Problematyczna strona startowa

xerror · 4 Czerwiec 2010 13:26

witam mam problem nie wiem czy to od stronek porno mojej malzonki ktorej notorycznie mowie by wchodzila na pewne strony czy czasem ja juz glupieje mianowicie chodzi mi o to ze jak uruchamiam przegladareczke wyskakuje mi stronka byteseeker z kazdym linkiem czy to wejde na onet czy na inna strone otwieraja mi sie rozne strony rozumiem ze mam sprawdzic logi i tutaj wkleic wiec wklejam

http://wklejto.pl/69095

dziekuje za pomoc jesli taka nadejdzie sek zle wkleilem log http://wklejto.pl/69098 (poprawka )

jessica · 4 Czerwiec 2010 13:40

Ta infekcja nie bierze się z oglądania stron porno, a bierze się z zainstalowania “złego” kodeka do filmików.

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL IE - HKLM…\URLSearchHook: {e3aaf71e-b295-4156-ae11-777237a1db3c} - C:\Program Files\Smart_PC\tbSmar.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {e3aaf71e-b295-4156-ae11-777237a1db3c} - C:\Program Files\Smart_PC\tbSmar.dll (Conduit Ltd.) FF - prefs.js…browser.startup.homepage: “http://www.theprizeday.com/today.php|http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official\n” FF - prefs.js…extensions.enabledItems: {AAF6454A-4000-4015-84C1-6CD844C06B19}:1.0 [2010/01/23 13:11:55 | 000,000,000 | —D | M] (QuestService) – C:\Program Files\Mozilla Firefox\extensions{AAF6454A-4000-4015-84C1-6CD844C06B19} FF - prefs.js…extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150 FF - prefs.js…extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360 FF - prefs.js…extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050 FF - HKLM\software\mozilla\Firefox\Extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2010/01/01 23:55:51 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2010/01/01 23:55:53 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2010/01/01 23:55:55 | 000,000,000 | —D | M] O2 - BHO: (Smart PC Toolbar) - {e3aaf71e-b295-4156-ae11-777237a1db3c} - C:\Program Files\Smart_PC\tbSmar.dll (Conduit Ltd.) O3 - HKCU…\Toolbar\WebBrowser: (Smart PC Toolbar) - {E3AAF71E-B295-4156-AE11-777237A1DB3C} - C:\Program Files\Smart_PC\tbSmar.dll (Conduit Ltd.) [2010/06/04 15:12:00 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempHb2752.html [2010/06/04 15:12:00 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempIB2752.html [2010/06/04 13:25:54 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Temphn3568.html [2010/06/04 13:25:54 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempEv3568.html [2010/06/04 11:26:50 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempQy2672.html [2010/06/04 11:26:50 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempSw2672.html [2010/06/03 13:09:43 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempbj2820.html [2010/06/03 13:09:43 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempUw2820.html [2010/06/02 19:22:53 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempza2644.html [2010/06/02 19:22:53 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempMi2644.html [2010/06/02 18:06:25 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempkd2556.html [2010/06/02 18:06:25 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempIU2556.html [2010/06/02 13:06:50 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempbX2760.html [2010/06/02 13:06:50 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempdx2760.html [2010/06/02 07:23:51 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempyK2832.html [2010/06/02 07:23:51 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempGW2832.html [2010/06/01 19:28:04 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempoV3324.html [2010/06/01 19:28:04 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempHT3324.html [2010/06/01 18:33:08 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Temppq3120.html [2010/06/01 18:33:08 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempGW3120.html [2010/06/01 11:29:50 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempmZ2664.html [2010/06/01 11:29:50 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKU2664.html [2010/05/31 19:22:47 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempsd2632.html [2010/05/31 19:22:47 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempDW2632.html [2010/05/31 12:13:00 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKO2596.html [2010/05/31 12:13:00 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempfy2596.html [2010/05/30 09:15:12 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempBB2680.html [2010/05/30 09:15:12 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Temphx2680.html [2010/05/29 09:45:41 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempzM2516.html [2010/05/29 09:45:41 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempvJ2516.html [2010/05/28 16:47:50 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempGi2508.html [2010/05/28 16:47:50 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempIv2508.html [2010/05/28 11:32:58 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempyv2604.html [2010/05/28 11:32:58 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempZN2604.html [2010/05/28 10:27:42 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TemplR2568.html [2010/05/28 10:27:42 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempdz2568.html [2010/05/27 11:42:58 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempSn2928.html [2010/05/27 11:42:58 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempnT2928.html [2010/05/27 09:32:59 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempeM2636.html [2010/05/27 09:32:59 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempGq2636.html [2010/05/26 10:44:58 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempOV2524.html [2010/05/26 10:44:58 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TemphE2524.html [2010/05/25 15:52:11 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TemppA2460.html [2010/05/25 15:52:11 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempcR2460.html [2010/05/24 11:30:44 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempNB2516.html [2010/05/24 11:30:44 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempWo2516.html [2010/05/24 09:12:43 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempmP2508.html [2010/05/24 09:12:43 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempjw2508.html [2010/05/23 16:48:03 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempBi2532.html [2010/05/23 16:48:03 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempXL2532.html [2010/05/23 08:35:47 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempqO2420.html [2010/05/23 08:35:47 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempMp2420.html [2010/05/22 18:22:45 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempsx2536.html [2010/05/22 18:22:45 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempdq2536.html [2010/05/22 13:52:51 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempji2556.html [2010/05/22 13:52:51 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempgl2556.html [2010/05/22 11:10:47 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempoH2524.html [2010/05/22 11:10:47 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempfx2524.html [2010/05/21 08:16:05 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKf2484.html [2010/05/21 08:16:05 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempTc2484.html [2010/05/20 17:59:27 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempDJ2432.html [2010/05/20 17:59:27 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempiH2432.html [2010/05/20 13:31:33 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKa2464.html [2010/05/20 13:31:33 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempve2464.html [2010/05/20 13:08:56 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempps2532.html [2010/05/20 13:08:56 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempnl2532.html [2010/05/20 12:22:28 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempeU3292.html [2010/05/20 12:22:28 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKy3292.html [2010/05/19 20:55:00 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempOG2756.html [2010/05/19 20:55:00 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempgM2756.html [2010/05/18 15:26:25 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempIX2468.html [2010/05/18 15:26:25 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempAg2468.html [2010/05/18 10:20:49 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempkW2520.html [2010/05/18 10:20:49 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempcz2520.html [2010/05/17 09:42:56 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempbj2508.html [2010/05/17 09:42:56 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempHz2508.html [2010/05/16 23:10:26 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempwb2464.html [2010/05/16 23:10:26 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempUu2464.html [2010/05/16 19:02:50 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempha2444.html [2010/05/16 19:02:50 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempWy2444.html [2010/05/16 12:01:20 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempMY2504.html [2010/05/16 12:01:20 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempdd2504.html [2010/05/15 18:04:32 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempsL2496.html [2010/05/15 18:04:32 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempHT2496.html [2010/05/15 11:26:28 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempZL2572.html [2010/05/15 11:26:28 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKl2572.html [2010/05/14 13:36:11 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempEr2560.html [2010/05/14 13:36:11 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempyy2560.html [2010/05/13 09:52:24 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempZM2576.html [2010/05/13 09:52:24 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempIW2576.html [2010/05/12 12:31:01 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempyH2620.html [2010/05/12 12:31:01 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempPv2620.html [2010/05/12 09:41:02 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempae2516.html [2010/05/12 09:41:02 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempII2516.html [2010/05/11 19:05:13 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempmH2504.html [2010/05/11 19:05:13 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempcd2504.html [2010/05/11 12:16:25 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TemptQ2472.html [2010/05/11 12:16:25 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempvP2472.html [2010/05/10 21:27:41 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempsC2476.html [2010/05/10 21:27:41 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempTc2476.html [2010/05/10 12:26:52 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempbS2532.html [2010/05/10 12:26:52 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempzH2532.html [2010/05/09 18:04:15 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempgM2456.html [2010/05/09 18:04:15 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempDn2456.html [2010/05/09 16:11:24 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempNX2428.html [2010/05/09 16:11:23 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempJg2428.html [2010/05/09 09:16:09 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempGa2520.html [2010/05/09 09:16:09 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKO2520.html [2010/05/09 08:45:33 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempfi2572.html [2010/05/09 08:45:33 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempqr2572.html [2010/05/08 12:01:01 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TemppX2484.html [2010/05/08 12:01:01 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TemplP2484.html [2010/05/07 16:04:01 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempXS2636.html [2010/05/07 16:04:01 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempfR2636.html [2010/05/07 11:51:34 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempxl2560.html [2010/05/07 11:51:34 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\Temprs2560.html [2010/05/06 11:31:21 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\Tempsw2264.html [2010/05/06 11:31:21 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempXP2264.html [2010/05/06 09:44:05 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TemprQ2552.html [2010/05/06 09:44:05 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempKD2552.html [2010/05/05 23:11:16 | 000,002,432 | ---- | C] () – C:\Users\xerror\AppData\Local\TempyG2632.html [2010/05/05 23:11:16 | 000,002,089 | ---- | C] () – C:\Users\xerror\AppData\Local\TempmD2632.html :Files C:\Program Files\Web Search Operator C:\Program Files\Automated Content Enhancer C:\Program Files\Customized Platform Advancer :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

xerror · 4 Czerwiec 2010 13:49

po restarcie http://wklejto.pl/69099

i po run scan http://wklejto.pl/69100

dzieki bardzo chyba pomoglo bo strony nie ma i nic sie nie uruchamia gdybym byl milionerem bym zasponsorowal panu wyjazd do egiptu moge kilknac cleanup??

jessica · 4 Czerwiec 2010 14:22

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

Kliknij w Run Fix. Zatwierdź restart komputera.

Logu już nie dawaj.

W OTL kliknij na przycisk “CleanUp” - to go usunie razem z jego Kwarantanną.

jessi