Wštki
jasiek1982 - Pon Sty 04, 2010 1:03 pm
Problem polega na otwieraniu sie stron o tematyce erotycznej, gier itp, w IE i Firefoxie, system Vista, programy antyszpiegowskie niczego nie wykrywaja podobnie jak avg, avira Nod32. Zgóry dziękuję za jakąkolwiek pomoc, pozdrawiam.
http://www.wklej.eu/index.php?id=7aba945da2
http://www.wklej.eu/index.php?id=389c61b6a2
http://www.wklej.eu/index.php?id=af97250262
mati8898 - Pon Sty 04, 2010 3:23 pm
Uruchom OTL w oknie Custom Scans/Fixes wklej:
:OTL
PRC - [2008-10-29 06:29:41 | 02,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
SRV - File not found [Auto | Stopped] -- -- (RelevantKnowledge)
SRV - [2009-12-09 13:06:42 | 00,046,456 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\QuestService\questservice111.exe -- (QuestService Service)
FF - HKLM\software\mozilla\Firefox\Extensions\\{40f1eb95-4de4-4f36-a826-054ee36bb905}: C:\Program Files\Gameztar Toolbar\2.1.3.6670\FFToolbar
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF [2009-12-18 11:00:39 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF [2009-12-18 11:00:49 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF
[2009-12-18 15:20:38 | 00,000,000 | ---D | M] (QuestService) -- C:\Program Files\Mozilla Firefox\extensions\{AAF6454A-4000-4015-84C1-6CD844C06B19}
[2009-12-18 15:20:38 | 00,002,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\questservice111.xml
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIEAddOn.dll ()
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll ()
O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll ()
O3 - HKLM\..\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O4 - HKLM..\Run: [NWEReboot] File not found
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\AutoRun\command - "" = ceb6eu98.bat
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\explore\Command - "" = ceb6eu98.bat
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\open\Command - "" = ceb6eu98.bat
:Files
C:\ProgramData\QuestService
C:\Program Files\Gameztar Toolbar
C:\Program Files\Web Search Operator
C:\Program Files\Automated Content Enhancer
C:\Program Files\Customized Platform Advancer
C:\Program Files\Content Management Wizard
C:\Program Files\Textual Content Provider
C:\Program Files\QuestService
C:\Users\Patrycja\AppData\Local\Internet Today
C:\Program Files\Internet Today
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
:Commands
[emptytemp]
[start explorer]
jasiek1982 - Pon Sty 04, 2010 4:08 pm
Zrobiłem jak napisałeś, z tym że po kliknięciu na Run Fix znika pasek zadań oraz ikony na pulpicie a program wygląda jakby nic nie robił, da sięgo tylko zamknąc z Menadzera zadan, no i musze sie na nowo logowac na kompie. Po zalogowaniu i starcie systemu dostaje w notatniku to:
http://www.wklej.eu/index.php?id=7a8892f1d1
a to nowy log:
http://www.wklej.eu/index.php?id=caea1e5e21
pozdrawiam
mati8898 - Pon Sty 04, 2010 7:08 pm
No nic się nie usunęło. Spróbuj taki skrypt wkleić:
:OTL
SRV - File not found [Auto | Stopped] -- -- (RelevantKnowledge)
SRV - [2009-12-09 13:06:42 | 00,046,456 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\QuestService\questservice111.exe -- (QuestService Service)
FF - HKLM\software\mozilla\Firefox\Extensions\\{40f1eb95-4de4-4f36-a826-054ee36bb905}: C:\Program Files\Gameztar Toolbar\2.1.3.6670\FFToolbar
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF [2009-12-18 11:00:39 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF [2009-12-18 11:00:49 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF
[2009-12-18 15:20:38 | 00,000,000 | ---D | M] (QuestService) -- C:\Program Files\Mozilla Firefox\extensions\{AAF6454A-4000-4015-84C1-6CD844C06B19}
[2009-12-18 15:20:38 | 00,002,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\questservice111.xml
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIEAddOn.dll ()
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll ()
O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll ()
O3 - HKLM\..\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O4 - HKLM..\Run: [NWEReboot] File not found
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\AutoRun\command - "" = ceb6eu98.bat
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\explore\Command - "" = ceb6eu98.bat
O33 - MountPoints2\{1e7614f7-b75a-11de-a788-00304f23ebb2}\Shell\open\Command - "" = ceb6eu98.bat
:Files
C:\ProgramData\QuestService
C:\Program Files\Gameztar Toolbar
C:\Program Files\Web Search Operator
C:\Program Files\Automated Content Enhancer
C:\Program Files\Customized Platform Advancer
C:\Program Files\Content Management Wizard
C:\Program Files\Textual Content Provider
C:\Program Files\QuestService
C:\Users\Patrycja\AppData\Local\Internet Today
C:\Program Files\Internet Today
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
jasiek1982 - Wto Sty 05, 2010 9:06 pm
No więc tego skrpytu nie wkleiłem bo problem zniknął! Najwyrażniej po wklejeniu tego co mi podałeś na początku. Wielkie dzięki i pozdrawiam.
mati8898 - Wto Sty 05, 2010 9:08 pm
To, że problem zniknął nic nie znaczy, bo jeszcze sporo tego syfu masz na kompie, więc radzę to wykonać
jasiek1982 - Wto Sty 05, 2010 10:31 pm
ok, więc jak radziłeś, wkleiłem podany skrypt kliknalem na Runfix i nic tyle ze przegladarka sie zamknela, program nic nie robi nie generuja sie zadne logi.....?
jasiek1982 - Śro Sty 06, 2010 9:31 am
Witam, dziś rano włączyłem kompa i wyskoczył mi log, potem przeskanowałem jeszcze raz i wygląda tak:
http://www.wklej.eu/index.php?id=d5147f8a52
dziękuję i pozdrawiam.
mati8898 - Śro Sty 06, 2010 3:37 pm
Jest lepiej, ale jeszcze nie wszystko zeszło. Usuwanie wykonuj najlepiej przy wyłączonej przeglądarce.
Uruchom OTL w oknie Custom Scans/Fixes wklej:
:OTL
FF - prefs.js..browser.search.selectedEngine: "Gameztar Toolbar"
FF - prefs.js..extensions.enabledItems: {AAF6454A-4000-4015-84C1-6CD844C06B19}:1.0
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF
[2009-12-18 15:20:38 | 00,000,000 | ---D | M] (QuestService) -- C:\Program Files\Mozilla Firefox\extensions\{AAF6454A-4000-4015-84C1-6CD844C06B19}
[2009-12-18 15:20:38 | 00,002,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\questservice111.xml
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIEAddOn.dll File not found
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll File not found
O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll File not found
O3 - HKLM\..\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll File not found
O4 - HKLM..\Run: [NWEReboot] File not found
:Files
C:\Users\Patrycja\DoctorWeb
C:\Textual Content Provider
C:\Program Files\Automated Content Enhancer
C:\Program Files\Web Search Operator
jasiek1982 - Czw Sty 07, 2010 11:44 pm
ponieważ nie będę miał możliwości powortu na ten komputer przez najbliższe pare tygodniu, ostatniego skryptu nie wkleje, ale usunalem nie ppotrzebne programy szpiegowskie jak kazales. Bardzo Bardzo dziękuję za pomoc dobry człowieku. Pozdrawiam