sprawdzenie loga- wyskakujące karty w przeglądarce

[bartonik1]

Witam, proszę o sprawdzenie poniższych logów. Mam od kilku dni problem z przeglądarkami: najpierw chrome, teraz Firefox. Same się włączały i generowały nowe karty z reklamami. Skanowałem kompa kilkoma anty-virami, znalazłem trojana- wykasowałem, robiłem rejestr, nic to nie dało. Więcej sam nic nie wskóram, proszę o pomoc:)

http://www.wklej.org/id/1050867/

http://www.wklej.org/id/1050869/

[mateo8898]

Podaj logi z:
OTL otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p107754
Gmer otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

[bartonik1]

Logi OTL:
http://www.wklej.org/id/1050967/
http://www.wklej.org/id/1050969/

[mateo8898]

Podałem linki do instrukcji, to po co korzystasz z jakichś innych?? Poza tym nie podałeś logu z Gmer.

Odinstaluj: tuto4pc_pl_8, vShare Plugin, SweetIM Toolbar for Internet Explorer 4.2, SweetIM for Messenger 3.6

W ustawieniach Chrome zmień sobie stronę startową na np. google.pl

Następnie:

Uruchom OTL w oknie Własne opcje skanowania/skrypt wklej:

:OTL
DRV:64bit: - [2011/02/08 09:14:20 | 000,084,568 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SbFwIm.sys -- (SBFWIMCLMP)
DRV:64bit: - [2011/02/08 09:14:20 | 000,084,568 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV:64bit: - [2011/04/05 17:35:20 | 000,253,528 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SbFw.sys -- (SbFw)
DRV:64bit: - [2011/04/05 17:35:20 | 000,094,296 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\sbtis.sys -- (SbTis)
DRV:64bit: - [2011/04/05 17:35:20 | 000,060,504 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sbhips.sys -- (sbhips)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=18&barid={634939EA-3865-11E1-8FDC-C44619BB0CF0}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://search.my-tools-app.com/?babsrc=home&s=web&as=0&isid=9853&q={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={634939EA-3865-11E1-8FDC-C44619BB0CF0}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1332781535_792159
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=119370&babsrc=HP_ss_gin2g&mntrId=D425C44619BB0CF0
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\URLSearchHook: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No CLSID value found
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No CLSID value found
- HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://isearch.babylon.com/?q={searchTerms}&affID=119370&babsrc=SP_ss_gr2&mntrId=D425C44619BB0CF0
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=87EC7A97-B761-4075-A92B-AF437360DD85&apn_sauid=B28A746A-77C3-495D-A634-F3BBFD2FC9D2
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=rbox&toolbarid=adawaretb&u=549D4FDE26FA51465217464F8995F004&q={searchTerms}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{50FE7D2E-5153-4C73-83C7-8A15D093C7A5}: "URL" = http://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={C9CAB727-2625-48A9-B447-D67A3873B9F0}&mid=5e3f9623aeba070ab915c88ffddd357c-28a25098d42569673ca7ded0441dc27a96c43b9d&lang=en&ds=ft011&pr=sa&d=2012-11-04 14:13:50&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{B55E74C9-BF97-4A6D-A26C-AE22BFD1625B}: "URL" = http://rover.ebay.com/rover/1/710-42480-16445-5/4?satitle={searchTerms}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://search.my-tools-app.com/?babsrc=home&s=web&as=0&isid=9853&q={searchTerms}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb203?a=6R84SLY4kg&search={searchTerms}&i=26
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={634939EA-3865-11E1-8FDC-C44619BB0CF0}
IE - HKU\S-1-5-21-2257013081-1140543846-2232289154-1000\..\SearchScopes\{FAD55C22-A5C1-45F1-9DFB-683DD0E50405}: "URL" = http://uk.shopping.com/?linkin_id=8056359
[2012/03/20 00:21:44 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files (x86)\mozilla firefox\extensions\[email protected]
[2012/05/19 10:43:10 | 000,002,352 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/04/14 17:21:37 | 000,000,616 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\adawaretb.xml
CHR - Extension: uTorrentControl2 = C:\Users\Barton\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.19.11_0\
O2 - BHO: (no name) - {EEE6C35C-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8:64bit: - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html File not found
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Reg Error: Key error.)


:Commands
[emptytemp]

Klikasz Wykonaj skrypt. Podajesz log z usuwania + nowe logi z OTL.