Zmiana strony startowej na error.com

[lart_2]

Witam,
Od jakiegoś czasu samoczynnie zmienia mi się strona startowa w przeglądarce na http://www.error.com
Jako załączniki dodaje pliki ze skanu OTL. Jak ktoś wie co z tym dalej zrobić to proszę o pomoc.

[defacto19]

Odinstaluj:
StartSearch Toolbar 1.3
Spybot - Search & Destroy

Zastosuj Adwcleaner -> http://general-changelog-team.fr/en/tools/15-adwcleaner z opcji Delete.
Pokaż raport z niego C:\AdwCleaner[S1].txt

Uruchom OTL i w sekcji (Własne opcje skanowania/Skrypt) wklej:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=81612590-5fef-11e1-8015-90112984ce81
IE - HKLM\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=81612590-5fef-11e1-8015-90112984ce81&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=81612590-5fef-11e1-8015-90112984ce81
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=81612590-5fef-11e1-8015-90112984ce81&q={searchTerms}
IE - HKCU\..\SearchScopes\{619CE99B-5F74-4900-BF00-38181C84F02B}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=107763&mntrId=ec7e9db0000000000000e02a82a443db
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "error"
FF - prefs.js..browser.search.order.1: "error"
FF - prefs.js..browser.search.selectedEngine: "error"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "error"
FF - prefs.js..keyword.URL: "error"
[2012-06-21 19:16:54 | 000,000,000 | ---D | M] (softonic.com) -- C:\Users\P.H.U. Petro System\AppData\Roaming\mozilla\Firefox\Profiles\luvxikfx.default\extensions\ffxtlbra@softonic.com
[2012-07-14 20:00:10 | 000,000,792 | ---- | M] () -- C:\Users\P.H.U. Petro System\AppData\Roaming\Mozilla\Firefox\Profiles\luvxikfx.default\searchplugins\startsear.xml
[2011-09-10 19:59:29 | 000,001,565 | ---- | M] () -- C:\Users\P.H.U. Petro System\AppData\Roaming\Mozilla\Firefox\Profiles\luvxikfx.default\searchplugins\web-search.xml
[2012-01-02 11:48:42 | 000,083,456 | ---- | M] (StartSearch ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll
O4 - HKLM..\Run: [Browsers Protector] C:\Program Files (x86)\Browsers Protector\regmon32.exe ()
O4 - HKCU..\Run: [] File not found
O4 - HKCU..\Run: [Wisdom-soft AutoScreenRecorder 3.1 Free] 0 File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O33 - MountPoints2\{00c65d07-ccbd-11e0-a337-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{00c65d07-ccbd-11e0-a337-e02a82a443db}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{00c65d09-ccbd-11e0-a337-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{00c65d09-ccbd-11e0-a337-e02a82a443db}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{24d02874-c9b5-11e0-af45-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{24d02874-c9b5-11e0-af45-e02a829497ff}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{24d0287b-c9b5-11e0-af45-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{24d0287b-c9b5-11e0-af45-e02a829497ff}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{4d19ff58-7966-11e1-bd22-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4d19ff58-7966-11e1-bd22-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{59961309-2224-11e1-8011-6431507dc3ae}\Shell - "" = AutoRun
O33 - MountPoints2\{59961309-2224-11e1-8011-6431507dc3ae}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{5e0f1378-6ccc-11e1-b86d-8cfc16a429da}\Shell - "" = AutoRun
O33 - MountPoints2\{5e0f1378-6ccc-11e1-b86d-8cfc16a429da}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{8a933178-d4ef-11e1-9715-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{8a933178-d4ef-11e1-9715-e02a82a443db}\Shell\AutoRun\command - "" = H:\CyfrowyPolsat_AutoRun.exe /NoSD
O33 - MountPoints2\{8a9331d6-d4ef-11e1-9715-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{8a9331d6-d4ef-11e1-9715-e02a82a443db}\Shell\AutoRun\command - "" = H:\CyfrowyPolsat_AutoRun.exe /NoSD
O33 - MountPoints2\{9241ac9f-1fd8-11e1-9ab0-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{9241ac9f-1fd8-11e1-9ab0-e02a829497ff}\Shell\AutoRun\command - "" = H:\ICM_ML.exe
O33 - MountPoints2\{a1d6bb17-deeb-11e0-a096-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a1d6bb17-deeb-11e0-a096-e02a829497ff}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{a1d6bb21-deeb-11e0-a096-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a1d6bb21-deeb-11e0-a096-e02a829497ff}\Shell\AutoRun\command - "" = I:\AutoRun.exe
O33 - MountPoints2\{a65f1b58-4d87-11e1-8c9b-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a65f1b58-4d87-11e1-8c9b-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{a65f1b9a-4d87-11e1-8c9b-9bbfe91590b7}\Shell - "" = AutoRun
O33 - MountPoints2\{a65f1b9a-4d87-11e1-8c9b-9bbfe91590b7}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{a65f1bbd-4d87-11e1-8c9b-e3faa8a9ef48}\Shell - "" = AutoRun
O33 - MountPoints2\{a65f1bbd-4d87-11e1-8c9b-e3faa8a9ef48}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{b818a6e4-f737-11e0-88bf-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{b818a6e4-f737-11e0-88bf-e02a829497ff}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{b818a6e8-f737-11e0-88bf-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{b818a6e8-f737-11e0-88bf-e02a829497ff}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{bf9e0284-f294-11e0-a3ca-e02a829497ff}\Shell - "" = AutoRun
O33 - MountPoints2\{bf9e0284-f294-11e0-a3ca-e02a829497ff}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{d4cc7f01-deea-11e0-a95d-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{d4cc7f01-deea-11e0-a95d-e02a82a443db}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{dd55df58-20fe-11e1-a11b-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{dd55df58-20fe-11e1-a11b-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{ec1e8284-541e-11e1-8957-c2e8a5b99ca3}\Shell - "" = AutoRun
O33 - MountPoints2\{ec1e8284-541e-11e1-8957-c2e8a5b99ca3}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{ef58129e-7c06-11e1-937f-93b09beec9eb}\Shell - "" = AutoRun
O33 - MountPoints2\{ef58129e-7c06-11e1-937f-93b09beec9eb}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{ef5e0995-1d1d-11e1-bceb-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{ef5e0995-1d1d-11e1-bceb-e02a82a443db}\Shell\AutoRun\command - "" = K:\NokiaPCIA_Autorun.exe
O33 - MountPoints2\{ef649f1d-4d8a-11e1-b5d5-b7a5d04853bc}\Shell - "" = AutoRun
O33 - MountPoints2\{ef649f1d-4d8a-11e1-b5d5-b7a5d04853bc}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{f3b9bd7b-24a7-11e1-b555-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{f3b9bd7b-24a7-11e1-b555-e02a82a443db}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{f3b9bd82-24a7-11e1-b555-e02a82a443db}\Shell - "" = AutoRun
O33 - MountPoints2\{f3b9bd82-24a7-11e1-b555-e02a82a443db}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\CyfrowyPolsat_AutoRun.exe /NoSD
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\NokiaPCIA_Autorun.exe
[2012-08-10 15:37:00 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2012-08-05 19:43:55 | 000,000,388 | ---- | M] () -- C:\windows\tasks\HPCeeScheduleForP.H.U. Petro System.job

