wirusy?

[adus1190]

Witam. Mam problem z komputerem. Głośno chodzi, potrafi się zawieszać, zamulać. Jakiś czas temu miałam sporo wirusów na komputerze i udało mi się usunąć je antywirusem Microsoft Security Essentials. Dla pewności brat zasugerował ściągniecie Dr. Web. Po przeskanowaniu ten nie pokazał mi żadnych zagrożeń:

Dostępne tylko dla zarejestrowanych użytkowników

Ale co chwile wyskakują ostrzeżenia np:

Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników

Windows7 wersja 64-bitowa
Log ogólny
Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników

Opcjonalny log:
Dostępne tylko dla zarejestrowanych użytkowników

Proszę o pomoc.

[kominekl]

"{491AEB8B-9773-4C01-9E8C-B577CBFA68C8}" = Dr.Web Anti-virus for Windows
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"BabylonToolbar" = Babylon toolbar on IE
"BrowserCompanion" = BrowserCompanion
"conduitEngine" = Conduit Engine
"Google Updater" = Google Updater
"incredibar" = Incredibar Toolbar on IE
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"NSS" = Norton Security Scan
"Packard Bell InfoCentre" = Packard Bell InfoCentre
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Software Suite SE" = Packard Bell Software Suite SE
"Packard Bell Welcome Center" = Welcome Center
"Softonic-Polska Toolbar" = Softonic-Polska Toolbar
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater

Odinstaluj. Następnie użyj Dostępne tylko dla zarejestrowanych użytkowników, Dostępne tylko dla zarejestrowanych użytkowników (po zalogowaniu), Dostępne tylko dla zarejestrowanych użytkowników, tego, Dostępne tylko dla zarejestrowanych użytkowników i tego.

Logi.

