Jak usunąć optimizer pro?

Dla specjalistów Bezpieczeństwo
#1

Witam!

Na wstępie jestem laikiem i bardzo potrzebuje pomocy w usunięciu Optimizer Pro z Win 7. Chciałam otworzyć ściągnięty plik, który okazał się nie tym czego oczekiwałam. Avast przeprowadził pełne skanowanie i nie znalazł nic niepokojącego. Zauważyłam na pulpicie nie znany mi program - Optimizer Pro. Znalazłam info, że to spyware. Chce to usunąć, a nie wiem jak. Użyłam OTL, zeskanował i załaczam wyniki:

OTL: http://www.wklej.org/id/1189514/

Extras: http://www.wklej.org/id/1189515/

Bardzo proszę o pomoc. Nigdy nie miałam problemu z wirusami, a tu coś takiego.

#2

Odinstaluj SaveSense i uTorrentControl2 Toolbar.

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Pokaż nowy log z OTL.

#3

zrobione :slight_smile:

nowy log z OTL: http://www.wklej.org/id/1189766/

#4

Odinstaluj SecretSauce.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL
SRV - [2013/11/26 21:08:41 | 000,146,920 | ---- | M] (SaveSense) [On_Demand | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselivem)
SRV - [2013/11/26 21:08:41 | 000,146,920 | ---- | M] (SaveSense) [Auto | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselive)
SRV - [2013/11/13 21:07:10 | 000,066,848 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe -- (Update SecretSauce)
IE - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\SearchScopes\{34067F4A-AF29-456E-9D02-A709A9BE86EA}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=kw&q={searchTerms}&locale=&apn_ptnrs=^PV&apn_dtid=^YYYYYY^YY^PL&apn_uid=0688b0c1-57ef-46f5-afcd-d617ef6bba96&apn_sauid=2F69A5A0-3416-4C05-9A40-AF753E65FDA5
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK
[2012/07/27 12:21:31 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
O2:[b]64bit:[/b] - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
O2 - BHO: (SecretSauce) - {0ffd0ef2-dbe9-483a-80c4-d2c331da1ce4} - C:\Program Files (x86)\SecretSauce\SecretSaucebho.dll (SecretSauce)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll File not found
O3 - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O4 - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\SaveSenseLive
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveSenseLive
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveSenseLive
[2013/11/26 21:08:39 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\SaveSense
[2013/11/26 21:07:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SecretSauce
SRV - [2013/11/26 21:08:41 | 000,146,920 | ---- | M] (SaveSense) [On_Demand | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselivem)
SRV - [2013/11/26 21:08:41 | 000,146,920 | ---- | M] (SaveSense) [Auto | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselive)
SRV - [2013/11/13 21:07:10 | 000,066,848 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SecretSauce\updateSecretSauce.exe -- (Update SecretSauce)
IE - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\SearchScopes\{34067F4A-AF29-456E-9D02-A709A9BE86EA}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=kw&q={searchTerms}&locale=&apn_ptnrs=^PV&apn_dtid=^YYYYYY^YY^PL&apn_uid=0688b0c1-57ef-46f5-afcd-d617ef6bba96&apn_sauid=2F69A5A0-3416-4C05-9A40-AF753E65FDA5
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK
[2012/07/27 12:21:31 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
O2:[b]64bit:[/b] - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
O2 - BHO: (SecretSauce) - {0ffd0ef2-dbe9-483a-80c4-d2c331da1ce4} - C:\Program Files (x86)\SecretSauce\SecretSaucebho.dll (SecretSauce)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll File not found
O3 - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O4 - HKU\S-1-5-21-3576771654-4195084422-3704234110-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Local\SaveSenseLive
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveSenseLive
[2013/11/26 21:08:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveSenseLive
[2013/11/26 21:08:39 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\SaveSense
[2013/11/26 21:07:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SecretSauce
:Commands
[emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

#5

Raport z usuwania: http://www.wklej.org/id/1191789/

nowy log : http://www.wklej.org/id/1191795/

#6

Wklej i kliknij Wykonaj skrypt:

:OTL
[2013/11/27 09:32:50 | 000,000,000 | ---D | C] -- C:\AdwCleaner

Uruchom OTL i kliknij Sprzątanie.

#7

Witam. Mam ten sam problem z programem Optimizer pro i innymy programami z nim zainstalowanymi. Niby Awast cos zablokowal, w dodaj/usun programy tez dalo sie odinstalowac, ale po zeskanowaniu przez program AdwCleaner dalam usun, zrestartowalo mi kompa, po czym w notatniku otworzyl mi sie raport:

 

AdwCleaner v3.013 - Report created 29/11/2013 at 21:01:53