Powolność systemu i nietylko

[zIuuu (7030853)]

Mam odczucie, że system i internet mi ostatnio wolniej działają. Prosiłbym o sprawdzenie loga http://wklejto.pl/index.php?id=43681 . Pozdrawiam.

[deFco247]

Jest infekcja z pendrive.

Pokaż logi OTL, GMER oraz SREng.

W GMER nic nie zmieniamy -> wciskamy Szukaj (skan potrwa kilkadziesiąt minut) -> po skanie Kopiuj.

[zIuuu (7030853)]

Logi z tych programów:

-OTL http://wklejto.pl/43682

-SREng http://wklejto.pl/43683

-GMER http://wklejto.pl/index.php?id=43692.

[deFco247]

Usuń infekcje z pendrive lub kart pamięci za pomocą Flash Disinfector lub tych narzędzi.

Lub format.

W Custom Scans/Fixes w OTL wklej:

:Processes Explorer.EXE :OTL O4 - HKU\S-1-5-21-1659004503-73586283-1177238915-1003…\Run: [cdoosoft] C:\DOCUME~1\PC\USTAWI~1\Temp\herss.exe File not found O32 - AutoRun File - [2009-09-29 23:02:44 | 00,000,063 | RHS- | M] () - C:\autorun.inf – [NTFS] O32 - AutoRun File - [2009-09-29 23:02:46 | 00,000,063 | RHS- | M] () - D:\autorun.inf – [FAT32] O32 - AutoRun File - [2009-09-29 23:02:46 | 00,000,063 | RHS- | M] () - E:\autorun.inf – [FAT32] O33 - MountPoints2{05e29f61-c7bc-11dd-b64c-001f1f121496}\Shell\AutoRun\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{05e29f61-c7bc-11dd-b64c-001f1f121496}\Shell\open\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{3f514d13-4453-11dd-ab8d-806d6172696f}\Shell\AutoRun\command - “” = rg9g9bgq.exe O33 - MountPoints2{3f514d13-4453-11dd-ab8d-806d6172696f}\Shell\open\Command - “” = rg9g9bgq.exe O33 - MountPoints2{3f514d14-4453-11dd-ab8d-806d6172696f}\Shell\AutoRun\command - “” = rg9g9bgq.exe O33 - MountPoints2{3f514d14-4453-11dd-ab8d-806d6172696f}\Shell\open\Command - “” = rg9g9bgq.exe O33 - MountPoints2{3f514d15-4453-11dd-ab8d-806d6172696f}\Shell\AutoRun\command - “” = rg9g9bgq.exe O33 - MountPoints2{3f514d15-4453-11dd-ab8d-806d6172696f}\Shell\open\Command - “” = rg9g9bgq.exe O33 - MountPoints2{6ef68f9c-1be1-11de-b727-001f1f121496}\Shell\AutoRun\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{6ef68f9c-1be1-11de-b727-001f1f121496}\Shell\open\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{ae3842a6-47c2-11de-b7ac-001f1f121496}\Shell\AutoRun\command - “” = xlu8a8sy.exe O33 - MountPoints2{ae3842a6-47c2-11de-b7ac-001f1f121496}\Shell\explore\Command - “” = xlu8a8sy.exe O33 - MountPoints2{ae3842a6-47c2-11de-b7ac-001f1f121496}\Shell\open\Command - “” = xlu8a8sy.exe O33 - MountPoints2{df71bf16-534d-11dd-b53a-00196664d53b}\Shell\AutoRun\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{df71bf16-534d-11dd-b53a-00196664d53b}\Shell\open\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{f236ed04-8061-11de-b847-001f1f121496}\Shell\AutoRun\command - “” = J:\g8k.exe – File not found O33 - MountPoints2{f236ed04-8061-11de-b847-001f1f121496}\Shell\open\Command - “” = J:\g8k.exe – File not found O33 - MountPoints2{f58a57fe-420c-11de-b79e-001f1f121496}\Shell\AutoRun\command - “” = J:\icxpa.cmd – File not found O33 - MountPoints2{f58a57fe-420c-11de-b79e-001f1f121496}\Shell\open\Command - “” = J:\icxpa.cmd – File not found O33 - MountPoints2{f6c0f9ad-4d15-11de-b7bb-001f1f121496}\Shell\AutoRun\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found O33 - MountPoints2{f6c0f9ad-4d15-11de-b7bb-001f1f121496}\Shell\open\command - “” = J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isi32.exe – File not found :Files C:\mranjm.exe C:\w9uxx92.exe C:\bycfht.exe C:\ucivd6xi.bat C:\3yalgc.exe C:\cqb6wo.exe C:\2o1ajagt.exe C:\wrsf.exe C:\lhh3v.exe C:\qcod.exe C:\o8tf6l.exe C:\86.exe C:\qcoageh.exe C:\ph.exe C:\dogyx90.exe C:\10nb.exe C:\3c.exe C:\m.exe C:\y.bat C:\cj3k.exe D:\mranjm.exe D:\w9uxx92.exe D:\bycfht.exe D:\ucivd6xi.bat D:\3yalgc.exe D:\cqb6wo.exe D:\2o1ajagt.exe D:\wrsf.exe D:\lhh3v.exe D:\qcod.exe D:\o8tf6l.exe D:\86.exe D:\qcoageh.exe D:\ph.exe D:\dogyx90.exe D:\10nb.exe D:\3c.exe D:\m.exe D:\y.bat D:\cj3k.exe E:\mranjm.exe E:\w9uxx92.exe E:\bycfht.exe E:\ucivd6xi.bat E:\3yalgc.exe E:\cqb6wo.exe E:\2o1ajagt.exe E:\wrsf.exe E:\lhh3v.exe E:\qcod.exe E:\o8tf6l.exe E:\86.exe E:\qcoageh.exe E:\ph.exe E:\dogyx90.exe E:\10nb.exe E:\3c.exe E:\m.exe E:\y.bat E:\cj3k.exe :Commands [emptytemp] [start explorer]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania oraz nowy OTL.txt

[zIuuu (7030853)]

Log z usuwania http://wklejto.pl/43694 i OTL http://wklejto.pl/43698.

[deFco247]

Log wygląda na czysty.

W OTL kliknij CleanUp.

Wykonaj pełny skan Malwarebytes’ Anti-Malware - znalezione obiekty usuń.

Gdy będą wirusy pokaż raport.

Wyczyść rejestr i dysk CCleaner.

Usuń zbędniki z autostartu.

Podłącz pamięci przenośne i zastosuj Flash Disinfector.

[zIuuu (7030853)]

Malwarebytes coś niby znalazł tu masz log http://wklejto.pl/43701 .

[deFco247]

Miało być pełne skanowanie, a nie szybkie.

Poza tym znalezione obiekty usuń.