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {80c554b9-c7f8-4a21-9471-06d606da78a2}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{80c554b9-c7f8-4a21-9471-06d606da78a2}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&form=MSSEDF&pc=MSSE
IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {80c554b9-c7f8-4a21-9471-06d606da78a2}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{80c554b9-c7f8-4a21-9471-06d606da78a2}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&form=MSSEDF&pc=MSSE
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&ctid=CT2530240
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&affID=112059&tt=3012_6&babsrc=SP_ss&mntrId=70e39f1700000000000000262d485ef8
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&locale=en_EU&apn_ptnrs=QO&apn_dtid=YYYYYYYYDK&apn_uid=AAC74518-9977-4767-A3F0-BEC7102CD61F&apn_sauid=19A5D661-C520-4383-89EA-D745792C8739
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&rlz=1I7GPCK_plDK416&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{80c554b9-c7f8-4a21-9471-06d606da78a2}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&form=MSSEDF&pc=MSSE
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&SearchSource=4&ctid=CT2530240
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&loc=IB_DS&a=6R8FrBNfmK&i=26
IE - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "MyStart Search"
FF - prefs.js..browser.startup.homepage: "http://mystart.incredibar.com/mb139?a=6R8FrBNfmK&i=26"
FF - prefs.js..extensions.enabledAddons: ffxtlbr%40babylon.com:1.5.0
FF - prefs.js..extensions.enabledAddons: ffxtlbr%40incredibar.com:1.5.0
FF - prefs.js..extensions.enabledAddons: bbrs_002%40blabbers.com:1.0.5
FF - prefs.js..extensions.enabledAddons: toolbar%40ask.com:3.15.4.100013
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.12.2.16749
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=70e39f1700000000000000262d485ef8&tlver=1.5.29.1&instlRef=sst&babTrack&q="
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll File not found
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX [2012/09/17 13:45:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010/10/18 18:10:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\virtualKeyboard@kaspersky.ru
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\linkfilter@kaspersky.ru
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\IB Updater\Firefox [2012/09/17 13:45:27 | 000,000,000 | ---D | M]
[2013/02/19 11:14:04 | 000,000,000 | ---D | M] (Download and Sa) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\50571bce7380c@50571bce73843.com
[2012/07/29 11:37:20 | 000,000,000 | ---D | M] (Browser Companion Helper) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com
[2011/07/01 11:18:42 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\engine@conduit.com
[2012/07/29 11:37:50 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\ffxtlbr@babylon.com
[2012/09/17 13:45:48 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\ffxtlbr@incredibar.com
[2012/06/22 09:38:02 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\toolbar@ask.com
[2011/09/10 19:35:31 | 000,089,388 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}.xpi
[2013/02/28 12:29:16 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire
[2013/02/16 17:03:03 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\0bb66476c57d47d5a6fb7e7674377c0d_expire
[2012/09/04 18:09:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\17a40c77283605dfc272f3059a0b731a_expire
[2012/12/23 18:26:13 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\1b56f16ed9915e2ddbdc7e781b9b40c4_expire
[2013/03/09 19:54:53 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\1d8715bd00dbafbff504a0b9666c85e1_expire
[2012/08/12 19:35:10 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\1fbe0aaef796761e2e00e656d7571423_expire
[2012/06/29 14:32:09 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\21d2bb231d3c04f5b6434220b2b1cb9e_expire
[2013/03/12 13:48:09 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\23233364e8ae2085af6b7ab685a1d8b4_expire
[2013/03/12 13:48:09 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\292124057d00cb0fa73db6b90d079658_expire
[2012/09/01 19:18:58 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\2a5416350827a96fd3444a5deea0824d_expire
[2012/07/23 18:28:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\2de83530857cb3f3e3820351e2e71d9c_expire
[2012/08/12 15:30:21 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\2e74403c227112bec523796d5a77d77e_expire
[2013/03/13 11:59:50 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\370331b9e1ce1b71d92bf4a7e59049f5_expire
[2012/11/19 15:59:05 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\46815dd2317141cc496b533e084a2dae_expire
[2013/03/13 12:24:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\4ba3285635b4114040cd684b23174c06_expire
[2012/09/20 05:06:27 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\4cac0064f3aeed687a74e3c1f10af695_expire
[2013/03/11 16:47:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\4d3d10bd28ff623813254a49b26be41f_expire
[2013/03/12 15:39:17 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\530e52021dc20843b1aa62957edeb9f8_expire
[2012/12/19 14:06:18 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\59cbbd448efc1065ce369ae4641bb8ba_expire
[2013/03/12 17:01:45 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\5cdf8a7ef2ec84abac286c67587b78d9_expire
[2013/02/16 17:03:04 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\6163efeb29fb4d5bbe2fce25c660ef19_expire
[2012/09/04 18:09:32 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\61e2ae11ba3d1cbe8887ea80f192e299_expire
[2012/07/28 17:05:56 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\656bf02a99a3ba2fbf237f6152b7f3de_expire
[2013/03/12 13:48:10 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\6651566e60266ec7e20c1f35e5d144d1_expire
[2012/06/29 14:32:09 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\680670b86f0b67567a12d8162b67b978_expire
[2013/03/12 17:01:44 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\6aaaeec79282f00863247307ab6ef7c0_expire
[2013/01/01 00:50:00 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\6ec88a37be1bea7fa99383e8b8c69afe_expire
[2013/01/08 16:34:02 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\719f6985083c6f0c2a8fef7aa1f75d63_expire
[2013/03/13 11:59:50 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\72891ec935a3d247f2da6562ef29a005_expire
[2013/02/19 08:24:52 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\765db9900d2463106fea9aaf5ba08e9f_expire
[2012/07/23 18:28:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\7acafe2d3e4c14a116bde4e028813ba7_expire
[2013/01/20 10:25:41 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\955571742befe31f5193475438c5602f_expire
[2013/02/19 18:02:15 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\9ef5e4c08312c8e6d81dfd42b7176e39_expire
[2013/03/13 11:59:49 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\a7e0abb80dabcdbb6dbaec920aa126a0_expire
[2012/07/28 17:05:55 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\aaff3303cdd7526dcb9cd1bc7f49fa7a_expire
[2013/01/16 20:49:45 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\adf275b6644b3fcac86a14ffe551dede_expire
[2013/03/09 19:54:54 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\b80425dc8e9c5170936061e156e18608_expire
