SafeGroup

Objawy zainfekowania:
Kompurer dziala wolno i przegrzewa sie. Zrobilem skan avastem i dostalem info o 3 wirusach, ktore zostaly przeniesione do kwarantanny.

Wykonywane działania:
scan avast

Logi:
OLT

[Aby zobaczyć linki, zarejestruj się tutaj]

Extras

[Aby zobaczyć linki, zarejestruj się tutaj]

No cosik jest Smile

Odinstaluj:

OptimizerPro1

[Aby zobaczyć linki, zarejestruj się tutaj]

W trybie awaryjnym z tego samego konta w własne opcje skanowania skrypt wklej i wykonaj:

Kod:
:OTL

IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{299E9807-821B-44BC-AED1-2AC5C13B2B3C}: "URL" = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

IE - HKLM\..\SearchScopes\{299E9807-821B-44BC-AED1-2AC5C13B2B3C}: "URL" = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

IE - HKCU\..\SearchScopes\{0A0F3567-3DA3-4FC1-BE30-10022A631D7D}: "URL" = http://search.softonic.com/MON1203T25/tb_v1?q={searchTerms}&SearchSource=4&cc=

IE - HKCU\..\SearchScopes\{299E9807-821B-44BC-AED1-2AC5C13B2B3C}: "URL" = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

File not found (No name found) -- C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX

O4 - HKCU..\Run: [Doesr] C:\Users\gusia\AppData\Roaming\Peuggu\tyzi.exe File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0

O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:[b]64bit:[/b] - Extra context menu item: Download all by FlashGet3 - C:\Users\gusia\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()

O8:[b]64bit:[/b] - Extra context menu item: Download by FlashGet3 - C:\Users\gusia\AppData\Roaming\FlashGetBHO\GetUrl.htm ()

O8:[b]64bit:[/b] - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:[b]64bit:[/b] - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\gusia\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()

O8 - Extra context menu item: Download by FlashGet3 - C:\Users\gusia\AppData\Roaming\FlashGetBHO\GetUrl.htm ()

O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:[b]64bit:[/b] - Extra ''Tools'' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra ''Tools'' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O15 - HKCU\..Trusted Domains: kuaiche.com ([software] http in Trusted sites)

O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

[2013/04/16 20:49:47 | 000,000,000 | ---D | C] -- C:\Users\gusia\AppData\Roaming\Peuggu

[2013/04/16 20:49:47 | 000,000,000 | ---D | C] -- C:\Users\gusia\AppData\Roaming\Obvavu

[2013/04/16 20:49:47 | 000,000,000 | ---D | C] -- C:\Users\gusia\AppData\Roaming\Arveu

[2013/04/29 14:10:40 | 000,000,380 | -H-- | M] () -- C:\Windows\tasks\OptimizerPro1UpdaterTask{C10BFE89-D70E-4A53-A236-EA1086A2448F}.job

:Commands

[EMPTYTEMP]

Następnie uruchom OTLponownie i kliknij Skanuj . Przedstaw nowy log OTL

[Aby zobaczyć linki, zarejestruj się tutaj]

Ok można przejść do sprzątania w OTL ,jeszcze jakieś problemy ?

Dzieki to wszystko

bastekrtk

tachion

bastekrtk

tachion

bastekrtk