Wyskakujące reklamy - infekcja?

[bekon922]

Witam,

wyskakują mi reklamy w nowych oknach oto logi z OTL:

OTL.txt

http://wklej.to/scSEE

Extras.txt

http://wklej.to/qE3FR

z góry dziękuje za pomoc.

[Atis]

Odinstaluj:

SLOW-PCfighter

BrowserDefender

DealPly

Delta toolbar

Delta Chrome Toolbar

DProtect

hosts

Unitech LLC toolbar

Bonanza Deals

LemurLeap 3.0.0

Wsys Control 10.2.1.2634

Lollipop

Pobierz i uruchom AdwCleaner Kliknij Scan i później Clean.

Pokaż nowy log z OTL.

[bekon922]

nowe logi:

OTL

http://wklej.to/3XFfF

Extras

http://wklej.to/1Jd5a

[Atis]

Do okna Własne opcje skanowania / skrypt wklej:

:OTL IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m … 1378743518 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m … 1378743518 IE - HKLM…\SearchScopes{721061fb-eb79-4568-a03c-3ce26d68dae9}: “URL” = http://www.firetab.org/?type=ds3se&p={searchTerms} IE - HKU\S-1-5-21-217849202-2791036151-3759208446-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.ividi.org/?src=tbhp&id=c2 … 4&affilt=3 IE - HKU\S-1-5-21-217849202-2791036151-3759208446-1002…\SearchScopes{721061fb-eb79-4568-a03c-3ce26d68dae9}: “URL” = http://search.ividi.org/?q={searchTerms}&src=tbsp&id=c2bbce8e000000000000dc85de9d0dc4&affilt=3&r=828 [2013-09-11 10:17:17 | 000,001,401 | ---- | M] () – C:\Users\Izabela\AppData\Roaming\mozilla\firefox\profiles\rkqdd9fv.default\searchplugins\ividi.xml O2 - BHO: (DNS Error Helper) - {9B6B03F1-16CF-4491-BBBB-E872802DD717} - C:\ProgramData\DNSErrorHelper\bho.dll () O20 - AppInit_DLLs: (C:\Users\Izabela\AppData\Local\DProtect\eBP.dll) - File not found O20 - AppInit_DLLs: (C:\Users\Izabela\AppData\Local\DProtect\eBPSD.dll) - File not found [2013-09-11 10:17:51 | 000,000,000 | —D | C] – C:\Users\Izabela\AppData\Local\hosts [2013-09-11 23:33:20 | 000,000,000 | —D | C] – C:\AdwCleaner [2013-09-09 18:36:08 | 000,000,000 | —D | C] – C:\Users\Izabela\AppData\Local\BonanzaDealsLive [2013-09-09 18:36:08 | 000,000,000 | —D | C] – C:\ProgramData\BonanzaDealsLive [2013-09-09 18:36:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\BonanzaDealsLive [2013-09-09 18:35:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\BonanzaDeals [2013-09-09 18:18:47 | 000,000,000 | —D | C] – C:\Users\Izabela\AppData\Local\DProtect [2013-09-09 18:18:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\LemurLeap [2013-09-09 13:34:46 | 000,000,000 | —D | C] – C:\ProgramData\DSearchLink [2013-07-30 14:59:42 | 000,003,005 | ---- | C] () – C:\Program Files (x86)\WebCakeLayers.crx :Files C:\Windows\tasks\Bonanza*.job C:\ProgramData\DNSErrorHelper :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[bekon922]

usuwanie:

http://wklej.to/0uFCo

OTL:

http://wklej.to/2L7BN

Extras:

http://wklej.to/xhPcW

[Atis]

Wklej i kliknij Wykonaj skrypt:

:OTL O20 - AppInit_DLLs: (C:\Users\Izabela\AppData\Local\DProtect\eBP.dll) - File not found O20 - AppInit_DLLs: (C:\Users\Izabela\AppData\Local\DProtect\eBPSD.dll) - File not found :Commands [emptytemp]

Pokaż raport z usuwania i nowy log Skanuj.

[bekon922]

Usuwanie:

http://wklej.to/DjCHw

OTL

http://wklej.to/btlpI

Extras

http://wklej.to/fDVaR

[Atis]

Pobierz i uruchom Farbar Recovery Scan Tool 64-Bit Version

Kliknij Scan i pokaż raport FRST i Addition.