Same otwierają się strony

[Lajans1]

Witam.
Po dwudniowym używaniu komputera przez syna nie mogę sobie dać rady ze stronami internetowymi. Otwierają się same przeważnie strony jakichś gier i reklam.
Załączam logi OTL z prośbą o sprawdzenie.

[ordynat]

1) Odinstaluj tuto4pc_pl_7
To ten program jest odpowiedzialny za te reklamy.

2) Odinstaluj niepotrzebny "StartSearch Toolbar" = StartSearch Toolbar 1.3

3) Użyj >Adw-cleaner (aby pobrać kliknij na dużą zieloną strzałkę po prawej).
Kliknij w nim Usuń
Pokaż raport z niego C:\AdwCleaner[S1].txt.

4) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
MOD - [2013-01-25 19:07:06 | 003,881,320 | ---- | M] () -- C:\Program Files\tuto4pc_pl_7\tuto4pc_pl_7.exe
MOD - [2013-01-25 19:07:06 | 003,058,024 | ---- | M] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\tuto4pc_pl_7\supt4pc_pl_7.exe
SRV - File not found [Auto | Stopped] -- C:\Program Files\Spybot -- (SDWSCService)
SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SDUpdateService)
SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SDScannerService)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2013-01-25 19:07:06 | 003,058,024 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\tuto4pc_pl_7\supt4pc_pl_7.exe -- (supt4pc_pl_7)
SRV - [2012-11-05 11:57:12 | 003,055,976 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\NNN\Ustawienia lokalne\Dane aplikacji\tuto4pc_pl_1\supt4pc_pl_1.exe -- (supt4pc_pl_1)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPANEL.SYS -- (Cardex)
IE - HKU\S-1-5-21-484763869-1123561945-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=WDC_WD800JB-00JJC0_WD-WCAM9M32850128501&ts=1352968149
IE - HKU\S-1-5-21-484763869-1123561945-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = My Web Search
IE - HKU\S-1-5-21-484763869-1123561945-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultUrl = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRfox000&fl=0&ptb=c4cZAI9LqwgA.Map29HHlg&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
FF - prefs.js..browser.search.defaultenginename: "My Web Search"
FF - prefs.js..browser.search.selectedEngine: "My Web Search"
FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=0BFF9CA6-206C-4CD2-AF49-F0D52060E955&n=77fc415f&ind=2013020511&id=Z8xdm021YYpl&ptnrS=Z8xdm021YYpl&si=CKnrzcz-va4CFQNd3wodcUj5Ng&searchfor="
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{dfefbe51-ca52-484b-adf0-6b158b05262d}: C:\Documents and Settings\All Users\Dane aplikacji\PC Performer Manager\2.4.897.175\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension
[2013-01-01 07:01:25 | 000,000,000 | ---D | M] (Yontoo) -- C:\Documents and Settings\NNN\Dane aplikacji\Mozilla\Firefox\Profiles\jysiodsy.default\extensions\plugin@yontoo.com
[2013-02-05 11:06:07 | 000,009,650 | ---- | M] () -- C:\Documents and Settings\NNN\Dane aplikacji\Mozilla\Firefox\Profiles\i7dy94qv.default-1359901438218\searchplugins\my-web-search.xml
O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - Reg Error: Value error. File not found
O2 - BHO: (Expat Shield Toolbar) - {a060276a-53be-45ec-8ebe-b94b1e803179} - C:\Program Files\Expat_Shield\prxtbExp1.dll (Conduit Ltd.)
O2 - BHO: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O2 - BHO: (no name) - {d047fe10-dfe2-45cf-9fbf-966b9e64920f} - No CLSID value found.
O2 - BHO: (no name) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - No CLSID value found.
O2 - BHO: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YouTube Downloader Toolbar\IE\6.0\youtubedownloaderToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Expat Shield Toolbar) - {a060276a-53be-45ec-8ebe-b94b1e803179} - C:\Program Files\Expat_Shield\prxtbExp1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {acf7da4c-eeb2-484a-a3a1-303d4054d50c} - No CLSID value found.
O3 - HKLM\..\Toolbar: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YouTube Downloader Toolbar\IE\6.0\youtubedownloaderToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - No CLSID value found.
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\WebBrowser: (Expat Shield Toolbar) - {A060276A-53BE-45EC-8EBE-B94B1E803179} - C:\Program Files\Expat_Shield\prxtbExp1.dll (Conduit Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852" File not found
O4 - HKLM..\Run: [tuto4pc_pl_7] C:\Program Files\tuto4pc_pl_7\tuto4pc_pl_7.exe ()
O4 - HKU\S-1-5-21-484763869-1123561945-725345543-1004..\Run: [] File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
[2013-01-31 07:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NNN\Ustawienia lokalne\Dane aplikacji\tuto4pc_pl_7
[2013-01-30 15:59:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\supt4pc_pl_7
[2013-01-30 15:59:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\tuto4pc_pl_7
[2013-01-30 15:59:09 | 000,000,000 | ---D | C] -- C:\Program Files\tuto4pc_pl_7
[2013-01-25 06:15:13 | 000,000,000 | -HSD | C] -- C:\found.001
[2013-01-01 07:01:35 | 000,368,102 | ---- | C] () -- C:\Documents and Settings\NNN\Ustawienia lokalne\Dane aplikacji\funmoods-speeddial_sf.crx
[2013-01-01 07:01:34 | 000,031,465 | ---- | C] () -- C:\Documents and Settings\NNN\Ustawienia lokalne\Dane aplikacji\funmoods.crx
[2009-03-01 11:53:24 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\NNN\Dane aplikacji\.#
[2013-02-01 13:28:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NNN\Dane aplikacji\PriceGong

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[-HKEY_USERS\S-1-5-21-484763869-1123561945-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}]
[-HKEY_USERS\S-1-5-21-484763869-1123561945-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.

5) Zainstaluj nowszą, bezpieczniejszą wersję Javy:
>http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html (wybierz: Windows x86 Offline)
.

[Lajans1]

W załączeniu raporty.

Dodano Dzisiaj, 14:28:
Sorry. Zapomniałem o S1.

[ordynat]

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=0BFF9CA6-206C-4CD2-AF49-F0D52060E955&n=77fc415f&ind=2013020511&id=Z8xdm021YYpl&ptnrS=Z8xdm021YYpl&si=CKnrzcz-va4CFQNd3wodcUj5Ng&searchfor="
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.17: File not found
FF - HKLM\Software\MozillaPlugins\@VideoScavenger_1e.com/Plugin: C:\Program Files\VideoScavenger_1e\bar\1.bin\NP1eStub.dll File not found
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\WebBrowser: (no name) - {ACF7DA4C-EEB2-484A-A3A1-303D4054D50C} - No CLSID value found.
O3 - HKU\S-1-5-21-484763869-1123561945-725345543-1004\..\Toolbar\WebBrowser: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - No CLSID value found.

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt.
Raportu z tego już nie dawaj.
Potem kończymy:
W Adw-Cleaner kliknij na przycisk Odinstaluj
W OTL kliknij na przycisk Sprzątanie - to go usunie razem z jego Kwarantanną.
.

[Lajans1]

Dzięki wszystko gra.