Pomocy!Warning you're in danger! Your computer is infected..

witam mam ten sam problem.

Logi:
extras: http://wklej.org/id/491495/
otl: http://wklej.org/id/491496/

Proszę pilnie o pomoc.

Pozdrawiam

Temat wydzielony.

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL
IE - HKU\S-1-5-21-3931705904-4036286254-3501231342-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://search.conduit.com?SearchSource= ... =CT2405280
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "BrotherSoft Extreme Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2776682&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2776682&SearchSource=13"
FF - prefs.js..extensions.enabledItems: [email protected]:3.6.13.99999
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=UTR&o=15467&locale=en_US&q="
2010-10-05 15:45:07 | 000,000,000 | ---D | M] (Softonic-Eng7 Toolbar) -- C:\Users\Papapetrou\AppData\Roaming\mozilla\Firefox\Profiles\zdj8drx2.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2010-10-12 19:30:02 | 000,000,000 | ---D | M] (BrotherSoft Extreme Community Toolbar) -- C:\Users\Papapetrou\AppData\Roaming\mozilla\Firefox\Profiles\zdj8drx2.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}
[2010-12-26 13:49:20 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Users\Papapetrou\AppData\Roaming\mozilla\Firefox\Profiles\zdj8drx2.default\extensions\[email protected]
[2010-09-14 16:50:14 | 000,001,761 | ---- | M] () -- C:\Users\Papapetrou\AppData\Roaming\Mozilla\Firefox\Profiles\zdj8drx2.default\searchplugins\ask.uk.xml
[2011-03-11 17:18:55 | 000,002,426 | ---- | M] () -- C:\Users\Papapetrou\AppData\Roaming\Mozilla\Firefox\Profiles\zdj8drx2.default\searchplugins\askcom.xml
[2010-09-16 17:48:08 | 000,000,941 | ---- | M] () -- C:\Users\Papapetrou\AppData\Roaming\Mozilla\Firefox\Profiles\zdj8drx2.default\searchplugins\conduit.xml
[2009-11-21 22:44:25 | 000,000,362 | ---- | M] () -- C:\Users\Papapetrou\AppData\Roaming\Mozilla\Firefox\Profiles\zdj8drx2.default\searchplugins\winamp-search.xml
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O4 - HKU\S-1-5-21-3931705904-4036286254-3501231342-1000..\RunOnce: [mObFaEp02400] C:\ProgramData\mObFaEp02400\mObFaEp02400.exe ()

:Files
C:\ProgramData\mObFaEp02400
C:\Users\Papapetrou\AppData\Local\Temp*.html

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Następnie spróbuj uruchomić system w normalnym trybie i odinstaluj toolbary: Ask Toolbar, Winamp Toolbar, Softonic-Eng7 Toolbar, BrotherSoft Extreme Toolbar, Conduit Engine. Później wykonaj nowe logi opcją Skanuj

OTL: http://wklej.org/id/491523/

Extras :http://wklej.org/id/491524/

W OTL wklej:

:OTL
IE - HKU\S-1-5-21-3931705904-4036286254-3501231342-1000\..\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - Reg Error: Key error. File not found
[2010-10-05 15:45:10 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Papapetrou\AppData\Roaming\mozilla\Firefox\Profiles\zdj8drx2.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
O3 - HKU\S-1-5-21-3931705904-4036286254-3501231342-1000\..\Toolbar\WebBrowser: (no name) - {51A86BB3-6602-4C85-92A5-130EE4864F13} - No CLSID value found.

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"=-
"NeroCheck"=-
"RtHDVCpl"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ru
"IPLA!"=-

Klikasz Wykonaj skrypt. Następnie:

W OTL kliknij Sprzątanie

Przeczyść dysk oraz rejestr CCleaner

Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport

Odinstaluj stare wersje Javy:

Java(TM) 6 Update 16
Java(TM) 6 Update 18

i zainstaluj najnowszą http://www.instalki.pl/programy/downloa ... %29_6.html

Odinstaluj starą wersję czytnika .PDF:

Adobe Reader 8 - Polish

i zainstaluj najnowszą http://www.instalki.pl/programy/downloa ... eader.html