REKLAMA

AdwCleaner_S2_.txt

Jak usunąć stronę startową uri.pl po instalacji uri-decoder.exe?

po usunięciu podanych programów został wykonany skan i czyszczenie lecz gdy chce wykonać skrypt zawiesza mi komputer ! Dodano po 21 : może to coś wyjaśni


Pobierz plik - link do postu

# AdwCleaner v3.005 - Report created 26/09/2013 at 22:41:16
# Updated 22/09/2013 by Xplode
# Operating System : Microsoft Windows XP Dodatek Service Pack 2 (32 bits)
# Username : Administrator - MARIOLA
# Running from : C:\Documents and Settings\Administrator\Ustawienia lokalne\Temporary Internet Files\Content.IE5\5V7PT04G\adwcleaner[1].exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Update WebConnect
Service Deleted : WsysSvc

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\apn
Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\BitGuard
Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\BonanzaDealsLive
Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\eSafe
Folder Deleted : C:\Program Files\Allin1Convert_8h
Folder Deleted : C:\Program Files\BonanzaDealsLive
Folder Deleted : C:\Program Files\HDvidCodec.com
Folder Deleted : C:\Program Files\WebConnect
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\apn
Folder Deleted : C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\eIntaller
Folder Deleted : C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\BonanzaDealsLive
Folder Deleted : C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ConvertAd
Folder Deleted : C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\FilesFrog Update Checker
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\0D0S1L2Z1P1B0T1P1B2Z
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Allin1Convert_8h
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\BabSolution
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Babylon
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Systweak
Folder Deleted : C:\Documents and Settings\Administrator\Menu Start\Programy\FilesFrog Update Checker
Folder Deleted : C:\Documents and Settings\Administrator\Menu Start\Programy\HDvidCodec.com
Folder Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\jetpack
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\\invalidprefs.js
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\bProtector_extensions.rdf
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\searchplugins\ask-search.xml
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\searchplugins\ask-web-search.xml
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\searchplugins\Babylon.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\qvo6.xml
File Deleted : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\user.js
File Deleted : C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Deleted : C:\WINDOWS\Tasks\EPUpdater.job

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Pulpit\google.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Pulpit\Opera.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk
Shortcut Disinfected : C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Menu Start\Programy\Internet Explorer.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Menu Start\Programy\Akcesoria\Narzêdzia systemowe\Internet Explorer (bez dodatków).lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
Shortcut Disinfected : C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przegl¹darkê Internet Explorer.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\5b6db8cb335e548
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert Search Scope Monitor]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert_8h Browser Plugin Loader]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Documents and Settings\All Users\Dane aplikacji\eSafe\eGdpSvc.exe]
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Crossrider
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\Somoto
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\WebConnect
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\Software\qvo6Software
Key Deleted : HKLM\Software\WebConnect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebConnect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSysControl
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WebConnect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WSysControl

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v23.0.1 (pl)

[ File : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\tw7tpbne.default\prefs.js ]

