23kuba
11 Sierpień 2010 15:02
#1
Witam,
pojawił się u mnie problem dość dawno z sshnas21.dll
widzę, że możecie pomóc
Więc i ja Was proszę dobre ludki o pomoc
Z mojej strony mogę wkleić logi z tego OTL’a. Oto one:
Log OTL
http://wklej.org/id/375346/
Z góry dziękuję za pomoc.
wklej w OTL i naciśnij wykonaj skrypt:
:OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15003&l=dis FF - prefs.js…browser.search.defaultengine: “Ask.com ” FF - prefs.js…browser.search.defaultenginename: “Ask.com ” FF - prefs.js…browser.search.order.1: “Ask.com ” [2010/04/06 21:02:20 | 000,002,425 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\Mozilla\FireFox\Profiles\pzf9tkwf.default\searchplugins\askcom.xml [2010/03/08 21:24:45 | 000,002,055 | ---- | M] () – C:\Users\Kuba\AppData\Roaming\Mozilla\FireFox\Profiles\pzf9tkwf.default\searchplugins\daemon-search.xml O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKCU…\Run: [YVIBBBHA8C] C:\Users\Kuba\AppData\Local\Temp\Fhl.exe File not found O4 - HKCU…\Run: [Canaveral] C:\windows\System32\sshnas21.DLL File not found O33 - MountPoints2{0b99d992-3bba-11df-b937-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{0b99d992-3bba-11df-b937-0024541b6c4b}\Shell\AutoRun\command - “” = H:\AutoRun.exe – [2008/04/23 23:44:40 | 000,114,688 | R— | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2{1d510c66-2bb2-11df-9502-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{1d510c66-2bb2-11df-9502-0024541b6c4b}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{1d510c6a-2bb2-11df-9502-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{1d510c6a-2bb2-11df-9502-0024541b6c4b}\Shell\AutoRun\command - “” = H:\AutoRun.exe – [2008/04/23 23:44:40 | 000,114,688 | R— | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2{548c9dec-2abc-11df-a9b2-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{548c9dec-2abc-11df-a9b2-0024541b6c4b}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{548c9df0-2abc-11df-a9b2-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{548c9df0-2abc-11df-a9b2-0024541b6c4b}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{549ec970-2b70-11df-941a-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{549ec970-2b70-11df-941a-0024541b6c4b}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{549ec974-2b70-11df-941a-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{549ec974-2b70-11df-941a-0024541b6c4b}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{818bec3e-2f9a-11df-9a01-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{818bec3e-2f9a-11df-9a01-0024541b6c4b}\Shell\AutoRun\command - “” = G:\cdstart.exe – File not found O33 - MountPoints2{a26228d7-4404-11df-85f1-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{a26228d7-4404-11df-85f1-0024541b6c4b}\Shell\AutoRun\command - “” = I:\AutoRun.exe – File not found O33 - MountPoints2{a26228d9-4404-11df-85f1-0024541b6c4b}\Shell - “” = AutoRun O33 - MountPoints2{a26228d9-4404-11df-85f1-0024541b6c4b}\Shell\AutoRun\command - “” = H:\AutoRun.exe – [2008/04/23 23:44:40 | 000,114,688 | R— | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\F\Shell - “” = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2\H\Shell - “” = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - “” = H:\AutoRun.exe – [2008/04/23 23:44:40 | 000,114,688 | R— | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\I\Shell - “” = AutoRun O33 - MountPoints2\I\Shell\AutoRun\command - “” = I:\Install.exe – File not found [2010/08/11 16:24:01 | 000,000,282 | -H-- | M] () – C:\windows\tasks{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job [2010/08/11 16:20:20 | 000,000,244 | -H-- | M] () – C:\windows\tasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job @Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:E1F04E8D @Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:ABE89FFE :Files C:\Program Files\DAEMON Tools Toolbar C:\Users\Kuba\AppData\Local\Temp*.html :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [start explorer] [Reboot]
dajesz log z usuwania i nowy log z OTL
sprawdz C:\Windows\System32\Rezip.exe na http://virusscan.jotti.org/pl są to chybna pliki od samsunga
23kuba
11 Sierpień 2010 15:24
#3
“Coś” co pojawiło mi się po restarcie kompa:
http://wklej.org/id/375360/
Log OTL:
http://wklej.org/id/375361/
Na podanej stronce w każdej pozycji było “Nic nie znaleziono”.
Zgadza się, pliki od Samsunga.
wklej w OTL
:OTL O3 - HKCU…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. [2010/08/11 17:17:53 | 000,002,432 | ---- | M] () – C:\Users\Kuba\AppData\Local\Temppl3456.html [2010/08/11 17:17:53 | 000,002,089 | ---- | M] () – C:\Users\Kuba\AppData\Local\Tempth3456.html [2010/08/11 17:17:52 | 000,002,432 | ---- | M] () – C:\Users\Kuba\AppData\Local\TempZh3456.html [2010/08/11 17:17:52 | 000,002,089 | ---- | M] () – C:\Users\Kuba\AppData\Local\Tempws3456.html [2010/08/11 17:17:53 | 000,002,432 | ---- | C] () – C:\Users\Kuba\AppData\Local\Temppl3456.html [2010/08/11 17:17:53 | 000,002,089 | ---- | C] () – C:\Users\Kuba\AppData\Local\Tempth3456.html [2010/08/11 17:17:52 | 000,002,432 | ---- | C] () – C:\Users\Kuba\AppData\Local\TempZh3456.html [2010/08/11 17:17:52 | 000,002,089 | ---- | C] () – C:\Users\Kuba\AppData\Local\Tempws3456.html :Commands [emptytemp]
po restarcie naciśnij w OTL sprzątanie bo ja już tu nic podejrzanego nie widze, dodatkowo przeskanuj system programem malwarebytes oraz przeczyść komputer programem ccleaner
23kuba
11 Sierpień 2010 16:04
#5
Po ponownym uruchomieniu następujący (chyba) Log:
http://wklej.org/id/375370/
ccleaner pousuwał co mógł
malwarebytes znalazł 3 zainfekowane ale coś tam usunąłem
Log z malwerebytes
http://wklej.org/id/375387/
– Dodane 11.08.2010 (Śr) 18:14 –
Kolego, dzięki za pomoc
Chyba wszystko gra i tańczy.
Mam jeszcze jeden problem
Jak próbuję uruchomić jedną grę to wyskakuje mi “Nie można uruchomić programu, ponieważ na komputerze nie znaleziono OpenAL32.dll. Spróbuj ponownie zainstalować program, aby naprawić ten problem”.
Na to są też jakieś rady??
