Live security platinium - jak usunąć?

[Ja_97 (Przemas162)]

witam mam problem z falszywym antywirusem Live security platinium.

OTL.txt - http://wklej.org/hash/7c6f6b61acd/

Extras.txt - http://www.wklej.org/id/792854/

– Dodane 18.07.2012 (Śr) 12:35 –

Jeszcze mam jedno pytanie. Czy mam robić to w trybie awaryjnym z obsługą sieci?

Z góry bardzo dziękuję za pomoc ; ))

[Atis]

Po wykonaniu skryptu odinstaluj:

DAEMON Tools Toolbar

IncrediMail MediaBar 2 Toolbar

SweetIM Toolbar for Internet Explorer

DealPly

Bflix

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&barid={F1F5FBE1-0A56-4D60-AFE1-52E29001FFA5} IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678 IE - HKLM…\SearchScopes{CBB877FA-F81B-4CA2-9B89-6F956D300ABD}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&st=1&q={searchTerms}&barid={F1F5FBE1-0A56-4D60-AFE1-52E29001FFA5} IE - HKLM…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.premierarticles.info IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&AF=100888&babsrc=SP_ss&mntrId=74301c3700000000000000269e716fb1 IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{4FA83068-918C-4EC0-9908-A548F453143C}: “URL” = http://search.avg.com/route/?d=4e0cb912 … =chrome&q={searchTerms}&lng={language}&iy=&ychte=us IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: “URL” = http://www.bigseekpro.com/search/browser/hypercam/{30A651F5-93B0-4251-AAFA-D4C5DB61E7A2}?q={searchTerms} IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678 IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{CBB877FA-F81B-4CA2-9B89-6F956D300ABD}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: “URL” = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92823313151100781 IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&st=1&q={searchTerms}&barid={F1F5FBE1-0A56-4D60-AFE1-52E29001FFA5} IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 FF - prefs.js…browser.search.selectedEngine: “SweetIM Search” FF - prefs.js…browser.startup.homepage: “http://domredi.com/1/” FF - prefs.js…browser.startup.homepage: “http://www.premierarticles.info” [2012-01-23 15:57:00 | 000,000,000 | —D | M] (DealPly) – C:\Users\Przemas\AppData\Roaming\mozilla\Firefox\Profiles\civnl9j0.default\extensions{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-02-05 16:22:38 | 000,000,000 | —D | M] (SweetIM Toolbar for Firefox) – C:\Users\Przemas\AppData\Roaming\mozilla\Firefox\Profiles\civnl9j0.default\extensions{EEE6C361-6118-11DC-9C72-001320C79847} [2012-01-05 00:49:24 | 000,000,000 | —D | M] (cacaoweb) – C:\Users\Przemas\AppData\Roaming\mozilla\Firefox\Profiles\civnl9j0.default\extensions\cacaoweb@cacaoweb.org [2012-01-18 22:14:36 | 000,000,000 | —D | M] (Babylon) – C:\Users\Przemas\AppData\Roaming\mozilla\Firefox\Profiles\civnl9j0.default\extensions\ffxtlbr@babylon.com [2012-01-22 18:50:43 | 000,000,000 | —D | M] (Bflix extension) – C:\Users\Przemas\AppData\Roaming\mozilla\Firefox\Profiles\civnl9j0.default\extensions\info@thebflix.com [2012-02-05 16:22:31 | 000,003,915 | ---- | M] () – C:\Users\Przemas\AppData\Roaming\Mozilla\Firefox\Profiles\civnl9j0.default\searchplugins\sweetim.xml O4:64bit: - HKLM…\Run: [PCSpeedUp] “C:\Program Files\Przyspiesz Komputer\PCSpeedUp.exe” File not found O4 - HKLM…\Run: [Microsoft Firevall Engine] c:\Windows\iqs.exe () O4 - HKLM…\Run: [Windows Login access] C:\Users\Przemas\AppData\Roaming\web2net.exe () O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [cacaoweb] “C:\Users\Przemas\AppData\Roaming\cacaoweb\cacaoweb.exe” -noplayer File not found O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [csrs] C:\Users\Przemas\AppData\Roaming\csrs.exe () O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [DriverScanner] “C:\Program Files (x86)\Uniblue\DriverScanner\launcher.exe” delay 20000 File not found O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [EA Core] “C:\Program Files (x86)\Electronic Arts\EADM\Core.exe” -silent File not found O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [Microsoft Firevall Engine] c:\Windows\iqs.exe () O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [Microsoft Windows System] C:\Users\Przemas\P-7-78-8964-9648-3874\windll.exe () O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent File not found O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Run: [tkeidgp] C:\Users\Przemas\AppData\Local\sxpylp.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\RunOnce: [0C1D17341AE469521830BE57F875F002] C:\ProgramData\0C1D17341AE469521830BE57F875F002\0C1D17341AE469521830BE57F875F002.exe () O4 - Startup: C:\Users\Przemas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rlgqy.exe () [2012-07-16 23:42:55 | 000,000,000 | —D | C] – C:\ProgramData\0C1D17341AE469521830BE57F875F002 [2012-06-26 23:18:26 | 000,000,000 | —D | C] – C:\Users\Przemas\P-7-78-8964-9648-3874 [2012-07-09 16:12:52 | 000,946,176 | ---- | C] (Ufasoft) – C:\Windows\SysWow64\mine.exe [2012-07-13 00:25:56 | 000,401,408 | -HS- | C] () – C:\softmedia.exe [2012-06-27 10:03:01 | 000,145,412 | R-S- | C] () – C:\Users\Przemas\AppData\Local\sxpylp.exe [2012-06-26 22:15:52 | 000,145,412 | R-S- | C] () – C:\Users\Przemas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rlgqy.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[Ja_97 (Przemas162)]

