Deskop security i moze coś jeszcze

[Kelap (Mirven)]

Dodaje log z OTL’a.

http://wklejto.pl/65749

http://wklejto.pl/65750

Prosze o pomoc.

[deFco247]

Po pierwsze widzę, że tutaj były stosowane wcześniej jakieś skrypty usuwające do OTL-a. Co/kiedy/gdzie było stosowane?

Zastosuj rkill.com

W białe dolne okno Custom Scans/Fixes w OTL wklej:

:Processes killallprocesses :OTL DRV - File not found [Kernel | Unknown | Running] – -- (szkgfs) DRV - File not found [Kernel | Unknown | Running] – -- (szkg5) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKCU…\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll () FF - prefs.js…browser.startup.homepage: “http://www.ask.com/?o=13166&l=dis” O4 - HKLM…\Run: [gfxwinembedcomponents] c:\Program Files\MATLAB\R2007b\sys\webrenderer\windows\corecomponents\components\editorlayout.exe () O4 - HKLM…\Run: [RuntimeCentre] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ControlControl.exe () O4 - HKLM…\Run: [setup7InstallShield11.50] c:\Program Files\InstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setupsetup7.exe () O4 - HKLM…\Run: [setup7Setup] C:\Program Files\InstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setupsetup7.exe () O4 - HKLM…\Run: [sharedControl] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ControlControl.exe () O4 - HKLM…\Run: [TRIEDITEditing] c:\Program Files\Common Files\Microsoft Shared\Triedit\TRIEDITComponent.exe () O4 - HKLM…\Run: [WindowsOperating4.72.2811.0] C:\Program Files\Neostrada TP\inst\SystemWextract.exe () O4 - HKLM…\Run: [WindowsWextract] c:\Program Files\Neostrada TP\inst\SystemWextract.exe () O4 - HKLM…\RunServices: [internetsign] c:\Program Files\Online Services\InternetAccess.exe () O4 - HKLM…\RunServices: [setupsetup7] C:\Program Files\InstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setupsetup7.exe () O4 - HKLM…\RunServices: [sharedShared6.14.10.2001] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ControlControl.exe () O4 - HKLM…\RunServices: [WindowsSystem] C:\Program Files\Neostrada TP\inst\SystemWextract.exe () [2010-05-01 23:08:14 | 000,000,000 | —D | C] – C:\Documents and Settings\Krysiewicz\Application Data\Desktop Security 2010 [2010-05-01 21:53:56 | 000,000,000 | -HSD | C] – C:\FOUND.001 :Files C:\Program Files\Common Files\Microsoft Shared\Triedit C:\Program Files\Neostrada TP\inst C:\Program Files\InstallShield Installation Information{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} c:\Program Files\Online Services C:\Program Files\MATLAB\R2007b\sys :Commands [emptytemp] [Reboot]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania (raport, który wyskoczy po usuwaniu OTL-em) oraz nowy log robiony opcją Run Scan.