WIRUS Z FACEBOOKA-portal nie ładuje się!

[canis (Magdakaniowska)]

Cześć,

Problem z wirusem facebooka! Pomocy!

Wysyłam LOGI:

OTL: http://wklej.org/id/580982/

Extras: http://wklej.org/id/580986/

Proszę o szybką pomoc.

Dzięki z góry

[Leon1 (Leon$)]

OTL w oknie Custom Scans-Fixes (własne opcje skanowania/skrypt)wklej następujący skrypt:

:OTL IE - HKLM…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3177949367-4194066266-380563645-1000…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}” [2011-06-23 20:47:54 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yo35717w.default\extensions\engine@conduit.com [2011-06-20 14:07:48 | 000,000,863 | ---- | M] () – C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\yo35717w.default\searchplugins\conduit.xml O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\S-1-5-21-3177949367-4194066266-380563645-1000…\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O4 - HKLM…\Run: [tray_ico] File not found O4 - HKLM…\Run: [tray_ico1] File not found O4 - HKLM…\Run: [tray_ico2] File not found O4 - HKLM…\Run: [tray_ico3] File not found O4 - HKLM…\Run: [tray_ico4] File not found O4 - HKU\S-1-5-21-3177949367-4194066266-380563645-1000…\Run: [ares] File not found O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] File not found [2011-08-19 22:14:41 | 000,000,000 | —D | C] – C:\Windows\ufa [2011-08-19 22:14:41 | 000,000,000 | —D | C] – C:\Windows\phoenix [2011-08-19 22:09:44 | 000,000,000 | -H-D | C] – C:\Windows\update.5.0 [2011-08-19 22:04:38 | 000,000,000 | -H-D | C] – C:\Windows\update.2 [2011-08-19 22:03:39 | 000,000,000 | -H-D | C] – C:\Windows\update.7.1 [2011-08-19 22:00:41 | 000,000,000 | —D | C] – C:\Windows\av_ico [2011-08-19 21:58:22 | 000,000,000 | -H-D | C] – C:\Windows\update.1 [2011-08-19 21:58:07 | 000,000,000 | -H-D | C] – C:\Windows\update.tray-14-0-lnk [2011-08-19 21:58:07 | 000,000,000 | -H-D | C] – C:\Windows\update.tray-14-0 [2011-08-19 22:14:40 | 005,589,370 | ---- | M] () – C:\Windows\phoenix.rar [2011-08-19 22:14:40 | 001,075,284 | ---- | M] () – C:\Windows\rpcminer.rar [2011-08-19 22:14:40 | 000,246,272 | ---- | M] () – C:\Windows\unrar.exe [2011-08-19 22:14:40 | 000,182,617 | ---- | M] () – C:\Windows\ufa.rar [2011-08-19 22:14:00 | 000,000,178 | ---- | M] () – C:\Windows\info1 [2011-08-19 22:07:24 | 000,904,792 | ---- | M] () – C:\Windows\geoiplist.rar [2011-08-19 22:03:31 | 000,000,000 | ---- | M] () – C:\Windows\loader2.exe_ok [2011-08-19 22:07:05 | 004,636,907 | ---- | C] () – C:\Windows\geoiplist :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [CLEARALLRESTOREPOINTS] [RESETHOSTS] [emptytemp]

Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.

Pokaż log z usuwania.

potem nowy log OTL robiony opcją Run Scan (Skanuj)