Problem z przeglądarką

missfried6 · 16 Styczeń 2010 15:51

witam, bardzo proszę o pomoc, gdyż najprawdopodobniej złapałam jakiegoś reklamiarza, a jestem w tym zielona…

przekierowuje mnie ciągle na stronę ‘domainnotlocated.com’, wyskakują różnego rodzaju reklamy no i zmienia mi stronę startową.

logi z OTL:

http://wklej.org/id/264051/

deFco247 · 16 Styczeń 2010 16:03

W białe dolne okno Custom Scans/Fixes w OTL wklej:

:Processes Explorer.EXE :OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php FF - prefs.js…browser.search.defaultenginename: “Fast Browser Search” FF - prefs.js…browser.search.defaulturl: “http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=” FF - prefs.js…browser.search.order.1: “Fast Browser Search” FF - prefs.js…browser.search.selectedEngine: “Fast Browser Search” FF - prefs.js…browser.startup.homepage: “http://www.theprizeday.com/today.php|http://www.google.pl/” FF - prefs.js…extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5050 FF - prefs.js…extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:3.1.0.1540 FF - prefs.js…extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.4.0 FF - prefs.js…extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1800 FF - prefs.js…keyword.URL: “http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={403732B1-6BB2-485E-6911-D8828B8DB77E}&q=” FF - HKLM\software\mozilla\Firefox\extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1800\FF [2009-11-27 20:35:24 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5050\FF [2009-11-27 20:35:36 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1540\FF [2009-11-27 20:35:46 | 00,000,000 | —D | M] [2009-11-10 22:46:04 | 00,000,000 | —D | M] (Fast Browser Search (My Tattoons)) – C:\Documents and Settings\Ola\Dane aplikacji\Mozilla\Firefox\Profiles\lj5mujif.default\extensions{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} [2009-11-27 20:57:51 | 00,000,000 | —D | M] (QuestService) – C:\Program Files\Mozilla Firefox\extensions{F2DDDB92-1605-4260-9B25-45A4DAE87B50} [2009-11-10 22:46:04 | 00,003,700 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.png [2009-11-10 22:46:05 | 00,001,963 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.xml [2009-05-26 21:07:00 | 00,001,406 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2009-11-27 20:37:51 | 00,002,405 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\questservice126.xml [2009-11-27 20:57:52 | 00,002,405 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\questservice127.xml O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll () O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll () O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll () O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll () O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\WSO.dll () O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB) O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll () O3 - HKLM…\Toolbar: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll () O3 - HKLM…\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5200\mvb0.dll File not found O3 - HKCU…\Toolbar\WebBrowser: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll () O3 - HKCU…\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5200\mvb0.dll File not found O4 - HKLM…\Run: [internet Today Task] C:\Program Files\Internet Today\1.1.0.1090\InternetToday.exe File not found O4 - HKLM…\RunOnceEx: [Flag] Reg Error: Invalid data type. File not found :Services QuestService Service :Files C:\Program Files\Web Search Operator C:\Program Files\Automated Content Enhancer C:\Program Files\Customized Platform Advancer C:\Program Files\Textual Content Provider C:\Program Files\SGPSA C:\Program Files\QuestService C:\Documents and Settings\Ola\Dane aplikacji\QuestService C:\Documents and Settings\Ola\Ustawienia lokalne\Dane aplikacji\Web Search Operator C:\Documents and Settings\Ola\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer C:\Documents and Settings\Ola\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer C:\Documents and Settings\Ola\Ustawienia lokalne\Dane aplikacji\Textual Content Provider :Commands [emptytemp] [start explorer]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania oraz nowy log robiony opcją Run Scan.

