Otwierające się strony - gameztar_installer.exe ?

[maadin]

Logi z OTL'a.:

Extras: http://www.wklej.org/id/239522/?zawin=0
OTL: http://www.wklej.org/id/239524/?zawin=0

co mam zrobić? Jak w temacie, otwiera mi się przez ten program masa niechcianych reklam w nowych oknach.

[NieWiem]

Dżizas, ale śmietnik...

• Uruchom ponownie program OTL
• W okienku na dole Custom Scans / Fixes wklej to, co poniżej w ramce:
  

  :OTL
  PRC - [2004-08-03 23:44:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  MOD - [2009-12-18 09:30:33 | 00,077,027 | RHS- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\temp\cvasds0.dll
  MOD - [2009-12-09 14:06:34 | 00,598,016 | ---- | M] () -- C:\Program Files\QuestService\questservice.dll
  MOD - [2004-08-03 23:44:20 | 00,065,404 | ---- | M] () -- C:\WINDOWS\system32\e8main0.dll
  SRV - [2009-12-09 14:06:42 | 00,046,456 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice111.exe -- (QuestService Service)
  IE - HKU\S-1-5-21-1547161642-527237240-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.myquickfinder.com
  FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
  FF - prefs.js..browser.search.defaultthis.engineName: "Fast Browser Search"
  FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
  FF - prefs.js..browser.search.order.1: "Fast Browser Search"
  FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={E39AD01E-EC4E-D990-EF16-41E6352633B5}&q="
  FF - HKLM\software\mozilla\Firefox\Extensions\\{998B0A2E-1475-4318-8BE9-383A0E70DD2E}: C:\Program Files\RelevantKnowledge
  FF - HKLM\software\mozilla\Firefox\Extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\RelevantKnowledge
  FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF [2009-12-17 21:44:38 | 00,000,000 | ---D | M]
  FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF [2009-12-17 21:44:46 | 00,000,000 | ---D | M]
  FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF [2009-12-17 21:44:56 | 00,000,000 | ---D | M]
  O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIEAddOn.dll ()
  O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1960\CPAIEAddOn.dll ()
  O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll ()
  O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll ()
  O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.2080\WSO.dll ()
  O3 - HKU\S-1-5-21-1547161642-527237240-725345543-500\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
  O3 - HKU\S-1-5-21-1547161642-527237240-725345543-500\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
  O4 - HKLM..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.1.0.1260\InternetToday.exe ()
  O4 - HKLM..\Run: [NPSStartup] File not found
  O4 - HKU\S-1-5-21-1547161642-527237240-725345543-500..\Run: [cdoosoft] C:\Documents and Settings\Administrator\Ustawienia lokalne\temp\herss.exe ()
  O4 - HKU\S-1-5-21-1547161642-527237240-725345543-500..\Run: [Vidalia] C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe File not found
  O4 - HKU\S-1-5-21-1547161642-527237240-725345543-500..\Run: [Wru] C:\Program Files\Wru\Wru.exe File not found
  O28 - HKLM ShellExecuteHooks: {BB4C402F-882A-4526-8C08-51278EA437C1} - C:\WINDOWS\system32\e8main0.dll ()
  O32 - AutoRun File - [2009-12-18 10:35:11 | 00,000,059 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
  O32 - AutoRun File - [2009-12-18 10:35:11 | 00,000,059 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
  O32 - AutoRun File - [2009-12-18 10:35:11 | 00,000,059 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
  O32 - AutoRun File - [2009-12-18 10:35:11 | 00,000,059 | RHS- | M] () - F:\autorun.inf -- [ NTFS ]
  O33 - MountPoints2\{02b2948c-acfc-11de-84d3-000e504a3fdf}\Shell\autorun\command - "" = L:\cqb6wo.exe -- File not found
  O33 - MountPoints2\{02b2948c-acfc-11de-84d3-000e504a3fdf}\Shell\open\command - "" = L:\cqb6wo.exe -- File not found
  O33 - MountPoints2\{0ab4ddda-e333-11de-8560-000e504a3fdf}\Shell\AutoRun\command - "" = M:\mbvd.exe -- File not found
