Jakiś wirus, przycina kompa na amen

[bercik860 (B963672)]

Witam

Ostatnio na Kasperskim wyskakuje mi wirus, gdy daje skanowanie KAV przycina się a po nim cały komputer. Nie wiem co poradzić, więc proszę o pomoc.

LOG z OTL:

http://wklejto.pl/54950

[jessica]

Szkoda, że nie podałeś, co i gdzie wykrywa Kaspersky.

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL [2009-12-04 18:15:37 | 00,226,304 | ---- | C] () – C:\WINDOWS\System32\sshnas.dll IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.myquickfinder.com FF - HKLM\software\mozilla\Firefox\Extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.1.0.2080\FF [2009-12-21 19:36:23 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5290\FF [2009-12-21 19:36:38 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.1.0.1960\FF [2009-12-21 19:36:57 | 00,000,000 | —D | M] O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5290\ACEIEAddOn.dll () O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\4.1.0.1960\CPAIEAddOn.dll () O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1990\CMWIE.dll () O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1810\TCPIE.dll () O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.1.0.2080\WSO.dll () O3 - HKLM…\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll () O3 - HKCU…\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.3.6670\mvb0.dll () O4 - HKCU…\Run: [coaah] C:\Documents and Settings\user\coaah.exe File not found O4 - HKCU…\Run: [user] C:\Documents and Settings\user\user.exe File not found O20 - Winlogon\Notify\cbssreg: DllName - C:\Documents and Settings\All Users\Dokumenty\Settings\cbss.dll - C:\Documents and Settings\All Users\Dokumenty\Settings\cbss.dll File not found [2010-01-20 17:16:41 | 00,000,000 | ---- | M] () – C:\601ugf.exe [2010-01-17 16:07:03 | 00,174,592 | ---- | M] () – C:\WINDOWS\msc.exe [2010-01-16 21:04:48 | 00,171,520 | ---- | M] () – C:\WINDOWS\msb.exe :Files D:\601ugf.exe C:\Program Files\Web Search Operator C:\Program Files\Gameztar Toolbar C:\Program Files\Textual Content Provider C:\Program Files\Content Management Wizard C:\Program Files\Customized Platform Advancer C:\Program Files\Automated Content Enhancer :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz log z usuwania.

jessi

[bercik860 (B963672)]

Log z usuwania

http://www.wklejto.pl/54969

Nowy log

http://www.wklejto.pl/54970

Co do tego wirusa, to KAV pokazuje tak:

Jak dam “OK” czyli wykonaj leczenie, to zaczyna skanować, zatrzymuje się na 1% i zcina cały komp na amen.