Problem z Ukash

tsoprano911 · 13 Lipiec 2012 20:24

Witam, jak w temacie, linki z OTLa:

Proszę o pomoc;)

Atis · 13 Lipiec 2012 20:49

Odinstaluj Babylon toolbar on IE, Facemoods Toolbar, Winamp Toolbar.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=10&q={searchTerms} IE - HKLM…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/red … 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110504181928400&tb_oid=04-05-2011&tb_mrud=04-05-2011 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=10 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=bf2&s={searchTerms}&f=4 O4 - HKU\S-1-5-21-2506755239-3979974981-3730081909-1000…\Run: [jcuirhgrjnvlmav] C:\ProgramData\jcuirhgr.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2012-06-22 18:18:07 | 000,000,000 | —D | C] – C:\ProgramData\ufmqblpaeiowsfv [2012-06-22 18:18:10 | 000,000,052 | ---- | M] () – C:\ProgramData\avqbclirqsabipj [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\ProgramData\oodinbkv.exe [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\ProgramData\jcuirhgr.exe [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\Users\MARZENKA\0.7111275401571548.exe [2012-02-11 12:01:54 | 000,000,000 | —D | M] – C:\Users\MARZENKA\AppData\Roaming\Babylon :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

Leon1 · 13 Lipiec 2012 20:56

odinstaluj

OTL w oknie Custom Scans-Fixes (własne opcje skanowania/skrypt)wklej następujący skrypt:

:OTL IE - HKU\S-1-5-21-2506755239-3979974981-3730081909-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&AF=110000&babsrc=SP_ss&mntrId=2ec45425000000000000b482fe613efe CHR - default_search_provider: Search the web (Babylon) (Enabled) CHR - default_search_provider: search_url = http://search.babylon.com/?q={searchTerms}&AF=110000&babsrc=SP_ss&mntrId=2ec45425000000000000b482fe613efe O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) [2011-08-30 16:22:01 | 000,002,046 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml IE - HKU\S-1-5-21-2506755239-3979974981-3730081909-1000…\SearchScopes{0D7562AE-8EF6-416d-A838-AB665251703A}: “URL” = http://start.facemoods.com/?a=bf2&s={searchTerms}&f=4 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=bf2&s={searchTerms}&f=4 O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM…\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.10\facemoodsTlbr.dll (facemoods.com) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM…\Run: [facemoods] C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.10\facemoodssrv.exe (facemoods.com) O4 - HKU\S-1-5-21-2506755239-3979974981-3730081909-1000…\Run: [jcuirhgrjnvlmav] C:\ProgramData\jcuirhgr.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 File not found [2012-06-22 18:18:07 | 000,000,000 | —D | C] – C:\ProgramData\ufmqblpaeiowsfv [2012-07-13 21:48:08 | 000,001,048 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-01 01:55:11 | 000,001,052 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-01 01:53:05 | 000,001,070 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2506755239-3979974981-3730081909-1000UA.job [2012-07-01 01:53:05 | 000,001,018 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2506755239-3979974981-3730081909-1000Core.job [2012-06-22 18:18:10 | 000,000,052 | ---- | M] () – C:\ProgramData\avqbclirqsabipj [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\ProgramData\oodinbkv.exe [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\ProgramData\jcuirhgr.exe [2012-06-22 18:17:59 | 000,061,440 | ---- | M] () – C:\Users\MARZENKA\0.7111275401571548.exe [2012-02-11 12:01:54 | 000,000,000 | —D | M] – C:\Users\MARZENKA\AppData\Roaming\Babylon :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [RESETHOSTS] [emptytemp]

Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.

Pokaż log z usuwania.

potem nowy log OTL robiony opcją Run Scan (Skanuj)

tsoprano911 · 14 Lipiec 2012 19:35

Raport z OTLa po usunieciu i dodaniu skryptu:

http://wklej.to/vmsT8

Chyba dobrze juz jest, dzieki wielkie za pomoc

Leon1 · 14 Lipiec 2012 19:56

Pobierz CCleaner http://www.filehippo.com/download_ccleaner/

przeskanuj nim i wyczyść rejestr.

W OTL kilknij CleanUp (Sprzątanie)

przeskanuj

Dr.WEB CureIt! http://www.dobreprogramy.pl/DrWEB-CureI … 12976.html