Problem z savesens, vendo, rightsurf, sweet page

Dla specjalistów Bezpieczeństwo
#1

Witam!

#2

Odinstaluj

#3

dzięki za odzew!

#4

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
SRV - [2014-01-26 16:37:49 | 000,146,920 | ---- | M] (SaveSense) [On_Demand | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselivem)
SRV - [2014-01-26 16:37:49 | 000,146,920 | ---- | M] (SaveSense) [Auto | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselive)
CHR - plugin: SaveSenseLive Update (Enabled) = C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2069368038-4120700897-3865020589-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2069368038-4120700897-3865020589-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
[2014-02-10 19:35:48 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-01-26 16:38:20 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I
[2014-01-26 16:37:49 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\SaveSenseLive
[2014-01-26 16:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveSenseLive
[2014-01-26 16:37:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveSenseLive
[2014-01-26 16:37:48 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\SaveSense
[2014-01-26 16:37:37 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
[2014-01-26 16:37:37 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\SaveSense
[2014-01-26 14:10:30 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginService
[2014-01-26 14:10:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SupTab
[2014-01-26 14:10:26 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM
[2014-01-26 14:10:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RightSurf
[2014-02-10 19:42:48 | 000,000,930 | ---- | M] () -- C:\windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job
[2014-02-10 19:41:16 | 000,001,042 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-02-10 19:41:16 | 000,000,926 | ---- | M] () -- C:\windows\tasks\SaveSenseLiveUpdateTaskMachineCore.job
[2014-02-09 20:26:01 | 000,000,928 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2069368038-4120700897-3865020589-1001UA.job
[2014-02-09 12:37:00 | 000,000,292 | ---- | M] () -- C:\windows\tasks\SaveSense.job
[2014-02-09 00:37:02 | 000,000,083 | ---- | M] () -- C:\Users\Tomek\AppData\Roaming\WB.CFG
[2014-02-08 23:26:00 | 000,000,906 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2069368038-4120700897-3865020589-1001Core.job

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.

#5

Zrobiłem jak było wskazane i wygląda na to, że poskutkowało.