Search Babyloon infekcja?

[szymon189]

Na laptopie zainstalował się search babyloo. Jest to groźne?

http://www.wklej.org/id/765822/

http://www.wklej.org/id/765823/

[Atis]

W panelu sterowania odinstaluj Winamp Toolbar i BrowserCompanion.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV - File not found [Auto | Stopped] – C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 – (Norton Internet Security) DRV - File not found [Kernel | System | Stopped] – C:\Windows\system32\drivers\NIS\1000000.07D\SRTSPX.SYS – (SRTSPX) DRV - File not found [File_System | System | Stopped] – C:\Windows\system32\drivers\NIS\1000000.07D\SRTSP.SYS – (SRTSP) DRV - File not found [Kernel | On_Demand | Stopped] – C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS – (NAVEX15) DRV - File not found [Kernel | On_Demand | Stopped] – C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS – (NAVENG) IE - HKLM…\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKLM…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/red … 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120428104508423&tb_oid=28-04-2012&tb_mrud=28-04-2012 IE - HKLM…\SearchScopes{F1126C2F-063D-4DC2-9A8F-879894F5D9D6}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl IE - HKU\S-1-5-21-893889812-1814274711-1267912521-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112059 … 265e135bf8 IE - HKU\S-1-5-21-893889812-1814274711-1267912521-1000…\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKU\S-1-5-21-893889812-1814274711-1267912521-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&affID=112059&babsrc=SP_ss&mntrId=02dad18100000000000000265e135bf8 IE - HKU\S-1-5-21-893889812-1814274711-1267912521-1000…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/red … 685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120428104508423&tb_oid=28-04-2012&tb_mrud=28-04-2012 IE - HKU\S-1-5-21-893889812-1814274711-1267912521-1000…\SearchScopes{F1126C2F-063D-4DC2-9A8F-879894F5D9D6}: “URL” = http://slirsredirect.search.aol.com/sli … 602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl [2012-04-28 12:45:16 | 000,000,000 | —D | M] (Winamp Toolbar) – C:\Users\Michasia\AppData\Roaming\mozilla\Firefox\Profiles\gy1s7owf.default\extensions{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-06-03 12:16:14 | 000,000,000 | —D | M] (Browser Companion Helper) – C:\Users\Michasia\AppData\Roaming\mozilla\Firefox\Profiles\gy1s7owf.default\extensions\bbrs_002@blabbers.com [2012-06-03 12:16:59 | 000,000,000 | —D | M] (Babylon) – C:\Users\Michasia\AppData\Roaming\mozilla\Firefox\Profiles\gy1s7owf.default\extensions\ffxtlbr@babylon.com [2012-06-03 12:16:14 | 000,002,313 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml O4 - HKLM…\Run: [] File not found O4 - HKU\S-1-5-21-893889812-1814274711-1267912521-1000…\Run: [EA Core] “C:\Program Files\Electronic Arts\EADM\Core.exe” -silent File not found [2012-06-03 12:16:00 | 000,000,000 | —D | C] – C:\Users\Michasia\AppData\Roaming\Babylon [2012-06-03 12:16:00 | 000,000,000 | —D | C] – C:\ProgramData\Babylon [2012-06-03 12:16:32 | 000,000,237 | ---- | M] () – C:\user.js :Reg [HKEY_USERS\S-1-5-21-893889812-1814274711-1267912521-1000\SOFTWARE\Microsoft\Internet Explorer\Main] “Start Page”=“about:blank” “Default_Page_URL”=- [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] “Start Page”=“about:blank” “Default_Page_URL”=- :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

Pobierz AdwCleaner

Zamknij przeglądarkę internetową.

Uruchom AdwCleaner i kliknij Delete

[szymon189]

http://www.wklej.org/id/765906/

http://www.wklej.org/id/765911/

[Atis]

Pokaż nowy log Skanuj.

Czy ten błąd wystąpił podczas próby odinstalowania BrowserCompanion?

[szymon189]

http://www.wklej.org/id/765911/

http://www.wklej.org/id/765917/

[Atis]

Wklej do OTL i kliknij Wykonaj skrypt:

:OTL O4 - HKLM…\Run: [browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe (Blabbers Communications LTD) [2012-06-03 12:16:12 | 000,000,000 | —D | C] – C:\Program Files\BrowserCompanion :Reg [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] “BrowserCompanion”=- :Commands [emptytemp]

Później uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

http://windows.microsoft.com/pl-PL/wind … tore-point

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

[szymon189]

Results of screen317’s Security Check version 0.99.41 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Antivirus/Firewall Check: AVG Anti-Virus Free Edition 2012 Antivirus up to date! Anti-malware/Other Utilities Check: Malwarebytes Anti-Malware wersja 1.61.0.1400 Java 6 Update 32 Java version out of date! Adobe Flash Player 11.2.202.235 Adobe Reader X (10.1.3) Mozilla Firefox (12.0) Process Check: objlist.exe by Laurent AVG avgwdsvc.exe AVG avgtray.exe AVG avgrsx.exe AVG avgemc.exe System Health check Total Fragmentation on Drive C: % ````````````````````End of Log``````````````````````

[adam9870]

Możesz zaktualizować Javę.

http://www.dobreprogramy.pl/Java-SE,Pro … 13186.html

http://www.java.com/pl/download/