Wirus policja, prośba o pomoc

[mkandi (Kandulski Marcin)]

Witam

Zaatakował mnie dziś ten wirus.

Uruchoomiłem komputer w trybie awaryjnym i wybrałem wcześniejszy punkt przywracania systemu. Teraz trafiłem na to forum.

Przesyłam raport OTL; http://www.wklej.org/id/891639/, raport Extras: http://www.wklej.org/id/891667/

co mam jeszcze zrobić?

pozdrawiam

[Atis]

Odinstaluj Ask Toolbar i Spybot - Search & Destroy.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV - File not found [Auto | Running] – C:\Program Files\Spybot – (SBSDWSCService) SRV - File not found [On_Demand | Stopped] – C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe – (NMIndexingService) SRV - File not found [Auto | Stopped] – C:\Program Files\McAfee\MSK\MskSrver.exe – (MSK80Service) DRV - File not found [Kernel | Disabled | Stopped] – C:\Windows\system32\drivers\blbdrive.sys – (blbdrive) DRV - File not found [Kernel | On_Demand | Stopped] – C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys – (BDRsDrv) DRV - File not found [Kernel | On_Demand | Stopped] – C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys – (BDFsDrv) IE - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/?q={searchTerms}&affID=110823&tt=300912_IKAN_4012_2&babsrc=SP_ss&mntrId=dc77038f0000000000000015832ce63f O2 - BHO: (no name) - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found. O3 - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found. O3 - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\Toolbar\WebBrowser: (no name) - {C3CD744D-2FAE-4640-8297-16B5DA423104} - No CLSID value found. O4 - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\Run: [] File not found O4 - HKU\S-1-5-21-468155923-1370729753-3099935345-1000…\Run: [TOSCDSPD] TOSCDSPD.EXE File not found O9 - Extra ‘Tools’ menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe File not found O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl … rashim.cab (Reg Error: Key error.) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) [2012-12-08 19:50:56 | 095,023,320 | ---- | C] () – C:\ProgramData\dsgsdgdsgdsgw.pad [2008-09-18 20:13:33 | 000,002,306 | ---- | C] () – C:\Users\Marcin\AppData\Roaming\wklnhst.dat :Commands [resethosts] [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.