Prośba o pomoc - dotyczy Live Security Platinum

kaem55 · 13 Sierpień 2012 12:21

Będę bardzo wdzięczny za pomoc i informację jaki skrypt powinienem wprowadzić w OTL i jakie są dalsze kroki walki z tym czymś…

Zrobiłem skan w trybie awaryjnym:

OTL http://wklej.org/id/809838/

Extras http://wklej.org/id/809840/

Atis · 13 Sierpień 2012 12:45

Odinstaluj vShare plugin i AutocompletePro.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ZTEusbser6k.sys – (ZTEusbser6k) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ZTEusbnmea.sys – (ZTEusbnmea) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ZTEusbmdm6k.sys – (ZTEusbmdm6k) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\usbaapl.sys – (USBAAPL) DRV - File not found [File_System | On_Demand | Stopped] – -- (StarOpen) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwusbser2.sys – (NWUSBPort2) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwusbser.sys – (NWUSBPort) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwusbmdm.sys – (NWUSBModem) DRV - File not found [Kernel | On_Demand | Stopped] – system32\drivers\massfilter.sys – (massfilter) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=36582aa2- … 2186d2188d IE - HKLM…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=36 … 6d2188d&q={searchTerms} IE - HKU\S-1-5-21-1659004503-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://gazeta.hit.gemius.pl/hitredir/id … aign=p_124 IE - HKU\S-1-5-21-1659004503-583907252-725345543-500…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=36 … 6d2188d&q={searchTerms} IE - HKU\S-1-5-21-1659004503-583907252-725345543-500…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: “URL” = http://www.daemon-search.com/search?q={searchTerms} IE - HKU\S-1-5-21-1659004503-583907252-725345543-500…\SearchScopes{F889625A-7D51-4690-8950-2AC029A63D4A}: “URL” = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100474&mntrId=24f8436f000000000000002186d2188d [2011-08-27 22:46:50 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\q2xxnuwp.default\extensions\ffxtlbr@babylon.com [2011-08-27 22:46:50 | 000,002,288 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) – C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll O4 - HKU\S-1-5-21-1659004503-583907252-725345543-500…\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden File not found O4 - HKU\S-1-5-21-1659004503-583907252-725345543-500…\Run: [Microsoft Firewall 2.9] C:\Documents and Settings\Administrator\Dane aplikacji\WMPRWISE.EXE (E-POWER) O4 - HKU\S-1-5-21-1659004503-583907252-725345543-500…\Run: [Mobile Partner] C:\Program Files\WEB Partner\WEB Partner File not found O4 - HKU\S-1-5-21-1659004503-583907252-725345543-500…\RunOnce: [036DFF982B17D9790560AEA081CB3EF3] C:\Documents and Settings\All Users\Dane aplikacji\036DFF982B17D9790560AEA081CB3EF3\036DFF982B17D9790560AEA081CB3EF3.exe () [2012-08-13 10:39:06 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Menu Start\Programy\Live Security Platinum [2011-03-28 16:45:47 | 000,327,743 | ---- | C] () – C:\WINDOWS\System32\drivers\str.sys [2011-08-27 22:46:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Dane aplikacji\Babylon :Files C:\Documents and Settings\All Users\Dane aplikacji\036DFF982B17D9790560AEA081CB3EF3 :Reg [-HKEY_USERS\S-1-5-21-1659004503-583907252-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum] :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

kaem55 · 13 Sierpień 2012 13:24

dzięki

raport z usuwania: http://wklej.org/id/810004/

nowy log: http://wklej.org/id/810005/

chyba wszystko ok! jeszcze raz dzięki!

Atis · 13 Sierpień 2012 13:33

Wklej i kliknij Wykonaj skrypt:

:OTL O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll File not found O3 - HKLM…\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll File not found O3 - HKLM…\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found O3 - HKU\S-1-5-21-1659004503-583907252-725345543-500…\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found [2011-08-27 22:46:47 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\Babylon :Files C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\setup.exe :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

Odinstaluj starą wersję programu:

Java 6 Update 31

Adobe Flash Player 10 ActiveX

Adobe Reader 9.5.1

Później zainstaluj:

Adobe Reader

Flash Player

Java

Uruchom OTL i kliknij Sprzątanie.

Wyłącz i ponownie włącz przywracanie systemu:

http://support.microsoft.com/kb/310405/pl

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date