mam podobny problem co kolega powyżej, ściągnąłem ten badziew:/ i nie wiem co z tym zrobić.
Proszę o pomoc.
to log z OTL: http://wklej.org/id/238060/
jessica
16 Grudzień 2009 23:14
#2
Uruchom OTL i w oknie Custom Scans/Fixes wklej to:
:OTL FF - prefs.js…browser.startup.homepage: “http://www.theprizeday.com/today.php|http://google.pl/ ” FF - prefs.js…extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.1.0.1990 FF - prefs.js…extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5260 FF - prefs.js…extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.1.0.1850 FF - HKLM\software\mozilla\Firefox\Extensions\{40f1eb95-4de4-4f36-a826-054ee36bb905}: C:\Program Files\Gameztar Toolbar\2.1.3.6670\FFToolbar [2009-12-16 22:00:05 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.1990\FF [2009-12-13 18:09:05 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5260\FF [2009-12-13 18:09:25 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1850\FF [2009-12-13 18:09:46 | 00,000,000 | —D | M] [2009-02-24 08:00:59 | 00,000,000 | —D | M] (BearShare MediaBar) – C:\Program Files\Mozilla Firefox\extensions{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} O2 - BHO: (MyWay Search Assistant BHO) - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL File not found O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5260\ACEIEAddOn.dll () O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search) O2 - BHO: (no name) - {3E1500AC-87A5-416b-A211-82E848649DA9} - No CLSID value found. O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1850\CPAIEAddOn.dll () O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll () O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll () O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll () O2 - BHO: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.1990\WSO.dll () O3 - HKLM…\Toolbar: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search) O3 - HKLM…\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKLM…\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found O3 - HKU\S-1-5-21-2610371892-1655233198-3213544898-1000…\Toolbar\WebBrowser: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search) O3 - HKU\S-1-5-21-2610371892-1655233198-3213544898-1000…\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O4 - HKLM…\Run: [bargains] C:\Program Files\Bargain Buddy\bin\bargains.exe File not found O4 - HKLM…\Run: [cfFncEnabler.exe] File not found O4 - HKLM…\Run: [NDSTray.exe] File not found O4 - HKLM…\Run: [NPSStartup] File not found [2009-12-13 18:11:28 | 00,000,000 | —D | C] – C:\Program Files\Textual Content Provider [2009-12-13 18:10:57 | 00,000,000 | —D | C] – C:\Program Files\Content Management Wizard [2009-12-13 18:10:15 | 00,000,000 | —D | C] – C:\Program Files\Internet Today [2009-12-13 18:09:46 | 00,000,000 | —D | C] – C:\Program Files\Customized Platform Advancer [2009-12-13 18:09:25 | 00,000,000 | —D | C] – C:\Program Files\Automated Content Enhancer [2009-12-13 18:09:06 | 00,000,000 | —D | C] – C:\Users\Strumfeta\AppData\Local\Web Search Operator [2009-12-13 18:09:04 | 00,000,000 | —D | C] – C:\Program Files\Web Search Operator [2009-12-13 18:08:21 | 00,000,000 | —D | C] – C:\Program Files\Gameztar Toolbar [2009-12-13 18:08:04 | 00,000,000 | -H-D | C] – C:\ProgramData{FE09428E-9E54-4117-AC27-50C2DA4B2EC3} :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [Reboot]
Kliknij w Run Fix . Zatwierdź restart komputera.
Następnie uruchom OTL ponownie, tym razem wywołaj opcję Run Scan.
Pokaż nowy log OTL.txt oraz log z czyszczenia.
jessi
wszystko zrobiłem wedle instrukcji…
to otrzymałem po restarcie( to chyba się nazywa log z czyszczenia…): http://wklej.org/id/238108/
a oto plik jaki otrzymałem z ponownego Run Scan (po uruchomieniu OTL nic więcej nie wpisywałem…, nie wiem czy powinienem) : http://wklej.org/id/238110/
pozdrawiam serdecznie
jessica
17 Grudzień 2009 02:19
#4
Uważam, że jest OK.
Możesz jeszcze użyć >http://www.dobreprogramy.pl/Malwarebytes-AntiMalware,Program,Windows,13117.html , bo ta infekcja często pozostawia po sobie różne “śmieci”, które nie są widoczne w logach OTL.
jessi
dzięki wielkie!
wszystko jest ok. a programik wykrył trochę plików zainfekowanych, których się już pozbyłem:)