Wirus UKASH POLICJA

[wisienka78 (Agnieszkagranda87)]

Witam.

Bardzo proszę o pomoc w usunięciu wirusa. Będę wdzięczna.

Log z OTL (tylko ten jeden raport mi wyszedł):

http://wklej.org/id/889423/

[Atis]

Odinstaluj MediaBar.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL DRV - File not found [Kernel | Boot | Stopped] – -- (viaxbus) IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKCU…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} FF - prefs.js…browser.search.defaultenginename: “BearShare Web Search” FF - prefs.js…browser.search.defaultthis.engineName: “uTorrentControl2 Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “BearShare Web Search” FF - prefs.js…browser.search.selectedEngine: “uTorrentControl2 Customized Web Search” FF - prefs.js…extensions.enabledItems: ffxtlbr@babylon.com:1.2.0 FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=” [2012-11-08 12:02:28 | 000,000,000 | —D | M] (uTorrentControl2 Community Toolbar) – C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\dwi37v9j.default\extensions{687578b9-7132-4a7a-80e4-30ee31099e03} [2010-11-24 13:00:49 | 000,000,000 | —D | M] (MediaBar) – C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\dwi37v9j.default\extensions{E84D42CA-64EB-11DE-A65F-8C3656D89593} [2012-05-14 20:53:39 | 000,000,000 | —D | M] (Babylon) – C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\dwi37v9j.default\extensions\ffxtlbr@babylon.com [2010-09-14 13:41:12 | 000,002,506 | ---- | M] () – C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\dwi37v9j.default\searchplugins\BearShareWebSearch.xml [2012-06-07 20:16:04 | 000,000,935 | ---- | M] () – C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\dwi37v9j.default\searchplugins\conduit.xml O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O4 - HKLM…\Run: [] “D:\PROGRAMY\DialNet\FPLICE~1.EXE zhimakaimen//WINPOET_QUITTING_EVENT” File not found [2012-12-06 09:02:51 | 095,023,320 | ---- | M] () – C:\D & S\All Users\Dane aplikacji\0tbpw.pad [2012-12-05 12:08:05 | 000,000,746 | ---- | M] () – C:\D & S\Administrator\Menu Start\Programy\Autostart\runctf.lnk :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.