Sukoku - Prośba o usunięcie

[Malcus (Malcuś)]

Witam,

Co chwile wyskakuje mi jakiś wirus sukoku.exe, daje kwarantanne albo usuwam to, ale to nic nie daje.

Oto log:

http://www.wklej.org/id/188210/

[jessica]

Odpowiedź automatyczna: Log z Hijacka w dzisiejszych czasach to za mało, bo większość infekcji potrafi go ominąć. Zalecany log: >OTL

jessi

[Malcus (Malcuś)]

Log z OTL:

http://wklej.org/id/188220/

[jessica]

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … ct=&gc=1&q IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb IE - HKU\S-1-5-21-606747145-1292428093-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb IE - HKU\S-1-5-21-606747145-1292428093-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.gamingharbor.com IE - HKU\S-1-5-21-606747145-1292428093-725345543-1003…\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll () FF - prefs.js…browser.search.defaultenginename: “Ask” FF - prefs.js…browser.search.order.1: “Ask” FF - prefs.js…browser.startup.homepage: “http://www.theprizeday.com/today.php|http://www.google.pl/” [2009-08-31 11:16:38 | 00,000,681 | ---- | M] () – C:\Documents and Settings\ryszard\Dane aplikacji\Mozilla\FireFox\Profiles\nlhqievj.default\searchplugins\ask.xml [2009-09-28 18:44:47 | 00,002,381 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\sukoku119.xml [2009-10-22 10:11:28 | 00,002,381 | ---- | M] () – C:\Program Files\mozilla firefox\searchplugins\sukoku123.xml O3 - HKU\S-1-5-21-606747145-1292428093-725345543-1003…\Toolbar\ShellBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found. O4 - HKLM…\Run: [NWEReboot] File not found :Services Sukoku Service :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptytemp] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

Następnie uruchom OTL ponownie, tym razem wywołaj opcję Run Scan.

Pokaż nowy log OTL.txt oraz log z czyszczenia.

jessi