Live Security Platinum

[marcepanowooo]

Witam, jak już kilku forumowiczów mam problem z LSP. Jako że jestem zielona w temacie informatyki prosiłabym o pomoc wytłumaczoną "krok po kroku" :}

 

http://wklej.org/id/792321/ - OTL

 

http://wklej.org/id/792323/ - Extras

 

 

Z góry bardzo dziękuję za pomoc.

[Landuss]

1. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst:

 

:OTL
SRV - File not found [Auto | Stopped] -- c:\program files\common files\akamai\netsession_win_3f211bc.dll -- (Akamai)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\MySecretFolder\MSF32.SYS -- (MSF32)
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933"
IE - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = "http://www.daemon-search.com/search/web?q={searchTerms}"
IE - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933"
IE - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = "http://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=VZ2"
FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&q="
[2012-07-16 17:33:09 | 000,000,000 | ---D | M] (free-downloads.net Community Toolbar) -- C:\Users\Marta\AppData\Roaming\mozilla\Firefox\Profiles\bko7mzgi.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
[2012-02-13 09:27:09 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Marta\AppData\Roaming\mozilla\Firefox\Profiles\bko7mzgi.default\extensions\DTToolbar@toolbarnet.com
[2009-09-12 10:42:07 | 000,000,687 | ---- | M] () -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\bko7mzgi.default\searchplugins\ask.xml
[2010-01-20 13:16:28 | 000,000,939 | ---- | M] () -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\bko7mzgi.default\searchplugins\conduit.xml
[2010-12-31 23:57:33 | 000,002,059 | ---- | M] () -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\bko7mzgi.default\searchplugins\daemon-search.xml
[2009-10-31 00:07:06 | 000,005,413 | ---- | M] () -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\bko7mzgi.default\searchplugins\fast-browser-search.xml
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O3 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found
O4 - HKLM..\Run: [bEWINTERNET-PLSessionManager] "C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe" File not found
O4 - HKLM..\Run: [npwzfpgnhcltjvuug] C:\Windows\System32\smxudhihierwh.dll ()
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [guisvc.exe] C:\ProgramData\Common Files\Microsoft Shared\Web Components\login.lnk ()
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [Metropolis] rundll32.exe C:\Users\Marta\AppData\Local\Temp\sshnas21.dll,GetHandle File not found
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [Microsoft Firevall Engine] c:\users\public\iqs.exe ()
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [Microsoft Windows System] C:\Users\Marta\P-7-78-8964-9648-3874\windll.exe ()
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [trokdcv] C:\Users\Marta\AppData\Local\sfackl.exe ()
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\Run: [XBV6RD5SZF] C:\Users\Marta\AppData\Local\Temp\Qld.exe File not found
O4 - HKU\S-1-5-21-3547362167-1871634380-3945933501-1000..\RunOnce: [036DFF98005083951855D0F52F3B707C] C:\ProgramData\036DFF98005083951855D0F52F3B707C\036DFF98005083951855D0F52F3B707C.exe ()
O4 - Startup: C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qsqtx.exe ()
 
:Files
C:\Windows\Tasks\CYMS.job
C:\Users\Marta\AppData\Local\Temp*.html
C:\Windows\System32\autoexec8.dll
C:\Windows\System32\wcmjollcbu.exe
C:\Users\Marta\Desktop\Live Security Platinum.lnk
C:\ProgramData\F4D55F3E00016B0F000B36DF570F1C8B
C:\ProgramData\036DFF98005083951855D0F52F3B707C
C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
 
:Services
WPRO_40_1340
 
:Commands
[emptytemp]

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Kliknij w Wykonaj skrypt. Zatwierdź restart komputera.

 

2. Przez Panel sterowania odinstaluj: Akamai NetSession Interface / Conduit Engine / DAEMON Tools Toolbar / Freecorder Toolbar / free-downloads.net Toolbar / Vuze Remote Toolbar

 

3. Uruchom AdwCleaner z opcji Delete

 

4. Uruchamiasz OTL ponownie, tym razem wywołujesz opcję Skanuj. Pokazujesz nowy log z OTL (bez extras)

Edytowane 18 Sierpnia 2012 przez picasso
18.08.2012 - Temat zostaje zamknięty z powodu braku odpowiedzi. //picasso