Ukash, proszę o pomoc

[markov (Markov10)]

OTL: http://wklej.to/B5Smv

Extras: http://wklej.to/bSFyD

Proszę o pomoc, dzięki!

[Acorus]

Odinstaluj MediaBar,McAfee Security Scan Plus,Winamp Toolbar.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\EagleNT.sys – (EagleNT) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4cb7f84000000000000001fd06a7301&tlver=1.4.19.19&affID=17162 IE - HKLM…\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKLM…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKLM…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss … ffID=17162 IE - HKCU…\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKCU…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU…\SearchScopes{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: “URL” = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4cb7f84000000000000001fd06a7301&tlver=1.4.19.19&affID=17162 IE - HKCU…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKCU…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 FF - prefs.js…browser.search.defaultenginename: “BearShare Web Search” FF - prefs.js…browser.search.defaulturl: “http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=” FF - prefs.js…browser.search.order.1: “BearShare Web Search” FF - prefs.js…browser.startup.homepage: “http://search.bearshare.com/” FF - prefs.js…extensions.enabledItems: ffxtlbr@babylon.com:1.1.3 FF - prefs.js…keyword.URL: “http://search.bearshare.com/web?src=ffb&systemid=2&q=” [2010-10-23 17:36:46 | 000,000,000 | —D | M] (MediaBar) – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\pvdjl6nm.default\extensions{E84D42CA-64EB-11DE-A65F-8C3656D89593} [2011-08-24 19:52:47 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\pvdjl6nm.default\extensions\ffxtlbr@babylon.com [2010-09-14 14:41:12 | 000,002,506 | ---- | M] () – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\pvdjl6nm.default\searchplugins\BearShareWebSearch.xml [2010-01-21 22:29:33 | 000,001,201 | ---- | M] () – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\pvdjl6nm.default\searchplugins\winamp-search.xml O3 - HKLM…\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll () O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll File not found O3 - HKLM…\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKCU…\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O4 - HKLM…\Run: [] “C:\PROGRA~1\DialNet\FPLICE~1.EXE zhimakaimen//WINPOET_QUITTING_EVENT” File not found O4 - HKLM…\Run: [babylonToolbar] “C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe” /md I File not found O4 - HKLM…\Run: [DATAMNGR] C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe (MusicLab, LLC) O4 - HKLM…\Run: [ophrbhcneagpqux] C:\Documents and Settings\All Users\Dane aplikacji\ophrbhcn.exe () O4 - HKCU…\Run: [ophrbhcneagpqux] C:\Documents and Settings\All Users\Dane aplikacji\ophrbhcn.exe () O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngr.dll (MusicLab, LLC) O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC) :Files C:\Documents and Settings\All Users\Dane aplikacji\vsddhlhszvdwazx C:\Documents and Settings\All Users\Dane aplikacji\bidoilejljpbmjl C:\Documents and Settings\All Users\Dane aplikacji\ophrbhcn.exe C:\Documents and Settings\Admin\ms.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

[markov (Markov10)]

Dzieki,

http://wklej.to/8q7xl Raport po reboocie,

bleh, zapomnialem o nowym skanie, ale ukash zniknal.

[Acorus]

W OTL użyj opcji Sprzątanie.Wyłącz i włącz przywracanie systemu.

http://www.searchengines.pl/Czyszczenie … 41981.html

Zainstaluj aktualizacje do programow wskazanych przez Security Check

analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.