Blokada komputera - Ukash

[giger (Rkreczmanski)]

Proszę o pomoc w usunięciu ukash.

Extras.txt http://wklej.org/id/852311/

OTL.txt http://wklej.org/id/852306/

[Atis]

1. Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1030000. … =12&barid={22DD52BF-0814-11E2-8740-001F299B4FC8} IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={22DD52BF-0814-11E2-8740-001F299B4FC8} IE - HKLM…\SearchScopes{EAB74ED4-1A7D-48FA-B002-9C4035C0BD8B}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcmnbie7-pl-pl IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1030000. … =12&barid={22DD52BF-0814-11E2-8740-001F299B4FC8} IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004…\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004…\SearchScopes{EAB74ED4-1A7D-48FA-B002-9C4035C0BD8B}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcmnbie7-pl-pl IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={22DD52BF-0814-11E2-8740-001F299B4FC8} O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004…\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found. O3 - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004…\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [xwizard] C:\Users\Ewelina\AppData\Local\Microsoft\Windows\700\xwizard.exe () [2012-10-22 07:55:45 | 000,000,000 | —D | C] – C:\Users\Ewelina\AppData\Roaming\hellomoto :Files C:\Users\Ewelina\AppData\Local\Microsoft\Windows\700 :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [resethosts] [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania.

2. Uruchom system w normalnym trybie i odinstaluj:

Internet Explorer Toolbar 4.6 by SweetPacks

AOL Toolbar

Update Manager for SweetPacks

Spybot - Search & Destroy

3. Pobierz AdwCleaner

Zamknij przeglądarkę internetową.

Uruchom AdwCleaner i kliknij Delete

4. Pokaż nowy log Skanuj.