Acorus
12 Wrzesień 2012 18:43
#2
Odinstaluj Babylon toolbar on IE,MediaBar,BitTorrentBar Toolbar,Dll-Files.com Fixer,Norton Security Scan,SFT_Polska Toolbar,vShare Plugin.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL IE - HKLM…\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT0.dll (Conduit Ltd.) IE - HKLM…\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKLM…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKLM…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home?affID=17 … ftt_3612_7 IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com \GenericAskToolbar.dll (Ask) IE - HKCU…\URLSearchHook: {09900DE8-1DCA-443F-9243-26FF581438AF} - c:\program files (x86)\mail.ru \sputnik\MailRuSputnik.dll (@Mail.Ru ) IE - HKCU…\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT0.dll (Conduit Ltd.) IE - HKCU…\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKCU…\SearchScopes{043C5167-00BB-4324-AF7E-62013FAEDACF}: “URL” = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&babsrc=SP_def&affID=17425&tt=030912_10ftt_3612_7 IE - HKCU…\SearchScopes{3AD8DF2D-957A-40D1-90F9-842E5945DD58}: “URL” = http://websearch.ask.com/redirect?clien … &src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=LJ&apn_dtid=YYYYYYYYPL&apn_uid=18a9b53c-4263-4049-9ac7-acf8bb3f1ac2&apn_sauid=81792F26-03BA-4C9F-B612-3A8865B4A0E4 IE - HKCU…\SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: “URL” = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms} IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817 IE - HKCU…\SearchScopes{E88E0043-C9D4-4e33-8555-FEE4F5B63060}: “URL” = http://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb FF - prefs.js…browser.startup.homepage: “http://www.ask.com/?l=dis&o=15510 ” FF - prefs.js…browser.search.selectedEngine: “Ask.com ” FF - prefs.js…browser.search.order.1: “Ask.com ” FF - prefs.js…browser.search.defaultengine: “Ask.com ” FF - prefs.js…browser.search.defaultenginename: “Ask.com ” O3 - HKLM…\Toolbar: (no name) - - No CLSID value found. O3 - HKLM…\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll () O3 - HKLM…\Toolbar: (Ñïóòíèê@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - c:\program files (x86)\mail.ru \sputnik\MailRuSputnik.dll (@Mail.Ru ) O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (SFT_Polska Toolbar) - {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT0.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.9.12\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com \GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (Ñïóòíèê@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - c:\program files (x86)\mail.ru \sputnik\MailRuSputnik.dll (@Mail.Ru ) O3 - HKCU…\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll䰀 File not found O3 - HKCU…\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O4 - HKLM…\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com \Updater\Updater.exe (Ask) O4 - HKCU…\Run: [pvpimtztuuavgyz] C:\ProgramData\pvpimtzt.exe (Noctua) O4 - Startup: C:\Users\Dynek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk = File not found [2012/09/12 13:05:39 | 000,160,800 | ---- | C] (Noctua) – C:\ProgramData\pvpimtzt.exe [2012/09/12 13:05:38 | 000,000,000 | —D | C] – C:\ProgramData\qibkycrfujtkzaa [2012/09/12 13:05:40 | 000,078,030 | ---- | M] () – C:\ProgramData\xmrdrhtqqaqlilw [2012/09/12 12:59:53 | 000,160,800 | ---- | M] (Noctua) – C:\ProgramData\pvpimtzt.exe [2012/09/11 19:06:31 | 000,000,286 | ---- | M] () – C:\Windows\tasks\RMSchedule.job [2012/09/06 18:02:11 | 000,000,567 | ---- | M] () – C:\user.js :Commands [emptytemp]
Kliknij Wykonaj skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.