1) Odinstaluj C:\Program Files (x86)\
ClickCaption_1.10.0.2
2) Użyj
Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.
Daj z tego raport C:\AdwCleaner\AdwCleaner
[S].txt.
3) Uruchom
OTL i w oknie
Własne opcje skanowania/Skrypt wklej to:
:OTL
SRV - [2014/10/30 13:39:28 | 000,277,584 | ---- | M] (ClickCaption) [Auto | Running] -- C:\Program Files (x86)\ClickCaption_1.10.0.2\Service\ccsvc.exe -- (ccsvc_1.10.0.2)
DRV:64bit: - [2014/10/30 13:39:28 | 000,058,232 | ---- | M] (ClickCaption) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ccnfd_1_10_0_2.sys -- (ccnfd_1_10_0_2)
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1413984416&from=smt&uid=WDCXWD3200AAKS-00B3A0_WD-WMAT1359950499504&q={searchTerms}
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1413984416&from=smt&uid=WDCXWD3200AAKS-00B3A0_WD-WMAT1359950499504&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1413984416&from=smt&uid=WDCXWD3200AAKS-00B3A0_WD-WMAT1359950499504&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1413984416&from=smt&uid=WDCXWD3200AAKS-00B3A0_WD-WMAT1359950499504&q={searchTerms}
IE - HKU\S-1-5-21-1071276183-180092011-18382805-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mystart.com/?pr=vmn&id=mystarttb&v=5_4&ent=hp_5224&src=5224
IE - HKU\S-1-5-21-1071276183-180092011-18382805-1000\..\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}: "URL" = http://terra.im/search?q={searchTerms}
IE - HKU\S-1-5-21-1071276183-180092011-18382805-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://terra.im/
IE - HKU\S-1-5-21-1071276183-180092011-18382805-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://terra.im/
O2 - BHO: (ClickCaption) - {A18EA34C-6D33-4298-8A54-7F16499904C0} - C:\Program Files (x86)\ClickCaption_1.10.0.2\IE\ClickCaptionClientIE.dll (ClickCaption)
O2 - BHO: (MyStart Toolbar) - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll File not found
O3:64bit: - HKLM\..\Toolbar: (MyStart Toolbar) - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx64.dll File not found
O3 - HKLM\..\Toolbar: (MyStart Toolbar) - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll File not found
O4 - HKLM..\Run: [CacheBoost] C:\Program Files (x86)\Systweak\Systweak CacheBoost\trayicon.exe File not found
O7 - HKU\S-1-5-21-1071276183-180092011-18382805-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
[2014/11/27 12:37:04 | 000,000,000 | ---D | C] -- C:\Program Files\ClickCaption_1.10.0.2
[2014/11/27 12:36:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ClickCaption_1.10.0.2
[2014/11/27 11:39:21 | 000,000,412 | ---- | M] () -- C:\Windows\tasks\newSI_608.job
[2014/10/28 19:28:07 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\newSI_608
:Commands
[emptytemp]
Kliknij w
Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom
OTL ponownie, tym razem kliknij
Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.