Wirus ukash pomocy

Shopen · 13 Sierpień 2012 18:13

Witam,

Pojawił się problem z wirusem.

Wklejam z OTL:

prosze o pomoc.

olt

http://wklejto.pl/131309

Atis · 13 Sierpień 2012 19:00

Odinstaluj Babylon Toolbar.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/vlt/vlt_1328205296_740988 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/vlt/vlt_1328205296_740988 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/vlt/vlt_1328205296_740988 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/vlt/vlt_1328205296_740988 FF - prefs.js…browser.search.defaultenginename: “http://www.mail.ru/” FF - prefs.js…browser.search.defaulturl: “http://go.mail.ru/search?fr=fftb&utf8in&q=” FF - prefs.js…browser.search.selectedEngine: “mail.ru: Поиск в Интернете” FF - prefs.js…browser.startup.homepage: “pl.v9.com/vlt/vlt_1328205296_740988” FF - prefs.js…extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.1 [2012-07-24 22:59:05 | 000,000,000 | —D | M] (Спутник @Mail.Ru) – C:\Users\Asus\AppData\Roaming\mozilla\Firefox\Profiles\gwmwg56z.default\extensions{37964A3C-4EE8-47b1-8321-34DE2C39BA4D} [2012-07-24 22:59:15 | 000,001,533 | ---- | M] () – C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\gwmwg56z.default\searchplugins\mailru—.xml [2010-12-13 14:36:54 | 000,002,035 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml [2010-12-27 12:03:32 | 000,002,035 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchvsl.xml [2012-02-02 19:55:31 | 000,002,415 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml O3 - HKLM…\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4:64bit: - HKLM…\Run: [WLanConn] C:\Users\Asus\AppData\Local\Microsoft\Windows\2622\WLanConn.exe () O4 - HKCU…\Run: [PlayNC Launcher] File not found [2012-08-13 18:21:59 | 000,000,000 | —D | C] – C:\Users\Asus\AppData\Roaming\hellomoto [2012-07-25 18:28:02 | 000,000,304 | ---- | C] () – C:\user.js :Files C:\Users\Asus\AppData\Local\Microsoft\Windows\2622 :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.