Problem z trojanami, internet chodzi bardzo wolno

[Przemo96]

Witam, proszę o sprawdzenie logów:

http://www.wklejto.pl/65658

problem: ping stale na poziomie 700-800; internet spowolniony; spybot znajduje wirusa o nazwie: coolwwwsearch.toolband ale nie może go wykasować.

z góry dzięki za pomoc.

[bibut]

podaj log z OTL http://www.instalki.pl/programy/downloa ... e/OTL.html

instrukcja...

kliknij run scan

po zakończeniu tam gdzie OTL

powstaną pliki OTL i Extras

zawartość OTL wklej na portal http://wklej.to/

podaj do niego link

[Przemo96]

Link z logiem w OTL : http://www.wklejto.pl/65663

[bibut]

pokaż ukryte pliki http://plom.pl/windows-7-pokaz-ukryte-pliki/

wejdź na dysk D:

będą tam poprednio nie widziane pliki autorun.inf

otwórz go i wklej treść na forum

[Przemo96]

[autorun]

OPEN=SETUP.EXE

ICON=SETUP.EXE,0

shell\configure=&Configure...

shell\configure\command=SETUP.EXE

shell\install=&Install...

shell\install\command=SETUP.EXE

To jeden z plików..

[Lukasz6]

bibut

Z tego co wiem już raz byłeś upominany przez moderatora o nie wypowiadanie się w dziale Bezpieczeństwo . :?

Przemo96 nie wykonuj skryptu podanego przez bibut ! .

Wykonaj taki skrypt :

W OTL w dolne okienko ,, Custom Scans/Fixes " wklej:

:OTL IE - HKLM..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFree.dll (Conduit Ltd.) IE - HKLM..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource ... =CT1750559 IE - HKCU..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.) FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "BS Player Customized Web Search" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=2&q=" [2009-10-31 15:34:41 | 000,000,000 | ---D | M] (BS Player Toolbar) -- C:\Users\Obara\AppData\Roaming\mozilla\Firefox\Profiles\xasrdgm4.default\extensions{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFree.dll (Conduit Ltd.) O2 - BHO: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.) O3 - HKLM..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM..\Toolbar: (FreeRIP.com Toolbar) - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files\FreeRIP3\toolband.dll () O3 - HKLM..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found O3 - HKLM..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM..\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFree.dll (Conduit Ltd.) O3 - HKLM..\Toolbar: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.) O3 - HKCU..\Toolbar\WebBrowser: (FreeRIP.com Toolbar) - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files\FreeRIP3\toolband.dll () O3 - HKCU..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found O3 - HKCU..\Toolbar\WebBrowser: (Free Lunch Design Toolbar) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - C:\Program Files\Free_Lunch_Design\tbFree.dll (Conduit Ltd.) O3 - HKCU..\Toolbar\WebBrowser: (BS Player Toolbar) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files\BS_Player\tbBS_P.dll (Conduit Ltd.) O4 - HKCU..\Run: [iPLA!] C:\Program Files\ipla\ipla.exe File not found O4 - HKLM..\RunOnceEx: [Flags] Reg Error: Invalid data type. File not found O4 - Startup: C:\Users\Obara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wipe tray agent.lnk = C:\Program Files\Wipe\wipetray.exe File not found O8 - Extra context menu item: &FreeRIP Search - C:\Program Files\FreeRIP3\toolband.dll () O13 - gopher Prefix: missing O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - AutoRun File - [2010-04-30 18:36:51 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [NTFS] O33 - MountPoints2{4ecb6821-c642-11de-861e-001d7d9e88f6}\Shell\AutoRun\command - "" = K:\Autorun.exe -- File not found :Commands [emptytemp] [start explorer] [Reboot]

Kliknij Run Fix. Zrestartuj komputer

Potem daj raport, który wyskoczy po usuwaniu oraz wykonaj nowy log OTLem