Problem z usunięciem strony startowej Qvo6 w Firefox

[Ryszard65 (Rysiek65)]

Podaję logi:

OTL scan: http://wklej.to/btgUU

Extras scan: http://wklej.to/ok1yp

[Acorus]

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m … 1366976009 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m … 1366976009 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.qvo6.com/web/?utm_source= … 10910&ts=0 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qvo6.com/web/?utm_source= … 10910&ts=0 IE:64bit: - HKLM…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://search.qvo6.com/web/?utm_source= … 10910&ts=0 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m … 1366976009 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.youwillfind.info/?pid= … g=EN&cc=PL IE - HKLM…\URLSearchHook: - No CLSID value found IE - HKLM…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://search.qvo6.com/web/?utm_source= … 10910&ts=0 IE - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m … 1366976009 IE - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.youwillfind.info/?pid= … g=EN&cc=PL IE - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001…\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://search.qvo6.com/web/?utm_source= … 10910&ts=0 FF - prefs.js…browser.search.defaultenginename: “WebSearch” FF - prefs.js…browser.search.defaultenginename,S: S", “WebSearch” FF - prefs.js…browser.search.defaulturl: “http://websearch.youwillfind.info/?pid=658&r=2013/04/26&hid=37099186&lg=EN&cc=PL&l=1&q=” FF - prefs.js…browser.search.order.1: “WebSearch” FF - prefs.js…browser.search.order.1,S: S", “WebSearch” FF - prefs.js…browser.search.selectedEngine,S: S", “WebSearch” FF - prefs.js…keyword.URL: “http://websearch.youwillfind.info/?pid=658&r=2013/04/26&hid=37099186&lg=EN&cc=PL&l=1&q=” [2013-04-05 20:38:38 | 000,001,294 | ---- | M] () – C:\Users\Rysiek\AppData\Roaming\mozilla\firefox\profiles\0ltj0g1o.default\searchplugins\delta.xml [2013-04-26 13:33:33 | 000,000,733 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml O4 - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001…\Run: [ares] “C:\Program Files (x86)\Ares\Ares.exe” -h File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2013-04-26 19:09:41 | 000,000,000 | —D | C] – C:\Program Files\Enigma Software Group [2013-04-26 14:26:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\WebSearch [2013-04-26 14:26:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\BrowseToSave [2013-04-26 14:26:02 | 000,000,000 | —D | C] – C:\ProgramData\BeRowsuE2saaVee [2013-04-26 13:33:23 | 000,000,000 | —D | C] – C:\Users\Rysiek\AppData\Roaming\eIntaller [2013-04-05 20:38:36 | 000,000,000 | —D | C] – C:\Users\Rysiek\AppData\Roaming\BabSolution @Alternate Data Stream - 971 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD @Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:890CC2F3 @Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:07BF512B :Commands [emptytemp]

Kliknij Wykonaj skrypt.Użyj AdwCleaner http://general-changelog-team.fr/fr/dow … adwcleaner z funkcji Usuń(w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).

Pokaż nowy OTL.txt

[Ryszard65 (Rysiek65)]

Już nie mam tej strony startowej Qvo6.

Nowy OTL scan: http://wklej.to/naeDu

Nowy Extras scan: http://wklej.to/8LtOn

[Acorus]

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL O2:64bit: - BHO: (Reg Error: Value error.) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll File not found O3 - HKU\S-1-5-21-3500852059-2206323907-1343394091-1001…\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O4:64bit: - HKLM…\Run: [spywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe File not found O4:64bit: - HKLM…\Run: [spywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe File not found :Commands [emptytemp]

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.

[Ryszard65 (Rysiek65)]

Już wszystko w porządku. Wielkie dzięki