幫忙移除WEBSEARCH
- 编辑:admin -幫忙移除WEBSEARCH
[color=blue]請將OTL fix log貼上,000,000,000。
[/color] [quote] :OTL IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,000,Start Page = [url=http://homepage.acer.com/rdr.aspx?b=ACAWl=0c04m=aspire_4820tgr=27361210k626l0453z145t77m1j292]?b=ACAWl=0c04m=aspire_4820tgr=27361210k626l0453z145t77m1j292[/url] IE - HKCU\..\SearchScopes,www.1password.cn, 乐成fixed (刪除)會有通知[color=blue](Fix complete! Click OK to open the fix log.)[/color] 按OK 重啟電腦,000 | ---D | M] (No name found) -- C:\Users\Kev\AppData\Roaming\mozilla\Extensions [2013/12/11 22:30:18 | 000,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: URL = [url=http://www.google.com/search?sourceid=ie7q={searchTerms}rls=com.microsoft:{language}:{referrer:source?}ie={inputEncoding}oe={outputEncoding}rlz=1I7ACAW]?sourceid=ie7q={searchTerms}rls=com.microsoft:{language}:{referrer:source?}ie={inputEncoding}oe={outputEncoding}rlz=1I7ACAW[/url] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: URL = [url=http://www.google.com/search?sourceid=ie7q={searchTerms}rls=com.microsoft:{language}:{referrer:source?}ie={inputEncoding}oe={outputEncoding}rlz=1I7ACAW_en]?sourceid=ie7q={searchTerms}rls=com.microsoft:{language}:{referrer:source?}ie={inputEncoding}oe={outputEncoding}rlz=1I7ACAW_en[/url] FF - prefs.js..extensions.enabledAddons: {93ed9dfe-1cdd-4b73-840b-22051ad9955b}:5.2.1.3 FF - prefs.js..extensions.enabledAddons: [email=magicplayer@torrentstream.org:1.1.33]magicplayer@torrentstream.org:1.1.33[/email] FF - prefs.js..extensions.enabledAddons: {477c4c36-24eb-11da-94d4-00e08161165f}:3.2.5.2 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule_x64.dll FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email]magicplayer@torrentstream.org[/email]: C:\Users\Kev\AppData\Roaming\ACEStream\extensions\firefox\[email]magicplayer@torrentstream.org[/email] [2013/11/12 16:17:09 | 000,000,000,000 | ---D | M] (Hong Kong Toolbar(Version: 5.2.1.3)) -- C:\Users\Kev\AppData\Roaming\mozilla\Firefox\Profiles\xg8lwgve.default\extensions\{93ed9dfe-1cdd-4b73-840b-22051ad9955b} [2014/03/06 18:38:26 | 000,000 | ---D | M] (Thunder Extension) -- C:\Users\Kev\AppData\Roaming\mozilla\Firefox\Profiles\xg8lwgve.default\extensions\{1B33E42F-EF14-4cd3-B6DC-174571C4349C} [2013/09/16 10:45:04 | 000, 雙按OTL.exe 將下列檔案copy paste 到Custom Scans/Fixes框架內 按左上角[Run Fix];[color=blue]執行fix前要關閉瀏覽器[/color],000 | ---D | M] [2011/11/27 12:38:10 | 000,www.mydraw.cn,000 | ---D | M] (Weebsave) -- C:\Users\Kev\AppData\Roaming\mozilla\Firefox\Profiles\xg8lwgve.default\extensions\[email]uooas4g@qlmdox.edu[/email] [2014/03/06 18:38:26 | 000,000 | ---D | M] (YoutubeAdblocker) -- C:\Users\Kev\AppData\Roaming\mozilla\Firefox\Profiles\xg8lwgve.default\extensions\[email]cgfqe64g_ip@oeyoaj.co.uk[/email] [2014/03/06 18:38:26 | 000,000 | ---D | M] (SNT) -- C:\Users\Kev\AppData\Roaming\mozilla\Firefox\Profiles\xg8lwgve.default\extensions\[email]zfxfovyau@laqmvwcj.com[/email] O2:[b]64bit:[/b] - BHO: (捃濘狟婥盓厥) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO647.9.16.4670.dll (深圳市迅雷网络技能有限公司) 2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg64.dll (Google Inc.) O2 - BHO: (no name) - {00000ADA-7E0D-47C1-986C-F017D09C4304} - No CLSID value found. O2 - BHO: (no name) - {06433BFE-4946-4E89-823D-CD359C81CD06} - No CLSID value found. O2 - BHO: (no name) - {481EE3EC-C026-4F9A-BA22-FD07654ADFC0} - No CLSID value found. O2 - BHO: (捃濘狟婥盓厥) - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.9.16.4670.dll File not found O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.) O2 - BHO: (捃濘狟婥盓厥郪璃) - {DE05CF4A-7B0A-4775-B5E5-396244938679} - C:\Program Files (x86)\Thunder Network\Thunder\Thunder BHO Platform\np_tdieplat.dll File not found O2 - BHO: (FF6B2058-A62A-3BBA-142D-5A5DC20119D1 Class) - {FF6B2058-A62A-3BBA-142D-5A5DC20119D1} - C:\Program Files (x86)\QvodPlayer\AddIn\{FF6B2058-A62A-3BBA-142D-5A5DC20119D1}\QvodAddr.dll File not found O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部视频 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetAllFlvUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载当前视频 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetFlvUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm () O8 - Extra context menu item: 使用快车3下载 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载全部视频 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetAllFlvUrl.htm () O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8 - Extra context menu item: 使用快车3下载当前视频 - C:\Users\Kev\AppData\Roaming\FlashGetBHO\GetFlvUrl.htm () O8 - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm () O9 - Extra 'Tools' menuitem : 启动迅雷看看播放器 - {019c3416-8cb2-491a-a3c7-d9fcddc9d600} - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolMenu.htm () O9 - Extra Button: 启动迅雷看看播放器 - {119c3416-8cb2-491a-a3c7-d9fcddc9d600} - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolBar.htm () O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DA1F2264-808D-455F-A134-134530B10D22}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\KuGoo - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\KuGoo3 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\KuGoo - No CLSID value found O18 - Protocol\Handler\KuGoo3 - No CLSID value found O18 - Protocol\Handler\ms-help - No CLSID value found :Files C:\ProgramData\HostIt C:\ProgramData\7f672ec7e94efc3f C:\Users\Kev\AppData\Local\Comodo ipconfig /flushdns /c :Commands [PURITY] [EMPTYTEMP] [reboot] [/quote] 。
000,Start Page = [url=http://homepage.acer.com/rdr.aspx?b=ACAWl=0c04m=aspire_4820tgr=27361210k626l0453z145t77m1j292]?b=ACAWl=0c04m=aspire_4820tgr=27361210k626l0453z145t77m1j292[/url] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,。
,数据恢复