Problem z Live Security Platinum ;/

trawski · 29 Sierpień 2012 10:19

Witam, mam problem z Live Security Platinum. Blokuje on wszystkie programy i nie mogę się tego pozbyć. Proszę o pomoc

kernel3232 · 29 Sierpień 2012 11:11

Przez Panel sterowania odinstaluj:

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej:

:OTL DRV - File not found [Kernel | Disabled | Stopped] – system32\DRIVERS\UIUSYS.SYS – (UIUSys) DRV - File not found [Kernel | On_Demand | Stopped] – System32\DRIVERS\KMW_KBD.sys – (KMW_KBD) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\igdkmd32.sys – (igfx) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4 IE - HKLM…\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) IE - HKLM…\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKLM…\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817 IE - HKCU…\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) IE - HKCU…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4 IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100701&mntrId=aaa8c97300000000000000ff01000001 IE - HKCU…\SearchScopes{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: “URL” = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=aaa8c9730000000000000022fbb73d06&tlver=1.4.19.19&affID=17160 IE - HKCU…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKCU…\SearchScopes{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: “URL” = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92822995169645852 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 1 [2012-08-21 13:57:43 | 000,000,000 | —D | M] (SFT_Polska Community Toolbar) – C:\Users\v\AppData\Roaming\mozilla\Firefox\Profiles\3tk9hzpn.default\extensions{5c5b9468-d672-4eb7-b52f-b5afabf28c5b} [2012-08-28 16:37:34 | 000,000,000 | —D | M] (uTorrentControl2 Community Toolbar) – C:\Users\v\AppData\Roaming\mozilla\Firefox\Profiles\3tk9hzpn.default\extensions{687578b9-7132-4a7a-80e4-30ee31099e03} [2012-08-21 13:57:44 | 000,000,000 | —D | M] (IncrediMail MediaBar 2 Community Toolbar) – C:\Users\v\AppData\Roaming\mozilla\Firefox\Profiles\3tk9hzpn.default\extensions{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} [2011-11-12 03:26:12 | 000,002,288 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKCU…\Run: [ALLUpdate] “C:\Program Files\ALLPlayer\ALLUpdate.exe” “sleep” File not found O4 - HKCU…\Run: [Kookos] C:\Users\v\AppData\Local\Kookos\kookos.exe silent File not found O4 - HKCU…\RunOnce: [036DFF8500000426000106362F3B707C] C:\ProgramData\036DFF8500000426000106362F3B707C\036DFF8500000426000106362F3B707C.exe () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: VB and VBA Program Settings = C:\Users\v\AppData\Roaming\csrss.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found O33 - MountPoints2{62c44637-f9d7-11de-95a2-0022fbb73d06}\Shell - “” = AutoRun O33 - MountPoints2{62c44637-f9d7-11de-95a2-0022fbb73d06}\Shell\AutoRun\command - “” = H:\LaunchU3.exe -a O33 - MountPoints2{6f6ebe40-e0a1-11e0-92e2-806e6f6e6963}\Shell - “” = AutoRun O33 - MountPoints2{6f6ebe40-e0a1-11e0-92e2-806e6f6e6963}\Shell\AutoRun\command - “” = G:\install.exe O33 - MountPoints2{6f6ebf7b-e0a1-11e0-92e2-001dbaeacae6}\Shell - “” = AutoRun O33 - MountPoints2{6f6ebf7b-e0a1-11e0-92e2-001dbaeacae6}\Shell\AutoRun\command - “” = H:\install.exe O33 - MountPoints2{ada02072-5538-11e0-ac86-0024be38b090}\Shell - “” = AutoRun O33 - MountPoints2{ada02072-5538-11e0-ac86-0024be38b090}\Shell\AutoRun\command - “” = G:\setup.exe :Files C:\ProgramData\036DFF8500000426000106362F3B707C C:\Windows\System32\drivers\etc\hosts.ics :Reg [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] “Shell”=- [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “C:\Windows\Debug\frmv.exe”=- :Commands [emptytemp]

Kliknij Wykonaj skrypt. Zatwierdź restart komputera.

Uruchom Adwcleaner z opcji Delete

Uruchom OTL ponownie, tym razem klikasz Skanuj. Pokazujesz nowy log z OTL

trawski · 29 Sierpień 2012 11:37

Programy odinstalowałem

Nowy log z OTL :

http://www.wklejto.pl/132348

kernel3232 · 30 Sierpień 2012 14:54

Uruchom OTL i użyj opcji sprzątanie.

Wykonaj pełne skanowanie programem Malwarebytes Anti-Malware -> http://www.malwarebytes.org/

( Przed skanowaniem wykonaj aktualizację bazy sygnatur wirusów )

Jeżeli coś zostanie wykryte to usuń, i raport pokaż na forum .

Zainstaluj aktualizacje do programow wskazanych przez Security Check -> http://screen317.spywareinfoforum.org/

jako out of date.