Wirus ukash! pomocy

[kasper]

Witam. jakieś 15 sekund po uruchomieniu komputera wyskakuje komunikat z UKASH,że pobrałem audio/vide i muszę zapłacić 500 zł w przeciągu 3 dni. dowiedziałem się że to tylko jakiś wirus lub coś w ten deseń więc moje pytanie brzmi: jak to ominąć/wyłączyć ? . jestem słaby w tych sprawach. po skanowaniu komputera otrzymałem takie coś:
http://wklejto.pl/130784 -Extras
http://wklej.org/id/806765/ -OTL

[defacto19]

Odinstaluj:
Linkury Smartbar
Yontoo 1.10.02

Uruchom OTL i w sekcji (Własne opcje skanowania/Skrypt) wklej:

:OTL
SRV - File not found [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
DRV - File not found [Kernel | System | Stopped] -- system32\DRIVERS\dtsoftbus01.sys -- (dtsoftbus01)
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=hp&babsrc=lnkry_nt
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=009d4226-a1d0-4833-bce6-c00dbf7a5f47&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113480&tt=3012_2&babsrc=SP_ss&mntrId=82bc660900000000000000218665c7e3
IE - HKU\S-1-5-21-445765369-819549884-3144983064-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found
O3 - HKU\S-1-5-21-445765369-819549884-3144983064-1001\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED File not found
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun File not found
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [EADM] "D:\Program Files\Origin\Origin.exe" -AutoStart File not found
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [Gadu-Gadu 10] "C:\Program Files\Gadu-Gadu 10\gg.exe" File not found
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [Microsoft Windows Manager] C:\Users\Karol\M-10-6897-8685-3464\winmgr.exe ()
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun File not found
O4 - HKU\S-1-5-21-445765369-819549884-3144983064-1001..\Run: [TapiMigPlugin] C:\Users\Karol\AppData\Local\Microsoft\Windows\864\TapiMigPlugin.exe ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found
O33 - MountPoints2\{fb8e8d1c-d645-11e1-99ed-00218665c7e3}\Shell - "" = AutoRun
O33 - MountPoints2\{fb8e8d1c-d645-11e1-99ed-00218665c7e3}\Shell\AutoRun\command - "" = G:\autorun.exe

:Files
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-445765369-819549884-3144983064-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-445765369-819549884-3144983064-1001Core.job
C:\Users\Karol\AppData\Local\Microsoft\Windows\864
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Users\Karol\AppData\Roaming\OpenCandy
C:\Users\Karol\AppData\Roaming\hellomoto
C:\Users\Karol\M-10-6897-8685-3464
C:\user.js

:Commands
[emptytemp]

Kliknij Wykonaj skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, i wygeneruj nowy log OTL z opcji Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania.