To zaczniemy od" logów...
Uruchom "OTL i wklej do niego w "Własne opcje skanowania /Skrypt":
Kod:
: OTL
DRV - File not found [File_System | On_Demand | Stopped] -- C: \Program Files\Xfire2\XFDriver.sys -- (XFDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- D: \Games\LineageII PL\Frost\frost.sys -- (Frost_6_9_0_1)
DRV - File not found [File_System | On_Demand | Stopped] -- C: \ProgramData\BitRaider\BRDriver.sys -- (BRDriver)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http: //search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165269
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http: //isearch.babylon.com/?affID=119816&babsrc=HP_ss_bayi&mntrId=241B243C2006CD67
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http: //mysearch.avg.com?cid={8C38DACF-C2B7-442E-9BCC-0F9C5DD186A6}&mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-21 09: 43: 46&v=17.2.0.38&pid=safeguard&sg=&sap=hp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A9 4A 0D 1C 72 37 CE 01 [binary data]
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http: //www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http: //isearch.babylon.com/?q={searchTerms}&affID=119816&babsrc=SP_ss_bayi&mntrId=241B243C2006CD67
IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http: //search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165269
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http: //mysearch.avg.com/search?cid={8C38DACF-C2B7-442E-9BCC-0F9C5DD186A6}&mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-21 09: 43: 46&v=17.2.0.38&pid=safeguard&sg=&sap=dsp&q={searchTerms}
O4 - HKCU..\Run: [AVG-Secure-Search-Update_1213b] C: \Users\Abyx!\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae /CMPID=1213b File not found
O4 - HKCU..\Run: [Tiny download manager] "C: \Users\Abyx!\AppData\Local\DM\TinyDM.exe" /M File not found
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C: \Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent File not found
O8 - Extra context menu item: &Download All using 4shared Desktop - res: //C: \Program Files\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8 - Extra context menu item: &Download using 4shared Desktop - res: //C: \Program Files\4shared Desktop\Desktop.32/D_ONE_LINK File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
@Alternate Data Stream - 134 bytes -> C: \ProgramData\TEMP: 373E1720
: Files
C: \Program Files\mozilla firefox\searchplugins\qvo6.xml
: Commands
[emptytemp]
"Wykonaj skrypt " i po restarcie komputera pokaż raport z usuwania który Ci się wyświetli.
Kod:
Dalej...
Error - 2013-12-29 07: 13: 26 | Computer Name = Komp | Source = Ntfs | ID = 55
Description = Wykryto uszkodzenie w strukturze systemu plików woluminu C: . Główna
tabela plików (MFT) zawiera uszkodzony rekord pliku. Numer odwołania do pliku:
0xa0000000022e18. Nazwa pliku: „\ProgramData\Mobile Partner\log\ATRecord.txt”.
Kod:
Error - 2013-12-29 07: 10: 47 | Computer Name = Komp | Source = Ntfs | ID = 55
Description = Wykryto uszkodzenie w strukturze systemu plików woluminu \\?\Volume{ca4b035c-a360-11e2-af9c-806e6f6e6963}.
Także,pobierz darmowy "CrystalDiskInfo" i pokaż z jego okna screen na forum,zbadamy kondycje dysku twardego.
Odinstaluj:
Kod:
"Mobogenie" = Mobogenie
Post: #18
