Wyskakujące reklamy w IE


(Konrad Tyminski) #1

Witam jestem tu nowy i proszę o pomoc w IE wyskakują różne reklamy i nie mogę tego usunąć, zrobiłem Otl i niebardzo wiem co i jak dalej. Z góry dziękuję

OTL http://www.wklej.org/id/1147588/

Extras http://www.wklej.org/id/1147589/


(Atis) #2

Odinstaluj:

Yontoo 1.12.02

McAfee Security Scan Plus

Norton Security Scan

Updater Service

Update for Image Editor

Image Editor Packages

Zip Opener Packages

McAfee SiteAdvisor

Savings Sidekick

DealPly

Pobierz i uruchom AdwCleaner Kliknij Scan i później Clean.

Pokaż nowy log z OTL.


(Konrad Tyminski) #3

Dużą część z tej listu udało mi się zrobić, ale został jeszcze Mcafee SiteAdvisor, a jeśli chodzi o Update for image i Update Service to wyskakuje komunikat ,że żadne elementy nie pasują do kryteriów wyszukiwania.


(Atis) #4

Użyj AdwCleaner i pokaż nowy log z OTL.


(Konrad Tyminski) #5

otl http://www.wklej.org/id/1147744/

extras http://www.wklej.org/id/1147746/


(Atis) #6

Do okna Własne opcje skanowania / skrypt wklej:

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.


(Konrad Tyminski) #7

All processes killed

========== OTL ==========

========== OTL ==========

Service McAfee SiteAdvisor Service stopped successfully!

Service McAfee SiteAdvisor Service deleted successfully!

c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe moved successfully.

Service McComponentHostService stopped successfully!

Service McComponentHostService deleted successfully!

C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe moved successfully.

Registry key HKEY_USERS\S-1-5-21-3202414321-2151602102-2657374751-1001\Software\Microsoft\Internet Explorer\SearchScopes{4BC7E11E-4D00-44C2-A104-FF0AEA95A860}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{4BC7E11E-4D00-44C2-A104-FF0AEA95A860}\ not found.

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins@mcafee.com/McAfeeMssPlugin\ deleted successfully.

C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins@mcafee.com/SAFFPlugin\ deleted successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\skin folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\locale\en-US folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\locale folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\defaults\preferences folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\defaults folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\chrome\content\lib folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\chrome\content\extensionCode folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\chrome\content folder moved successfully.

Folder move failed. C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\chrome scheduled to be moved on reboot.

Folder move failed. C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com scheduled to be moved on reboot.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com\defaults\preferences folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com\defaults folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com\content\images folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com\content folder moved successfully.

Folder move failed. C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com scheduled to be moved on reboot.

C:\Users\NTB\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.3.1271_0\Resources folder moved successfully.

C:\Users\NTB\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.3.1271_0 folder moved successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.

c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}\ deleted successfully.

C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.

c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll moved successfully.

64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}\ deleted successfully.

File c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll not found.

64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\10 deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}\ deleted successfully.

File c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\10 deleted successfully.

Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\mctadmin deleted successfully.

Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\mctadmin deleted successfully.

========== FILES ==========

C:\Program Files (x86)\McAfee Security Scan\3.0.318\sacoredata folder moved successfully.

C:\Program Files (x86)\McAfee Security Scan\3.0.318 folder moved successfully.

C:\Program Files (x86)\McAfee Security Scan folder moved successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor\x64 folder moved successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor\Scripts folder moved successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor\Download folder moved successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor\Components folder moved successfully.

C:\Program Files (x86)\McAfee\SiteAdvisor folder moved successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

User: NTB

->Temp folder emptied: 1567468 bytes

->Temporary Internet Files folder emptied: 13738654 bytes

->Java cache emptied: 10737758 bytes

->FireFox cache emptied: 97066032 bytes

->Google Chrome cache emptied: 216348577 bytes

->Flash cache emptied: 1772 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 81831202 bytes

%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 7627183 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 78299816 bytes

RecycleBin emptied: 147454 bytes

Total Files Cleaned = 484,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 10112013_200237

Files\Folders moved on Reboot…

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com\chrome folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\crossriderapp5060@crossrider.com folder moved successfully.

C:\Users\NTB\AppData\Roaming\mozilla\Firefox\Profiles\44r7mjc9.default\extensions\realsummersale1@realsummersale.com folder moved successfully.

C:\Users\NTB\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

C:\Users\NTB\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

File move failed. C:\windows\temp_avast_\Webshlock.txt scheduled to be moved on reboot.

File move failed. C:\windows\SysWow64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files…

Registry entries deleted on Reboot…

Dodane 11.10.2013 (Pt) 20:33

otl http://www.wklej.org/id/1147786/

extras http://www.wklej.org/id/1147788/


(Atis) #8

Wklej i kliknij Wykonaj skrypt:

Uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

Aby usunąć wszystkie punkty przywracania

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

Dysk przeskanuj Malwarebytes Anti-Malware

Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware PRO.

http://wstaw.org/m/2012/12/29/2012-12-29_005346.png


(Konrad Tyminski) #9

Jak na mój gust to chyba się udało :smiley:

Bardzo dziękuję Ci za poświecony mi czas, jestem Twoim dłużnikiem :slight_smile:

P.S Czy to wszystko, czy należy jeszcze coś zrobić?


(Atis) #10

W takim razie to już wszystko.


(Konrad Tyminski) #11

Jeszcze raz wielkie DZIĘKI.