[2012/10/21 10:24:53 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\ba6b0e458d7c050a8115d7051b8db5e4_expire
[2012/08/13 14:31:53 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\c3e7c05895597f87b039a4f59a816a43_expire
[2012/08/14 14:54:48 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\c4e18aef587a3caeab195cee379c1347_expire
[2012/10/29 13:51:40 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\cbb647c72e5b13b52d1392c603dcfde6_expire
[2012/08/14 14:54:48 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\cbb69a449d3e39b3a3781ffb1d7fa52b_expire
[2012/09/09 18:41:14 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\d0582b083a2c563eff484de1faacfcc3_expire
[2012/11/28 06:46:48 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\d21723248ac3da020dbb711681f7b846_expire
[2012/12/19 14:06:18 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\d89bfd841403290d610bcf662008b443_expire
[2013/03/13 11:59:50 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\da0d243876455cc4084ce2ecf666de0f_expire
[2012/08/14 16:56:42 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\dc6668d28979688b1e2066d1dcaef0f6_expire
[2012/10/30 19:39:46 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\df4525cd4117d8ae1c7453b139759242_expire
[2012/09/20 05:06:26 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e02b35320e5111f1b626466c13c70a0a_expire
[2012/10/30 17:05:20 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e8dda9aa87da796c1b95a0eecd098705_expire
[2013/03/12 13:48:10 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\e919434ec29526b28593c426e4264271_expire
[2012/11/19 15:59:04 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\ece5f266221b5245c6e3d7e27ddee963_expire
[2012/10/21 10:24:53 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\ece71b71690fad200cbed95871ef4bb2_expire
[2013/03/12 13:48:10 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\f03527c67e08602d2e4c18ae7867300d_expire
[2013/03/11 16:47:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire
[2013/03/11 16:47:33 | 000,000,013 | ---- | M] () (No name found) -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\extensions\bbrs_002@blabbers.com\chrome\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire
[2012/12/07 21:27:22 | 000,002,401 | ---- | M] () -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\searchplugins\askcom.xml
[2012/04/14 17:12:12 | 000,002,306 | ---- | M] () -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\searchplugins\askcomsearch.xml
[2011/06/20 13:08:04 | 000,000,933 | ---- | M] () -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\searchplugins\conduit.xml
[2012/09/17 13:45:13 | 000,002,203 | ---- | M] () -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\searchplugins\MyStart Search.xml
[2011/09/10 19:36:06 | 000,001,565 | ---- | M] () -- C:\Users\Ada\AppData\Roaming\Mozilla\Firefox\Profiles\9uxcb6dn.default\searchplugins\web-search.xml
[2013/03/08 10:11:19 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak
[2012/07/29 11:37:18 | 000,002,349 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
CHR - Extension: Browser Companion Helper = C:\Users\Ada\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\
CHR - Extension: Browser Companion Helper = C:\Users\Ada\AppData\Local\Google\Chrome\User Data\Default\Extensions\clbfjfbnelcflpgpklppgplejolacbej\1.0.5_0\
CHR - Extension: Babylon Toolbar = C:\Users\Ada\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\
CHR - Extension: IB Updater = C:\Users\Ada\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.506_0\
CHR - Extension: DealPly = C:\Users\Ada\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.3.7.2_0\
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Ada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O15 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Dostępne tylko dla zarejestrowanych użytkowników (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 10.15.2)
[2013/03/12 19:32:32 | 000,000,000 | ---D | C] -- C:\Windows\Temp29A35C72-8FFE-816B-15C7-53A88A8F7A2D-Signatures
[2013/03/11 19:46:56 | 000,000,000 | ---D | C] -- C:\Windows\Temp80F30ABF-438D-4408-5366-0F21CA215EBB-Signatures
[2013/03/11 08:14:32 | 000,000,000 | ---D | C] -- C:\Windows\Temp95263CCF-3E31-9DBF-4D0D-B3C03FC11648-Signatures
[2013/03/11 07:38:08 | 000,000,000 | ---D | C] -- C:\Windows\Temp405915A4-2D90-17FF-0227-3599961A49CC-Signatures
[2013/03/10 20:27:19 | 000,000,000 | ---D | C] -- C:\Windows\TempF3B85200-88A5-6EEA-3593-07DB191F4469-Signatures
[2013/03/09 20:05:34 | 000,000,000 | ---D | C] -- C:\Windows\Temp0AB8AD3D-3391-9925-B15A-7CA035235DC3-Signatures
[2013/03/08 21:12:58 | 000,000,000 | ---D | C] -- C:\Windows\Temp00E3C4CA-F270-1EF3-4343-7DF75B4580A5-Signatures
[2013/03/07 19:22:47 | 000,000,000 | ---D | C] -- C:\Windows\Temp5EF5FD7F-8A0F-DBBE-525B-A8C2D6A9FA09-Signatures
[2013/03/06 19:40:56 | 000,000,000 | ---D | C] -- C:\Windows\TempFDAFD457-40B9-A354-DD5D-474DCA90B1D8-Signatures
[2013/03/06 03:00:59 | 000,000,000 | ---D | C] -- C:\Windows\TempAFFF9EF9-89B0-82D3-6F2F-36981E8AA968-Signatures
[2013/03/05 11:46:16 | 000,000,000 | ---D | C] -- C:\Windows\TempE0C4C56D-50DF-D331-3E13-5AF561D50E4F-Signatures
[2013/03/05 08:36:46 | 000,000,000 | ---D | C] -- C:\Windows\TempE7F43728-BD91-5B23-4E50-3F3B9012A744-Signatures
[2013/03/01 20:01:19 | 000,000,000 | ---D | C] -- C:\Windows\TempA8D7A7C8-44A0-2B54-CA99-09BE09538600-Signatures
[2013/02/28 19:24:12 | 000,000,000 | ---D | C] -- C:\Windows\Temp62444875-E2D3-9BDE-0854-62753C87D274-Signatures
[2013/02/27 19:32:02 | 000,000,000 | ---D | C] -- C:\Windows\Temp8A4C3549-9B12-EF24-7FD4-1FAD0007A527-Signatures
[2013/02/27 07:39:54 | 000,000,000 | ---D | C] -- C:\Windows\Temp5EA5CDB4-CB41-CD28-F793-5CB9A3F9E1A5-Signatures
[2013/02/26 07:24:15 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/02/17 21:46:03 | 000,000,000 | ---D | C] -- C:\ProgramData\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}
[2013/02/17 12:33:22 | 000,000,000 | -HSD | C] -- C:\DrWeb Quarantine
[2013/02/17 12:21:04 | 000,000,000 | ---D | C] -- C:\Users\Ada\Doctor Web
[2013/02/17 12:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr.Web
[2013/02/17 12:14:37 | 000,255,672 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\SysNative\drivers\dwprot.sys
[2013/02/17 12:14:34 | 000,243,488 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\SysNative\drivers\DrWebLwf.sys
[2013/02/17 12:14:26 | 000,241,920 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\SysNative\drivers\spiderg3.sys
[2013/02/17 12:14:25 | 000,072,448 | ---- | C] (Doctor Web, Ltd.) -- C:\Windows\SysNative\drivers\dw_wfp.sys
[2013/02/17 12:13:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Doctor Web
[2013/02/17 12:13:27 | 000,000,000 | ---D | C] -- C:\Program Files\DrWeb
[2013/02/17 12:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Doctor Web
[2013/02/16 20:09:11 | 000,000,000 | ---D | C] -- C:\ProgramData\RightClick
[2013/02/14 21:17:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2013/02/14 21:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64
[2013/02/14 21:17:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Scan
[2013/02/14 21:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64\0307020.00A
[2013/02/14 21:17:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller

