Odinstaluj: Searchkut Toolbar
Zrob skan przy pomocy mbam oraz cureit.
Wykonaj skrypt w OTL:
:OTL
IE - HKU\S-1-5-21-583907252-1409082233-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.qooqlle.com/
IE - HKU\S-1-5-21-583907252-1409082233-725345543-1003\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.selectedEngine: "qooqlle"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.qooqlle.com/"
[2011-04-22 15:29:10 | 000,001,860 | ---- | M] () -- C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\y7kip7ph.default\searchplugins\search.xml
O3 - HKU\S-1-5-21-583907252-1409082233-725345543-1003\..\Toolbar\WebBrowser: (no name) - {10022D38-A411-4B13-A746-C2A4F4EC7344} - No CLSID value found.
O4 - HKLM..\Run: [Readar_sl] C:\Documents and Settings\Dom\Dane aplikacji\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com))
O4 - HKLM..\Run: [TunesHelper] C:\Documents and Settings\All Users\TunesHelper.exe ()
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found
O33 - MountPoints2\{9f50b821-50cd-11e0-9dfe-0016e6dcc552}\Shell - "" = AutoRun
O33 - MountPoints2\{9f50b821-50cd-11e0-9dfe-0016e6dcc552}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{c58e9f82-0d31-11dd-9233-001ee5232ddb}\Shell\AutoRun\command - "" = H:\setupSNK.exe
[2011-04-20 21:28:36 | 008,180,224 | RHS- | M] () -- C:\Documents and Settings\All Users\TunesHelper.exe
[2011-04-20 21:28:35 | 000,311,296 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\Dom\Dane aplikacji\Readar_sl.exe
:Commands
[emptytemp]
Po wykonaniu daj nowy log.