| Oponeo - Prosta Droga do Nowych Opon |
| Author |
Message
|
sebsa191
Poziom 2
Joined: 05 Oct 2012
Posts: 3
Location: Ciechanowiec
|
 #1
 05 Oct 2012 21:31 Re: Jak usunąć Mystart.incredibar.com? |
|
|
|
ten sam problem...proszę o pomoc krok po kroku. bo jestem niemiłosiernie zielony.
|
|
| Back to top |
|
 |
Google
|
| #
05 Oct 2012 21:31 |
|
|
|
|
|
| Back to top |
|
|
sebsa191
Poziom 2
Joined: 05 Oct 2012
Posts: 3
Location: Ciechanowiec
|
#2
05 Oct 2012 21:32 Re: Jak usunąć Mystart.incredibar.com? |
|
|
|
cd... problemu
|
|
| Back to top |
|
|
Google
|
| #
05 Oct 2012 21:32 |
|
|
|
|
|
| Back to top |
|
|
Kolobos
Poziom 26
Joined: 13 Jun 2003
Posts: 31276
Location: Warszawa
|
#3
05 Oct 2012 23:45 Re: Mystart.incredibar.com - kolejny nieszczęśnik |
|
|
|
Odinstaluj:
Incredibar Toolbar on IE
Wykonaj skrypt w OTL:
:OTL
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=115849&tt=031012_ccp_4012_7&babsrc=SP_ss&mntrId=38b66db9000000000000e4115bf61fd2
CHR - Extension: IncrediBar for Chrome\u2122 = C:\Users\Bastek\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
[2012-10-04 17:58:11 | 000,000,000 | ---D | C] -- C:\Users\Bastek\AppData\Roaming\Babylon
[2012-10-04 17:58:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012-10-04 17:55:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Incredibar.com
[2012-09-06 10:33:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Ask
[2012-10-04 17:55:17 | 000,000,447 | ---- | C] () -- C:\user.js
[2012-10-04 17:54:51 | 001,261,936 | ---- | C] () -- C:\Windows\SysNative\dmwu.exe
Uzyj http://general-changelog-team.fr/outils/289-adwcleaner opcja Delete
Zrob skan przy pomocy mbam oraz cureit.
|
|
| Back to top |
|
|
Google
|
| #
05 Oct 2012 23:45 |
|
|
|
|
|
| Back to top |
|
|
sfos
Poziom 2
Joined: 13 Dec 2011
Posts: 2
|
#4
17 Nov 2012 01:11 Re: Mystart.incredibar.com - kolejny nieszczęśnik |
|
|
|
ten sam problem - incredibar, Poproszę o pomoc
|
|
| Back to top |
|
|
Acorus 20
Poziom 22
Joined: 01 May 2009
Posts: 2179
|
#5
17 Nov 2012 11:08 Re: Mystart.incredibar.com - kolejny nieszczęśnik |
|
|
|
Odinstaluj pdfforge Toolbar v5.6,Ad-Aware Browsing Protection,Spybot - Search & Destroy 1.3.Użyj AdwCleaner http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner z funkcji Delete(w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).
Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
| Quote: |
:OTL
SRV - [2012/04/23 19:38:30 | 000,785,304 | ---- | M] (Spigot, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
IE - HKU\S-1-5-21-3978223716-2926778974-2082667237-1001\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "MyStart Search"
FF - prefs.js..keyword.URL: "http://mystart.incredibar.com/mb201/?loc=IB_DS&a=6OyU0s06LT&&i=26&search="
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKU\S-1-5-21-3978223716-2926778974-2082667237-1001..\Run: [Media Finder] "C:\Program Files (x86)\Media Finder\Media Finder.exe" /opentotray File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
:Commands
[emptytemp] |
Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.
