Komputer został zablokowany z powodu naruszenia praw Polski

alien_at_work · 25 Lipiec 2012 14:33

Witam

Mam taki sam problem jak kolega

Załączam pliki z OTL

Acorus · 25 Lipiec 2012 14:56

Odinstaluj Babylon toolbar on IE,DealPly,McAfee Security Scan Plus,MyAshampoo Toolbar,vShare.tv plugin 1.3.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=522660ea- … 2421f3480f IE - HKLM…\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) IE - HKLM…\SearchScopes{79569285-DEDE-4525-B181-E57030D380FE}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=52 … 1f3480f&q={searchTerms} IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.softonic.com/MON00084/tb_ … rce=10&cc= IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&AF=110004&tt=090212_ctrl&babsrc=SP_ss&mntrId=c8c20666000000000000243c20069192 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{163350EA-597C-4E21-B92B-7B146D1915C8}: “URL” = http://search.avg.com/?d=4dcaadc4&i=23&tp=chrome&q={searchTerms}&lng={language}&nt=1 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{4578C55C-5349-4094-8C3D-0C5B36F86FDF}: “URL” = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc= IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{79569285-DEDE-4525-B181-E57030D380FE}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=52 … 1f3480f&q={searchTerms} IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{8143CF24-E462-4156-95A9-940B13AF2CF6}: “URL” = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Web Search” FF - prefs.js…browser.search.defaultthis.engineName: “MyAshampoo Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Web Search” FF - prefs.js…browser.search.selectedEngine: “Search the web (Softonic)” FF - prefs.js…browser.startup.homepage: “http://search.softonic.com/MON00084/tb_v1?SearchSource=13&cc=” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.3.3.2 FF - prefs.js…keyword.URL: “http://search.softonic.com/MON00084/tb_v1?SearchSource=2&cc=&q=” [2012-07-15 23:58:37 | 000,000,000 | —D | M] (MyAshampoo Community Toolbar) – C:\Users\Alan\AppData\Roaming\mozilla\Firefox\Profiles\5a5qv6hw.default\extensions{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} [2012-06-19 00:51:18 | 000,000,000 | —D | M] (softonic.com) – C:\Users\Alan\AppData\Roaming\mozilla\Firefox\Profiles\5a5qv6hw.default\extensions\ffxtlbra@softonic.com [2010-12-15 17:12:32 | 000,000,923 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\conduit.xml [2012-02-18 12:57:31 | 000,002,060 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\softonic.xml [2012-01-18 22:38:22 | 000,000,792 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\startsear.xml O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\softonic\1.5.11.5\softonicTlbr.dll (Softonic.com) O3 - HKLM…\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM…\Toolbar: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll (Conduit Ltd.) [2012-07-24 22:51:19 | 000,000,000 | —D | C] – C:\Users\Alan\AppData\Roaming\hellomoto :Files C:\ProgramData\xcdtijhyrvoxmis C:\ProgramData\auzkxkfdnmtylfa C:\Users\Alan\0.3291607847577249.exe C:\Users\Alan\AppData\Local\Temp*.html :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

alien_at_work · 26 Lipiec 2012 11:14

usunalem te programy z panelu sterowania.

Log OTL http://wklej.org/id/798044/

Extras http://wklej.org/id/798045/

Raport z usuwania http://wklej.org/id/798046/

Acorus · 26 Lipiec 2012 13:27

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=522660ea- … 2421f3480f IE - HKLM…\SearchScopes{79569285-DEDE-4525-B181-E57030D380FE}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=52 … 1f3480f&q={searchTerms} IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.softonic.com/MON00084/tb_ … rce=10&cc= IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&AF=110004&tt=090212_ctrl&babsrc=SP_ss&mntrId=c8c20666000000000000243c20069192 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{163350EA-597C-4E21-B92B-7B146D1915C8}: “URL” = http://search.avg.com/?d=4dcaadc4&i=23&tp=chrome&q={searchTerms}&lng={language}&nt=1 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{4578C55C-5349-4094-8C3D-0C5B36F86FDF}: “URL” = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc= IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{79569285-DEDE-4525-B181-E57030D380FE}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=52 … 1f3480f&q={searchTerms} IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{8143CF24-E462-4156-95A9-940B13AF2CF6}: “URL” = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Web Search” FF - prefs.js…browser.search.defaultthis.engineName: “MyAshampoo Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Web Search” FF - prefs.js…browser.search.selectedEngine: “Search the web (Softonic)” FF - prefs.js…browser.startup.homepage: “http://search.softonic.com/MON00084/tb_v1?SearchSource=13&cc=” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.3.3.2 FF - prefs.js…keyword.URL: “http://search.softonic.com/MON00084/tb_v1?SearchSource=2&cc=&q=” [2012-07-15 23:58:37 | 000,000,000 | —D | M] (MyAshampoo Community Toolbar) – C:\Users\Alan\AppData\Roaming\mozilla\Firefox\Profiles\5a5qv6hw.default\extensions{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} [2012-06-19 00:51:18 | 000,000,000 | —D | M] (softonic.com) – C:\Users\Alan\AppData\Roaming\mozilla\Firefox\Profiles\5a5qv6hw.default\extensions\ffxtlbra@softonic.com [2010-12-15 17:12:32 | 000,000,923 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\conduit.xml [2012-02-18 12:57:31 | 000,002,060 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\softonic.xml [2012-01-18 22:38:22 | 000,000,792 | ---- | M] () – C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\startsear.xml O3 - HKLM…\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\softonic\1.5.11.5\softonicTlbr.dll (Softonic.com) O4 - HKU\S-1-5-21-3405948023-3305301109-515357525-1000…\Run: [TapiMigPlugin] C:\Users\Alan\AppData\Local\Microsoft\Windows\1964\TapiMigPlugin.exe () [2012-07-24 22:51:19 | 000,000,000 | —D | C] – C:\Users\Alan\AppData\Roaming\hellomoto :Files C:\Users\Alan\AppData\Local\Microsoft\Windows\1964 :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

Wklejaj razem z :OTL