Avast wykrywa infekcje, ale nie może usunąć

grzxxx · 5 Grudzień 2012 14:40

Witam, dzisiaj avast wykrył u mnie takiego oto wirusa;

http://wklej.org/id/888713/

extras:

http://www.wklej.org/id/888735/

otl

http://www.wklej.org/id/888737/

Atis · 5 Grudzień 2012 15:16

Gdzie Avast wykrywa tego wirusa?

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV - File not found [Auto | Running] – c:\windows\system32\serv32.dll – (zevgrhcd) SRV - File not found [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate) SRV - File not found [On_Demand | Stopped] – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe – (McComponentHostService) SRV - File not found [Auto | Stopped] – E:\hamachi\hamachi-2.exe – (Hamachi2Svc) SRV - File not found [Auto | Stopped] – E:\FileZilla Server\FileZilla Server.exe – (FileZilla Server) SRV - File not found [Auto | Stopped] – E:\bluesoil\BsMobileCS.exe – (BsMobileCS) SRV - File not found [On_Demand | Stopped] – E:\bluesoil\BsHelpCS.exe – (BsHelpCS) SRV - File not found [Disabled | Stopped] – C:\Documents and Settings\All Users\Dane aplikacji\Browser Manager\2.3.796.11{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe – (Browser Manager) SRV - File not found [Auto | Stopped] – C:\WINDOWS\ATKKBService.exe – (ATKKeyboardService) DRV - File not found [Kernel | On_Demand | Stopped] – System32\Drivers\Video3D32.sys – (Video3D) DRV - File not found [Kernel | On_Demand | Stopped] – F:\NTGLM7X.sys – (SetupNTGLM7X) DRV - File not found [Kernel | On_Demand | Stopped] – E:\Program Files\MSI\Live Update 5\NTIOLib.sys – (NTIOLib_1_0_4) DRV - File not found [Kernel | On_Demand | Stopped] – F:\NTACCESS.sys – (NTACCESS) DRV - File not found [Kernel | On_Demand | Stopped] – F:\install4\MSICPL.sys – (MSICPL) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\igxpmp32.sys – (ialm) DRV - File not found [Kernel | On_Demand | Stopped] – F:\INSTALL\GMSIPCI.SYS – (GMSIPCI) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_med … 1353237340 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_med … 1353237340 O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found. O2 - BHO: (no name) - {7901D42B-C8A8-7961-157E-8758C98B56A4} - c:\windows\system32\serv32.dll File not found O2 - BHO: (no name) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - No CLSID value found. O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll File not found O3 - HKLM…\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O3 - HKU\S-1-5-21-343818398-776561741-682003330-1003…\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-343818398-776561741-682003330-1003…\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O3 - HKU\S-1-5-21-343818398-776561741-682003330-1003…\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll File not found O4 - HKLM…\Run: [ROC_ROC_NT] “C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe” / /PROMPT /CMPID=ROC_NT File not found O4 - HKU\S-1-5-21-343818398-776561741-682003330-1003…\Run: [fsm] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = File not found O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found O9 - Extra ‘Tools’ menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O20 - AppInit_DLLs: (c:\docume~1\alluse~1\daneap~1\browse~1\23796~1.11{16cdf~1\browse~1.dll) - File not found O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found [2012-11-07 15:45:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012-06-12 13:10:11 | 000,000,004 | RHS- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\sysqcl1129139270.dat [2011-10-18 09:11:04 | 000,002,045 | -H-- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\whlprd32a.dll [2011-08-16 09:11:06 | 000,002,045 | -H-- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\whlb32g.dll [2012-10-18 13:14:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2012-05-22 08:35:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2012-10-31 20:52:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji~Browser Manager :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.