Wirus ukash

azabi · 2 Sierpień 2012 13:26

Witam, mam problem z Ukash

oto logi:

bardzo proszę o pomoc.

Acorus · 2 Sierpień 2012 14:04

Odinstaluj StartNow Toolbar,vShare.tv plugin 1.3.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1 IE - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\SearchScopes{0388404D-6072-4CEB-B521-8F090FEAEE57}: “URL” = http://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=PL&install_date=20120715&user_guid=0C72BE6443164C25A978BF948A59C74E&machine_id=496acd33b2a5b54620a2a07c9a360ecb&browser=IE&os=win&os_version=6.1-x64-SP0&iesrc={referrer:source} IE - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=16 … c237548&q={searchTerms} IE - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\SearchScopes{69EB132E-A6A6-41BE-9F60-C7CEE02708B6}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=T8&apn_dtid=YYYYYYYYPL&apn_uid=3dcd857b-7b80-4f6d-a913-a3e8e27f018b&apn_sauid=5C8B8439-8CBB-40AF-A426-AE6AD6E424C1 IE - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\SearchScopes{D57CBFDE-9C14-4BFE-BAEB-EA273D58A3B2}: “URL” = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (StartNow Toolbar) - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll () O3 - HKLM…\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKU\S-1-5-21-2427599092-2135545245-2138546552-1001…\Run: [poijomaiyaewkuh] C:\ProgramData\poijomai.exe (Elpida Memory) O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2012-08-01 20:22:17 | 000,073,728 | ---- | C] (Elpida Memory) – C:\ProgramData\poijomai.exe [2012-08-01 20:22:16 | 000,000,000 | —D | C] – C:\ProgramData\kbcrsziqyvxvrqc [2012-08-01 20:22:12 | 000,073,728 | ---- | C] (Elpida Memory) – C:\Users\Wojtas\0.5923369576179126.exe [2012-08-01 20:22:13 | 000,000,051 | ---- | C] () – C:\ProgramData\ntuilegvqmgwmrk [2011-10-24 19:29:20 | 000,000,000 | —D | M] – C:\Users\Wojtas\AppData\Roaming\OpenCandy :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.