Calutki czas 100% użycia procka

[Puzon93]

Witam.

Sprawa jak wyżej, co muszę wkleić na forum żebyście to sprawdzili ?

[Neon1992]

1. Log z OTL

2. Screen z Menedżer zadań, zakładka Procesy.

[Puzon93]

OTL

Log z tekstem wklejonym, który jest podany w instrukcji - http://wklejto.pl/71206

Czysty Log, bez wklejania tamtych poleceń do Custom Scans/Fixes - http://wklejto.pl/71207

Screen :

[jessica]

Infekcja pendrivowa.

Uruchom OTL i w oknie Custom Scans/Fixes ( Własne opcje skanowania/Script )wklej to:

:OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15003&l=dis O4 - HKCU…\Run: [cdoosoft] C:\Documents and Settings\Dom\Ustawienia lokalne\Temp\herss.exe () O4 - HKCU…\Run: [dso32] C:\Documents and Settings\Dom\Ustawienia lokalne\Temp\dsoqq.exe () O4 - HKCU…\Run: [nod32] C:\Documents and Settings\Dom\Ustawienia lokalne\Temp\nodqq.exe () O32 - AutoRun File - [2010-06-29 13:27:09 | 000,000,063 | RHS- | M] () - C:\autorun.inf – [NTFS] O33 - MountPoints2{51280e8c-4cb1-11df-8498-00046159af4e}\Shell\AutoRun\command - “” = G:\ji83j.exe – File not found O33 - MountPoints2{51280e8c-4cb1-11df-8498-00046159af4e}\Shell\open\Command - “” = G:\ji83j.exe – File not found O33 - MountPoints2{5a317246-6cb9-11df-85a2-00046159af4e}\Shell\AutoRun\command - “” = F:\12gn6id2.exe – File not found O33 - MountPoints2{5a317246-6cb9-11df-85a2-00046159af4e}\Shell\open\Command - “” = F:\12gn6id2.exe – File not found O33 - MountPoints2{ec1964ec-59fa-11df-8505-00046159af4e}\Shell\AutoRun\command - “” = F:\ji83j.exe – File not found O33 - MountPoints2{ec1964ec-59fa-11df-8505-00046159af4e}\Shell\open\Command - “” = F:\ji83j.exe – File not found [2010-06-23 16:03:35 | 000,116,736 | RHS- | M] () – C:\eyruu.exe [2010-06-07 21:30:48 | 000,115,200 | RHS- | M] () – C:\yqq8eqil.exe [2010-05-11 19:49:20 | 000,112,128 | RHS- | M] () – C:\12gn6id2.exe [2010-05-22 18:24:14 | 000,114,688 | RHS- | M] () – C:\33r.exe [2010-05-10 15:19:12 | 000,111,616 | RHS- | M] () – C:\9rfpp.exe [2010-06-29 13:27:09 | 000,000,063 | RHS- | M] () – C:\autorun.inf [2010-05-25 19:38:20 | 000,113,152 | RHS- | M] () – C:\f662sjd.exe [2010-05-07 19:07:56 | 000,111,616 | RHS- | M] () – C:\i8ikdjwt.exe [2010-03-18 16:55:30 | 000,116,736 | RHS- | M] () – C:\ji83j.exe [2010-05-17 19:23:55 | 000,112,640 | RHS- | M] () – C:\p6xebrnt.exe [2010-05-13 17:17:51 | 000,112,640 | RHS- | M] () – C:\p9rs.exe [2010-05-21 17:11:53 | 000,114,688 | RHS- | M] () – C:\q0wfr.exe [2010-05-10 18:51:26 | 000,112,640 | RHS- | M] () – C:\qhbfqx.exe [2010-05-26 15:39:14 | 000,114,176 | RHS- | M] () – C:\wa.exe [2010-06-07 21:30:48 | 000,115,200 | RHS- | M] () – C:\yqq8eqil.exe :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptytemp] [Reboot]

Kliknij w Run Fix ( Wykonaj Script ). Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, w pole Custom Scans/Fixes ( Własne opcje skanowania/Script ) wklej:

%systemdrive%*.*

i dopiero wtedy kliknij “Run Scan” ( Skanuj ).

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

[Puzon93]

http://www.wklej.org/id/358144/

[jessica]

not found

Chyba w międzyczasie usuwałeś czymś innym?

Miał być jeszcze nowy log.

jessi