AVG Secure Search
Google Toolbar
Uzyj AdwCleaner, opcja Delete.
W Chrome usun dodatki:
IB Updater
AVG Security Toolbar
IncrediBar for Chrome\u2122
Wykonaj skrypt w OTL:
:OTL
PRC - [2013-02-10 15:44:35 | 000,965,296 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.1.7\ToolbarUpdater.exe
PRC - [2012-11-26 14:39:30 | 000,188,760 | ---- | M] () -- C:\Program Files\IB Updater\ExtensionUpdaterService.exe
SRV:
64bit: - [2012-11-26 14:39:30 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Program Files\IB Updater\ExtensionUpdaterService.exe -- (IB Updater)
SRV:
64bit: - [2012-10-02 16:20:24 | 001,261,936 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\dmwu.exe -- (IBUpdaterService)
SRV - [2013-02-10 15:44:35 | 000,965,296 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.1.7\ToolbarUpdater.exe -- (vToolbarUpdater14.1.7)
DRV:
64bit: - [2013-02-10 15:44:35 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
IE - HKU\S-1-5-21-3146280447-2039990274-933905383-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://isearch.avg.com/?cid={E918E892-A2B3-466C-9DE1-3B0CF8F71460}
IE - HKU\S-1-5-21-3146280447-2039990274-933905383-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" =
http://isearch.avg.com/search?cid={E918E892-A2B3-466C-9DE1-3B0CF8F71460}
IE - HKU\S-1-5-21-3146280447-2039990274-933905383-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" =
http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6R8RZk2RAv&i=26
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.1.7\\npsitesafety.dll ()
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX [2013-01-21 10:40:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\14.1.0.10 [2013-02-10 15:44:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\IB Updater\Firefox [2013-01-21 10:40:47 | 000,000,000 | ---D | M]
O2:
64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
O2:
64bit: - BHO: (IB Updater) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension64.dll ()
O2 - BHO: (IB Updater) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll ()
O3:
64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.1.7\ViProtocol.dll ()
[2013-01-21 10:41:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Incredibar.com
[2013-01-21 10:40:51 | 000,035,328 | ---- | C] (IncrediMail, Ltd.) -- C:\Windows\SysNative\ImHttpComm.dll
[2013-01-21 10:40:51 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\WNLT
[2013-01-21 10:40:51 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ARFC
[2013-01-21 10:40:45 | 000,000,000 | ---D | C] -- C:\Program Files\IB Updater
[2013-01-21 10:37:35 | 000,000,000 | ---D | C] -- C:\Users\Alicja\AppData\Local\AVG Secure Search
[2013-01-21 10:37:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2013-01-21 10:37:29 | 000,039,768 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2013-01-21 10:37:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2013-01-21 10:37:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search
[2013-02-10 15:44:35 | 000,039,768 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2013-01-30 12:33:13 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\ROC_JAN2013_TB_rmv.job
[2013-01-21 10:41:02 | 000,000,448 | ---- | C] () -- C:\user.js
[2013-01-21 10:40:51 | 001,261,936 | ---- | C] () -- C:\Windows\SysNative\dmwu.exe
