Wirus UKASH ;)

[korni007]

Standardowo chyba ukash u kumpla…

Logi OTL

http://wklej.org/hash/1a5385203e9/txt/

Extras:

http://wklej.org/hash/002375ac32b/txt/

[Atis]

Odinstaluj:

Browser Manager

McAfee Security Scan Plus

Search Assistant WebSearch 1.7

BrowseToSave 1.74

OptimizerPro

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE - HKLM…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=356&r=2013/03/03&hid=3239702179&lg=EN&cc=PL IE - HKU\S-1-5-21-4166698936-411558114-2441033000-1001\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://isearch.babylon.com/?affID=11622 … 1a4d57adc3 IE - HKU\S-1-5-21-4166698936-411558114-2441033000-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.pu-results.info/?pid=3 … g=EN&cc=PL IE - HKU\S-1-5-21-4166698936-411558114-2441033000-1001…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://isearch.babylon.com/?q={searchTerms}&affID=116220&tt=031012_ccp_4012_7&babsrc=SP_ss&mntrId=960f4ff5000000000000001a4d57adc3 IE - HKU\S-1-5-21-4166698936-411558114-2441033000-1001…\SearchScopes{805AF475-879C-4914-861E-5C14745AA454}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=&apn_ptnrs=8R&apn_dtid=YYYYYYYYPL&apn_uid=276D1DC6-B66E-4CCB-B4B7-255D0E875F35&apn_sauid=DCCE085B-18C2-498E-B261-F3FCBF7D7F9A IE - HKU\S-1-5-21-4166698936-411558114-2441033000-1001…\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: “URL” = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=356&r=2013/03/03&hid=3239702179&lg=EN&cc=PL FF - prefs.js…browser.search.defaultenginename: “WebSearch” FF - prefs.js…browser.search.defaultenginename,S: S", “WebSearch” FF - prefs.js…browser.search.defaulturl: “http://websearch.pu-results.info/?pid=356&r=2013/03/03&hid=3239702179&lg=EN&cc=PL&l=1&q=” FF - prefs.js…browser.search.order.1: “WebSearch” FF - prefs.js…browser.search.order.1,S: S", “WebSearch” FF - prefs.js…browser.search.selectedEngine: “WebSearch” FF - prefs.js…browser.search.selectedEngine,S: S", “WebSearch” FF - prefs.js…keyword.URL: “http://websearch.pu-results.info/?pid=356&r=2013/03/03&hid=3239702179&lg=EN&cc=PL&l=1&q=” [2011-02-01 19:05:08 | 000,002,333 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\mozilla\firefox\profiles\scbexom8.default\searchplugins\askcom.xml [2012-10-03 17:18:34 | 000,002,548 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\mozilla\firefox\profiles\scbexom8.default\searchplugins\browsemngr.xml [2013-03-03 20:05:09 | 000,000,621 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\mozilla\firefox\profiles\scbexom8.default\searchplugins\WebSearch.xml O3 - HKLM…\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O4 - HKLM…\Run: [startCCC] “C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun File not found O4 - HKU\S-1-5-21-4166698936-411558114-2441033000-1001…\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-4166698936-411558114-2441033000-1003…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found [2013-04-22 17:12:16 | 000,000,414 | -H-- | M] () – C:\Windows\tasks\schedule!3036567561.job [2013-04-22 17:05:31 | 000,000,004 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\skype.ini [2012-04-05 16:29:18 | 000,076,800 | ---- | C] () – C:\Users\Kuba\AppData\Roaming\skype.dat :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[korni007]

http://wklej.org/hash/4e6ed979603/txt/

[Atis]

Pokaż raport z usuwania i nowy log Skanuj.