Live Security Platinum

[mmanius (Mani 78)]

prosze o sprawdzenie logow z otl

EXTRAS http://wklej.org/id/816916/

OTL http://wklej.org/id/816918/

[Acorus]

Odinstaluj Babylon toolbar on IE,Facemoods Toolbar,Incredibar Toolbar on IE.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={A3CDDF25-D825-4B9D-B8FB-E8937713C013} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=stonicpl&s={searchTerms}&f=4 IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={A3CDDF25-D825-4B9D-B8FB-E8937713C013} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={A3CDDF25-D825-4B9D-B8FB-E8937713C013} IE - HKCU…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=stonicpl&s={searchTerms}&f=4 IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://isearch.babylon.com/web/{searchTerms}?babsrc=browsersearch&babsrc=SP_ss&mntrId=5e59d84f000000000000d0df9a5d7516 IE - HKCU…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={A3CDDF25-D825-4B9D-B8FB-E8937713C013} [2012/01/21 14:24:31 | 000,002,051 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM…\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (facemoods.com) O3 - HKLM…\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM…\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM…\Run: [facemoods] C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe (facemoods.com) O4 - HKCU…\Run: [Facebook Update] C:\Users\Domkaa\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) [2012-08-23 15:24:00 | 000,001,060 | ---- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3948116434-2582327639-3101446204-1000Core.job [2012-08-23 15:24:00 | 000,001,082 | ---- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3948116434-2582327639-3101446204-1000UA.job [2012-08-23 14:39:00 | 000,000,930 | ---- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3948116434-2582327639-3101446204-1001Core.job [2012-08-23 17:39:01 | 000,000,952 | ---- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3948116434-2582327639-3101446204-1001UA.job :Files C:\ProgramData\0C1CFB0B3310DC6F31DEC8D8F875F002 :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.