:Commands
[emptytemp]

Kliknij Wykonaj skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, i kliknij skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania.

[lart_2]

Na razie wklejam raport z AdwCleaner i zabieram się za resztę poleceń
poszła reszta ...

[defacto19]

Uruchom OTL i w sekcji (Własne opcje skanowania/Skrypt) wklej:

:OTL
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Web Search..."
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?hp=df"
FF - prefs.js..keyword.URL: "http://startsear.ch/?q="

:Files
C:\Users\uzywka\AppData\Local\Symbian-Toys.com
C:\Users\P.H.U. Petro System\g2mdlhlpx.exe
C:\windows\SysWow64\5ffbe649.exe

:Commands
[emptytemp]

Kliknij Wykonaj skrypt. Zatwierdź restart komputera. Zapisz raport, który wyświetli się restarcie, i przedstaw go na forum.

[lart_2]

zrobione

[defacto19]

Wszystko prawidłowo się wykonało. Możesz przejść do finalizacji tematu:

Uruchom OTL i użyj w nim opcji sprzątanie. Natomiast w Adwcleaner kliknij na przycisk Uninstall.

Przyspiesz system -> optymalizacja-windowsa-xp-vt89133.html

[lart_2]

Dzięki bardzo, jak na razie wszystko działa oki, a co to było za cholerstwo??

[wojtas]

jakieś śmieci związane z toolbarami itp pozdro