18.06.2012, 14:57
W puste okienko programu OTL wklej poniższy skrypt i wciśnij: Wykonaj skrypt:
Cytat::OTLWykonaj pełny skan tym: http://www.dobreprogramy.pl/Malwarebytes...13117.html i usuń co znajdzie.
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=7f0a6af0-5...13d45aebe8
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={s...rer:source?}
IE - HKLM\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=7f0...earchTerms}
IE - HKLM\..\SearchScopes\{DC5AB94A-B9F6-4651-996F-AB1BAD5A2B97}: "URL" = http://www.google.com/search?q={searchTe...urceid=ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={1BC57333-0A...2012-04-05 14:18:33&v=10.2.0.3&sap=hp
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={s...orm=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTer...h&AF=15627
IE - HKCU\..\SearchScopes\{808C8139-DCBC-4DB7-8031-1B4846388A69}: "URL" = http://search.yahoo.com/search?fr=chr-gr...earchTerms}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={1BC57...2012-04-05 14:18:33&v=11.1.0.7&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{C4E36B04-8485-408D-91AA-06EEA9F1304E}: "URL" = http://isearch.avg.com/search?cid={1BC57...2012-04-05 14:18:33&v=10.2.0.3&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{E5B317D8-C2D6-4ECF-8416-40A35FE62435}: "URL" = http://websearch.ask.com/redirect?client...D854DB5E05
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=7f0a6af0-5015-11e1-ab55-0013d45aebe8"
FF - prefs.js..keyword.URL: "http://www.google.com/search?q="
FF - user.js - File not found
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\BabylonChromePI.dll
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - Extension: Babylon Translator = C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
:Files
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater
C:\Documents and Settings\dom\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\BabylonChromePI.dll
:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]