Logi - Strasznie zamulony Internet

Spybot - Search & Destroy
Spyware Doctor 7.0
ESET Online Scanner v3
Browser Defender 2.0.6.15
ESET Online Scanner v3
Pando Media Booster

:OTL
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=446AE6CF58382157E8AA1950BE6F9B67
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\..\SearchScopes\{0F64FF59-0212-445C-B403-1EE799121D29}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=2A5A6200-36C3-40D7-83CD-673D3066DEB0&apn_sauid=765CB73B-FE39-405F-9AAE-3891F8748C01
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=rbox&toolbarid=adawaretb&u=446AE6CF58382157E8AA1950BE6F9B67&q={searchTerms}
FF - prefs.js..browser.search.defaulturl: "http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=446AE6CF58382157E8AA1950BE6F9B67"
O4 - HKLM..\Run: [SearchProtection] C:\ProgramData\Search Protection\_run.bat File not found
O4 - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Commands
[emptytemp]

• Daj log z TDSSkiller'a
• adwcleaner opcja "Delete" ->/Usuwanie-Adware-Babylon-SweetIM-itp-czyli-program-AdwCleaner-t51855/

Witaj.
Odinstaluj:

Spybot - Search & Destroy
Spyware Doctor 7.0
ESET Online Scanner v3
Browser Defender 2.0.6.15
ESET Online Scanner v3
Pando Media Booster

Uruchom OTL w okienku Własne opcje skanowania/skrypt wklej:

:OTL
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=446AE6CF58382157E8AA1950BE6F9B67
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\..\SearchScopes\{0F64FF59-0212-445C-B403-1EE799121D29}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=2A5A6200-36C3-40D7-83CD-673D3066DEB0&apn_sauid=765CB73B-FE39-405F-9AAE-3891F8748C01
IE - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=rbox&toolbarid=adawaretb&u=446AE6CF58382157E8AA1950BE6F9B67&q={searchTerms}
FF - prefs.js..browser.search.defaulturl: "http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=446AE6CF58382157E8AA1950BE6F9B67"
O4 - HKLM..\Run: [SearchProtection] C:\ProgramData\Search Protection\_run.bat File not found
O4 - HKU\S-1-5-21-3856670921-4286696295-2369423832-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Commands
[emptytemp]

Kliknij Wykonaj skrypt daj log z usuwania.
Następnie:

• Daj log z TDSSkiller'a
• adwcleaner opcja "Delete" ->http://www.forum.twe...ner-t51855.html

Użytkownik pawel315 edytował ten post 05 12 2012 - 23:41