Safesaver- wirus, problem


(Joannakatynska) #1

Jak wyżej mam problem, bo przyplątał się safesaver.

 

 

- Extras.txt http://www.wklej.org/id/1257513/

 

 

Proszę o pomoc.


(Acorus) #2

Odinstaluj McAfee Security Scan Plus,Browsea22ssAAvve,Ashampoo PO Toolbar,Optimizer Pro v3.0.Użyj AdwCleaner http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner z funkcji Skan(Szukaj) a następnie Clean(usuń) (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).

Pokaż nowy OTL.txt


(Joannakatynska) #3

Nowy OTL.txt http://www.wklej.org/id/1257621/


(Acorus) #4

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
[2013/05/01 10:25:39 | 000,000,000 | ---D | M] (Browsea22ssAAvve) -- C:\Users\Asia\AppData\Roaming\mozilla\Firefox\Profiles\0jwuhu2x.default\extensions\j1-uo@ayaay-iiyi.net
CHR - Extension: RoboSaver = C:\Users\Asia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmeppgpkjkkamojmfenjdhkjifigoch\6.1\
CHR - Extension: Browsea22ssAAvve = C:\Users\Asia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbgpidnhbgklhcpfdngebbbeaajoopjp\1\
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - Startup: C:\Users\Asia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = File not found
[2014/01/31 17:26:02 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/01/31 14:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RoboSaver
[2014/01/31 14:50:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UTuabeNoAAds
[2014/01/30 23:43:58 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2014/01/30 23:42:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2014/01/30 23:13:03 | 000,000,000 | ---D | C] -- C:\ProgramData\UTuabeNoAAds
[2014/01/30 23:12:59 | 000,000,000 | ---D | C] -- C:\ProgramData\jkgbocikndlokhbklihjlaffoofghlde
[2014/01/25 11:06:41 | 000,000,000 | ---D | C] -- C:\ProgramData\FaunnDeals
[2014/01/25 11:06:39 | 000,000,000 | ---D | C] -- C:\ProgramData\hkmggkcohfiiladdbdjcjhgkgedcejlg
[2014/01/25 11:06:35 | 000,000,000 | ---D | C] -- C:\Users\Asia\AppData\Local\Packages
[2014/01/25 11:06:28 | 000,000,000 | ---D | C] -- C:\ProgramData\615fd0293a630f04
[2014/01/25 11:06:24 | 000,000,000 | ---D | C] -- C:\ProgramData\RoboSaver

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.


(Joannakatynska) #5

dziękuję bardzo za pomoc :slight_smile: