Wirus kmj.exe

[kazz1211 (Kazurreth1211)]

Mam problem z tym wirusem

Log z OTL:

http://wklej.org/id/264619/

[deFco247]

W białe dolne okno Custom Scans/Fixes w OTL wklej:

:Processes Explorer.EXE :OTL O4 - HKCU…\Run: [cdoosoft] C:\Documents and Settings\Administrator\Local Settings\Temp\herss.exe () O32 - AutoRun File - [2010/01/17 12:21:40 | 00,000,051 | RHS- | M] () - D:\autorun.inf – [NTFS] O32 - AutoRun File - [2010/01/17 12:21:40 | 00,000,051 | RHS- | M] () - E:\autorun.inf – [NTFS] O32 - AutoRun File - [2010/01/17 12:21:40 | 00,000,051 | RHS- | M] () - F:\autorun.inf – [NTFS] O32 - AutoRun File - [2010/01/17 12:21:40 | 00,000,051 | RHS- | M] () - G:\autorun.inf – [NTFS] O33 - MountPoints2{612fa622-038e-11df-8c5e-806e6f6e6963}\Shell\AutoRun\command - “” = D:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2{612fa622-038e-11df-8c5e-806e6f6e6963}\Shell\open\Command - “” = D:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2{612fa623-038e-11df-8c5e-806e6f6e6963}\Shell\AutoRun\command - “” = E:\mh.exe – File not found O33 - MountPoints2{612fa623-038e-11df-8c5e-806e6f6e6963}\Shell\open\Command - “” = E:\mh.exe – File not found O33 - MountPoints2{612fa624-038e-11df-8c5e-806e6f6e6963}\Shell\AutoRun\command - “” = F:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2{612fa624-038e-11df-8c5e-806e6f6e6963}\Shell\open\Command - “” = F:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2{612fa625-038e-11df-8c5e-806e6f6e6963}\Shell\AutoRun\command - “” = G:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2{612fa625-038e-11df-8c5e-806e6f6e6963}\Shell\open\Command - “” = G:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\D\Shell\AutoRun\command - “” = D:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\D\Shell\open\Command - “” = D:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\E\Shell\AutoRun\command - “” = E:\mh.exe – File not found O33 - MountPoints2\E\Shell\open\Command - “” = E:\mh.exe – File not found O33 - MountPoints2\F\Shell\AutoRun\command - “” = F:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\F\Shell\open\Command - “” = F:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\G\Shell\AutoRun\command - “” = G:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () O33 - MountPoints2\G\Shell\open\Command - “” = G:\mh.exe – [2010/01/16 18:45:07 | 00,118,784 | RHS- | M] () [2010/01/17 19:24:21 | 00,000,000 | —D | C] – C:\32788R22FWJFW :Files C:\kmj.exe D:\kmj.exe E:\kmj.exe F:\kmj.exe G:\kmj.exe :Commands [emptytemp] [start explorer]

Run Fix. Restart, jeśli będzie potrzebny.

Potem log z usuwania oraz nowy log robiony opcją Run Scan.

Przed kliknięciem Run Scan wklejasz w OTL taki tekst:

C:*.* D:*.* E:*.* F:*.* G:*.*

[kazz1211 (Kazurreth1211)]

log z usuwania:

http://wklej.org/id/264631/

log ze scanu:

http://wklejto.pl/54405

Wydaje mi sie, ze bledy naprawione. Dzieki za pomoc.

[deFco247]

W logach jest już czysto.

W OTL kliknij CleanUp.

Jeśli korzystasz z Przywracania Systemu, to wyłącz i włącz je na wszystkich dyskach. Instrukcja XP, Vista lub Windows 7.

Wykonaj pełny skan Dr.Web CureIt.

Gdy będą wirusy, pokaż raport.

Wyczyść rejestr i dysk CCleaner, bo masz go na dysku.