:Files
C:\Windows\tasks\*.*
C:\Program Files (x86)\Google\Update
C:\ProgramData\1361133543.bdinstall.bin

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z Dostępne tylko dla zarejestrowanych użytkowników (z opcji Delete) + log z TDSSKiller + nowe logi z OTL.

[adus1190]

Log z usuwania
Dostępne tylko dla zarejestrowanych użytkowników
Log z ADWCleaner
Dostępne tylko dla zarejestrowanych użytkowników
Log z TDSSKiller
Dostępne tylko dla zarejestrowanych użytkowników
Log z OTL
Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

ADWCleaner.

Odinstaluj.

Logi.

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
O3 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001\..\Toolbar\WebBrowser: (no name) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O4 - HKU\S-1-5-21-1830283633-797462228-1522207834-1001..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe File not found
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe File not found
[2013/03/15 09:09:40 | 000,000,000 | ---D | C] -- C:\Users\Ada\DoctorWeb
[2013/03/14 20:04:52 | 000,000,000 | ---D | C] -- C:\Windows\TempF94C33CB-088C-7527-9C40-907D1EA5CDDE-Signatures
[2013/03/14 13:29:28 | 000,116,016 | ---- | C] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\05161853.sys
[2013/03/14 13:28:16 | 000,116,016 | ---- | C] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\11195918.sys
[2013/03/13 19:20:05 | 000,000,000 | ---D | C] -- C:\Windows\Temp973871DA-EAE9-69A0-041C-4FB663374BF7-Signatures
[2013/02/17 12:33:22 | 000,000,000 | -HSD | C] -- C:\DrWeb Quarantine
[2013/02/13 12:50:26 | 000,119,888 | ---- | C] () -- C:\Users\Ada\AppData\Roaming\BabMaint.exe
[2013/02/08 13:59:31 | 001,881,130 | ---- | C] () -- C:\ProgramData\1360328111.bdinstall.bin
[2013/02/08 13:55:52 | 000,000,000 | ---D | M] -- C:\Users\Ada\AppData\Roaming\QuickScan

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z Autoruns.

