Reklamy / spam na przeglądarce

patryksvn · 8 Styczeń 2015 17:28

Witam, niestety pojawia mi się mnóstwo reklam w przeglądarce. Poniżej daję Wam linki z programu OTL:

http://wklej.org/id/1587842/

http://wklej.to/8Eacm

Z góry dziękuję za pomoc !

krzych5610 · 9 Styczeń 2015 09:43

Uruchom skaner OTL, wklej w okno podany skrypt:

:OTL IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE:64bit: - HKLM…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE - HKLM…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKLM…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://websearch.thesearchpage.info/?l=1&q={searchTerms}&pid=21862&r=2015/01/07&hid=5751262063472703261&lg=EN&cc=PL&unqvl=74 IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hppp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000…\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}: “URL” = http://isearch.omiga-plus.com/web/?type=dspp&ts=1420622661&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms} IE - HKU\S-1-5-21-320292003-3105794613-2961701603-1000…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://websearch.thesearchpage.info/?l=1&q={searchTerms}&pid=21862&r=2015/01/07&hid=5751262063472703261&lg=EN&cc=PL&unqvl=74 FF - prefs.js…browser.search.defaultenginename: “omiga-plus” FF - prefs.js…browser.search.searchengine.alias: “omiga-plus” FF - prefs.js…browser.search.searchengine.iconURL: “http://isearch.omiga-plus.com/favicon.ico” FF - prefs.js…browser.search.searchengine.name: “omiga-plus” FF - prefs.js…browser.search.searchengine.ptid: “cor” FF - prefs.js…browser.search.searchengine.uid: “TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT” FF - prefs.js…browser.search.searchengine.url: “http://isearch.omiga-plus.com/web/?type=ds&ts=1420622626&from=cor&uid=TOSHIBAXMK6465GSX_Z0H3C1RMTXXZ0H3C1RMT&q={searchTerms}” FF - prefs.js…browser.search.selectedEngine: “omiga-plus” O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O34 - HKLM BootExecute: (autocheck autochk *) :Files C:\ProgramData\5964117248330890626 C:\ProgramData\McAfee C:\Windows\SysNative\perfh015.dat C:\Windows\SysNative\perfh009.dat C:\Windows\SysNative\perfc015.dat C:\Windows\SysNative\perfc009.dat :commands [emptytemp] Uruchom polecenie Wykonaj skrypt. Po restarcie uruchom w OTL polecenie Sprzątanie. Pobierz na pulpit skaner AdwCleaner - https://toolslib.net/downloads/viewdownload/1-adwcleaner/ Po uruchomieniu wykonaj polecenia szukaj i usuń. Pobierz na pulpit skaner FRST ( we 64 bit ) - http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ Uruchom skaner FRST. Pokaż wygenerowane raporty FRST i Addition.