Ukash - zablokowany komputer

[JapChan (Japko84)]

Witam.

Komputer został zablokowany. Wyświetla się jedynie informacja o konieczności dokonania wpłaty celem odblokowania.

Uruchomiłem komputer w trybie awaryjnym i wykonałem logi.

BArdzo proszę o pomoc i z góry dziękuję.

http://wklej.org/id/799030/

http://wklej.org/id/799033/

[Atis]

Odinstaluj Internet Explorer Toolbar 4.6 by SweetPacks i Yontoo.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=12&barid={AE924EC5-6FFE-4E69-8303-A9334F02499A} IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={AE924EC5-6FFE-4E69-8303-A9334F02499A} IE - HKU\S-1-5-21-2559281692-440367256-573401698-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= … =CT3072253 IE - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?sr … 0&st=12&q={searchTerms}&barid={AE924EC5-6FFE-4E69-8303-A9334F02499A} FF - prefs.js…browser.search.defaultenginename: “SweetIM Search” FF - prefs.js…browser.search.defaultthis.engineName: “uTorrentControl2 Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “BearShare Web Search” FF - prefs.js…browser.search.selectedEngine: “uTorrentControl2 Customized Web Search” FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=” [2012-07-18 14:58:41 | 000,000,000 | —D | M] (uTorrentControl2 Community Toolbar) – C:\Users\nowy\AppData\Roaming\mozilla\Firefox\Profiles\e6choq54.default\extensions{687578b9-7132-4a7a-80e4-30ee31099e03} [2012-06-27 18:22:03 | 000,000,000 | —D | M] (Yontoo) – C:\Users\nowy\AppData\Roaming\mozilla\Firefox\Profiles\e6choq54.default\extensions\plugin@yontoo.com [2010-09-14 14:41:12 | 000,002,506 | ---- | M] () – C:\Users\nowy\AppData\Roaming\Mozilla\Firefox\Profiles\e6choq54.default\searchplugins\BearShareWebSearch.xml [2012-06-07 21:16:04 | 000,000,935 | ---- | M] () – C:\Users\nowy\AppData\Roaming\Mozilla\Firefox\Profiles\e6choq54.default\searchplugins\conduit.xml [2012-06-16 16:09:32 | 000,003,915 | ---- | M] () – C:\Users\nowy\AppData\Roaming\Mozilla\Firefox\Profiles\e6choq54.default\searchplugins\sweetim.xml [2010-09-14 14:41:12 | 000,002,506 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll File not found O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10_userdata\ggbho.2.dll File not found O3 - HKLM…\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll File not found O3 - HKLM…\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM…\Run: [] File not found O4 - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\Run: [Netlog 24] “C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe” File not found O4 - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\Run: [qmbyyegmanoxzvs] C:\ProgramData\qmbyyegm.exe () [2012-07-27 19:44:33 | 000,000,000 | —D | C] – C:\ProgramData\pzvggrouaihwgrr [2012-07-27 19:44:35 | 000,061,440 | ---- | C] () – C:\ProgramData\qmbyyegm.exe [2012-07-27 19:44:11 | 000,000,051 | ---- | C] () – C:\ProgramData\srrxzwmzsvmbfoz [2012-07-27 19:44:09 | 000,061,440 | ---- | C] () – C:\Users\nowy\0.780359981380969.exe :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[JapChan (Japko84)]

Jak narazie jest ok:D zalączyl sie poprawnie zaraz przesle nowe logi

– Dodane 28.07.2012 (So) 0:45 –

Internet Explorer Toolbar 4.6 by SweetPacks i Yontoo. nie dalo się usunąć.

http://wklej.org/id/799122/

[Atis]

Wklej i kliknij Wykonaj skrypt:

:OTL IE - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll File not found O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC) O4 - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe File not found O4 - HKU\S-1-5-21-2559281692-440367256-573401698-1000…\Run: [badoo Desktop] C:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe File not found :Reg [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{774C0434-9948-4DEE-A14E-69CDD316E36C}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{889DF117-14D1-44EE-9F31-C5FB5D47F68B}]

Uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

http://windows.microsoft.com/pl-PL/wind … tore-point

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

Dysk przeskanuj Malwarebytes-AntiMalware.

Podczas instalacji kliknij Odrzuć żeby zainstalować tylko darmowy skaner.

http://www.dobreprogramy.pl/Malwarebyte … 13117.html

[JapChan (Japko84)]

serdecznie dziekuje za pomoc:)