Facebook wysyla linki do znajomych bez mojej wiedzy

[Dombek12 (Karoldabrowski123)]

Cześć mam problem tak jak w temacie facebook został zainfekowany najprawdopodobniej przez jakiegoś wirusa mam tu raport z OTL

http://wklej.org/id/1068224/ z góry dzięki za pomoc

[system]

Facebook nie jest zainfekowany. Twój komputer owszem.

[Dombek12 (Karoldabrowski123)]

jak mi poradzisz rozwiązać ten problem czy tylko zostaje postawić nowy system?

[Acorus]

Pokaż całe logi z OTL analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html

[Dombek12 (Karoldabrowski123)]

Extras.Txt http://wklej.org/id/1069334/

a to OTL.Txt http://wklej.org/id/1069335/

[Acorus]

Odinstaluj BrowserDefender,Web Assistant 2.0.0.572,Qtrax Player,coointiynnuetoosavE,AVG Security Toolbar,Browsers Protector,ContinueToSave,DAEMON Tools Toolbar,Delta toolbar,Delta Chrome Toolbar,Contextual Tool Extrafind,Free_Lunch_Design Toolbar,hola Chrome Toolbar,holasearch toolbar,MediaBar,Incredibar Toolbar on IE,McAfee Security Scan Plus,ContinueToSave 1.74,Search Assistant SimpleSpeedy 1.74,StartSearch Toolbar 1.3,SweetIM Bundle by SweetPacks.Użyj AdwCleaner http://general-changelog-team.fr/fr/dow … adwcleaner z funkcji Usuń

Pokaż nowy OTL.txt

[Dombek12 (Karoldabrowski123)]

http://wklej.org/id/1069964/

[Acorus]

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL DRV - File not found [Kernel | On_Demand | Stopped] – -- (ZDCndis5) DRV - File not found [Kernel | On_Demand | Stopped] – G:\NTGLM7X.sys – (SetupNTGLM7X) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\RimUsb.sys – (RimUsb) DRV - File not found [Kernel | On_Demand | Stopped] – -- (PCANDIS5) DRV - File not found [Kernel | On_Demand | Stopped] – G:\NTACCESS.sys – (NTACCESS) DRV - File not found [Kernel | On_Demand | Stopped] – G:\INSTALL\GMSIPCI.SYS – (GMSIPCI) DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\marek\USTAWI~1\Temp\dbustrcm.sys – (dbustrcm) IE - HKU.DEFAULT…\SearchScopes{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: “URL” = http://us.yhs.search.yahoo.com/avg/sear … rome_us&p={searchTerms} IE - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\SearchScopes{B3B85558-CB1B-4D63-B0BA-BF9286238D48}: “URL” = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\SearchScopes{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: “URL” = http://search.avg.com/route/?d=4cc701b4 … =chrome&q={searchTerms}&lng={language}&iy=&ychte=us FF - prefs.js…browser.startup.homepage: “http://startsear.ch/?hp=df” O3 - HKLM…\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Run: [EA Core] “C:\Program Files\Electronic Arts\EADM\Core.exe” -silent File not found O4 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Run: [iSUSPM] “C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe” -scheduler File not found O4 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Run: [speedUpMyPC] “C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe” delay 20000 File not found O4 - HKU\S-1-5-21-117609710-1284227242-725345543-1003…\Run: [steam] E:\Program Files\Steam\Steam.exe -silent File not found [2013-06-20 13:16:18 | 000,000,260 | ---- | M] () – C:\WINDOWS\tasks\WGASetup.job [2013-06-20 13:15:47 | 000,000,350 | ---- | M] () – C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job [2013-06-19 14:40:14 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\deiyogpff [2013-06-19 14:38:30 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\jxuotdwck [2013-06-19 14:36:46 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\fpnepbllk [2013-06-19 14:35:02 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\lasomdpmq [2013-06-19 14:33:17 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\phnmlfead [2013-06-19 14:31:33 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\vkwdgxkap [2013-06-19 14:29:49 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\haergowap [2013-06-19 14:28:05 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\qxmawesnc [2013-06-19 14:26:21 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\drbiaudlf [2013-06-19 14:24:34 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ttrfwxyfb [2013-06-19 14:22:50 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\fciqyxmcj [2013-06-19 14:21:06 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\djnvvmknn [2013-06-19 14:19:21 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\hlceaacqh [2013-06-19 14:17:36 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\rpectxmpw [2013-06-18 22:09:25 | 000,014,422 | -H-- | M] () – C:\Documents and Settings\marek\ohrwpikjq [2013-06-18 12:13:42 | 000,005,231 | -H-- | M] () – C:\Documents and Settings\marek\mwtirxduf [2013-06-17 20:06:23 | 000,015,033 | -H-- | M] () – C:\Documents and Settings\marek\bgidfysuh [2013-06-17 12:26:49 | 000,009,957 | -H-- | M] () – C:\Documents and Settings\marek\juukjfljl [2013-06-17 01:05:00 | 000,000,472 | ---- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2013-06-16 17:21:10 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\lrofcnsti [2013-06-16 17:17:45 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\prhdistgw [2013-06-16 17:14:23 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\pyilfuoal [2013-06-16 17:10:54 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\mepjfmwty [2013-06-16 17:07:18 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\hbhhifgfr [2013-06-16 16:42:59 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ivlakseeh [2013-06-16 16:41:07 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\jkouvrshv [2013-06-16 16:35:22 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\kvojjolbl [2013-06-16 16:33:29 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ifukejlew [2013-06-16 16:28:46 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ksywxvxsn [2013-06-16 16:27:06 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\otcjhglqv [2013-06-16 16:22:58 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\qaimvfoom [2013-06-16 16:20:31 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\xqoaoyquh [2013-06-16 16:16:20 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\gxdlvucle [2013-06-16 16:12:03 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\kgoelbghw [2013-06-16 16:07:35 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\cgpnutfin [2013-06-16 16:05:56 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\bdmisgnxj [2013-06-16 16:00:14 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\devjhpckr [2013-06-16 15:56:17 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\sqjbuhgaf [2013-06-16 15:52:12 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\fugehehuo [2013-06-16 15:48:04 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ukskeicox [2013-06-16 15:43:57 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\ftbqwfhpl [2013-06-16 15:25:48 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\jsvbrhgvi [2013-06-16 15:21:34 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\awnbxhlro [2013-06-16 15:17:23 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\xplpwxkac [2013-06-16 14:44:32 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\fmvifjjjg [2013-06-16 14:40:12 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\nnxpobhir [2013-06-16 14:35:40 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\eojnputqk [2013-06-16 14:31:28 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\gtdgchtxa [2013-06-16 14:00:12 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\icodhmsvp [2013-06-16 13:55:21 | 000,000,000 | -H-- | M] () – C:\Documents and Settings\marek\bngjywwni [2011-11-20 13:02:50 | 000,460,624 | ---- | C] () – C:\Documents and Settings\marek\Ustawienia lokalne\Dane aplikacji\promo.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt.W AdwCleaner użyj opcji Usuń.

Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free/

Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa “Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje.”

Zainstaluj aktualizacje do programow wskazanych przez Security Check

analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.