Odinstaluj:
Google Toolbar for Internet Explorer
Do aktualizacji:
Mozilla Firefox 12.0 (x86 pl)
Uzyj AdwCleaner, opcja Delete.
Zrob skan przy pomocy mbam oraz cureit.
Usun skroty przegladarek i utworz nowe.
Wykonaj skrypt w OTL:
:OTL
SRV - File not found [Auto | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2013-07-04 09:16:47 | 000,386,112 | ---- | M] (Wsys Co., Ltd.) [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\eSafe\eGdpSvc.exe -- (WsysSvc)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.delta-homes.com/?utm_source=b&utm_...XMK8032GSX_Y6IIT23ETXXY6IIT23ET&ts=1373009773
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://safe.v9.com/?utm_source=b&utm_medium=i...fe&uid=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://search.qvo6.com/web/?utm_source=b&utm_...d=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET&ts=0
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://search.qvo6.com/web/?utm_source=b&utm_...d=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET&ts=0
IE - HKLM\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" =
http://search.qvo6.com/web/?utm_source=b&utm_...d=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET&ts=0
IE - HKLM\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" =
http://search.v9.com/web/?q={searchTerms}&utm_source=b&utm_medium=isafe&from=isafe&uid=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" =
http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.delta-homes.com/?utm_source=b&utm_...XMK8032GSX_Y6IIT23ETXXY6IIT23ET&ts=1373009773
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" =
http://search.v9.com/web/?q={searchTerms}&utm_source=b&utm_medium=isafe&from=isafe&uid=TOSHIBAXMK8032GSX_Y6IIT23ETXXY6IIT23ET
IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" =
http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - HKLM..\Run: [LanzarL2007] "C:\DOCUME~1\JANINA~1\USTAWI~1\Temp\{05CBBB9D-B69B-4BF5-8F71-21FEF75D87BC}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x0015" File not found
O33 - MountPoints2\{bca3d536-746d-11dd-a0c7-0016e3a857cb}\Shell - "" = AutoRun
O33 - MountPoints2\{bca3d536-746d-11dd-a0c7-0016e3a857cb}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
[2013-07-07 10:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\iSafe
[2013-07-07 10:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\eCyber
[2013-07-07 10:42:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\eDownload
[2013-07-01 19:15:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\337
[2013-07-01 19:14:51 | 000,000,000 | ---D | C] -- C:\Program Files\Omiga Plus
[2013-07-01 19:14:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\Omiga Plus
[2013-07-01 19:02:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\eSafe
[2013-07-01 19:00:19 | 000,000,000 | ---D | C] -- C:\Program Files\Desk 365
[2013-07-01 19:00:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\Desk 365
[2013-07-01 18:58:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Tarma Installer
[2013-07-01 18:58:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JANINA KOMINEK\Dane aplikacji\eIntaller
:Commands
[emptytemp]
