Logi - Reklamy w przeglądarce - trojan TUTO4PC

Winamp Toolbar
TUTO4PC
Claro LTD toolbar
AVG Security Toolbar
Ashampoo PO Toolbar
Bonjour
PC Performer Manager

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=SAMSUNG_HM641JI_S26XJ9CB704083&ts=1352831969com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=SAMSUNG_HM641JI_S26XJ9CB704083&ts=1352831969
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110831201530227&tb_oid=31-08-2011&tb_mrud=31-08-2011
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.claro-search.com/?affID=114506&tt=4612_5&babsrc=HP_clro&mntrId=14fddb9200000000000090a4de80cf93
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=SAMSUNG_HM641JI_S26XJ9CB704083&ts=1352831969
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.claro-search.com/?q={searchTerms}&affID=114506&tt=4612_5&babsrc=SP_clro&mntrId=14fddb9200000000000090a4de80cf93
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={F4DC35DB-680E-4004-BC0A-84115EA073DC}&mid=128c0cf73a4847d083ff41ed988d89dd-813795c8743ca950d46ff4a0a9ae79abeb25f7dd&lang=pl&ds=xn011&pr=sa&d=2012-09-22 00:15:02&v=13.0.0.7&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{D5918060-F38E-4D45-AAF0-DBB32DA4E116}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{E73912E5-EEE0-4C25-AA91-48B5B9768514}: "URL" = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
IE - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000\..\SearchScopes\{F97A0946-B21E-4A75-81C3-5D9DB8BB6F52}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "v9"
FF - prefs.js..browser.search.order.1: "v9"
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mcafee&p="
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Tutorials] C:\Program Files (x86)\TUTO4PC\tuto4pc_pl_1.exe ()
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-21-3606960418-3964339498-3581725916-1000..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Files
C:\ProgramData\PC Performer Manager\2.4.897.175\{61d8b74e-8d89-46ff-afa6-33382c54ac73}
C:\Program Files (x86)\TUTO4PC
C:\Users\Justyna\AppData\Roaming\Babylon
C:\Users\Justyna\AppData\Roaming\Claro
C:\Users\Justyna\AppData\Roaming\Nywu
C:\Users\Justyna\AppData\Roaming\Qiegom
C:\Users\Justyna\AppData\Roaming\Royge

:Commands
[emptytemp]

• Użyj AdwCleaner opcja "Delete" ->http://www.forum.twe...ner-t51855.html
• Daj nowe logi z OTL'a

Użytkownik pawel315 edytował ten post 28 01 2013 - 22:43

:OTL
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O20 - AppInit_DLLs: (c:\progra~3\pcperf~1\24897~1.175\{61d8b~1\pcpmngr.dll) - File not found

• W OTL'u kliknij "Sprzątanie"
• Uruchom AdwCleaner i kliknij w nim "Uninstall"
• I to tyle w tym temacie
• Masz jeszcze jakieś problemy? mogę zamknąć temat?

Użytkownik pawel315 edytował ten post 29 01 2013 - 11:36