Line Deleted : user_pref( " avg.userPreferences.URLBarFocus.whiteList " , " bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com " );
Line Deleted : user_pref( " extensions.delta.admin " , false);
Line Deleted : user_pref( " extensions.delta.aflt " , " babsst " );
Line Deleted : user_pref( " extensions.delta.appId " , " {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} " );
Line Deleted : user_pref( " extensions.delta.autoRvrt " , " false " );
Line Deleted : user_pref( " extensions.delta.bbDpng " , " 26 " );
Line Deleted : user_pref( " extensions.delta.cntry " , " PL " );
Line Deleted : user_pref( " extensions.delta.dfltLng " , " en " );
Line Deleted : user_pref( " extensions.delta.excTlbr " , false);
Line Deleted : user_pref( " extensions.delta.ffxUnstlRst " , true);
Line Deleted : user_pref( " extensions.delta.hdrMd5 " , " D02FB3304C1DDD96609B2F5396D1E4D1 " );
Line Deleted : user_pref( " extensions.delta.id " , " 005e79990000000000000015f26b8faf " );
Line Deleted : user_pref( " extensions.delta.instlDay " , " 15974 " );
Line Deleted : user_pref( " extensions.delta.instlRef " , " sst " );
Line Deleted : user_pref( " extensions.delta.lastVrsnTs " , " 1.8.24.621:06:11 " );
Line Deleted : user_pref( " extensions.delta.newTab " , false);
Line Deleted : user_pref( " extensions.delta.prdct " , " delta " );
Line Deleted : user_pref( " extensions.delta.prtnrId " , " delta " );
Line Deleted : user_pref( " extensions.delta.rvrt " , " false " );
Line Deleted : user_pref( " extensions.delta.sg " , " czb " );
Line Deleted : user_pref( " extensions.delta.smplGrp " , " none " );
Line Deleted : user_pref( " extensions.delta.tlbrId " , " base " );
Line Deleted : user_pref( " extensions.delta.tlbrSrchUrl " , " " );
Line Deleted : user_pref( " extensions.delta.vrsn " , " 1.8.24.6 " );
Line Deleted : user_pref( " extensions.delta.vrsnTs " , " 1.8.24.621:06:11 " );
Line Deleted : user_pref( " extensions.delta.vrsni " , " 1.8.24.6 " );
Line Deleted : user_pref( " extensions.delta_i.babExt " , " " );
Line Deleted : user_pref( " extensions.delta_i.babTrack " , " affID=120699 & tl=gpn65238 & tsp=5017 " );
Line Deleted : user_pref( " extensions.delta_i.srcExt " , " ss " );
Line Deleted : user_pref( " extensions.mywebsearch.prevDefaultEngine " , " Uri.pl " );
Line Deleted : user_pref( " extensions.mywebsearch.prevKwdEnabled " , true);
Line Deleted : user_pref( " extensions.mywebsearch.prevKwdURL " , " hxxp://search.uri.pl/search.php?i=cugb & q= " );
Line Deleted : user_pref( " extensions.mywebsearch.prevSelectedEngine " , " Uri.pl " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.homepage " , " hxxp://home.tb.ask.com/index.jhtml?ptb=52E2FA0B-8E61-450A-880C-8EE99C145EC6 & n=77fd5b0d & p2=^AYY^xdm007^S06949^pl & si=CI_9sOLl6bkCFc7C3godt[...]
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.hp.enabled " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.hp.lastGuardTime " , 1543434571);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.hp.numGuards " , 1);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.initialized " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.contextKey " , " " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.installDate " , " 2013092621 " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.partnerId " , " ^AYY^xdm007^S06949^pl " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId " , " CI_9sOLl6bkCFc7C3godtFcAnQ " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.success " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.installation.toolbarId " , " 52E2FA0B-8E61-450A-880C-8EE99C145EC6 " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.lastActivePing " , " 1380223933087 " );
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.options.defaultSearch " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark._8hMembers_.options.tabEnabled " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark.hp.enabled " , true);
Line Deleted : user_pref( " extensions.toolbar.mindspark.hp.enabled.guid " , " allin1convert@mindspark.com " );
Line Deleted : user_pref( " extensions.toolbar.mindspark.lastInstalled " , " allin1convert@mindspark.com " );
Line Deleted : user_pref( " keyword.URL " , " hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd & ptb=52E2FA0B-8E61-450A-880C-8EE99C145EC6 & n=77fd5b0d & ind=2013092621 & p2=^AYY^xdm007^S06949^pl & si=CI_9sOLl6bkCFc7C3godtFcAnQ & [...]

-\\ Google Chrome v29.0.1547.76

[ File : C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\preferences ]

Deleted : search_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [22224 octets] - [26/09/2013 21:30:41]
AdwCleaner[R1].txt - [25588 octets] - [26/09/2013 21:32:35]
AdwCleaner[R2].txt - [19922 octets] - [26/09/2013 22:40:37]
AdwCleaner[S0].txt - [513 octets] - [26/09/2013 21:31:32]
AdwCleaner[S1].txt - [169 octets] - [26/09/2013 21:33:28]
AdwCleaner[S2].txt - [16937 octets] - [26/09/2013 22:41:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [16998 octets] ##########