Live Security Platinum

[shully]

Witam,

Proszę o pomoc.

OTL:

http://www.wklej.org/id/795636/

Extras:

http://www.wklej.org/id/795643/

Z góry dzięki za pomoc.

[Atis]

Odinstaluj:

AutocompletePro

Babylon toolbar on IE

Facemoods Toolbar

Do okna Własne opcje skanowania / skrypt wklej:

:OTL DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\tosrfusb.sys – (tosrfusb) DRV - File not found [Kernel | On_Demand | Stopped] – system32\drivers\tosrfsnd.sys – (TosRfSnd) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\tosrfnds.sys – (tosrfnds) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\Tosrfhid.sys – (Tosrfhid) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\tosrfcom.sys – (Tosrfcom) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\tosrfbnp.sys – (tosrfbnp) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\tosrfbd.sys – (Tosrfbd) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\tosporte.sys – (tosporte) DRV - File not found [File_System | On_Demand | Stopped] – -- (StarOpen) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\Pcouffin.sys – (Pcouffin) DRV - File not found [File_System | Boot | Stopped] – system32\DRIVERS\Lbd.sys – (Lbd) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ewusbdev.sys – (hwusbdev) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ewusbmdm.sys – (hwdatacard) DRV - File not found [Kernel | On_Demand | Stopped] – System32\drivers\dgderdrv.sys – (dgderdrv) DRV - File not found [Kernel | On_Demand | Stopped] – C:\Program Files\MediaCoder\SysInfo.sys – (CrystalSysInfo) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1 IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={F551347F-64B3-412A-A7CA-55A2E85DDBCE}&mid=acade48eaabf47d0bc50d16b53a07c95-a577468e2f1ae8616ffa0f0a989c1c39505eabf2〈=pl&ds=gm011&pr=sa&d=2012-05-07 17:07:01&v=11.0.0.9&sap=hp IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4 IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: “URL” = http://startsear.ch/?aff=1&q={searchTerms} IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{95B7759C-8C7F-4BF1-B163-73684A933233}: “URL” = http://isearch.avg.com/search?cid={F551347F-64B3-412A-A7CA-55A2E85DDBCE}&mid=acade48eaabf47d0bc50d16b53a07c95-a577468e2f1ae8616ffa0f0a989c1c39505eabf2〈=pl&ds=gm011&pr=sa&d=2012-05-07 17:07:01&v=11.0.0.9&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559 IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{F45D32E8-FBE9-47E5-88EA-4CF0942C869A}: “URL” = http://flvdirect.iamwired.net/websearch … ps&search={SearchTerms} IE - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\SearchScopes{F756994E-FC37-29D0-B6B3-004938757426}: “URL” = http://ham.asksearch.com/s/?q={searchTerms}&iesrc={referrer:source?}&cfg=2-396-0-2nyUj FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “AVG Secure Search” FF - prefs.js…browser.search.defaultthis.engineName: “BS Player Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Web Search” FF - prefs.js…browser.search.selectedEngine: “AVG Secure Search” FF - prefs.js…browser.startup.homepage: “http://isearch.avg.com?cid={619dbf56-6b3c-4239-b28d-1ca8242747b5}&mid=acade48eaabf47d0bc50d16b53a07c95-a577468e2f1ae8616ffa0f0a989c1c39505eabf2&ds=gm011&v=10.2.0.3〈=pl&pr=sa&d=2012-03-23%2005%3A56%3A41” FF - prefs.js…extensions.enabledItems: engine@conduit.com:3.3.3.2 FF - prefs.js…extensions.enabledItems: affiliates.firefox@addons.filesonic.com:1.0.9 FF - prefs.js…extensions.enabledItems: ffxtlbr@babylon.com:1.2.0 FF - prefs.js…extensions.enabledItems: ffxtlbr@Facemoods.com:1.4.1 FF - prefs.js…extensions.enabledItems: avg@toolbar:10.2.0.3 FF - prefs.js…keyword.URL: “http://isearch.avg.com/search?cid={619dbf56-6b3c-4239-b28d-1ca8242747b5}&mid=acade48eaabf47d0bc50d16b53a07c95-a577468e2f1ae8616ffa0f0a989c1c39505eabf2&ds=gm011&v=10.2.0.3〈=pl&pr=sa&d=2012-03-23%2005%3A56%3A41&sap=ku&q=” [2011-04-23 16:25:04 | 000,000,000 | —D | M] (BS Player Community Toolbar) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} [2011-04-23 16:25:02 | 000,000,000 | —D | M] (BitTorrentBar Community Toolbar) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2011-04-23 16:24:59 | 000,000,000 | —D | M] (Conduit Engine) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions\engine@conduit.com [2012-02-22 18:16:03 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions\ffxtlbr@babylon.com [2012-02-25 15:14:30 | 000,000,000 | —D | M] (Facemoods) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions\ffxtlbr@Facemoods.com [2010-08-07 23:34:25 | 000,000,000 | —D | M] (“AutocompletePro - Your handy search suggestions tool”) – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\extensions\support@predictad.com [2010-12-15 16:48:16 | 000,000,921 | ---- | M] () – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\searchplugins\conduit.xml [2009-08-11 06:23:36 | 000,002,399 | ---- | M] () – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\searchplugins\daemon-search.xml [2010-05-09 14:29:51 | 000,000,266 | ---- | M] () – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\searchplugins\Search.xml [2011-07-11 20:04:02 | 000,000,633 | ---- | M] () – C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Mozilla\Firefox\Profiles\u9fxklz6.default\searchplugins\startsear.xml [2012-02-25 15:14:31 | 000,002,048 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml O3 - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found. O3 - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found. O3 - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O4 - HKLM…\Run: [syncHostps] C:\Documents and Settings\Łukasz Szulej\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\4670\SyncHostps.exe () O4 - HKLM…\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u File not found O4 - HKU\S-1-5-21-1708537768-1425521274-725345543-1003…\RunOnce: [036DFF9840D265F600530B3181CB3EF3] C:\Documents and Settings\All Users\Dane aplikacji\036DFF9840D265F600530B3181CB3EF3\036DFF9840D265F600530B3181CB3EF3.exe () :Files C:\Documents and Settings\Łukasz Szulej\Menu Start\Programy\Live Security Platinum C:\Documents and Settings\All Users\Dane aplikacji\036DFF9840D265F600530B3181CB3EF3 C:\Documents and Settings\Łukasz Szulej\Pulpit\Live Security Platinum.lnk C:\Documents and Settings\All Users\Dane aplikacji\Babylon C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\BabylonToolbar C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\Babylon C:\Documents and Settings\Łukasz Szulej\Dane aplikacji\facemoods.com C:\Documents and Settings\Łukasz Szulej\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\4670 :Reg [-HKEY_USERS\S-1-5-21-1708537768-1425521274-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum] :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.