Prawdopodobnie infekcja komputera/przegladarki

wlodi93 · 8 Styczeń 2012 21:14

Od kilku dni mam problem z działaniem przeglądarki. Otwieraja mi sie nowe karty czy też co 10-15s przeglądarka scina sie na chwile co doprowadza mnie do szału.Skanowalem Avg i nic nie wykrył prosze o pomoc.Zamieszczam skanowanie OTL

Log OTL: http://wklej.org/id/663972/

Extras: http://wklej.org/id/663974/

Acorus · 9 Styczeń 2012 10:11

Odinstaluj AutocompletePro,MediaBar,IncrediMail MediaBar 4 Toolbar,McAfee Security Scan Plus.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKLM…\URLSearchHook: {90eee664-34b1-422a-a782-779af65cdf6d} - C:\Program Files\IncrediMail_MediaBar_4\tbIncr.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.ask.com/redirect?clien … 27236F46C&{psv} IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU…\URLSearchHook: {90eee664-34b1-422a-a782-779af65cdf6d} - C:\Program Files\IncrediMail_MediaBar_4\tbIncr.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {f864ba3f-9878-458a-ba2b-dad32bcbc472} - Reg Error: Key error. File not found FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Ask.com” FF - prefs.js…browser.search.defaultthis.engineName: “iUserbar new Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2851561&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Ask.com” FF - HKLM\software\mozilla\Firefox\Extensions\support@predictad.com: C:\Program Files\AutocompletePro\support@predictad.com [2010-05-09 10:15:39 | 000,000,000 | —D | M] [2011-03-28 10:25:42 | 000,000,000 | —D | M] – C:\Users\Wlodi\AppData\Roaming\mozilla\Firefox\Profiles\wn6f9bug.default\extensions\engine@conduit.com [2011-12-30 01:10:56 | 000,000,000 | —D | M] – C:\Users\Wlodi\AppData\Roaming\mozilla\Firefox\Profiles\wn6f9bug.default\extensions\toolbar@ask.com [2011-02-13 20:49:29 | 000,000,000 | —D | M] – C:\Users\Wlodi\AppData\Roaming\mozilla\Firefox\Profiles\wn6f9bug.default\extensions\vshare@toolbar [2011-10-20 18:44:33 | 000,002,568 | ---- | M] () – C:\Users\Wlodi\AppData\Roaming\Mozilla\FireFox\Profiles\wn6f9bug.default\searchplugins\askcom.xml [2011-03-21 17:35:02 | 000,000,927 | ---- | M] () – C:\Users\Wlodi\AppData\Roaming\Mozilla\FireFox\Profiles\wn6f9bug.default\searchplugins\conduit.xml [2011-08-23 14:48:51 | 000,002,207 | ---- | M] () – C:\Users\Wlodi\AppData\Roaming\Mozilla\FireFox\Profiles\wn6f9bug.default\searchplugins\MyStart Search.xml [2011-03-28 16:58:05 | 000,001,583 | ---- | M] () – C:\Users\Wlodi\AppData\Roaming\Mozilla\FireFox\Profiles\wn6f9bug.default\searchplugins\web-search.xml [2010-09-14 13:41:12 | 000,002,506 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml [2010-03-28 17:56:18 | 000,002,035 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrchFxt.xml O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll File not found O2 - BHO: (IncrediMail MediaBar 4 Toolbar) - {90eee664-34b1-422a-a782-779af65cdf6d} - C:\Program Files\IncrediMail_MediaBar_4\tbIncr.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (IncrediMail MediaBar 4 Toolbar) - {90eee664-34b1-422a-a782-779af65cdf6d} - C:\Program Files\IncrediMail_MediaBar_4\tbIncr.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU…\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKCU…\Toolbar\WebBrowser: (IncrediMail MediaBar 4 Toolbar) - {90EEE664-34B1-422A-A782-779AF65CDF6D} - C:\Program Files\IncrediMail_MediaBar_4\tbIncr.dll (Conduit Ltd.) O3 - HKCU…\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM…\Run: [DATAMNGR] C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE File not found O4 - HKCU…\Run: [DW6] C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe File not found O4 - Startup: C:\Users\Wlodi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk = C:\Users\Wlodi\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe File not found O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll) - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll File not found O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll) - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll File not found [2011-03-17 16:57:00 | 000,000,000 | —D | M] – C:\Users\Wlodi\AppData\Roaming\facemoods.com :Commands [emptytemp]

Kliknij Wykonaj skrypt.Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

wlodi93 · 9 Styczeń 2012 14:59

Log z usuwania: http://wklej.org/id/664371/

Log po skanowaniu: http://wklej.org/id/664374/

Extras: http://wklej.org/id/664375/

Acorus · 9 Styczeń 2012 16:51

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.Zainstaluj aktualizacje do programow wskazanych przez: http://screen317.spywareinfoforum.org/SecurityCheck.exe jako out of date.