raport - http://www.wklej.org/id/793025/

otl.txt - http://www.wklej.org/id/793026/

[Atis]

Odinstaluj SweetIM Toolbar for Internet Explorer i AutocompletePro.

Wklej i kliknij Wykonaj skrypt:

:OTL IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No CLSID value found IE - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) FF - prefs.js…sweetim.toolbar.previous.browser.search.defaulturl: “” FF - prefs.js…sweetim.toolbar.previous.browser.search.selectedEngine: “” FF - prefs.js…sweetim.toolbar.previous.browser.search.defaultenginename: “” [2012-01-18 22:13:52 | 000,002,310 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3:64bit: - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3 - HKLM…\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKLM…\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3:64bit: - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3 - HKU\S-1-5-21-1971454855-2210716002-3198496778-1001…\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) :Files C:\Program Files (x86)\IncrediMail_MediaBar_2 C:\ProgramData\0C1D17341AE469521830BE57F875F002 C:\ProgramData\F4D561EA000DBC42000B7369B4EB2367 C:\Users\Przemas\AppData\Roaming\wklnhst.dat C:\Users\Przemas\AppData\Roaming\Babylon

Uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

http://windows.microsoft.com/pl-PL/wind … tore-point

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

Dysk przeskanuj Malwarebytes-AntiMalware.

Podczas instalacji kliknij Odrzuć żeby zainstalować tylko darmowy skaner.

http://www.dobreprogramy.pl/Malwarebyte … 13117.html

[Ja_97 (Przemas162)]

mam problem bo w programach i funkcjach nie wyswietla mi sie program SweetIM Toolbar for Internet Explorer

[Atis]

Wklej i kliknij Wykonaj skrypt:

:Files C:\Program Files (x86)\SweetIM\Toolbars

[Ja_97 (Przemas162)]

========== FILES ==========

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer folder moved successfully.

C:\Program Files (x86)\SweetIM\Toolbars folder moved successfully.

OTL by OldTimer - Version 3.2.54.0 log created on 07182012_225950

[Atis]

Wykonaj Sprzątanie i pozostałe zalecenia.

Po wykonaniu nic więcej nie musisz robić.

[Ja_97 (Przemas162)]

i juz jest usunięty >?

– Dodane 18.07.2012 (Śr) 23:02 –

ok dzieki bardzo za pomoc ;d

– Dodane 18.07.2012 (Śr) 23:22 –

http://www.wklej.org/id/793408/

[Atis]

W panelu sterowania odinstaluj:

Java 6 Update 22

Java 6 Update 27

Adobe Flash Player 10

Adobe Reader 9

Później zainstaluj:

Internet Explorer 9

Java

Adobe Reader

Flash Player