Robal z facebooka

Li87 · 22 Czerwiec 2012 15:54

Mam problem z usunięciem robaka Win32/Pushbot.VR

log z OTL http://wklej.org/hash/b75f2516496/

Proszę o pomoc,

z góry dzięki

– Dodane 22.06.2012 (Pt) 19:00 –

przy każdym ponownym włączaniu kompa pojawia sie na nowo mimo usuwania zakończonego sukcesem będę wdzięczna za pomoc bo jestem zielona w tych sprawach

Atis · 22 Czerwiec 2012 17:17

W panelu sterowania odinstaluj Babylon Toolbar i Akamai NetSession Interface.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM…\SearchScopes{39BDD6F5-9412-4804-A77F-36A38987E031}: “URL” = http://startsear.ch/?aff=1&q={searchTerms} IE - HKU\S-1-5-21-4178446848-3974380187-487193525-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110819 … 6f654b7dbe IE - HKU\S-1-5-21-4178446848-3974380187-487193525-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=060612_7_&babsrc=SP_ss&mntrId=3a63981b0000000000001c6f654b7dbe IE - HKU\S-1-5-21-4178446848-3974380187-487193525-1000…\SearchScopes{30E78FF4-EC5B-429f-9307-48AAE58F67F5}: “URL” = http://search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=STDVM IE - HKU\S-1-5-21-4178446848-3974380187-487193525-1000…\SearchScopes{39BDD6F5-9412-4804-A77F-36A38987E031}: “URL” = http://startsear.ch/?aff=1&q={searchTerms} IE - HKU\S-1-5-21-4178446848-3974380187-487193525-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyOverride” = [string data over 1000 bytes] FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.order.1: “Search the web (Babylon)” FF - prefs.js…keyword.URL: “http://search.babylon.com/?affID=110819&tt=060612_7_&babsrc=KW_ss&mntrId=3a63981b0000000000001c6f654b7dbe&q=” [2011-07-11 20:04:02 | 000,000,633 | ---- | M] () – C:\Users\1\AppData\Roaming\Mozilla\Firefox\Profiles\2jva5a5r.default\searchplugins\startsear.xml [2012-06-22 16:24:56 | 000,002,352 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml O4 - HKLM…\Run: [WLConfig] C:\Program Files (x86)\Beniamin\WLConfigNM.exe /check File not found O4 - HKU\S-1-5-21-4178446848-3974380187-487193525-1000…\Run: [iSUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup File not found O4 - HKU\S-1-5-21-4178446848-3974380187-487193525-1000…\Run: [kcnkgad] C:\Users\1\AppData\Local\iqaboj.exe () O4 - Startup: C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hepsc.exe () [2012-06-22 16:25:03 | 000,000,250 | ---- | C] () – C:\user.js :Files C:\Users\1\AppData\Local*.exe C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup*.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.