Odinstaluj:
Java(TM) 6 Update 20
eBay
omiga-plus uninstaller
TuneUp Utilities 2013
McAfee
Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Wykonaj skrypt w OTL:
:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://isearch.omiga-plus.com/?type=hp&ts=140...HitachiXHTS547550A9E384_110512J2350050G6T50CX IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.gboxapp.com/
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" =
http://isearch.omiga-plus.com/web/?type=ds&ts...achiXHTS547550A9E384_110512J2350050G6T50CX&q= {searchTerms}
IE - HKLM\..\SearchScopes\{7EBC808C-31AC-4C31-819A-DA1B2963ECA5}: "URL" =
http://www.bing.com/search?q= {searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
IE - HKU\S-1-5-21-2604148435-3300882597-2971092431-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://isearch.omiga-plus.com/?type=hp&ts=140...HitachiXHTS547550A9E384_110512J2350050G6T50CX IE - HKU\S-1-5-21-2604148435-3300882597-2971092431-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.gboxapp.com/
IE - HKU\S-1-5-21-2604148435-3300882597-2971092431-1000\..\SearchScopes\{B070E1DE-71FB-4519-8A57-889DB2A800B0}: "URL" =
http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle= {searchTerms}
IE - HKU\S-1-5-21-2604148435-3300882597-2971092431-1000\..\SearchScopes\{FAE0AB62-F417-4799-88D0-A8AFEBF2FDA6}: "URL" =
http://www.amazon.co.uk/gp/search?ie=UTF8&keywords= {searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
IE - HKU\S-1-5-21-2604148435-3300882597-2971092431-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
[2013-03-30 16:09:48 | 000,000,000 | ---D | M] (Smiley Bar for Facebook) -- C:\Users\toshiba\AppData\Roaming\mozilla\Extensions\statuswinks@StatusWinks
CHR - homepage:
http://isearch.omiga-plus.com/?type=hppp&ts=1...HitachiXHTS547550A9E384_110512J2350050G6T50CX CHR - plugin: globalUpdate Update (Enabled) = C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 10.6.2)
[2014-09-03 18:19:45 | 000,000,000 | ---D | C] -- C:\Users\toshiba\AppData\Roaming\isafe
[2014-09-02 20:23:47 | 000,001,786 | ---- | M] () -- C:\Windows\tasks\3c1c0894-3d35-445c-92f4-84f4f83c97df-5_user.job
[2014-09-02 20:23:47 | 000,001,766 | ---- | M] () -- C:\Windows\tasks\3c1c0894-3d35-445c-92f4-84f4f83c97df-5.job
[2014-09-02 20:23:42 | 000,001,462 | ---- | M] () -- C:\Windows\tasks\3c1c0894-3d35-445c-92f4-84f4f83c97df-2.job
[2014-09-02 20:23:35 | 000,001,898 | ---- | M] () -- C:\Windows\tasks\3c1c0894-3d35-445c-92f4-84f4f83c97df-1.job
[2014-09-02 20:23:35 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job
[2014-09-02 20:23:28 | 000,004,494 | ---- | M] () -- C:\Windows\tasks\3c1c0894-3d35-445c-92f4-84f4f83c97df-11.job
[2014-08-20 12:38:39 | 000,000,032 | ---- | M] () -- C:\Windows\0
[2014-08-20 12:26:48 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\0
[2013-09-30 19:44:50 | 000,000,000 | ---D | M] -- C:\Users\toshiba\AppData\Roaming\Mipony
Zrob pelny skan przy pomocy Mbam:
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ oraz
http://ftp.drweb.com/pub/drweb/cureit/launch.exe
Daj w zalaczniku logi z FRST:
http://www.fixitpc.pl/topic/61-diagnostyka-ogólne-raporty-systemowe/#entry119294
