Wirus Ucash

Toom · 7 Sierpień 2012 20:11

Mam problem - pojawia mi się, że komputer jest zablokowany z powodu naruszenia prawa polskiego

OTL.txt: http://www.wklej.org/id/806078/

Extras.txt: http://www.wklej.org/id/806079/

Proszę o pomoc

Tomek

Atis · 7 Sierpień 2012 22:30

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&st=1&barid={185B78C9-CEEC-4ECC-AD5F-93AE72E8A921}&q={searchTerms}&barid={185B78C9-CEEC-4ECC-AD5F-93AE72E8A921} IE - HKU\S-1-5-21-551593-197694977-985225158-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&barid={185B78C9-CEEC-4ECC-AD5F-93AE72E8A921} IE - HKU\S-1-5-21-551593-197694977-985225158-1000…\SearchScopes{BA779E45-FCB1-4D74-A84F-92707E9A2EC5}: “URL” = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc= IE - HKU\S-1-5-21-551593-197694977-985225158-1000…\SearchScopes{DBB61DD5-4586-4104-AB3D-3C10B97FB3E4}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=LE&apn_dtid=YYYYYYYYPL&apn_uid=f6a28a11-fe64-4f10-b6de-c73fa24f947d&apn_sauid=C7B50BE7-9861-4ECE-99F1-E38D36BF6AEA IE - HKU\S-1-5-21-551593-197694977-985225158-1000…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&st=1&barid={185B78C9-CEEC-4ECC-AD5F-93AE72E8A921}&q={searchTerms}&barid={185B78C9-CEEC-4ECC-AD5F-93AE72E8A921} FF - prefs.js…browser.search.order.1: “Ask.com” FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?SSPV=FFSB1&ctid=CT2704262&SearchSource=2&q=” [2012-03-10 10:39:42 | 000,000,000 | —D | M] (Softonic Toolbar) – C:\Users\Toom\AppData\Roaming\mozilla\Firefox\Profiles\cgwaumyv.default\extensions\ffxtlbra@softonic.com [2012-01-28 19:24:56 | 000,000,000 | —D | M] (Super Start) – C:\Users\Toom\AppData\Roaming\mozilla\Firefox\Profiles\cgwaumyv.default\extensions\superstart@enjoyfreeware.org [2012-05-27 12:58:13 | 000,002,323 | ---- | M] () – C:\Users\Toom\AppData\Roaming\Mozilla\Firefox\Profiles\cgwaumyv.default\searchplugins\askcom.xml [2012-04-06 22:52:58 | 000,002,306 | ---- | M] () – C:\Users\Toom\AppData\Roaming\Mozilla\Firefox\Profiles\cgwaumyv.default\searchplugins\askcomsearch.xml [2012-03-10 10:38:59 | 000,000,957 | ---- | M] () – C:\Users\Toom\AppData\Roaming\Mozilla\Firefox\Profiles\cgwaumyv.default\searchplugins\conduit.xml [2012-03-10 10:39:41 | 000,002,060 | ---- | M] () – C:\Users\Toom\AppData\Roaming\Mozilla\Firefox\Profiles\cgwaumyv.default\searchplugins\softonic.xml [2012-03-06 19:14:46 | 000,003,974 | ---- | M] () – C:\Users\Toom\AppData\Roaming\Mozilla\Firefox\Profiles\cgwaumyv.default\searchplugins\sweetim.xml O3 - HKU\S-1-5-21-551593-197694977-985225158-1000…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4:64bit: - HKLM…\Run: [syncInfrastructure] C:\Users\Toom\AppData\Local\Microsoft\Windows\4869\SyncInfrastructure.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2012-08-07 20:51:52 | 000,000,000 | —D | C] – C:\Users\Toom\AppData\Roaming\hellomoto :Files C:\Users\Toom\AppData\Local\Microsoft\Windows\4869 :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.