[adus1190]

Log z usuwania:
Dostępne tylko dla zarejestrowanych użytkowników
Log z Autoruns:
Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

Autoruns.

W Autoruns odznacz:

HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms

rdpclip

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

RtHDVCpl

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

Adobe ARM
APSDaemon
Google Desktop Search
iTunesHelper
SunJavaUpdateSched

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

Microsoft Windows

HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components

Google Chrome
Microsoft Windows

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

msnmsgr

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

Wszystko.

Task Scheduler

Wszystko.

HKLM\System\CurrentControlSet\Services

AdobeActiveFileMonitor8.0
AdobeARMservice
FLEXnet Licensing Service
GamesAppService
GoogleDesktopManager-051210-111108
gupdate
gupdatem
gusvc
MozillaMaintenance
Nero BackItUp Scheduler 4.0
NitroReaderDriverReadSpool
nvsvc
nvUpdatusService
SkypeUpdate
Stereo Service
Updater Service
WinDefend

HKLM\System\CurrentControlSet\Services

dgderdrv
EagleX64
Prot6Flt

HKCU\Control Panel\Desktop\Scrnsave.exe

C:\Windows\system32\GPhotos.scr

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries

Wszystko.

Logi.

Dokonaj restartu. Jeśli wszystko jest OK to w Autoruns w trybie awaryjnym usuń odznaczone przedtem wpisy. Następnie podaj nowe logi z OTL.

[adus1190]

Nie dało się odznaczyć w Autoruns:
HKLM\System\CurrentControlSet\Services
WinDefend
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries
Wszystko
Log OTL:
Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

Nie dało się odznaczyć w Autoruns:
HKLM\System\CurrentControlSet\Services
WinDefend
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries
Wszystko
Log OTL:
Dostępne tylko dla zarejestrowanych użytkowników

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
[2013/02/17 12:33:22 | 000,000,000 | -HSD | C] -- C:\DrWeb Quarantine
[2013/03/15 09:48:07 | 000,091,370 | ---- | M] () -- C:\Users\Ada\Desktop\dr web deinstalacja.PNG

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie w OTL -> Sprzątanie.

Internet Explorer (Version = 8.0.7601.17514)

Zaktualizuj IE do Dostępne tylko dla zarejestrowanych użytkowników (nawet, jeśli Go nie używasz).

"{20F2AD58-CE1D-4994-9945-B1B3F2600254}" = Nitro PDF Reader

Odinstaluj to, ponieważ masz najnowszą wersję innego tego typu oprogramowania.

Kroki Finalizujące.

Przeczyść dysk i rejestr Dostępne tylko dla zarejestrowanych użytkowników.
Wykonaj pełne skanowanie Dostępne tylko dla zarejestrowanych użytkowników (nie gódź się na wersję testową), jeśli coś znajdzie usuń i daj raport.

[adus1190]

Raport z Malwarwbytes Anti- Malware:
Dostępne tylko dla zarejestrowanych użytkowników

Problem bo log z usuwania usunęłam. Jest szansa go odzyskać?

[kominekl]

Problem bo log z usuwania usunęłam. Jest szansa go odzyskać?

Nie, ale nie istotny on .

Raport z Malwarwbytes Anti- Malware:

Opróżnij kwarantannę Malwarebytes`a (Usuń wszystko).

[adus1190]

zrobione

[kominekl]

zrobione

Czy są jeszcze jakieś problemy?

[adus1190]

Nic nie zauważyłam. Dzięki wielkie za pomoc . Mam tylko pytanko czy Microsoft Security Essentials i Malwarebytes Anti-Malware mogą być zainstalowane jednocześnie? I czy jest jakiś lepszy antywirus niż Microsoft?

[kominekl]

I czy jest jakiś lepszy antywirus niż Microsoft?

O dużo . Ale ten może zostać.

Anti-Malware mogą być zainstalowane jednocześnie?

MSE jest antywirusem. Natomiast Malwarebytes to skaner na żądanie. Nie gryzą się .

[adus1190]

Ok. Jeszcze raz wielkie dzięki.