kamis977
(Pogromca24)
30 Sierpień 2011 09:32
#1
Witam tutaj podaje logi prosze o dalsze wskazowki co mam robic
Z gory Dzieki ; ))
Logi :
OTL:
http://wklej.to/w9W7x
Extras:
http://wklej.to/8S6rG
Acorus
(Acorus)
30 Sierpień 2011 09:47
#2
Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL SRV - [2011-08-17 13:00:38 | 000,402,328 | ---- | M] (Spigot, Inc.) [Auto | Stopped] – C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe – (Application Updater) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.qooqlle.com/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKCU…\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.6\iobitToolbarIE.dll (Spigot, Inc.) FF - prefs.js…browser.search.defaultenginename: “Yahoo” FF - prefs.js…browser.search.param.yahoo-fr: “chr-greentree_ff&type=382950” FF - prefs.js…browser.startup.homepage: “http://www.qooqlle.com/ ” [2011-07-02 14:25:41 | 000,002,059 | ---- | M] () – C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\bcnmyz8a.default\searchplugins\daemon-search.xml [2011-08-30 11:01:18 | 000,001,860 | ---- | M] () – C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\bcnmyz8a.default\searchplugins\search.xml [2011-08-29 07:24:55 | 000,000,000 | —D | M] (Widgi Toolbar Platform) – C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM [2011-08-29 07:24:55 | 000,000,000 | —D | M] (IObit Toolbar) – C:\PROGRAM FILES (X86)\IOBIT TOOLBAR\FF O2 - BHO: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.6\iobitToolbarIE.dll (Spigot, Inc.) O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll () O3:64bit: - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM…\Toolbar: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.6\iobitToolbarIE.dll (Spigot, Inc.) O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3:64bit: - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU…\Toolbar\WebBrowser: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll () O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [csrs] C:\ProgramData\csrs.exe (Created with WinAutomation (http://www.WinAutomation.com )) O4 - HKLM…\Run: [searchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM…\Run: [svhost] C:\Program Files (x86)\Common Files\svhost.exe () O4 - HKLM…\Run: [winloqon] C:\ProgramData\winloqon.exe (Created with WinAutomation (http://www.WinAutomation.com )) O4 - HKCU…\Run: [ares] File not found O4 - HKCU…\Run: [wuauclt] File not found [2011-08-29 20:58:33 | 000,000,266 | ---- | M] () – C:\Windows\tasks\RMSchedule.job :Commands [emptytemp]
Kliknij Wykonaj skrypt .Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.
Odinstaluj IObit Toolbar v4.6,DAEMON Tools Toolbar,HyperCam Toolbar,Norton Security Scan.
kamis977
(Pogromca24)
30 Sierpień 2011 10:56
#3
Tutaj Raporcik i otl.txt po usunieciu ; ))
Raport:
http://wklej.to/DRC7J
A tutaj Otl.txt
http://wklej.to/VkCIt
Acorus
(Acorus)
30 Sierpień 2011 12:49
#4
Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL FF - prefs.js…browser.search.selectedEngine: “qooqlle” [2011-06-03 17:39:19 | 000,294,912 | ---- | C] () – C:\Users\Kamil\AppData\Roaming\brkt1357BR.exe [2011-06-03 17:39:19 | 000,021,504 | ---- | C] () – C:\Users\Kamil\AppData\Roaming\fgxo2830FG.exe [2011-06-03 17:39:02 | 000,294,912 | ---- | C] () – C:\Users\Kamil\AppData\Roaming\kqfh4494KQ.exe :Commands [emptytemp]
Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.Zainstaluj aktualizacje do programow wskazanych przez: http://screen317.spywareinfoforum.org/SecurityCheck.exe jako out of date.