"Naruszenie prawa polskiego..." UKASH

[petep]

Witam serdecznie. Mnie również spotkał ten problem i byłbym dozgonnie wdzięczny za okazaną pomoc.

 

Oto moje logi:

 

OTL.Txt

Extras.Txt

 

Z góry bardzo dziękuję. W ramach wdzięczności obiecuję, w miarę swoich możliwości, szybkie wysłanie pieniędzy na utrzymanie serwisu.

 

Pozdrawiam!

[Landuss]

1. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst:

 

:OTL
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2463487"
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = "http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={8053FAE0-1CE9-11E0-844E-00158315A310}"
IE - HKLM\..\SearchScopes\{fb72f1bd-a2f1-47eb-8f13-2c6dcd65516f}: "URL" = "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XRxdm006YYpl&ptb=F807C8E7-FFFE-47E2-9CDB-051770EEBB40&psa=&ind=2011041701&ptnrS=XRxdm006YYpl&si=&st=sb&n=77de0fa5&searchfor={searchTerms}"
IE - HKU\.DEFAULT\..\URLSearchHook: {a24f3f59-1021-4e02-856c-99d9b4a03d83} - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes\{2CC1A6B6-989F-4DF4-9A7D-2873CAE5A3CC}: "URL" = "http://websearch.ask.com/redirect?client=ie&tb=NRO&o=101913&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=EW&apn_dtid=YYYYYYYYPL&apn_uid=9F27AC23-AAFE-4E92-8F3F-5AF5C8CB191F&apn_sauid=D5C878DE-6058-41C2-AEAA-B05A03E217C7"
IE - HKU\.DEFAULT\..\SearchScopes\{fb72f1bd-a2f1-47eb-8f13-2c6dcd65516f}: "URL" = "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XRxdm006YYpl&ptb=F807C8E7-FFFE-47E2-9CDB-051770EEBB40&psa=&ind=2011041701&ptnrS=XRxdm006YYpl&si=&st=sb&n=77de0fa5&searchfor={searchTerms}"
IE - HKU\S-1-5-18\..\URLSearchHook: {a24f3f59-1021-4e02-856c-99d9b4a03d83} - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes\{2CC1A6B6-989F-4DF4-9A7D-2873CAE5A3CC}: "URL" = "http://websearch.ask.com/redirect?client=ie&tb=NRO&o=101913&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=EW&apn_dtid=YYYYYYYYPL&apn_uid=9F27AC23-AAFE-4E92-8F3F-5AF5C8CB191F&apn_sauid=D5C878DE-6058-41C2-AEAA-B05A03E217C7"
IE - HKU\S-1-5-18\..\SearchScopes\{fb72f1bd-a2f1-47eb-8f13-2c6dcd65516f}: "URL" = "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XRxdm006YYpl&ptb=F807C8E7-FFFE-47E2-9CDB-051770EEBB40&psa=&ind=2011041701&ptnrS=XRxdm006YYpl&si=&st=sb&n=77de0fa5&searchfor={searchTerms}"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\URLSearchHook: {a24f3f59-1021-4e02-856c-99d9b4a03d83} - No CLSID value found
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No CLSID value found
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\URLSearchHook: {e8de9422-3b2c-4243-bf6f-235da84d8ef8} - No CLSID value found
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = "http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = "http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = "http://search.babylon.com/?q={searchTerms}&AF=119999&tt=260312_n&babsrc=SP_ss&mntrId=90d47b88000000000000de5d4cf4a9fb"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = "http://websearch.ask.com/redirect?client=ie&tb=FF&o=14594&src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYPL&apn_uid=25f91d23-4953-48ac-8023-3b784ad3abd2&apn_sauid=3E6D4E8C-7BED-43B2-BFD6-F9F71C37076E&"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = "http://www.bigseekpro.com/search/browser/fmsoftware/{A70304EB-897A-4235-946B-18604824A2C5}?q={searchTerms}"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = "http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2463487"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = "http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92541766445913210"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = "http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={8053FAE0-1CE9-11E0-844E-00158315A310}"
IE - HKU\S-1-5-21-3837769674-2026425130-645297796-1000\..\SearchScopes\{fb72f1bd-a2f1-47eb-8f13-2c6dcd65516f}: "URL" = "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XRxdm006YYpl&ptb=F807C8E7-FFFE-47E2-9CDB-051770EEBB40&psa=&ind=2011021014&ptnrS=XRxdm006YYpl&si=&st=sb&n=77ddbed6&searchfor={searchTerms}"
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/mb68/?loc=ff_address_bar&u=92541766445913210&search="
[2011-08-23 22:16:36 | 000,002,333 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xkl54lht.default\searchplugins\askcom.xml
[2011-10-30 09:12:08 | 000,002,207 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xkl54lht.default\searchplugins\MyStart Search.xml
[2012-02-23 15:11:25 | 000,003,915 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xkl54lht.default\searchplugins\SweetIM Search.xml
[2011-01-10 20:43:27 | 000,003,915 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xkl54lht.default\searchplugins\sweetim.xml
O4 - HKU\S-1-5-21-3837769674-2026425130-645297796-1000..\Run: [TabbtnEx] C:\Users\Admin\AppData\Local\Microsoft\Windows\3565\TabbtnEx.exe ()
 
:Files
C:\Users\Admin\AppData\Roaming\hellomoto
C:\Users\Admin\AppData\Local\Microsoft\Windows\3565
 
:Reg
[HKEY_USERS\S-1-5-21-3837769674-2026425130-645297796-1000\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
 
:Commands
[emptytemp]

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Kliknij w Wykonaj skrypt. Zatwierdź restart komputera.

 

2. Przez Panel sterowania odinstaluj: Complitly / DealPly / Softonic-Polska Toolbar / vShare Plugin / FoxTab Media Player

 

Otwórz Firefox i w Dodatkach odmontuj: Complitly / Vuze Remote Community Toolbar / ST-Polska Community Toolbar / IncrediMail MediaBar 2 Community Toolbar / DealPly / Conduit Engine / Babylon / vShare

 

3. Uruchom AdwCleaner z opcji Delete

 

4. Uruchamiasz OTL ponownie, tym razem wywołujesz opcję Skanuj. Pokazujesz nowy log z OTL (bez extras)

Edytowane 31 Sierpnia 2012 przez picasso
31.08.2012 - Temat zostaje zamknięty z powodu braku odpowiedzi. //picasso