Leon1 · 16 Styczeń 2010 16:08

OTL w oknie Custom Scans-Fixes wklej następujący skrypt:

:Processes explorer.exe :OTL SRV - [2009-11-26 15:29:56 | 00,058,744 | ---- | M] () [Auto | Stopped] – C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice127.exe – (QuestService Service) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php FF - prefs.js…browser.search.defaultenginename: “Fast Browser Search” FF - prefs.js…browser.search.defaulturl: “http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=” FF - prefs.js…browser.search.order.1: “Fast Browser Search” FF - prefs.js…browser.search.selectedEngine: “Fast Browser Search” FF - prefs.js…browser.startup.homepage: “http://www.theprizeday.com/today.php|http://www.google.pl/” FF - prefs.js…keyword.URL: “http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={403732B1-6BB2-485E-6911-D8828B8DB77E}&q=” FF - prefs.js…extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5050 FF - prefs.js…extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:3.1.0.1540 FF - prefs.js…extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1800 FF - prefs.js…extensions.enabledItems: {F2DDDB92-1605-4260-9B25-45A4DAE87B50}:1.0 FF - prefs.js…extensions.enabledItems: {b9bfaf1c-a63f-47cd-8b9a-29526ced9060}:0.2 FF - HKLM\software\mozilla\Firefox\extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1800\FF [2009-11-27 20:35:24 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5050\FF [2009-11-27 20:35:36 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1540\FF [2009-11-27 20:35:46 | 00,000,000 | —D | M] [2009-08-06 22:48:03 | 00,000,000 | —D | M] (No name found) – C:\Documents and Settings\Ola\Dane aplikacji\Mozilla\Firefox\Profiles\lj5mujif.default\extensions{b9bfaf1c-a63f-47cd-8b9a-29526ced9060} [2009-11-27 20:57:51 | 00,000,000 | —D | M] (QuestService) – C:\Program Files\Mozilla Firefox\extensions{F2DDDB92-1605-4260-9B25-45A4DAE87B50} [2009-11-10 22:46:04 | 00,003,700 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.png [2009-11-10 22:46:05 | 00,001,963 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.xml [2009-11-27 20:37:51 | 00,002,405 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\questservice126.xml [2009-11-27 20:57:52 | 00,002,405 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\questservice127.xml O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll () O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1540\CPAIEAddOn.dll () O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1820\CMWIE.dll () O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1380\TCPIE.dll () O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\WSO.dll () O3 - HKLM…\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5200\mvb0.dll File not found O3 - HKCU…\Toolbar\WebBrowser: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll () O3 - HKCU…\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5200\mvb0.dll File not found O4 - HKLM…\Run: [internet Today Task] C:\Program Files\Internet Today\1.1.0.1090\InternetToday.exe File not found O4 - HKLM…\RunOnceEx: [Flag] Reg Error: Invalid data type. File not found O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Reg Error: Key error.) O20 - AppInit_DLLs: (C:\DOCUME~1\Ola\Ustawienia lokalne\Temp\561424kou.dll) - C:\DOCUME~1\Ola\Ustawienia lokalne\Temp\561424kou.dll File not found O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found :Files C:\Program Files\Automated Content Enhancer C:\Program Files\Web Search Operator C:\Program Files\Fast Browser Search C:\Program Files\Customized Platform Advancer C:\Program Files\Content Management Wizard C:\Program Files\Gameztar Toolbar :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [start explorer] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

potem nowy log OTL

missfried6 · 16 Styczeń 2010 16:20

Log z usuwania :

http://wklej.org/id/264072/

kolejny log opcją Run Scan:

http://wklej.org/id/264075/

chyba już wszystko jest ok, dziękuję serdecznie za pomoc!!

deFco247 · 16 Styczeń 2010 16:33

Zostało jeszcze Fast Browser Search, które nie wiadomo skąd się ponownie pojawia po usunięciu.

W białe dolne okno Custom Scans/Fixes w OTL wklej:

:Processes Explorer.EXE :OTL FF - prefs.js…browser.search.defaultenginename: “Fast Browser Search” FF - prefs.js…browser.search.defaulturl: “http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=” FF - prefs.js…browser.search.order.1: “Fast Browser Search” FF - prefs.js…browser.search.selectedEngine: “Fast Browser Search” FF - prefs.js…keyword.URL: “http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={A4988CD2-3BE2-D4C5-1688-DC924A05B5B8}&q=” [2010-01-16 17:15:15 | 00,003,700 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.png [2010-01-16 17:15:17 | 00,001,963 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.xml :Files C:\Program Files\Fast Browser Search :Commands [emptytemp] [start explorer]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania oraz nowy log robiony opcją Run Scan.

Wykonaj pełny skan Malwarebytes’ Anti-Malware - znalezione obiekty usuń.

Gdy będą wirusy pokaż raport po usuwaniu.