1. Uruchom
OTL i w oknie
Własne opcje skanowania/Script wklej to:
:OTL
O33 - MountPoints2\{3ec40495-bda4-11df-a583-001f1643d989}\Shell - "" = AutoRun
O33 - MountPoints2\{3ec40495-bda4-11df-a583-001f1643d989}\Shell\AutoRun\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{3ec40495-bda4-11df-a583-001f1643d989}\Shell\configure\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{3ec40495-bda4-11df-a583-001f1643d989}\Shell\install\command - "" = H:\SETUP.EXE
O4 - HKLM..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarsrv.exe (Babylon Ltd.)
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (PandoraTV Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\pl-pl\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (PandoraTV Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
[2010-11-22 21:50:05 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=PTV2&o=15851&locale=en_US&apn_uid=85011B66-4CE7-4137-9D51-AEC9CAE80D29&apn_ptnrs=H3&apn_sauid=171DC16E-D65A-4CFA-A78D-A57E62B7CF36&apn_dtid=YYYYYYYYPL&q="
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://www.ask.com?o=15854&l=dis"
IE - HKU\S-1-5-21-3113536938-2372784947-1990037964-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
:Files
C:\Users\Ewa\AppData\Local\Temp*.html
C:\Program Files\Ask.com
C:\Program Files\MSN Toolbar
C:\Program Files\BabylonToolbar
:Commands
[clearallrestorepoints]
[emptyflash]
[emptytemp]
Kliknij w
Wykonaj Script. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom
OTL ponownie, tym razem kliknij
Skanuj.
Pokaż raport z usuwania + najnowszy log z OTL'a.
2. 1) Wklej log z
VBA32arkit >>>
http://www.hotfix.pl/instrukcja-obslugi ... t-a342.htm2) Wklej log z
TDSSKiller >>>
http://www.hotfix.pl/instrukcja-obslugi ... r-a341.htm3) Wklej log z
MBRCheck >>>
http://www.hotfix.pl/wykrywanie-rootkit ... e-a340.htm.