Dlaczego nie dales extras.txt?
Odinstaluj:
Spybot - Search & Destroy
SpyHunter
W Chrome usun rozszerzenia:
Conduit Chrome Plugin
Conduit Radio Plugin
Wykonaj skrypt w OTL:
:OTL
IE - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.v9.com/web/?q={searchTerms}
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX
[2012-05-05 19:41:03 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Igausia\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012-04-19 19:53:10 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Users\Igausia\AppData\Roaming\mozilla\Firefox\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
[2013-02-03 14:24:56 | 000,000,000 | ---D | M] (BitTorrentControl_v12) -- C:\Users\Igausia\AppData\Roaming\mozilla\Firefox\extensions\{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14}
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\admin\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll File not found
O3 - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-21-2328727035-1013210170-2352471881-1003\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
@Alternate Data Stream - 1233 bytes -> C:\Users\Igausia\AppData\Local\v7g8V7ygkKUrDY:jQjA45u2lO896x8erZs
Zrob skan przy pomocy mbam.