Live security Platinium

Najdi7 · 26 Lipiec 2012 08:18

Działam w trybie awaryjnym

Proszę o pomoc, nie bardzo się na tym znam

Acorus · 26 Lipiec 2012 08:37

Odinstaluj Babylon toolbar on IE,DAEMON Tools Toolbar,Norton Security Scan,Vuze Remote Toolbar.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL SRV:64bit: - File not found [On_Demand | Stopped] – C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe – (Amsp) IE - HKLM…\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&AF=100476&babsrc=SP_ss&mntrId=0a4cad7a000000000000f46d04276cdd IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\SearchScopes{3DA9976D-B1EE-4671-98D6-D9C4F62FB96C}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=58428FE5-17EB-4987-B44D-00A58A32EBFA&apn_sauid=8E6EAFA5-94C6-4D12-A42F-5D1D630E878A IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\SearchScopes{81C13FEB-D375-440C-A817-397461845480}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091 IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search?q={searchTerms} IE - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyOverride” = 127.0.0.1:9421; FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.defaultthis.engineName: “Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Search the web (Babylon)” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…browser.startup.homepage: “http://search.babylon.com/?babsrc=HP_Prot” FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=2&q=” [2012-07-16 16:30:19 | 000,000,000 | —D | M] (Vuze Remote Community Toolbar) – C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\k435m6i6.default\extensions{ba14329e-9550-4989-b3f2-9732e92d17cc} [2011-07-03 10:33:52 | 000,000,000 | —D | M] (“DAEMON Tools Toolbar”) – C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\k435m6i6.default\extensions\DTToolbar@toolbarnet.com [2011-11-28 16:29:58 | 000,000,000 | —D | M] (Babylon) – C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\k435m6i6.default\extensions\ffxtlbr@babylon.com [2012-06-11 09:11:13 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Users\Mariusz\AppData\Roaming\mozilla\Firefox\Profiles\k435m6i6.default\extensions\toolbar@ask.com [2011-07-26 18:19:58 | 000,002,333 | ---- | M] () – C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\k435m6i6.default\searchplugins\askcom.xml [2011-07-03 10:33:42 | 000,002,055 | ---- | M] () – C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\k435m6i6.default\searchplugins\daemon-search.xml O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM…\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3:64bit: - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) O4:64bit: - HKLM…\Run: [intelTBRunOnce] wscript.exe //b //nologo “C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs” File not found O4:64bit: - HKLM…\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd File not found O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\Run: [Windows Network Config] C:\Users\Mariusz\Network\wmpctv32.exe File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-2839812598-2356896441-4100484707-1001…\RunOnce: [7531CCA91978E9DBCA83412FF875F002] C:\ProgramData\7531CCA91978E9DBCA83412FF875F002\7531CCA91978E9DBCA83412FF875F002.exe () [2012-07-24 14:50:00 | 000,000,456 | -H-- | M] () – C:\Windows\tasks\Norton Security Scan for Mariusz.job [2011-11-18 17:20:41 | 000,000,000 | —D | M] – C:\Users\Mariusz\AppData\Roaming\OpenCandy :Files C:\Users\Mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum C:\ProgramData\7531CCA91978E9DBCA83412FF875F002 :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

Najdi7 · 26 Lipiec 2012 09:04

Raport http://wklej.to/sU2sn

nowy OLT http://wklej.to/XeZym

– Dodane 26.07.2012 (Cz) 13:10 –

Póki co, nie ma go Dzięki serdeczne za pomoc.

Pozdrawiam

Acorus · 26 Lipiec 2012 13:41

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.Wyłącz i włącz przywracanie systemu.

http://www.searchengines.pl/Czyszczenie … 41981.html

Zainstaluj aktualizacje do programow wskazanych przez Security Check

analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.