Witam :-)
No to lecimy....
Najlepiej zrób to w trybie awaryjnym systemu,uruchom "OTL" jako administrator.
W "OTL" w polu "Własne opcje skanowania/Skrypt" wklej:
Kod:
: OTL
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http: //search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10014&barid={E82A4BD9-6006-11E2-9EF6-94DE8002910A}
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C: \Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http: //isearch.avg.com/search?cid={0CE7A6A6-94FE-462B-A2AB-DB87D5068674}&mid=635484b75c4e47d093c34597c6e678f9-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=xn011&pr=sa&d=2013-01-29 17: 52: 37&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http: //search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10014&barid={E82A4BD9-6006-11E2-9EF6-94DE8002910A}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http: //www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F6F094DE8002910A&affID=121845&tt=180613_ndt1&tsp=4919
IE - HKCU\..\SearchScopes\{36377DD7-B3EB-42f5-986F-680BAF59BA9D}: "URL" = http: //start.msn.iplay.com/searchresultsredirect.aspx?o=chrome&q={searchTerms}
FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C: \Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found
FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
[2013-05-30 10: 25: 03 | 000,002,308 | ---- | M] () -- C: \Users\ppp\AppData\Roaming\mozilla\firefox\profiles\qz50vjsl.default\searchplugins\askcom.xml
[2013-06-20 13: 50: 43 | 000,006,546 | ---- | M] () -- C: \Users\ppp\AppData\Roaming\mozilla\firefox\profiles\qz50vjsl.default\searchplugins\babylon.xml
[2013-06-20 13: 51: 31 | 000,001,294 | ---- | M] () -- C: \Users\ppp\AppData\Roaming\mozilla\firefox\profiles\qz50vjsl.default\searchplugins\delta.xml
[2013-06-27 17: 37: 12 | 000,002,120 | ---- | M] () -- C: \Users\ppp\AppData\Roaming\mozilla\firefox\profiles\qz50vjsl.default\searchplugins\MyStart.xml
[2013-01-16 20: 02: 54 | 000,003,915 | ---- | M] () -- C: \Users\ppp\AppData\Roaming\mozilla\firefox\profiles\qz50vjsl.default\searchplugins\sweetim.xml
[2013-05-30 10: 22: 43 | 000,000,000 | ---D | M] (Ask Toolbar) -- C: \Users\ppp\AppData\Roaming\mozilla\Firefox\Profiles\qz50vjsl.default\extensions\toolbar@ask.com
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C: \Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C: \Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C: \Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C: \Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O9 - Extra 'Tools' menuitem : GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - Reg Error: Value error. File not found
O18: [b]64bit: [/b] - Protocol\Handler\skype4com - No CLSID value found
O18: [b]64bit: [/b] - Protocol\Handler\viprotocol - No CLSID value found
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C: \Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll (AVG Secure Search)
O21: [b]64bit: [/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
@Alternate Data Stream - 508 bytes -> C: \ProgramData\TEMP: 05EE1EEF
@Alternate Data Stream - 124 bytes -> C: \ProgramData\TEMP: 0534C904
: Files
C: \Users\ppp\AppData\Local\Bron.tok-12-12
C: \Users\ppp\AppData\Local\Bron.tok-12-11
C: \Users\ppp\AppData\Local\Bron.tok-12-10
C: \Users\ppp\AppData\Local\Bron.tok-12-9
C: \Users\ppp\AppData\Local\Bron.tok-12-8
C: \Users\ppp\AppData\Local\Bron.tok-12-7
C: \Users\ppp\AppData\Local\Bron.tok-12-6
C: \Users\ppp\AppData\Local\Bron.tok-12-5
C: \Users\ppp\AppData\Local\Bron.tok-12-4
C: \Users\ppp\AppData\Local\Bron.tok-12-3
C: \Users\ppp\AppData\Local\Bron.tok-12-2
C: \Users\ppp\AppData\Local\Bron.tok-12-1
C: \Users\ppp\AppData\Local\Bron.tok-12-31
C: \ProgramData\Ask
C: \Users\ppp\AppData\Local\Bron.tok-12-29
C: \Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
C: \Windows\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
: Commands
[emptytemp]
Wykonaj skrypt i pokaż raport z czyszczenia na forum.Koniecznie przeskanuj system "Malwaresbytes Anti-malware" jak radzono,pokaż także raport z usuwania".pobierz także darmowy "ADWCleaner.Uruchom i użyj opcji usuń,pokaż raport z czyszczenia.
Post: #7
