Komputer wolno chodzi OTL

system · 6 Maj 2010 15:40

jessica · 6 Maj 2010 15:53

Infekcja pendrivowa.

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL MOD - [2010-05-06 16:52:00 | 000,071,680 | RHS- | M] () – C:\Documents and Settings\PC-Dom\Ustawienia lokalne\Temp\nodqq0.dll O4 - HKCU…\Run: [cdoosoft] C:\Documents and Settings\PC-Dom\Ustawienia lokalne\Temp\herss.exe () O4 - HKCU…\Run: [nod32] C:\Documents and Settings\PC-Dom\Ustawienia lokalne\Temp\nodqq.exe () O32 - AutoRun File - [2010-05-06 17:14:42 | 000,000,063 | RHS- | M] () - C:\autorun.inf – [FAT32] O32 - AutoRun File - [2010-05-06 17:14:41 | 000,000,063 | RHS- | M] () - D:\autorun.inf – [NTFS] O32 - AutoRun File - [2010-05-06 17:14:41 | 000,000,063 | RHS- | M] () - E:\autorun.inf – [NTFS] O33 - MountPoints2{252658f0-23de-11df-9804-00c026a00c6f}\Shell\AutoRun\command - “” = H:\bbjl2g.exe – File not found O33 - MountPoints2{252658f0-23de-11df-9804-00c026a00c6f}\Shell\open\Command - “” = H:\bbjl2g.exe – File not found O33 - MountPoints2{86d6a3e0-0e81-11df-9775-00c026a00c6f}\Shell\AutoRun\command - “” = H:\hc3hvi0.exe – File not found O33 - MountPoints2{86d6a3e0-0e81-11df-9775-00c026a00c6f}\Shell\open\Command - “” = H:\hc3hvi0.exe – File not found [2010-04-30 16:29:20 | 000,000,000 | -HSD | C] – C:\FOUND.006 [2010-04-11 19:53:52 | 000,000,000 | -HSD | C] – C:\FOUND.005 [2010-05-05 15:36:42 | 000,112,128 | RHS- | M] () – C:\i8ikdjwt.exe [2010-04-25 10:05:32 | 000,128,512 | RHS- | M] () – C:\hc3hvi0.exe [2010-04-24 18:34:58 | 000,128,000 | RHS- | M] () – C:\twhvna.exe [2010-04-22 17:43:52 | 000,128,512 | RHS- | M] () – C:\vgyn6ewc.exe [2010-04-20 19:15:34 | 000,127,488 | RHS- | M] () – C:\utcddeq.exe [2010-04-19 17:31:58 | 000,128,512 | RHS- | M] () – C:\r3fhr.exe [2010-04-17 23:42:00 | 000,127,488 | RHS- | M] () – C:\lhhr8.exe :Files D:\i8ikdjwt.exe E:\i8ikdjwt.exe D:\hc3hvi0.exe E:\hc3hvi0.exe D:\twhvna.exe E:\twhvna.exe D:\vgyn6ewc.exe E:\vgyn6ewc.exe E:\utcddeq.exe D:\utcddeq.exe D:\r3fhr.exe E:\r3fhr.exe D:\lhhr8.exe E:\lhhr8.exe :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

system · 6 Maj 2010 16:42

Log z usuwania --> http://wklej.org/id/329278/

nowy Log —> http://wklej.org/id/329310/

jessica · 6 Maj 2010 16:56

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi