AVAsoft Professional Antivirus- pomocy!

[Bartek8500 (Yoyobp)]

Proszę o pomoc w usunięciu AVAsoft Professional. Właśnie mi wlazło na laptopa i nic się nie da zrobić.

Poniżej raporty:

http://wklej.org/id/990066/

http://wklej.org/id/990067/

Proszę o sprawdzenie.

[Atis]

Odinstaluj Ask Toolbar i Babylon toolbar on IE.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKU\S-1-5-21-555122870-3713191396-2338945336-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110808 … e50bb4f091 IE - HKU\S-1-5-21-555122870-3713191396-2338945336-1001…\SearchScopes{052E6181-C825-4860-8E8B-5693A28A460F}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=21675A50-1996-4ACC-A13B-4CF31E88EDC3&apn_sauid=03F55221-008B-46CB-B799-59149FD40215 IE - HKU\S-1-5-21-555122870-3713191396-2338945336-1001…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&affID=110808&tt=3412_4&babsrc=SP_ss&mntrId=0e7958d900000000000074e50bb4f091 FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Ask.com” FF - prefs.js…browser.search.order.1: “Ask.com” FF - prefs.js…extensions.enabledAddons: ffxtlbr%40babylon.com:1.5.0 FF - prefs.js…keyword.URL: “http://search.babylon.com/?babsrc=SP_ss&mntrId=0e7958d900000000000074e50bb4f091&tlver=1.6.4.6&instlRef=sst&babTrack&q=” [2012-08-21 20:42:27 | 000,000,000 | —D | M] (Babylon) – C:\Users\Matwiej\AppData\Roaming\mozilla\Firefox\Profiles\6a2ldmzm.default\extensions\ffxtlbr@babylon.com [2012-10-20 20:36:01 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Users\Matwiej\AppData\Roaming\mozilla\Firefox\Profiles\6a2ldmzm.default\extensions\toolbar@ask.com [2012-10-20 20:36:01 | 000,002,299 | ---- | M] () – C:\Users\Matwiej\AppData\Roaming\mozilla\firefox\profiles\6a2ldmzm.default\searchplugins\askcom.xml [2012-08-21 20:30:53 | 000,002,349 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-555122870-3713191396-2338945336-1001…\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4 - HKLM…\Run: [] File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-555122870-3713191396-2338945336-1001…\RunOnce: [0E8271CBC92758D900000E82635261D5] C:\ProgramData\0E8271CBC92758D900000E82635261D5\0E8271CBC92758D900000E82635261D5.exe () :Files C:\Users\Matwiej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVASoft Professional Antivirus C:\ProgramData\0E8271CBC92758D900000E82635261D5 C:\Users\Matwiej\Desktop\AVASoft Professional Antivirus.lnk C:\Users\Matwiej\AppData\Roaming\BabMaint.exe C:\Users\Matwiej\AppData\Roaming\Babylon C:\Users\Matwiej\AppData\Roaming\BabylonToolbar :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.