Problem z usunięciem keyloggera

anon10033529 · 27 Styczeń 2011 18:50

Skan OTL’a:

Skan Extras:

Bardzo proszę o sprawdzenie.

Leon1 · 27 Styczeń 2011 19:08

OTL w oknie Custom Scans-Fixes (własne opcje skanowania/skrypt)wklej następujący skrypt:

:OTL O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (Reg Error: Key error.) O20 - HKLM Winlogon: TaskMan - (C:\Users\Dawid\csrss.exe) - File not found O20 - HKU\S-1-5-21-1608202004-1720363391-3026425667-1000 Winlogon: Shell - (C:\Users\Dawid\csrss.exe) - File not found O20 - HKU\S-1-5-21-1608202004-1720363391-3026425667-1000 Winlogon: Shell - (C:\RECYCLER\S-1-5-21-7690444758-9694455293-477656613-9146\mgrls32.exe) - File not found O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Dtella.lnk - - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Macro Express 3.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Users^Dawid^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Budzik.lnk - Reg Error: Value error. - File not found MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - File not found MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - File not found MsConfig - StartUpReg: EPSON Stylus DX7400 Series - hkey= - key= - File not found MsConfig - StartUpReg: NeroFilterCheck - hkey= - key= - File not found MsConfig - StartUpReg: RtHDVCpl - hkey= - key= - File not found MsConfig - StartUpReg: SMSERIAL - hkey= - key= - File not found MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - File not found MsConfig - StartUpReg: WMPNSCFG - hkey= - key= - File not found :Files C:\Users\Dawid\AppData\Local\Temp*.html :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [start explorer] [Reboot]

Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.

potem nowy log OTL robiony opcją Run Scan (Skanuj)