Jakiś wirus bardzo spowalnia ostatnio int. explorera a firefoxa całkiem wywala (zresztą resetując cały komp)
Przesyłam skany i proszę o pomoc
http://www.wklej.org/id/1741589/
http://www.wklej.org/id/1741590/
Instalowałeś to oprogramowanie? http://www.ammyy.com/en/admin_features.html
Pierwsze podejście
Wklej do notatnika:
CloseProcesses:
HKLM\...\Run: [enjhbmodiebwhsna] => C:\Documents and Settings\PC\Dane aplikacji\zawylzkomfwcl.exe [106496 2015-06-18] ()
HKLM\...\Policies\Explorer\Run: [665733773] => C:\Documents and Settings\All Users\msxiczccj.exe [102400 2015-05-29] ()
HKLM\...\Policies\Explorer\Run: [972693825] => C:\Documents and Settings\All Users\msnuf.exe [98026 2008-05-19] (Electronic Arts)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-796845957-299502267-682003330-1004\...\Run: [6.tmp] => C:\Documents and Settings\PC\Ustawienia lokalne\Temp\6.tmp.exe [142848 2015-06-04] () <===== ATTENTION
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\eieiccmk.exe [2015-06-13] (InstallShield Software Corporation)
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\fpwgchdsch.exe [2015-06-15] (Borland Software Corporation)
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\iqikcaaaicyy.exe [2015-06-16] (InstallShield Software Corporation)
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\smewke.exe [2015-06-13] (InstallShield Software Corporation)
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\uisdrjsyepedkm.exe [2015-05-30] ()
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\ywkuugyg.exe [2015-06-18] (InstallShield Software Corporation)
URLSearchHook: [S-1-5-21-796845957-299502267-682003330-1007] ATTENTION ==> Default URLSearchHook is missing.
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "http://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki" <======= ATTENTION
SearchScopes: HKU\S-1-5-21-796845957-299502267-682003330-1004 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1429626028&from=cor&uid=ST3320613AS_9SZ5C0DGXXXX9SZ5C0DG&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
R2 ooofiua; C:\WINDOWS\ooofiua.exe [123573 2015-05-29] (Stardust Software) [File not signed]
R2 zkyieqtxdkr; C:\WINDOWS\zkyieqtxdkr.exe [105951 2015-06-03] (Xtreme Desktops) [File not signed]
S3 BRSptSvc; "C:\Documents and Settings\All Users\Dane aplikacji\BitRaider\BRSptSvc.exe" [X]
C:\WINDOWS\zkyieqtxdkr.exe
C:\WINDOWS\ooofiua.exe
C:\WINDOWS\nhuthfellht.exe
R2 nhuthfellht; C:\WINDOWS\nhuthfellht.exe [123573 2015-06-01] (Stardust Software) [File not signed]
2015-06-18 20:09 - 2015-06-18 20:09 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000A9E33.exe
2015-06-18 20:09 - 2015-06-18 20:09 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000A9B26.exe
2015-06-18 19:58 - 2015-06-18 19:58 - 00192000 _____ (InstallShield Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\cceimegs.exe
2015-06-18 15:34 - 2015-06-18 15:34 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0005BE27.exe
2015-06-18 15:34 - 2015-06-18 15:34 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0005BA9D.exe
2015-06-18 15:31 - 2015-06-18 15:31 - 00000892 _____ C:\WINDOWS\sezii.wvk
2015-06-18 15:31 - 2015-06-18 15:31 - 00000720 _____ C:\WINDOWS\elxoe.yxy
2015-06-16 20:02 - 2015-06-16 20:01 - 00370688 _____ C:\Documents and Settings\PC\Dane aplikacji\qtwm.exe
2015-06-16 19:26 - 2015-06-16 19:26 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00017C3F.exe
2015-06-16 19:26 - 2015-06-16 19:26 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001770F.exe
2015-06-16 17:20 - 2015-06-16 17:20 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001A8DD.exe
