odinstaluj w dodaj usuń: Ask Toolbar,Conduit Engine,DAEMON Tools Toolbar
Uruchom OTL i w sekcji
własne opcje skanowania / skrypt wklej:
:OTL
IE - HKU\S-1-5-21-606747145-854245398-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://vshare.toolbarhome.com/?hp=df
IE - HKU\S-1-5-21-606747145-854245398-682003330-1003\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
[2011-04-06 17:33:20 | 000,000,000 | ---D | M] (Softonic-Polska Community Toolbar) -- C:\Documents and Settings\Karol\Dane aplikacji\Mozilla\Firefox\Profiles\2xytq4od.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}
[2011-01-27 12:34:13 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Karol\Dane aplikacji\Mozilla\Firefox\Profiles\2xytq4od.default\extensions\DTToolbar@toolbarnet.com
[2011-04-06 17:33:18 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Karol\Dane aplikacji\Mozilla\Firefox\Profiles\2xytq4od.default\extensions\engine@conduit.com
[2011-02-03 00:25:30 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\Karol\Dane aplikacji\Mozilla\Firefox\Profiles\2xytq4od.default\extensions\vshare@toolbar
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-606747145-854245398-682003330-1003\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-606747145-854245398-682003330-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-606747145-854245398-682003330-1003\..\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-606747145-854245398-682003330-1003\..\Toolbar\WebBrowser: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKU\S-1-5-21-606747145-854245398-682003330-1003..\Run: [PKTray] File not found
C:\Documents and Settings\Karol\Dane aplikacji\Ashampoo
[2011-04-03 16:02:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karol\Ustawienia lokalne\Dane aplikacji\ashampoo
[2011-04-03 16:02:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2011-04-03 16:01:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ashampoo
[2011-04-03 16:01:30 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo
:Files
C:\WINDOWS\tasks\*.job
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\ConduitEngine
C:\Program Files\Ask.com
:Commands
[emptytemp]
[emptyflash]
Kliknij
wykonaj skrypt. I potwierdź reset komputera .
Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt
oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).