Problem z wirusem sukoku

[kasiula126p (Katarzyna Nikiel)]

Potrzebuję pomocy w usunięciu wirusa Sukoku

proszę o sprawdzenie loga skanowane w OTL

http://wklej.org/id/204396/

http://wklej.org/id/204391/

[deFco247]

W białe dolne okno Custom Scans/Fixes w OTL wklej:

:Processes Explorer.EXE :Services Sukoku Service ASKUpgrade :OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) IE - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll () IE - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre0.dll (Conduit Ltd.) FF - HKLM\software\mozilla\Firefox\Extensions\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.7.0.4550\FF [2009-11-12 13:53:35 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\Extensions\{0BA0192D-94A5-45e3-B2B8-3EC5A1A0B5EC}: C:\Program Files\Media Access Startup\1.5.6.910\FF [2009-11-12 13:53:35 | 00,000,000 | —D | M] O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (P2P Energy Toolbar) - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll (Conduit Ltd.) O2 - BHO: (NP Helper Class) - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.7.0.4550\NPIEAddOn.dll () O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O2 - BHO: (System Search Dispatcher) - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - C:\Program Files\System Search Dispatcher\1.4.0.970\ssd.dll () O2 - BHO: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre0.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKLM…\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\Toolbar\WebBrowser: (P2P Energy Toolbar) - {2BAE58C2-79F9-45D1-A286-81F911301C3A} - C:\Program Files\P2P_Energy\tbP2P_.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\Toolbar\WebBrowser: (Free Lunch Design Toolbar) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - C:\Program Files\Free_Lunch_Design\tbFre1.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-746137067-1390067357-1801674531-1004…\Toolbar\WebBrowser: (free-downloads.net Toolbar) - {ECDEE021-0D17-467F-A1FF-C7A115230949} - C:\Program Files\free-downloads.net\tbfre0.dll (Conduit Ltd.) O33 - MountPoints2{e8f756fa-e48b-11dd-81be-0018f3250e72}\Shell\Open(0)\command - “” = Recycled\ctfmon.exe [2009-11-13 13:03:38 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Wru [2009-11-12 13:53:35 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sukoku [2009-11-12 13:53:33 | 00,000,000 | —D | C] – C:\Program Files\DoubleD [2009-11-12 13:53:32 | 00,000,000 | —D | C] – C:\Documents and Settings\Nykel\Ustawienia lokalne\Dane aplikacji\DoubleD [2009-11-12 13:51:13 | 00,000,000 | —D | C] – C:\Program Files\AskSearch [2009-11-04 14:31:49 | 00,000,000 | —D | C] – C:\Program Files\AskBarDis(2) :Commands [emptytemp] [start explorer] [purtiy]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania oraz nowy log robiony opcją Run Scan.

[kasiula126p (Katarzyna Nikiel)]

log z usuwania http://wklej.org/id/204462/

nowy log http://wklej.org/id/204475/

[deFco247]

Część tego się nie usunęła…

Wklej w OTL:

:OTL [2009-11-12 13:55:06 | 00,000,000 | —D | C] – C:\Program Files\AskBarDis [2009-11-12 13:53:35 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Sukoku [2009-11-12 13:53:33 | 00,000,000 | —D | C] – C:\Program Files\DoubleD [2009-11-12 13:53:32 | 00,000,000 | —D | C] – C:\Documents and Settings\Nykel\Ustawienia lokalne\Dane aplikacji\DoubleD [2009-11-12 13:51:13 | 00,000,000 | —D | C] – C:\Program Files\AskSearch [2009-11-04 14:31:49 | 00,000,000 | —D | C] – C:\Program Files\AskBarDis(2) :Commands [reboot]

Run Fix. Restart.

Potem log z usuwania.