1) Odinstaluj:
"Cling Clang" = Cling Clang
"Browsers Protector" = Browsers Protector
"sweet-page uninstaller" = sweet-page uninstaller
Jeśli pojawi się pytanie, czy tylko usunąć z listy programów, to potwierdź.
2) Uruchom
OTL i w oknie
Własne opcje skanowania/Skrypt wklej to:
:OTL
MOD - [2014-02-27 00:25:38 | 000,193,120 | ---- | M] () -- C:\Users\Damian\AppData\Local\Temp\GLC12D4.tmp
IE - HKCU\..\URLSearchHook: {c95a4e8e-816d-4655-8c79-d736da1adb6d} - No CLSID value found
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=5fb0031d-754e-11e1-9734-00262d5011bd&q={searchTerms}
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9: C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - No CLSID value found.
O4 - HKLM..\Run: [fst_pl_66] File not found
O4 - Startup: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url ()
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.40.2)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.40.2)
O27:64bit: - HKLM IFEO\avcenter.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\avguard.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\avp.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\bdagent.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\ccuac.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\ComboFix.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\egui.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\hijackthis.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\keyscrambler.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\mbam.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\MpCmdRun.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\MSASCui.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\MsMpEng.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\msseces.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\spybotsd.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\wireshark.exe: Debugger - louse.exe File not found
O27:64bit: - HKLM IFEO\zlclient.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\avcenter.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\avguard.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\avp.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\bdagent.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\ccuac.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\ComboFix.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\egui.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\hijackthis.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\keyscrambler.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\mbam.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\MpCmdRun.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\MSASCui.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\MsMpEng.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\msseces.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\spybotsd.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\wireshark.exe: Debugger - louse.exe File not found
O27 - HKLM IFEO\zlclient.exe: Debugger - louse.exe File not found
[2014-02-21 15:40:42 | 000,000,000 | ---D | C] -- C:\Users\Damian\.android
[2014-02-21 15:40:41 | 000,000,000 | ---D | C] -- C:\Users\Damian\AppData\Local\cache
[2014-02-21 15:39:42 | 000,000,000 | ---D | C] -- C:\Users\Damian\AppData\Roaming\0A1G2U0P1C1F2Z1P1R2Z
[2014-02-21 15:38:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BringStar
[2014-02-21 15:36:48 | 000,000,000 | ---D | C] -- C:\Users\Damian\AppData\Roaming\sweet-page
[2014-02-22 14:44:00 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job
[2014-02-22 00:19:59 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineCore.job
:Files
C:\Users\Damian\AppData\Local\Temp@.html
:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Users\Damian\Downloads\facebook-pic000934519.exe"=-
"C:\Users\Damian\Downloads\facebook-pic000934519.exe"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3B58B86C-51B1-40A3-98AD-96E0657B9B94}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
:Commands
[emptytemp]
Kliknij w
Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom
OTL ponownie, tym razem kliknij
Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
Napisz, czy to poprawiło sytuację?
[2014-02-19 21:40:32 | 000,000,298 | ---- | M] () -- C:\Windows\tasks\WinZipDriverUpdater_UPDATES.job
Znasz to?
.