Problem z wirusem Ukash (+logi)

KJFrodo · 3 Wrzesień 2012 16:02

Mam problem z wirusem Ukash. Poniżej przesyłam logi. Z góry dzięki za pomoc!

Extras

OTL

Atis · 3 Wrzesień 2012 16:19

Do okna Własne opcje skanowania / skrypt wklej:

:OTL DRV - File not found [Kernel | On_Demand | Stopped] – C:\Documents and Settings\Me\ps_drv.sys – (ps_drv) DRV - File not found [Kernel | System | Stopped] – C:\WINDOWS\system32\drivers\glaide32.sys – (glaide32) SRV - File not found [Disabled | Stopped] – C:\PROGRA~1\ArcaBit\ARCAUP~1\update.exe – (AVUpdate) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_med … 1345057093 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_med … 1345057093 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.v9.com/web/?q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.v9.com/web/?q={searchTerms} IE - HKLM…\SearchScopes{36668FFD-7809-43FB-A609-999C5A7AB5FE}: “URL” = http://search.foxtab.com/?q={searchTerms}&s=1&chnl=dcom&cd=2XzutBtN2Y1L1QzutDtDyDtDzz0DyE0EyE0FyB0DyByCyEtA0FtN0D0TzutBtDtCtCtDzztCyE&cr=2044621152 IE - HKU\S-1-5-21-1123561945-926492609-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_med … 1345057093 IE - HKU\S-1-5-21-1123561945-926492609-839522115-1003…\SearchScopes{36668FFD-7809-43FB-A609-999C5A7AB5FE}: “URL” = http://search.foxtab.com/?q={searchTerms}&s=1&chnl=dcom&cd=2XzutBtN2Y1L1QzutDtDyDtDzz0DyE0EyE0FyB0DyByCyEtA0FtN0D0TzutBtDtCtCtDzztCyE&cr=2044621152 IE - HKU\S-1-5-21-1123561945-926492609-839522115-1003…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://search.v9.com/web/?q={searchTerms} [2012-08-15 20:58:33 | 000,000,402 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\v9.xml O4 - HKLM…\Run: [NPSStartup] File not found O4 - HKLM…\Run: [recdisc] C:\Documents and Settings\Me\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\798\recdisc.exe File not found O4 - HKLM…\Run: [VSD3DRefDebug] C:\Documents and Settings\You\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3242\VSD3DRefDebug.exe () O4 - HKU\S-1-5-21-1123561945-926492609-839522115-1003…\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-1123561945-926492609-839522115-1003…\Run: [ares] “E:\Ares\Ares.exe” -h File not found [2012-09-03 16:09:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Me\Dane aplikacji\hellomoto :Files C:\Documents and Settings\You\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3242 C:\Documents and Settings\Me\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\798 :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania.

W panelu sterowania odinstaluj:

Babylon toolbar on IE

Searchqu Toolbar

Yahoo! Toolbar

V9 Homepage Uninstaller

Pobierz AdwCleaner

Zamknij przeglądarkę internetową.

Uruchom AdwCleaner i kliknij Delete

Pokaż nowy log Skanuj.