Odinstaluj
Ask ToolbarUruchom
OTL w oknie
Własne opcje skanowania/skrypt wklej:
:OTL
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=en_US&apn_uid=6643B25B-BE4F-4F88-A798-4493A7D5D06C&apn_ptnrs=PV&apn_sauid=2077FADC-CE1A-429E-B509-AE3A52253F2E&apn_dtid=YYYYYYYYPL&q="
[2010/11/07 23:18:30 | 000,002,568 | ---- | M] () -- C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\kxmpl4ev.default\searchplugins\askcom.xml
[2010/12/12 15:00:07 | 000,000,863 | ---- | M] () -- C:\Users\Bartek\AppData\Roaming\Mozilla\Firefox\Profiles\kxmpl4ev.default\searchplugins\conduit.xml
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [ALLUpdate] File not found
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [EA Core] File not found
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [Metropolis] File not found
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [RGSC] File not found
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [svchost.exe] File not found
O4 - HKU\S-1-5-21-3916604919-2912353607-3506189148-1001..\Run: [ZE18MW23GY] File not found
O4 - HKU\.DEFAULT..\RunOnce: [] File not found
O4 - HKU\S-1-5-18..\RunOnce: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [] File not found
O4 - HKU\S-1-5-20..\RunOnce: [] File not found
[2011/01/24 23:19:03 | 000,000,290 | -H-- | M] () -- C:\windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
:Files
C:\Users\Bartek\AppData\Local\Temp*.html
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"=-
"PDVD8LanguageShortcut"=-
"RemoteControl8"=-
"RtHDVCpl"=-
"TkBellExe"=-
"UpdateLBPShortCut"=-
"UpdateP2GoShortCut"=-
"UpdatePDRShortCut"=-
"UpdatePPShortCut"=-
"UpdatePSTShortCut"=-
"WinampAgent"=-
:Commands
[clearallrestorepoints]
[emptytemp]
Klikasz
Wykonaj skrypt. Dajesz log z usuwania + nowe logi z OTL.