Witam wszystkich ; )
Mam taki problem , chcę dziś wejśc na internet przez mozille , wpisuje adres i mnie przekierowywuje na jakąś strone Oklahoma House of Reps Webmail . IE działa , nie wiem co może być problem . Myślę że to jakiś wirus. W załączniku log z OTL’a.
http://wklej.to/yp4Br
Leon1
12 Maj 2011 13:38
#2
OTL w oknie Custom Scans-Fixes (własne opcje skanowania/skrypt)wklej następujący skrypt:
:OTL PRC - [2011-01-20 23:29:34 | 000,028,762 | ---- | M] (MyWebSearch.com ) – C:\PROGRA~2\MyWebSearch\bar\5.bin\mwssvc.exe IE - HKU\S-1-5-21-3436938440-914028318-3544076993-1001…\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\5.bin\MWSSRCAS.DLL (MyWebSearch.com ) FF - prefs.js…extensions.enabledItems: vshare@toolbar:1.0.0 FF - HKLM\software\mozilla\Firefox\Extensions\m3ffxtbr@mywebsearch.com: C:\Program Files (x86)\MyWebSearch\bar\5.bin [2011-02-13 11:30:26 | 000,000,000 | —D | M] [2010-11-29 22:21:38 | 000,000,000 | —D | M] (vShare) – C:\Users\PiteR\AppData\Roaming\mozilla\Firefox\Profiles\vd6rsmft.default\extensions\vshare@toolbar O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\5.bin\MWSSRCAS.DLL (MyWebSearch.com ) O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\5.bin\MWSBAR.DLL (MyWebSearch.com ) O3 - HKLM…\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\5.bin\MWSBAR.DLL (MyWebSearch.com ) O3 - HKU\S-1-5-21-3436938440-914028318-3544076993-1001…\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files (x86)\MyWebSearch\bar\5.bin\MWSBAR.DLL (MyWebSearch.com ) O4 - HKLM…\Run: [My Web Search Bar Search Scope Monitor] File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] File not found O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O20:64bit: - AppInit_DLLs: (E:\PROGRA~1\KASPER~1\KASPER~1\x64\sbhook64.dll) - File not found O20:64bit: - AppInit_DLLs: (E:\PROGRA~1\KASPER~1\KASPER~1\x64\kloehk.dll) - File not found O20 - AppInit_DLLs: (E:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - File not found O20 - AppInit_DLLs: (E:\PROGRA~1\KASPER~1\KASPER~1\sbhook.dll) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. MsConfig:64bit - StartUpReg: AutoConnect - hkey= - key= - File not found MsConfig:64bit - StartUpReg: EA Core - hkey= - key= - File not found MsConfig:64bit - StartUpReg: GG Tools - hkey= - key= - File not found MsConfig:64bit - StartUpReg: IDMan - hkey= - key= - File not found MsConfig:64bit - StartUpReg: Messenger (Yahoo!) - hkey= - key= - File not found MsConfig:64bit - StartUpReg: MSSE - hkey= - key= - File not found MsConfig:64bit - StartUpReg: My Web Search Bar Search Scope Monitor - hkey= - key= - File not found MsConfig:64bit - StartUpReg: MyWebSearch Email Plugin - hkey= - key= - C:\PROGRA~2\MyWebSearch\bar\5.bin\mwsoemon.exe (MyWebSearch.com ) MsConfig:64bit - StartUpReg: RGSC - hkey= - key= - File not found :Files C:\Users\PiteR\AppData\Local\Temp*.html C:\Program Files (x86)\MyWebSearch :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [CLEARALLRESTOREPOINTS] [emptytemp]
Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.
potem nowy log OTL robiony opcją Run Scan (Skanuj)
Po wykonaniu skryptu działa .
Wygenerowało mi taki log po tej akcji:
http://wklej.to/tLCid
Log z OTL:
http://wklej.to/TPPCN
Leon1
13 Maj 2011 13:33
#4
Log wygląda na czysty
Pobierz CCleaner http://www.filehippo.com/download_ccleaner/
przeskanuj nim i wyczyść rejestr.
W OTL kilknij CleanUp (Sprzątanie)
przeskanuj
Dr.WEB CureIt! http://www.dobreprogramy.pl/DrWEB-CureI … 12976.html
