Wirus Facebook "Hi wanna laugh"


(Pikus121q) #1

Witam, prosił bym o pomoc tak jak wielu użytkownikom mam ten sam problem, lecz plik EXTRAS.txt się nie włącza po skanie. O to logi:

OTL.txt: http://wklej.to/02TCb


(Drobok) #2

Wklej w własne opcje skanowania:

:OTL


IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - File not found

[2011-08-19 17:14:48 | 000,000,000 | ---D | C] -- C:\windows\ufa

[2011-08-19 17:14:48 | 000,000,000 | ---D | C] -- C:\windows\phoenix

[2011-08-19 17:11:59 | 000,000,000 | -H-D | C] -- C:\windows\update.5.0

[2011-08-19 17:09:53 | 000,000,000 | -H-D | C] -- C:\windows\update.2

[2011-08-19 17:08:13 | 000,000,000 | -H-D | C] -- C:\windows\update.7.1

[2011-08-19 17:06:32 | 000,000,000 | ---D | C] -- C:\windows\av_ico

[2011-08-19 17:04:14 | 000,000,000 | -H-D | C] -- C:\windows\update.1

[2011-08-19 17:04:08 | 000,000,000 | -H-D | C] -- C:\windows\update.tray-7-0-lnk

[2011-08-19 17:04:08 | 000,000,000 | -H-D | C] -- C:\windows\update.tray-7-0

[2011-08-19 22:41:39 | 000,000,734 | ---- | M] () -- C:\windows\System32\drivers\etc\hîsts

[2011-08-19 17:15:39 | 000,000,178 | ---- | M] () -- C:\windows\info1

[2011-08-19 17:14:47 | 005,589,370 | ---- | M] () -- C:\windows\phoenix.rar

[2011-08-19 17:14:47 | 000,246,272 | ---- | M] () -- C:\windows\unrar.exe

[2011-08-19 17:14:46 | 001,075,284 | ---- | M] () -- C:\windows\rpcminer.rar

[2011-08-19 17:08:09 | 000,904,792 | ---- | M] () -- C:\windows\geoiplist.rar

[2011-08-19 17:14:47 | 005,589,370 | ---- | C] () -- C:\windows\phoenix.rar

[2011-08-19 17:08:10 | 004,636,907 | ---- | C] () -- C:\windows\geoiplist

[2011-08-19 17:08:09 | 000,246,272 | ---- | C] () -- C:\windows\unrar.exe

O31 - SafeBoot: AlternateShell - services32.exe


:Reg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot]

"AlternateShell"="cmd.exe"


:Commands

[emptytemp]

[resethosts]

Kliknij wykonaj skrypt. Zresetuj komputer, zainstaluj service pack 3, przeczyść komputer ccleanerem. Po czym zrób nowy log za pomocą funkcji skan i wstaw go na forum.