Auronel
11 Sierpień 2012 19:14
#1
Witam, bardzo proszę o pomoc w usunięciu blokady z komputera, sama sobie z tym nie poradzę, a komputer jest mi bardzo potrzebny do pracy, próbowałam usunąć Go Anti malware ale nie dało się ;(
Poniżej zamieszczam logi z OTLa, pierwsze to te z filtracją, drugie to pełne skany z wszystkimi opcjami. Jeśli będziecie potrzebowali jakichkolwiek informacji to proszę tylko napisać, staram się odświeżać forum kiedy tylko mogę…
EXTRAS
LOG
EXTRAS2
LOG2
Pozdrawiam
Atis
11 Sierpień 2012 19:27
#2
Odinstaluj:
DAEMON Tools Toolbar
Freecorder Toolbar
uTorrentBar Toolbar
Complitly
Do okna Własne opcje skanowania / skrypt wklej:
:OTL DRV - File not found [File_System | On_Demand | Stopped] – -- (StarOpen) DRV - File not found [Kernel | Auto | Stopped] – C:\WINDOWS\system32\Drivers\SSPORT.sys – (SSPORT) DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\pfsvgae.sys – (pfsvgae) DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\Drivers\dtscsi.sys – (dtscsi) DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\TBPANEL.SYS – (Cardex) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/ IE - HKLM…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://search.searchonme.com/?q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/ IE - HKCU…\SearchScopes{00015CD2-5EB1-4141-9B72-FC74E586A143}: “URL” = http://searchhub.eu?q={searchTerms}&ib=&hl=pl IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933 IE - HKCU…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://search.searchonme.com/?q={searchTerms} FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.order.1: “SearchOnMe” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js…keyword.URL: “http://search.searchonme.com/?q= ” [2012-02-16 17:33:23 | 000,000,000 | —D | M] (Freecorder Community Toolbar) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions{1392b8d2-5c05-419f-a8f6-b9f15a596612} [2011-11-11 23:53:19 | 000,000,000 | —D | M] (Complitly - Speed up your search with your personal search suggestions tool) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions{33e0daa6-3af3-d8b5-6752-10e949c61516} [2012-03-10 10:50:31 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2011-05-06 17:08:59 | 000,000,000 | —D | M] (Conduit Engine) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\engine@conduit.com [2012-03-12 01:31:31 | 000,000,000 | —D | M] (TheBflix) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\extensions\info@bflix.info [2012-03-12 01:30:57 | 000,000,448 | ---- | M] () – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xi8ytiw5.default\searchplugins\SearchOnMe.xml O2 - BHO: (no name) - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - No CLSID value found. O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Documents and Settings\Administrator\Dane aplikacji\Media Finder\Extensions\IEPlugin32.dll (Media Finder) O4 - HKLM…\Run: [WSManHTTPConfig] C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\912\WSManHTTPConfig.exe () O4 - HKCU…\Run: [EA Core] “X:\Gry\EADM\Core.exe” -silent File not found O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm File not found [2012-08-09 15:29:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Dane aplikacji\hellomoto :Files C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\912 :Commands [emptytemp]
Kliknij Wykonaj skrypt i zatwierdź restart.
Pokaż raport z usuwania i nowy log Skanuj.