Zawieszająca się przegladarka, wyskakujące reklamy

hssat · 7 Styczeń 2010 00:26

Log z OTL

Dziękuję za pomoc z góry

jessica · 7 Styczeń 2010 05:53

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL MOD - [2009-12-31 21:12:12 | 00,598,016 | ---- | M] () – C:\Program Files\QuestService\questservice.dll SRV - [2009-12-31 21:12:18 | 00,058,744 | ---- | M] () [Auto | Running] – C:\Documents and Settings\All Users.WINDOWS2\Dane aplikacji\QuestService\questservice115.exe – (QuestService Service) FF - HKLM\software\mozilla\Firefox\extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2010-01-06 00:33:31 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2010-01-06 00:33:41 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2010-01-06 00:33:49 | 00,000,000 | —D | M] O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.2.0.5360\ACEIEAddOn.dll () O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.2.0.2050\CPAIEAddOn.dll () O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.2.0.2080\CMWIE.dll () O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.2.0.2040\TCPIE.dll () O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.2.0.2150\WSO.dll () O32 - AutoRun File - [2010-01-06 22:18:55 | 00,000,057 | RHS- | M] () - C:\autorun.inf – [NTFS] O32 - AutoRun File - [2010-01-06 22:18:56 | 00,000,057 | RHS- | M] () - E:\autorun.inf – [FAT32] O32 - AutoRun File - [2009-09-04 07:10:21 | 00,000,047 | R— | M] () - F:\Autorun.inf – [UDF] O32 - AutoRun File - [2009-09-04 07:10:21 | 00,214,408 | R— | M] (Konami Digital Entertainment Co., Ltd.) - F:\autorun.exe – [UDF] O33 - MountPoints2{54d93d16-d91a-11de-8962-001fd032461a}\Shell - “” = AutoRun O33 - MountPoints2{54d93d16-d91a-11de-8962-001fd032461a}\Shell\AutoRun\command - “” = D:\LaunchU3.exe – File not found O33 - MountPoints2{9e7d0eb4-c6d5-11dd-8939-806d6172696f}\Shell - “” = AutoRun O33 - MountPoints2{9e7d0eb4-c6d5-11dd-8939-806d6172696f}\Shell\AutoRun\command - “” = D:\start.exe – File not found O33 - MountPoints2{fcbbbadc-a4db-11dd-b3fa-806d6172696f}\Shell - “” = AutoRun O33 - MountPoints2{fcbbbadc-a4db-11dd-b3fa-806d6172696f}\Shell\AutoRun\command - “” = D:\Run.exe – File not found O33 - MountPoints2\D\Shell - “” = AutoRun O33 - MountPoints2\D\Shell\AutoRun\command - “” = D:\LaunchU3.exe – File not found [2010-01-06 00:35:08 | 00,000,000 | —D | C] – C:\Program Files\QuestService [2010-01-06 00:35:08 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS2\Dane aplikacji\QuestService [2010-01-06 00:34:55 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\Textual Content Provider [2010-01-06 00:34:35 | 00,000,000 | —D | C] – C:\Program Files\Textual Content Provider [2010-01-06 00:34:24 | 00,000,000 | —D | C] – C:\Program Files\Content Management Wizard [2010-01-06 00:34:07 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\Internet Today [2010-01-06 00:33:50 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer [2010-01-06 00:33:49 | 00,000,000 | —D | C] – C:\Program Files\Customized Platform Advancer [2010-01-06 00:33:41 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer [2010-01-06 00:33:40 | 00,000,000 | —D | C] – C:\Program Files\Automated Content Enhancer [2010-01-06 00:33:32 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\Web Search Operator [2010-01-06 00:33:31 | 00,000,000 | —D | C] – C:\Program Files\Web Search Operator [2010-01-06 00:32:52 | 00,000,000 | —D | C] – C:\Documents and Settings\mama\Ustawienia lokalne\Dane aplikacji\GameRaving Toolbar :Services QuestService Service :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptytemp] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz log z usuwania.

jessi

hssat · 7 Styczeń 2010 12:38

http://wklejto.pl/52774 log z usuwania

http://www.wklejto.pl/52776 nowy log OTL.txt

jessica · 7 Styczeń 2010 13:16

Jest OK.

W OTL kliknij na przycisk “CleanUp” - to go usunie razem z jego Kwarantanną.

Usuń kopie szkodników z folderu “System Volume Information” poprzez chwilowe wyłączenie “Przywracania Systemu”:

Ponieważ ta infekcja pozostawia po sobie dużo różnych “rzeczy”, które nie są widzialne w logach, więc użyj jeszcze >http://www.dobreprogramy.pl/Malwarebytes-AntiMalware,Program,Windows,13117.html

Daj z niego raport.

jessi