba. Ukash

mrbm · 8 Sierpień 2012 18:46

Przepraszam. Poprzednio prawdopodobnie źle wkleiłem raporty, dlatego nie otrzymałem odpowiedzi.

OTL.txt

http://www.wklej.org/id/806774/

Extras.txt

http://www.wklej.org/id/806776/

Atis · 8 Sierpień 2012 19:14

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKU\S-1-5-21-601855108-3990525936-22473237-1000…\SearchScopes{C8D761B5-0554-4014-BAB6-7BB4CA13549B}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=&apn_ptnrs=T8&apn_dtid=YYYYYYYYPL&apn_uid=0b2b038f-3810-4c6e-93e3-f089a1f4bdfb&apn_sauid=25756CAC-A971-4CCF-9AED-6EFCE1FCAE09& O3 - HKU\S-1-5-21-601855108-3990525936-22473237-1000…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKU\S-1-5-21-601855108-3990525936-22473237-1000…\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-601855108-3990525936-22473237-1000…\Run: [mgiujwthzwpufyt] C:\ProgramData\mgiujwth.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2012/08/08 17:01:30 | 000,000,000 | —D | C] – C:\ProgramData\ttssxbzpzhgvmoi [2012/08/08 17:01:31 | 000,000,051 | ---- | M] () – C:\ProgramData\wdgxeihsnydulha [2012/08/08 17:01:25 | 000,061,440 | ---- | M] () – C:\ProgramData\mgiujwth.exe [2012/08/08 17:01:25 | 000,061,440 | ---- | M] () – C:\Users\ya\0.05235397592255586.exe [2011/05/14 06:51:27 | 000,050,328 | ---- | C] () – C:\Windows\SysWow64\yrjutareshespsbba.exe @Alternate Data Stream - 159 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 1293 bytes -> C:\ProgramData\Microsoft:51aqpw7BmZmd4vWGgkJPzT7GP @Alternate Data Stream - 1270 bytes -> C:\Program Files\Common Files\System:2aCJrHrwJGcZnkIbBaZIeLO @Alternate Data Stream - 1262 bytes -> C:\ProgramData\Microsoft:tCo1x1WrWEStAsE9vUagmvsK @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 1089 bytes -> C:\Users\ya\AppData\Local\ptbJvVSOzy:ZrJ8jgmliqdvYXiW :Commands [resethosts] [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.