Wirus ukash potrzebna szybka pomoc

[giger]

Proszę o pomoc - ukash!!

[defacto19]

Przez panel sterowania odinstaluj:
Internet Explorer Toolbar 4.6 by SweetPacks
Update Manager for SweetPacks 1.1
Spybot - Search & Destroy
AOL Toolbar 5.0

Uruchom OTL i w sekcji Własne opcje skanowania /Skrypt wklej:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=83&bd=all&pf=cmnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1030000.103000&st=12&barid={22DD52BF-0814-11E2-8740-001F299B4FC8}
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKLM\..\SearchScopes\{EAB74ED4-1A7D-48FA-B002-9C4035C0BD8B}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcmnbie7-pl-pl
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1030000.103000&st=12&q={searchTerms}&barid={22DD52BF-0814-11E2-8740-001F299B4FC8}
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=83&bd=all&pf=cmnb
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1030000.103000&st=12&barid={22DD52BF-0814-11E2-8740-001F299B4FC8}
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\SearchScopes\{EAB74ED4-1A7D-48FA-B002-9C4035C0BD8B}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcmnbie7-pl-pl
IE - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1030000.103000&st=12&q={searchTerms}&barid={22DD52BF-0814-11E2-8740-001F299B4FC8}
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKU\S-1-5-21-3455080498-1952976032-2830092374-1004\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [xwizard] C:\Users\Ewelina\AppData\Local\Microsoft\Windows\700\xwizard.exe ()

:Files
C:\Users\Ewelina\AppData\Local\Microsoft\Windows\700
C:\Users\Ewelina\AppData\Roaming\hellomoto

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij wykonaj skrypt. Zatwierdź restart komputera.

Uruchom AdwCleaner z opcji Delete.

Następnie uruchom OTL ponownie i kliknij Skanuj. Pokaż nowy log OTL.Txt oraz raport z AdwCleaner C:\AdwCleaner[S1].txt