herooo70
11 Lipiec 2012 09:50
#1
Mam problem jak wielu z Was, proszę o pomoc
http://speedy.sh/eyb6T/Extras.Txt
http://speedy.sh/u6eEZ/OTL.Txt
Z góry dziękuje:<
Acorus
11 Lipiec 2012 10:10
#2
herooo70
11 Lipiec 2012 10:36
#3
Nie wiedziałem. Już poprawiam
http://wklej.org/id/788295/ otl
http://wklej.org/id/788296/ extras
proszę o pomoc
Z góry dziękuje…
Acorus
11 Lipiec 2012 11:04
#4
Odinstaluj DAEMON Tools Toolbar,Softonic-Polska Toolbar,Veoh Web Player Toolbar,vShare Plugin,vShare.tv plugin 1.3.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=vlt IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=vlt IE - HKLM…\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) IE - HKLM…\URLSearchHook: {cd90bf73-20f6-44ef-993d-bb920303bd2e} - C:\Program Files (x86)\Veoh_Web_Player\prxtbVeo2.dll (Conduit Ltd.) IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2653012 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=vlt IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=vlt IE - HKCU…\URLSearchHook: {14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} - No CLSID value found IE - HKCU…\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found IE - HKCU…\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {cd90bf73-20f6-44ef-993d-bb920303bd2e} - C:\Program Files (x86)\Veoh_Web_Player\prxtbVeo2.dll (Conduit Ltd.) IE - HKCU…\SearchScopes{043C5167-00BB-4324-AF7E-62013FAEDACF}: “URL” = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp IE - HKCU…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://startsear.ch/?aff=1&q={searchTerms} IE - HKCU…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=bf&s={searchTerms}&f=4 IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100888&mntrId=ec9fceac0000000000001c4bd6937f2d IE - HKCU…\SearchScopes{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=en_US IE - HKCU…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2653012 IE - HKCU…\SearchScopes{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: “URL” = http://mystart.incredimail.com/mb59/?search={searchTerms}&loc=search_box&u=92541427972598743 FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…browser.startup.homepage: “http://search.babylon.com/?babsrc=HP_Prot ” FF - prefs.js…extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.1 FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js…extensions.enabledItems: ffxtlbr@babylon.com:1.1.9 FF - prefs.js…keyword.URL: “http://vshare.toolbarhome.com/search.aspx?srch=ku&q= ” [2011/12/05 18:23:52 | 000,000,000 | —D | M] (BitTorrentBar Community Toolbar) – C:\Users\Prezes\AppData\Roaming\mozilla\Firefox\Profiles\tn8vujrp.default\extensions{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2011/08/31 13:38:49 | 000,000,000 | —D | M] (IncrediMail MediaBar 4 Community Toolbar) – C:\Users\Prezes\AppData\Roaming\mozilla\Firefox\Profiles\tn8vujrp.default\extensions{90eee664-34b1-422a-a782-779af65cdf6d} [2011/08/31 13:38:48 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\Prezes\AppData\Roaming\mozilla\Firefox\Profiles\tn8vujrp.default\extensions\engine@conduit.com [2011/08/31 14:08:02 | 000,000,000 | —D | M] (Babylon) – C:\Users\Prezes\AppData\Roaming\mozilla\Firefox\Profiles\tn8vujrp.default\extensions\ffxtlbr@babylon.com [2011/09/28 15:45:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Prezes\AppData\Roaming\mozilla\Firefox\Profiles\tn8vujrp.default\extensions\ffxtlbr@Facemoods.com [2011/08/31 13:33:59 | 000,002,207 | ---- | M] () – C:\Users\Prezes\AppData\Roaming\Mozilla\Firefox\Profiles\tn8vujrp.default\searchplugins\MyStart Search.xml [2011/07/11 20:04:02 | 000,000,633 | ---- | M] () – C:\Users\Prezes\AppData\Roaming\Mozilla\Firefox\Profiles\tn8vujrp.default\searchplugins\startsear.xml O3:64bit: - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM…\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Veoh Web Player Toolbar) - {cd90bf73-20f6-44ef-993d-bb920303bd2e} - C:\Program Files (x86)\Veoh_Web_Player\prxtbVeo2.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {14F6A182-4C6F-45AE-9F5A-AA3CCBB1CFA3} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3:64bit: - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU…\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Program Files (x86)\Softonic-Polska\prxtbSof2.dll (Conduit Ltd.) O3 - HKCU…\Toolbar\WebBrowser: (Veoh Web Player Toolbar) - {CD90BF73-20F6-44EF-993D-BB920303BD2E} - C:\Program Files (x86)\Veoh_Web_Player\prxtbVeo2.dll (Conduit Ltd.) O4:64bit: - HKLM…\Run: [PCSpeedUp] “C:\Program Files\Przyspiesz Komputer\PCSpeedUp.exe” File not found O18 - Protocol\Handler\vsharechrome - No CLSID value found :Commands [emptytemp]
Kliknij Wykonaj skrypt.Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.
herooo70
11 Lipiec 2012 11:31
#5
Pousuwałem te toolbary, ale po chwili od kliknięciu w “wykonaj skrypt”, OTL przechodzi w stan braku odpowiedzi;/
Acorus
11 Lipiec 2012 11:59
#6
Wykonaj w trybie awaryjnym.
herooo70
11 Lipiec 2012 12:11
#7
Wykonałem, program się uruchomił, niestety bez skutku. Problem się nie rozwiązał. Oto logi.
http://wklej.org/id/788369/ z usuwania
http://wklej.org/id/788370/ otl
Co mam robić dalej;/?
Acorus
11 Lipiec 2012 12:35
#8
Użyj AdwCleaner http://general-changelog-team.fr/outils/289-adwcleaner z funkcji Delete(w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).
Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free
Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa “Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje.”
herooo70
11 Lipiec 2012 22:34
#9
Dopiero skanowanie Anti-Malware i usunięcie 9 trojanów zadziałało. Dzięki wielkie!!
POZDRAWIAM