Trojan Generic31.BZEN activedsn.dll

[kapsel2008]

Mój tato ma na dysku trojana Generic31.BZEN. AVG go tak wykrywa ( w activedsn.dll), lecz nie potrafi go usunąć.

Logi z OTL

http://wklejto.pl/174176

Extras

http://www.wklejto.pl/174177

Pozdrawiam

[Acorus]

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKCU…\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - No CLSID value found IE - HKCU…\SearchScopes{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^F4&apn_dtid=^YYYYYY^YY^PL&apn_uid=c75cbec3-935a-41ed-9ca1-9b2784fa1796&apn_sauid=E654A6D8-330B-435A-AA6C-04CE4312E326 IE - HKCU…\SearchScopes{95B7759C-8C7F-4BF1-B163-73684A933233}: “URL” = http://isearch.avg.com/search?cid={A3B1522B-BC6D-42CE-B959-C4E421B3F286}&mid=6b01f04c78fb47d096aed16a12b3619b-0a1556ee37fa9e9898ff8158f475b0d6ec334010〈=pl&ds=AVG&pr=fr&d=2013-01-23 16:42:02&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms} IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1708250 FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.order.1: “Ask.com” FF - prefs.js…keyword.URL: “http://websearch.ask.com/redirect?client=ff&src=kw&tb=FXTV5&o=101699&locale=en_US&apn_uid=c75cbec3-935a-41ed-9ca1-9b2784fa1796&apn_ptnrs=^F4&apn_sauid=E654A6D8-330B-435A-AA6C-04CE4312E326&apn_dtid=^YYYYYY^YY^PL&&q=” [2013-09-10 16:39:41 | 000,000,000 | —D | M] (Free Lunch Design TB Community Toolbar) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\fgs9ekbc.default\extensions{a5ae8924-4036-420f-b7f6-a47e4b8f692e} [2013-08-21 12:18:58 | 000,000,000 | —D | M] (“AutocompletePro - Your handy search suggestions tool”) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\fgs9ekbc.default\extensions\support@predictad.com [2013-06-05 21:13:51 | 000,000,000 | —D | M] (Foxit PDF Creator Toolbar) – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\fgs9ekbc.default\extensions\toolbar@ask.com [2012-12-16 21:23:47 | 000,002,339 | ---- | M] () – C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\fgs9ekbc.default\searchplugins\askcom.xml O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]----------------------------) O2 - BHO: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM…\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]----------------------------) O3 - HKLM…\Toolbar: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU…\Toolbar\WebBrowser: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]----------------------------) O3 - HKCU…\Toolbar\WebBrowser: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM…\Run: [] File not found O4 - HKLM…\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) [2013-08-21 12:18:57 | 000,000,000 | —D | C] – C:\Program Files\AutocompletePro [2013-08-21 12:18:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Free_Lunch_Design [2013-08-21 12:18:56 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menu Start\Programy\Free Lunch Design [2013-08-21 12:18:56 | 000,000,000 | —D | C] – C:\Program Files\Conduit [2013-08-21 12:18:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Conduit [2013-08-21 12:18:55 | 000,000,000 | —D | C] – C:\Program Files\Free_Lunch_Design [2013-08-21 12:18:36 | 004,246,626 | ---- | C] (Free Lunch Design ) – C:\Documents and Settings\Administrator\Pulpit\happyland131_install_www.Instalki.pl.exe [2013-09-04 18:53:00 | 000,000,250 | ---- | M] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2013-09-04 18:51:02 | 000,000,330 | ---- | M] () – C:\WINDOWS\tasks\qvhf.job :Commands [emptytemp]

Kliknij Wykonaj skrypt.W OTL użyj opcji Sprzątanie.

.Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free/

Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa “Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje.”

[kapsel2008]

Jak długo powinno trwać wykonywanie skryptu? Bo w kompie taty jakoś to długo idzie.