wlodi93
12 Listopad 2010 14:56
#1
Witam otóż mam problem z koniem trojańskim. Komputer pracuje wolniej i często wyłącza mi neta. Zawsze gdy włączam komputer pojawia się blue screen i komputer resetuje się i włącza za drugim razem.Co chwila wyskakuje z antyvira koń trojański Backoor generic 13 oraz Sheur3 i nie da sie ich usunać.
Log z OTL:http://www.wklej.org/id/417579/
log z extras:http://www.wklej.org/id/417584/
Leon1
12 Listopad 2010 15:50
#2
OTL w oknie Custom Scans-Fixes wklej następujący skrypt:
:OTL PRC - [2010-07-21 16:21:16 | 000,032,849 | ---- | M] (MyWebSearch.com ) – C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE PRC - [2010-07-21 16:21:16 | 000,028,762 | ---- | M] (MyWebSearch.com ) – C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE SRV - [2010-09-02 06:34:58 | 000,107,136 | ---- | M] (TMRG, Inc.) [Auto | Running] – C:\Program Files\RelevantKnowledge\rlservice.exe – (RelevantKnowledge) SRV - [2010-07-21 16:21:16 | 000,028,762 | ---- | M] (MyWebSearch.com ) [Auto | Running] – C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE – (MyWebSearchService) IE - HKCU…\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com ) FF - prefs.js…browser.search.selectedEngine: “MyWebSearch” FF - prefs.js…keyword.URL: “http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNfox000&ptb=NbIrEPBF2JUK9CefadvIDw&psa=&ind=2010072111&ptnrS=ZNfox000&si=&st=kwd&n=77cf442f&searchfor= ” FF - HKLM\software\mozilla\Firefox\Extensions\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin [2010-07-21 16:21:19 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\RelevantKnowledge [2010-11-12 15:41:56 | 000,000,000 | —D | M] O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com ) O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com ) O3 - HKLM…\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com ) O3 - HKCU…\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com ) O4 - HKLM…\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (MyWebSearch.com ) O4 - HKLM…\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com ) O4 - HKCU…\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com ) O4 - HKCU…\Run: [RGSC] D:\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe File not found :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe”=- “C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe”=- :Commands [emptytemp] [start explorer] [Reboot]
Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.
potem nowy log OTL robiony opcją Run Scan (Skanuj)
