Ukash

[rozatom]

Witam

mam problem z ukashem

proszę o pomoc.

OTL http://wklejto.pl/129457

EXTRAS http://wklejto.pl/129458

COMBOFIX http://wklejto.pl/129459

[Atis]

Odinstaluj Browsers Protector.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe /McCoreSvc – (McMPFSvc) IE - HKLM…\SearchScopes{88E3271D-2257-4E3D-9F1C-4696C3F3E45B}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=c3 … 8e79bf4&q={searchTerms} IE - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\SearchScopes{0388404D-6072-4CEB-B521-8F090FEAEE57}: “URL” = http://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=PL&install_date=20120120&user_guid=787DCCEE674B4E8B889925C06DD744D0&machine_id=4cbc0d5bd4bbf8dbc6a7c19310763e08&browser=IE&os=win&os_version=6.1-x64-SP0&iesrc={referrer:source} IE - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\SearchScopes{531F2931-7E73-48E3-A50A-307C1AD45DC5}: “URL” = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=370 IE - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\SearchScopes{88E3271D-2257-4E3D-9F1C-4696C3F3E45B}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=c3 … 8e79bf4&q={searchTerms} IE - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\SearchScopes{95B7759C-8C7F-4BF1-B163-73684A933233}: “URL” = http://startsear.ch/?aff=2&src=sp&cf=6e … 8e79bf4&q={searchTerms} IE - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\SearchScopes{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: “URL” = http://www.daemon-search.com/search?q={searchTerms} FF - prefs.js…browser.search.defaultengine: “Web Search” [2011-10-27 15:45:50 | 000,083,456 | ---- | M] (LiveVDO ) – C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2012-06-02 12:27:35 | 000,002,060 | ---- | M] () – C:\Users\Anusiak\AppData\Roaming\Mozilla\Firefox\Profiles\yw2cjt20.default\searchplugins\softonic.xml [2012-05-06 15:34:13 | 000,002,415 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3:64bit: - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O4 - HKLM…\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor File not found O4 - HKU\S-1-5-21-1251725177-957087209-2369837850-1000…\Run: [FactoryTest] C:\Windows\Test.bat File not found O4 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Run: [oarklkbgczyvwkq] C:\ProgramData\oarklkbg.exe File not found O4 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Run: [Power2GoExpress] NA File not found O4 - HKU\S-1-5-21-1251725177-957087209-2369837850-1000…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Anusiak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tor.lnk = File not found [2012-07-21 21:17:32 | 000,000,000 | —D | C] – C:\ProgramData\jnlstbjkcurudkl :Files C:\Users\Anusiak\AppData\Local\121add0c :Reg [-HKEY_USERS\S-1-5-21-1251725177-957087209-2369837850-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Protection 2012] :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[rozatom]

raport z usuwania http://wklejto.pl/129462

otl http://wklejto.pl/129463

extras http://www.wklejto.pl/129464

thx

[Atis]

Wklej i kliknij Wykonaj skrypt:

:OTL O2:64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found. O3 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O4:64bit: - HKLM…\Run: [combofix] C:\ComboFix\CF12275.3XE (Microsoft Corporation) O4 - HKU\S-1-5-21-1251725177-957087209-2369837850-1002…\Run: [ALLUpdate] “C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe” “sleep” File not found [2012-07-21 22:24:21 | 000,518,144 | ---- | C] (SteelWerX) – C:\windows\SWREG.exe [2012-07-21 22:24:21 | 000,406,528 | ---- | C] (SteelWerX) – C:\windows\SWSC.exe [2012-07-21 22:24:21 | 000,060,416 | ---- | C] (NirSoft) – C:\windows\NIRCMD.exe [2012-07-21 22:24:17 | 000,000,000 | —D | C] – C:\ComboFix [2012-07-21 22:24:09 | 000,000,000 | —D | C] – C:\Qoobox

Uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

Aby usunąć wszystkie punkty przywracania

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

Dysk przeskanuj Malwarebytes-AntiMalware.

Podczas instalacji kliknij Odrzuć żeby zainstalować tylko darmowy skaner.

http://www.dobreprogramy.pl/Malwarebyte … 13117.html