  O33 - MountPoints2\{0ab4ddda-e333-11de-8560-000e504a3fdf}\Shell\open\Command - "" = M:\mbvd.exe -- File not found
  O33 - MountPoints2\{12f4b5da-ba40-11dc-9c9e-000e504a3fdf}\Shell\AutoRun\command - "" = L:\mbvd.exe -- File not found
  O33 - MountPoints2\{12f4b5da-ba40-11dc-9c9e-000e504a3fdf}\Shell\open\Command - "" = L:\mbvd.exe -- File not found
  O33 - MountPoints2\{225ef627-3712-11de-83cd-000e504a3fdf}\Shell\AutoRun\command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{225ef627-3712-11de-83cd-000e504a3fdf}\Shell\open\Command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{238f04a3-a154-11de-84b9-000e504a3fdf}\Shell\AutoRun\command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{238f04a3-a154-11de-84b9-000e504a3fdf}\Shell\open\Command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{5f6e6387-9eb6-11de-84b4-000e504a3fdf}\Shell\AutoRun\command - "" = M:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{5f6e6387-9eb6-11de-84b4-000e504a3fdf}\Shell\open\Command - "" = M:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{81c1ccbd-72ae-11de-8443-000e504a3fdf}\Shell\AutoRun\command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{81c1ccbd-72ae-11de-8443-000e504a3fdf}\Shell\open\Command - "" = L:\xh319r9b.bat -- File not found
  O33 - MountPoints2\{888acf86-3e0b-11dd-80cc-000e504a3fdf}\Shell\AutoRun\command - "" = L:\cqb6wo.exe -- File not found
  O33 - MountPoints2\{888acf86-3e0b-11dd-80cc-000e504a3fdf}\Shell\open\Command - "" = L:\cqb6wo.exe -- File not found
  O33 - MountPoints2\{8cf3afdc-3958-11de-83d5-000e504a3fdf}\Shell\AutoRun\command - "" = L:\p.exe -- File not found
  O33 - MountPoints2\{8cf3afdc-3958-11de-83d5-000e504a3fdf}\Shell\open\Command - "" = L:\p.exe -- File not found
  @Alternate Data Stream - 219 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:4EE74317
  @Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1493A0EF
  @Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2
  :FIles
  C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\8mg9h2lr.default\searchplugins\fast-browser-search.xml
  C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\8mg9h2lr.default\extensions\{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}
  C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\8mg9h2lr.default\extensions\{bc03d92d-9a29-4663-a16b-26fb5538975c}
  C:\Program Files\Mozilla Firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}
  C:\Program Files\Mozilla Firefox\extensions\{AAF6454A-4000-4015-84C1-6CD844C06B19}
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Textual Content Provider
  C:\Program Files\QuestService
  C:\Documents and Settings\All Users\Dane aplikacji\QuestService
  C:\Program Files\Textual Content Provider
  C:\Program Files\Content Management Wizard
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Internet Today
  C:\Program Files\Internet Today
  C:\Program Files\Customized Platform Advancer
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer
  C:\Program Files\Automated Content Enhancer
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Web Search Operator
  C:\Program Files\Web Search Operator
  C:\Program Files\Gameztar Toolbar
  C:\Program Files\Fast Browser Search
  C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar
  C:\mbvd.exe
  C:\Documents and Settings\Administrator\Pulpit\gameztar_installer.exe
  C:\WINDOWS\System32\nmdfgds1.dll
  C:\WINDOWS\System32\nmdfgds0.dll
  :Commands
  [purity]
  [emptytemp]
  [clearrestorepoints]
  [start explorer]
  [reboot]

• Upewnij się, że wszystkie inne okna, programy, komunikatory są wyłączone.
• Kliknij przycisk Run Fix i poczekaj cierpliwie. To może chwilę potrwać!
• Na prośbę komputera o restart zgódź się.
• Po restarcie program automatycznie wyświetli raport z czyszczenia, który należy zapisać i wkleić w poście w tagach [code], lub na stronie http://www.wklej.org

Wykonaj także nowego loga OTL.txt z OTL z opcji Run Scan, ale zanim zaczniesz skanować w okienku na dole wklej takie komendy:

C:\*
D:\*
E:\*
F:\*

Wtedy wciskasz Run Scan i tak zrobionego loga pokazujesz.