Wirus - Złamałeś prawo polskie i blokada komputera

[raju88]

Witam Serdecznie,

temat pewnie znany , dziś wyświetliła mi się informacja,że złamałem prawo polskie.Bardzo proszę o pomoc w linkach skan otl i extras.

http://wklejto.pl/130560

http://wklejto.pl/130562

[Acorus]

Odinstaluj McAfee Security Scan Plus.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE:64bit: - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: “URL” = http://search.bearshare.com//web?src=ie … =2&sr=0&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com IE - HKLM…\SearchScopes{95B7759C-8C7F-4BF1-B163-73684A933233}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=56 … 0c3d508&q={searchTerms} IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: “URL” = http://search.bearshare.com//web?src=ie … =2&sr=0&q={searchTerms} IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 IE - HKLM…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&q={searchTerms} IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU…\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - No CLSID value found IE - HKCU…\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found IE - HKCU…\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=190712_ctrl_2912_8&babsrc=SP_ss&mntrId=2e2fe33900000000000020cf30c3d508 IE - HKCU…\SearchScopes{932E953F-432A-4314-8829-66DD2378433D}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=F5E49D57-5245-4D0A-AE19-7C6530FF0100&apn_sauid=9379DE1D-10CE-4685-A046-AD5945E64B71 IE - HKCU…\SearchScopes{95B7759C-8C7F-4BF1-B163-73684A933233}: “URL” = http://startsear.ch/?aff=1&src=sp&cf=56 … 0c3d508&q={searchTerms} IE - HKCU…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: “URL” = http://search.bearshare.com//web?src=ie … =2&sr=0&q={searchTerms} IE - HKCU…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 IE - HKCU…\SearchScopes{BD895DB6-3044-4AA6-A7A7-42974B196825}: “URL” = http://search.yahoo.com/search?fr=chr-g … =827316&p={searchTerms} IE - HKCU…\SearchScopes{D138E412-3B57-4648-8D27-B8C35726CF22}: “URL” = http://isearch.avg.com/search?cid={C0D969F8-5142-4D4C-85CB-D8436BBA4089}&mid=092ef49cd3f147d197e8f18676273cfb-db973a2cbfa4b462d1678e045aefcea9e8590649〈=pl&ds=AVG&pr=fr&d=2011-09-13 15:45:36&v=8.0.0.34&sap=dsp&q={searchTerms} IE - HKCU…\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}: “URL” = http://search.sweetim.com/search.asp?src=6&q={searchTerms} FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.defaultthis.engineName: “uTorrentControl2 Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Search the web (Babylon)” FF - prefs.js…browser.search.param.yahoo-fr: “chr-greentree_ff&type=827316&ilc=12” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…browser.startup.homepage: “http://search.conduit.com/?ctid=CT3072253&SearchSource=13” FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=” [2012-07-18 10:02:01 | 000,000,000 | —D | M] (uTorrentControl2 Community Toolbar) – C:\Users\Użytkownik\AppData\Roaming\mozilla\Firefox\Profiles\6oedq62b.default\extensions{687578b9-7132-4a7a-80e4-30ee31099e03} [2012-07-18 10:02:02 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Users\Użytkownik\AppData\Roaming\mozilla\Firefox\Profiles\6oedq62b.default\extensions{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012-06-04 22:47:14 | 000,002,331 | ---- | M] () – C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\6oedq62b.default\searchplugins\askcom.xml [2012-04-18 00:39:24 | 000,000,935 | ---- | M] () – C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\6oedq62b.default\searchplugins\conduit.xml [2011-10-01 09:34:36 | 000,002,505 | ---- | M] () – C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\6oedq62b.default\searchplugins\SearchResults.xml [2011-07-11 20:04:02 | 000,000,633 | ---- | M] () – C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\6oedq62b.default\searchplugins\startsear.xml O2 - BHO: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll File not found O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3:64bit: - HKLM…\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - !{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - !{B922D405-6D13-4A2B-AE89-08A030DA4402} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - !{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O3:64bit: - HKLM…\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - !{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - !{B922D405-6D13-4A2B-AE89-08A030DA4402} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - !{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found. O3 - HKLM…\Toolbar: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll File not found O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {51A86BB3-6602-4C85-92A5-130EE4864F13} - No CLSID value found. O4:64bit: - HKLM…\Run: [etMonitor] C:\Windows\etMon.exe File not found O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM…\Run: [NPSStartup] File not found O4 - HKCU…\Run: [ChomikBox] C:\Program Files (x86)\ChomikBox\chomikbox.exe File not found O4 - HKCU…\Run: [Facebook Update] C:\Users\Użytkownik\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKCU…\Run: [themecpl] C:\Users\Użytkownik\AppData\Local\Microsoft\Windows\1756\themecpl.exe () O4 - HKCU…\Run: [uTorrent] “C:\Program Files (x86)\uTorrent\uTorrent.exe” /MINIMIZED File not found [2012-08-06 11:29:22 | 000,000,000 | —D | C] – C:\Users\Użytkownik\AppData\Roaming\hellomoto [2012-08-06 10:32:01 | 000,001,098 | ---- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1338848197-3912595334-444260067-1000UA.job [2012-08-06 10:32:00 | 000,001,076 | ---- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1338848197-3912595334-444260067-1000Core.job [2012-08-03 19:49:21 | 000,000,276 | ---- | M] () – C:\Windows\tasks\RMSchedule.job :Files C:\Users\Użytkownik\AppData\Local\Microsoft\Windows\1756 :Commands [emptytemp]

Kliknij Wykonaj skrypt.

Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).

Pokaż nowy log OTL.txt oraz raport z usuwania.

[raju88]

http://wklejto.pl/130593

http://wklejto.pl/130594

Bardzo dziękuję za pomoc.

[Acorus]

Wyłącz przeglądarki.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Search the web (Babylon)” FF - prefs.js…browser.search.defaultthis.engineName: “uTorrentControl2 Customized Web Search” FF - prefs.js…browser.search.defaulturl: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}” FF - prefs.js…browser.search.order.1: “Search the web (Babylon)” FF - prefs.js…browser.search.param.yahoo-fr: “chr-greentree_ff&type=827316&ilc=12” FF - prefs.js…browser.search.selectedEngine: “Search the web (Babylon)” FF - prefs.js…browser.startup.homepage: “http://search.conduit.com/?ctid=CT3072253&SearchSource=13” FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=” [2012-07-23 00:49:43 | 000,002,361 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml [2010-09-14 14:48:25 | 000,002,506 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\BearShareWebSearch.xml [2011-10-01 09:34:36 | 000,002,505 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\SearchResults.xml :Commands [emptytemp]

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.Użyj AdwCleaner http://general-changelog-team.fr/outils/289-adwcleaner z funkcji Delete(w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).

Wyłącz i włącz przywracanie systemu.

http://www.searchengines.pl/Czyszczenie … 41981.html

Zainstaluj aktualizacje do programow wskazanych przez Security Check

analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.