Zainstaluj aktualizacje do programow wskazanych przez Security Check
http://forum.dobreprogramy.pl/analiza-dezynfekcja-zestaw-narzedzi-nieingerencyjnych-t485632.html jako out of date.
|
|
| Back to top |
|
|
sfos
Poziom 2
Joined: 13 Dec 2011
Posts: 2
|
#6
17 Nov 2012 15:14 Re: Mystart.incredibar.com - kolejny nieszczęśnik |
|
|
|
raport z usuwania:
All processes killed
========== OTL ==========
Error: No service named Application Updater was found to stop!
Service\Driver key Application Updater not found.
File C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe not found.
Service esgiguard stopped successfully!
Service esgiguard deleted successfully!
File C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys not found.
Registry value HKEY_USERS\S-1-5-21-3978223716-2926778974-2082667237-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{B922D405-6D13-4A2B-AE89-08A030DA4402} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.
File C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll not found.
Prefs.js: "MyStart Search" removed from browser.search.defaultenginename
Prefs.js: "MyStart Search" removed from browser.search.selectedEngine
Prefs.js: "http://mystart.incredibar.com/mb201/?loc=IB_DS&a=6OyU0s06LT&&i=26&search=" removed from keyword.URL
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings not found.
File C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe not found.
Registry value HKEY_USERS\S-1-5-21-3978223716-2926778974-2082667237-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Media Finder not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56468 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Marcin Luk
->Temp folder emptied: 4477666275 bytes
->Temporary Internet Files folder emptied: 1384228420 bytes
->Java cache emptied: 1217003 bytes
->FireFox cache emptied: 136727139 bytes
->Google Chrome cache emptied: 395572641 bytes
->Apple Safari cache emptied: 149846016 bytes
->Opera cache emptied: 11399089 bytes
->Flash cache emptied: 43651 bytes
User: Public
User: sfos2
->Temp folder emptied: 25389024 bytes
->Temporary Internet Files folder emptied: 3837534 bytes
->FireFox cache emptied: 29962389 bytes
->Flash cache emptied: 57110 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1715716 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 514017281 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85262 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 6,801.00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 11172012_135222
Files\Folders moved on Reboot...
File\Folder C:\Users\Marcin Luk\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\YU3RI81A\erprise-pobierz%3Bwindows-8-trial%3Bwindows-8-trial-download%3Bwindows-8-trial-pobierz%3Bwindows-8%3B32-bit%3Btrial%3Bcn%3Bde%3Ben%3Bes%3Bfr%3Bjp%3Bpt-br%3Bmicrosoft[1].js not found!
File\Folder C:\Users\Marcin Luk\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\YU3RI81A\erprise-pobierz%3Bwindows-8-trial%3Bwindows-8-trial-download%3Bwindows-8-trial-pobierz%3Bwindows-8%3B32-bit%3Btrial%3Bcn%3Bde%3Ben%3Bes%3Bfr%3Bjp%3Bpt-br%3Bmicrosoft[2].js not found!
File\Folder C:\Users\Marcin Luk\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\85530B3M\erprise-pobierz%3Bwindows-8-trial%3Bwindows-8-trial-download%3Bwindows-8-trial-pobierz%3Bwindows-8%3B64-bit%3Btrial%3Bcn%3Bde%3Ben%3Bes%3Bfr%3Bjp%3Bpt-br%3Bmicrosoft[1].js not found!
File\Folder C:\Users\Marcin Luk\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\4X4MSUIV\erprise-pobierz%3Bwindows-8-trial%3Bwindows-8-trial-download%3Bwindows-8-trial-pobierz%3Bwindows-8%3B64-bit%3Btrial%3Bcn%3Bde%3Ben%3Bes%3Bfr%3Bjp%3Bpt-br%3Bmicrosoft[1].js not found!
C:\Users\Marcin Luk\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Marcin Luk\AppData\Local\Temp\FXSTIFFDebugLogFile.txt moved successfully.
C:\Users\Marcin Luk\AppData\Local\Temp\MSI41adf.LOG moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
|
|
| Back to top |
|
|
This site uses cookies. Learn more about cookies and changing the settings in your browser.
