Wirus z facebook'a! - jak usunąć?

yizer · 4 Listopad 2011 22:11

Proszę o pomoc! Jestem w tym zielony.

Logi:

OTL -> http://www.wklej.org/id/620661/

extras -> http://www.wklej.org/id/620662/

Acorus · 5 Listopad 2011 08:25

Odinstaluj Free Lunch Design TB Toolbar.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= … =CT2670199 IE - HKCU…\URLSearchHook: {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - C:\Program Files (x86)\Free_Lunch_Design_TB\prxtbFree.dll (Conduit Ltd.) O2 - BHO: (Free Lunch Design TB Toolbar) - {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - C:\Program Files (x86)\Free_Lunch_Design_TB\prxtbFree.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Free Lunch Design TB Toolbar) - {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - C:\Program Files (x86)\Free_Lunch_Design_TB\prxtbFree.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (Free Lunch Design TB Toolbar) - {A5AE8924-4036-420F-B7F6-A47E4B8F692E} - C:\Program Files (x86)\Free_Lunch_Design_TB\prxtbFree.dll (Conduit Ltd.) O4:64bit: - HKLM…\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd File not found O4 - HKLM…\Run: [searchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) [2011-11-02 17:28:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Conduit [2011-11-02 17:28:24 | 000,000,000 | —D | C] – C:\Users\Zielińska\AppData\Local\Conduit [2011-10-28 20:13:45 | 000,000,000 | -H-D | C] – C:\Windows\update.2 [2011-10-28 19:46:51 | 000,000,000 | —D | C] – C:\Windows\av_ico [2011-10-28 19:45:04 | 000,000,000 | -H-D | C] – C:\Windows\update.tray-8-0-lnk [2011-10-28 19:45:04 | 000,000,000 | -H-D | C] – C:\Windows\update.tray-8-0 [2011-10-28 21:07:41 | 000,000,000 | ---- | M] () – C:\Windows\loader2.exe_ok [2011-10-28 20:14:53 | 000,000,067 | ---- | M] () – C:\Windows\info1 [2011-10-28 20:14:11 | 000,000,734 | ---- | M] () – C:\Windows\SysNative\drivers\etc\hîsts [2011-10-28 20:13:54 | 000,904,792 | ---- | M] () – C:\Windows\geoiplist.rar [2011-10-28 20:13:54 | 000,246,272 | ---- | M] () – C:\Windows\unrar.exe :Commands [emptytemp] [resethosts]

Kliknij Wykonaj skrypt .Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.