Logi - Komputer zamula

:OTL
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = AOL Search
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Babylon Search
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = Babylon Search
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask...B6-33F6F45E65C7
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = Search 22:37:08&v=12.2.5.32&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = AOL Search
IE - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect...nampie7&query="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://isearch.avg....2:37:08&sap=hp"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.14.1.100013
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.2.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: avg@toolbar:12.2.5.32
FF - prefs.js..keyword.URL: "https://isearch.avg....7:08&sap=ku&q="
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
[2010/09/30 12:19:34 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\VAIO\AppData\Roaming\mozilla\Firefox\Profiles\0xmkw397.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/12/02 13:58:36 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\VAIO\AppData\Roaming\mozilla\Firefox\Profiles\0xmkw397.default\extensions\ffxtlbr@babylon.com
[2012/04/08 11:01:33 | 000,102,481 | ---- | M] () (No name found) -- C:\Users\VAIO\AppData\Roaming\mozilla\firefox\profiles\0xmkw397.default\extensions\fbphotozoom@installdaddy.com.xpi
[2012/10/21 20:48:00 | 000,002,574 | ---- | M] () -- C:\Users\VAIO\AppData\Roaming\mozilla\firefox\profiles\0xmkw397.default\searchplugins\askcom.xml
[2010/09/30 13:12:15 | 000,001,192 | ---- | M] () -- C:\Users\VAIO\AppData\Roaming\mozilla\firefox\profiles\0xmkw397.default\searchplugins\winamp-search.xml
[2012/08/19 20:51:21 | 000,002,350 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O3 - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKU\S-1-5-21-3057907545-1234121640-3990223250-1000..\Run: [Facebook Update] C:\Users\VAIO\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O33 - MountPoints2\{40639c0d-92e1-11e1-ae61-a4fae11a59f3}\Shell - "" = AutoRun
O33 - MountPoints2\{40639c0d-92e1-11e1-ae61-a4fae11a59f3}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{662e2bea-c663-11df-ad1b-f07bcbd3c670}\Shell - "" = AutoRun
O33 - MountPoints2\{662e2bea-c663-11df-ad1b-f07bcbd3c670}\Shell\AutoRun\command - "" = G:\MicroLauncher.exe

:Files
C:\WINDOWS\tasks\*.job

:Commands
[emptytemp]

:OTL
SRV - [2012/04/23 10:50:16 | 000,689,492 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\SysWOW64\adbcnsl.exe -- (Adobe Licensing Console)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Files
C:\Windows\Temp\mrt74F0.tmp

:Commands
[emptytemp]

• Użyj adwcleaner opcja "Delete" -> Usuwanie Adware ( Babylon , SweetIM, itp. ) czyli program AdwCleaner. - Logi - Forum Komputerowe Tweaks.pl
• nowe logi z OTL'a
• Log z Autoruns

Użytkownik pawel315 edytował ten post 07 11 2012 - 21:49

Użytkownik pawel315 edytował ten post 07 11 2012 - 23:48

Użytkownik jack333 edytował ten post 08 11 2012 - 00:53