Ukash problem z komputerem, proszę o pomoc

[Dariuuss]

Mam problem z Ukash. Bardzo proszę o pomoc.

Extras.Txt

OTL.Txt

[picasso]

1. Uruchom OTL i w sekcji Własne opcje skanowania / skrypt wklej:

 

:OTL
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "SFT_Polska Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3031817&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3031817&SearchSource=2&q="
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = "http://pl.v9.com/?utm_source=b&utm_medium=vlt"
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = "http://pl.v9.com/?utm_source=b&utm_medium=vlt"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = "http://search.babylon.com/?q={searchTerms}&affID=112553&babsrc=SP_ss&mntrId=64053edb0000000000000060b34b1542"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\SearchScopes\{76BFEED6-9BDB-43DE-816E-B147047F7D53}: "URL" = "http://websearch.ask.com/redirect?client=ie&tb=STC-US&o=1716&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAO&apn_dtid=^YYYYYY^YY^PL&apn_uid=5A30C327-C756-4890-A9C6-B890B79108DD&apn_sauid=A944BE8C-D3D8-4155-8726-A6A795CCEC97&"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = "http://isearch.avg.com/search?cid={C0D5C452-E501-4690-884D-6E61ED2C55A5}&mid=6f1d6f72d81847d1b30ad16c64313027-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2012-06-10 19:53:17&v=11.1.0.7&sap=dsp&q={searchTerms}"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = "http://mystart.incredibar.com/mb143/?search={searchTerms}&loc=IB_DS&a=6PQy53RCzG&i=26"
IE - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - No CLSID value found
O3 - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKU\S-1-5-21-1515938315-1175600847-2723366171-1000..\Run: [bwsxyjihmplxodd] C:\ProgramData\bwsxyjih.exe ()
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab" (Reg Error: Key error.)
 
:Files
C:\ProgramData\wjmfgwqpmoewvzy
C:\ProgramData\zbiwzbouibjxuwg
C:\Users\Seven-VinBT\0.6543881426289802.exe
C:\Users\Seven-VinBT\AppData\Roaming\Babylon
C:\Users\Seven-VinBT\AppData\Roaming\Mozilla\Firefox\Profiles\o8xchxq2.default\searchplugins\askcom.xml
C:\Users\Seven-VinBT\AppData\Roaming\Mozilla\Firefox\Profiles\o8xchxq2.default\searchplugins\conduit.xml
C:\Users\Seven-VinBT\AppData\Roaming\Mozilla\Firefox\Profiles\o8xchxq2.default\searchplugins\MyStart Search.xml
C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
C:\Program Files\mozilla firefox\searchplugins\babylon.xml
C:\Program Files\mozilla firefox\searchplugins\v9.xml
 
:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="about:blank"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"="about:blank"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
 
:Commands
[emptytemp]

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Klik w Wykonaj skrypt. System zostanie zrestartowany (i odblokowany), otworzy się log z wynikami usuwania.

 

2. Przeprowadź deinstalacje adware:

- Przez Panel sterowania odinstaluj: Deinstalator Strony V9, Web Assistant 2.0.0.440.

- Otwórz Firefox i w Dodatkach odinstaluj: Babylon, incredibar.com, SFT_Polska Community Toolbar, Web Assistant.

 

3. Uruchom AdwCleaner i zastosuj Delete. Z tego działania powstanie log na dysku C.

 

4. Wygeneruj nowy log OTL z opcji Skanuj (już bez Extras). Dołącz log z usuwania OTL z punktu 1 oraz AdwCleaner z punktu 3.

 

 

 

.

Edytowane 26 Sierpnia 2012 przez picasso
27.08.2012 - Temat zostaje zamknięty z powodu braku odpowiedzi. //picasso