Departament policji

[Varpoo]

Problem jak u wielu ..

Policja 300 zł

Dodaje LOG

OTL.Txt

(79.67 KiB) Ściągnięto 77 razy

Extras.Txt

(62.8 KiB) Ściągnięto 67 razy

[ordynat]

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
O4 - Startup: C:\Users\ROMEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk = C:\ProgramData\lsass.exe (Microsoft Corporation)
[2012-11-14 21:41:30 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-11-14 21:41:37 | 095,023,320 | ---- | C] () -- C:\ProgramData\0tbpw.pad
IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZKfox000&ptb=tj6d0VpMGhxqiaSDZNenGA&ind=2010072319&ptnrS=ZKfox000&si=&n=77cf44ff&psa=&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.ask.com?o=15161&l=dis [binary data]
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - No CLSID value found
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - No CLSID value found
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=FXTV5&o=101699&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=F4&apn_dtid=YYYYYYYYPL&apn_uid=CBB78667-7FFB-404B-BC17-1AB44E1CC1F4&apn_sauid=1580D69B-A1FC-4467-BF9F-2C246580E0C9
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZKfox000&ptb=tj6d0VpMGhxqiaSDZNenGA&ind=2010072404&ptnrS=ZKfox000&si=&n=77cf4554&psa=&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search?q={searchTerms}
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.1.5
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.2
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=toolbar2&q="
[2012-11-14 23:29:32 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\Firefox\Profiles\swrvd18g.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011-03-23 10:03:41 | 000,000,000 | ---D | M] (Softonic-Polska Community Toolbar) -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\Firefox\Profiles\swrvd18g.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}(49)
[2011-03-23 10:03:40 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\Firefox\Profiles\swrvd18g.default\extensions\engine@conduit(47).com
[2011-05-24 21:55:21 | 000,260,855 | ---- | M] () (No name found) -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\firefox\profiles\swrvd18g.default\extensions\ffxtlbr@babylon.com.xpi
[2011-03-29 11:23:28 | 000,002,571 | ---- | M] () -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\firefox\profiles\swrvd18g.default\searchplugins\askcom.xml
[2010-10-20 12:22:45 | 000,000,000 | ---- | M] () -- C:\Users\ALEKSANDRA\AppData\Roaming\mozilla\firefox\profiles\swrvd18g.default\searchplugins\mywebsearch.xml
[2010-10-21 22:28:39 | 000,002,226 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-950021302-2339638074-3503762524-1000\..\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [SSC Service Utility] D:\Programy\SSC Service Utility\ssc_serv.exe /s File not found
O4 - HKU\S-1-5-21-950021302-2339638074-3503762524-1000..\Run: [SpeedUpMyPC] "C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe" delay 20000 File not found

:Files
C:\Users\ROMEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.

Użyj >Adw-cleaner. Kliknij w nim Delete
Pokaż raport z niego C:\AdwCleaner[S1].txt
.

[Varpoo]

Bite.

AdwCleaner[S1].txt

(64.72 KiB) Ściągnięto 64 razy

11152012_005709.txt.txt

(12 KiB) Ściągnięto 59 razy

[ordynat]

Nie dałeś nowego logu z OTL.
.