Koń trojański w pliku wuaudit.exe jak usunąć?

[michalek8883]

Otl

http://wklej.to/nyeHM

po

Extras

http://wklej.to/coHTC

ot

[Atis]

Odinstaluj szkodliwy program Orbit Downloader:

http://www.dobreprogramy.pl/Popularny-O … 45945.html

Pobierz i uruchom AdwCleaner Kliknij Scan i później Clean.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV - File not found [Auto | Stopped] – C:\Program Files\Nero\Update\NASvc.exe – (NAUpdate) SRV - File not found [Auto | Stopped] – C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32) DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\VBoxNetFlt.sys – (VBoxNetFlt) DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\SysOp\USTAWI~1\Temp\FindAndMount\slicedisk.sys – (SliceDisk5) [2013-08-29 18:22:35 | 000,000,000 | —D | M] (Đ’Ń–Đ·Ńальныя закладкі) – C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\fx0ystvr.default\extensions\vb@yandex.ru [2013-09-01 18:59:32 | 000,377,144 | ---- | M] () (No name found) – C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\fx0ystvr.default\extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com) O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - No CLSID value found. O3 - HKLM…\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll () O3 - HKU\S-1-5-21-73586283-682003330-1177238915-1001…\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll () O4 - HKLM…\Run: [HDD Regenerator] “C:\Program Files\HDD Regenerator\Shell.exe” /1 File not found O4 - HKU\S-1-5-21-73586283-682003330-1177238915-1001…\Run: [tsiVideo] C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\tsiVi232.dll () O4 - HKU.DEFAULT…\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-18…\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-19…\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-20…\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found O8 - Extra context menu item: &Download by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) :Files C:\Program Files\Orbitdownloader C:\Documents and Settings\SysOp\Dane aplikacji\Orbit netsh firewall reset /c :Reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\alg] “Start”=dword:00000004 :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

[michalek8883]

Orbita wywaliłem już ten wirus był w tempie. DZIĘKI.