Na stronie do ktorej link podalem masz podane co zaznaczyc w przypadku braku extras!
Uzyj AdwCleaner, opcja Scan i Clean:
http://www.bleepingcomputer.com/download/adwcleaner/
Wykonaj skrypt w OTL:
:OTL
PRC - [2013/08/26 19:59:35 | 002,580,992 | ---- | M] () -- C:\Users\Kasia\AppData\Local\Lollipop\lollipop_08261759.exe
PRC - [2013/08/13 16:41:17 | 002,838,480 | ---- | M] () -- C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
PRC - [2013/05/08 11:00:23 | 003,364,352 | ---- | M] (Bandoo Media Inc.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe
PRC - [2013/05/08 11:00:19 | 003,022,848 | ---- | M] (Bandoo Media Inc.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe
PRC - [2013/03/31 14:57:08 | 001,646,216 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
SRV - [2013/08/13 16:41:17 | 002,838,480 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe -- (BrowserDefendert)
SRV - [2013/05/08 11:00:19 | 003,022,848 | ---- | M] (Bandoo Media Inc.) [Auto | Running] -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe -- (DatamngrCoordinator)
IE:
64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:
64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" =
http://dts.search-results.com/sr?src=ieb&gct=...1&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" =
http://dts.search-results.com/sr?src=ieb&gct=ds&appid=484&systemid=406
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page =
http://www2.delta-search.com/?babsrc=HP_ss&mn...9782FE8&affID=119357&tt=280813_ctrl2&tsp=4990
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://samsung.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www2.delta-search.com/?babsrc=HP_ss&mn...9782FE8&affID=119357&tt=280813_ctrl2&tsp=4990
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" =
http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F24FEC55F9782FE8&affID=119357&tt=280813_ctrl2&tsp=4990
IE - HKCU\..\SearchScopes\{849E5C19-4110-4479-A5BD-30AF3503AA19}: "URL" =
http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=A37A8F91-6F96-4DD5-9270-A390075B956D&apn_sauid=8366304C-8474-4B85-8F1A-FE50F023A2E8
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" =
http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=060913&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\622FD16281F841C5A76793B2927DCF15: "URL" =
http://dts.search-results.com/sr?src=ieb&gct=...1&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3DF4B26D-DB19-45DF-962A-6719D071245B}: C:\Users\Kasia\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B} [2013/08/31 23:26:38 | 000,000,000 | ---D | M]
[2013/05/30 17:07:56 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\ehk2p7dy.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
[2013/07/26 23:49:10 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\ehk2p7dy.default\extensions\{8b9fe9be-f7dd-451e-ac96-0e568e0ecc10}
[2013/07/31 21:35:03 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\ehk2p7dy.default\extensions\ffxtlbr@delta.com
[2013/07/31 17:13:03 | 000,000,000 | ---D | M] (WebCake) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\ehk2p7dy.default\extensions\plugin@getwebcake.com
[2013/05/24 23:47:19 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\Kasia\AppData\Roaming\mozilla\Firefox\Profiles\ehk2p7dy.default\extensions\toolbar@ask.com
[2013/07/29 19:53:26 | 000,002,533 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\aol-search.xml
[2013/05/24 23:47:19 | 000,002,308 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\askcom.xml
[2013/08/02 02:54:16 | 000,001,589 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\babylon.xml
[2013/06/09 13:50:33 | 000,002,402 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\bingp.xml
[2013/08/02 02:54:16 | 000,001,589 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\BrowserDefender.xml
[2013/05/30 18:14:58 | 000,002,646 | ---- | M] () -- C:\Users\Kasia\AppData\Roaming\mozilla\firefox\profiles\ehk2p7dy.default\searchplugins\Search_Results.xml
CHR - homepage:
http://www2.delta-search.com/?babsrc=HP_ss&mn...9782FE8&affID=119357&tt=280813_ctrl2&tsp=4990
CHR - Extension: Delta Toolbar = C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0\
O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
O2 - BHO: (Winamp Toolbar Loader) - {4accc990-3dc7-4456-a734-5cb4b610a7f5} - C:\Program Files (x86)\Winamp Toolbar\winamppltb.dll (AOL Inc.)
O2 - BHO: (Rich Media Downloader) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - C:\Users\Kasia\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll (Radiocom CJSC)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Rich Media Player) - {FEB703F7-E7B2-4AB0-9566-87658AC70095} - C:\Users\Kasia\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll ()
O3:
64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {a0b1221c-a3ff-4f7c-a393-dc63af5301e9} - C:\Program Files (x86)\Winamp Toolbar\winamppltb.dll (AOL Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files (x86)\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe (Bandoo Media Inc.)
OO4 - HKCU..\Run: [lollipop_08261759] c:\users\kasia\appdata\local\lollipop\lollipop_08261759.exe ()
O4 - HKCU..\Run: [NTRedirect] C:\Users\Kasia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll ()
O20:
64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - C:\ProgramData\Wincert\win64cert.dll ()
O20:
64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\mgrldr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\mgrldr.dll ()
O20 - AppInit_DLLs: (c:\progra~3\wincert\WIN32C~1.DLL) - c:\ProgramData\Wincert\win32cert.dll ()
O20 - AppInit_DLLs: (c:\progra~3\browse~2\261562~1.220\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll ()
[2013/08/31 00:33:27 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
[2013/08/31 00:33:21 | 000,000,000 | ---D | C] -- C:\Users\Kasia\AppData\Roaming\Delta
:Commands
[emptytemp]
Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/
Po wykonaniu daj nowy log z OTL, ze skanowania, tym razem zaznacz opcje podane na stronie.