Live security platinum HELP

matix12 · 2 Sierpień 2012 12:39

Witam mam problem z Live Security Platinum ;D

Acorus · 2 Sierpień 2012 13:44

Odinstaluj Babylon toolbar on IE,DealPly,Facemoods Toolbar,IncrediMail MediaBar 2 Toolbar,McAfee Security Scan Plus.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL SRV - File not found [Auto | Stopped] – E:\Program Files\SlySoft\Game Jackal v4\Server.exe – (GJService) DRV - File not found [Kernel | On_Demand | Stopped] – F:\Programy NARZEDZIOWE\Everest Ultimate Edition v4.20.1252 PL\kerneld.wnt – (EverestDriver) DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\EagleXNt.sys – (EagleXNt) DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\EagleNT.sys – (EagleNT) IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://domredi.com/1/ IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4 IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=110482&mntrId=a8004027000000000000000e2e85a2f5 IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\SearchScopes{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=FD&apn_dtid=YYYYYYYYPL&apn_uid=73589DFD-FC74-4322-A3FB-7DB737D1ED6F&apn_sauid=EE22F7A9-BEBC-412F-9783-4AA0526A4455 IE - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\SearchScopes{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: “URL” = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92260418670663234 FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.order.1: “Ask.com” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…browser.startup.homepage: “http://domredi.com/1/” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js…extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.3.0244 FF - prefs.js…keyword.URL: “http://websearch.ask.com/redirect?client=ff&src=kw&tb=DAT&o=15240&locale=en_US&apn_uid=73589DFD-FC74-4322-A3FB-7DB737D1ED6F&apn_ptnrs=FD&apn_sauid=EE22F7A9-BEBC-412F-9783-4AA0526A4455&apn_dtid=YYYYYYYYPL&&q=” [2012-05-27 10:58:21 | 000,000,000 | —D | M] (InnoGames Polska Community Toolbar) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions{14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} [2011-12-28 12:46:29 | 000,000,000 | —D | M] (IncrediMail MediaBar 2 Community Toolbar) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} [2011-11-22 00:04:35 | 000,000,000 | —D | M] (DealPly) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2011-07-06 21:25:39 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions\ffxtlbr@babylon.com [2011-12-25 16:17:02 | 000,000,000 | —D | M] (Facemoods) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions\ffxtlbr@Facemoods.com [2012-05-16 21:51:41 | 000,000,000 | —D | M] (Arcade Town Toolbar) – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\extensions\toolbar@ask.com [2012-05-16 21:46:21 | 000,002,572 | ---- | M] () – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\searchplugins\askcom.xml [2011-11-21 20:21:26 | 000,002,207 | ---- | M] () – C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\6ubqfubj.default\searchplugins\MyStart Search.xml O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (facemoods.com) O3 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [4StoryPrePatch] E:\Program Files\Gameforge4D\4Story\PrePatch.exe File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM…\Run: [facemoods] C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe (facemoods.com) O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [DAEMON Tools Lite] “F:\Program Files\DAEMON Tools Lite\daemon.exe” -autorun File not found O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [EA Core] “E:\Program Files\Electronic Arts\EADM\Core.exe” -silent File not found O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [FlashGet 3] “E:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe” -minimize File not found O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray File not found O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [Media Finder] “C:\Program Files\Media Finder\MF.exe” /opentotray File not found O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [Microsoft Windows System] C:\Documents and Settings\Dom\P-7-78-8964-9648-3874\windll.exe () O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\Run: [ytiefus] C:\Documents and Settings\Dom\Ustawienia lokalne\Dane aplikacji\xitune.exe () O4 - HKU\S-1-5-21-682003330-1844823847-725345543-1003…\RunOnce: [6F63A59F0000E898A2CA5DB14A174311] C:\Documents and Settings\All Users\Dane aplikacji\6F63A59F0000E898A2CA5DB14A174311\6F63A59F0000E898A2CA5DB14A174311.exe () [2012-07-30 22:25:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\6F63A59F0000E898A2CA5DB14A174311 [2012-07-09 09:35:09 | 000,946,176 | ---- | C] (Ufasoft) – C:\Documents and Settings\Dom\mine.exe [2012-08-02 13:46:00 | 000,000,230 | ---- | M] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2012-07-30 22:28:12 | 000,002,206 | ---- | M] () – C:\Documents and Settings\Dom\Pulpit\Live Security Platinum.lnk [2012-06-22 22:56:43 | 000,128,004 | R-S- | C] () – C:\Documents and Settings\Dom\Ustawienia lokalne\Dane aplikacji\xitune.exe [2011-12-04 16:19:04 | 000,460,624 | ---- | C] () – C:\Documents and Settings\Dom\Ustawienia lokalne\Dane aplikacji\promo.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

matix12 · 2 Sierpień 2012 14:25

OTL.txt : http://wklej.org/id/802488/

raport z usuwania : http://wklej.org/id/802489/

Acorus · 2 Sierpień 2012 14:30

W OTL użyj opcji Sprzątanie. .Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free

Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa “Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje.”

Użyj AdwCleaner http://general-changelog-team.fr/outils/289-adwcleaner z funkcji Delete

Pokaż nowy OTL.txt