2015-06-16 17:20 - 2015-06-16 17:20 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001A41A.exe
2015-06-16 16:43 - 2015-06-18 18:55 - 00192000 _____ (InstallShield Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\wguoaseesmecam.exe
2015-06-16 16:43 - 2015-06-16 16:43 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001A265.exe
2015-06-16 16:43 - 2015-06-16 16:43 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00019B60.exe
2015-06-16 15:58 - 2015-06-16 15:58 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0038E29F.exe
2015-06-16 15:58 - 2015-06-16 15:58 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0038DF72.exe
2015-06-16 14:58 - 2015-06-16 14:58 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001A37E.exe
2015-06-16 14:58 - 2015-06-16 14:58 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001A013.exe
2015-06-16 13:06 - 2015-06-16 13:06 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0005DA79.exe
2015-06-16 13:06 - 2015-06-16 13:06 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0005D6A1.exe
2015-06-15 21:02 - 2015-06-18 20:05 - 00000016 _____ C:\Documents and Settings\PC\Dane aplikacji\k63ddJN9zFc0EmTfAiHtSHfhZX
C:\Documents and Settings\PC\Dane aplikacji\*.exe
C:\Documents and Settings\All Users\*.exe
2015-06-03 11:04 - 2015-06-03 11:04 - 00105951 _____ (Xtreme Desktops) C:\WINDOWS\zkyieqtxdkr.exe
2015-06-01 17:02 - 2015-06-01 17:02 - 00123573 _____ (Stardust Software) C:\WINDOWS\nhuthfellht.exe
2015-05-30 00:18 - 2015-06-18 19:59 - 00000492 _____ C:\Documents and Settings\PC\Dane aplikacji\IzZon0yPip2zUOOlP9UdpgUS6V
2015-05-30 00:17 - 2015-06-18 19:58 - 00106496 _____ C:\Documents and Settings\PC\Dane aplikacji\zawylzkomfwcl.exe
C:\Documents and Settings\PC\Dane aplikacji\jcuuvsga
2008-04-15 14:00 - 2008-05-19 02:57 - 0098026 ___SH (Electronic Arts) C:\Documents and Settings\All Users\msnuf.exe
2008-04-15 14:00 - 2015-05-29 20:45 - 0102400 ___SH () C:\Documents and Settings\All Users\msxiczccj.exe
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum
Zanim przejdziemy do dalszego usuwania, skasuj folder C:\FRST z dysku
Wykonaj pełny skan Malwarebytes http://www.dobreprogramy.pl/Malwarebyte … 13117.html (w trakcie instalacji odznacz okres testowy) Wykonaj pełny skan, jeśli program coś wykryje pokaż raport na forum
Wklej do notatnika:
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [LuckyTab] => C:\Program Files\LuckyTab\LuckyTab.exe
C:\Program Files\LuckyTab
URLSearchHook: [S-1-5-21-796845957-299502267-682003330-1007] ATTENTION ==> Default URLSearchHook is missing.
S3 BRDriver; \??\c:\Documents and Settings\All Users\Dane aplikacji\BitRaider\BRDriver.sys [X]
S3 BRDriver_1_3_3_E02B25FC; \??\C:\Documents and Settings\All Users\Dane aplikacji\BitRaider\support\1.3.3\E02B25FC\BRDriver.sys [X]
U1 WS2IFSL; No ImagePath
2015-06-18 20:31 - 2015-06-18 20:31 - 00000000 ____ D C:\Program Files\Farb
2015-06-04 19:31 - 2015-06-04 19:45 - 00000000 _RSHD C:\Documents and Settings\All Users\Dane aplikacji\AMMYY
2015-05-30 00:18 - 2015-06-18 21:06 - 00015872 _____ C:\Documents and Settings\PC\Dane aplikacji\1AB62632EC515F5F14E206B36DD065C2
2015-05-30 00:18 - 2015-05-30 00:18 - 00000000 ____ D C:\Documents and Settings\PC\Dane aplikacji\88D5428BE1DC7A91D4F864CD4F99C9E4
R2 ammyy; C:\Documents and Settings\All Users\Dane aplikacji\AMMYY\wmihost.exe [769528 2015-04-23] (Ammyy LLC)
2014-09-08 21:05 - 2014-09-08 21:05 - 75211320 _____ (Samsung Electronics Co., Ltd.) C:\Program Files\KiesSetup.exe
2013-01-18 14:54 - 2013-01-18 14:54 - 115302985 _____ () C:\Program Files\openofficeorg1.cab
2013-01-18 14:52 - 2013-01-18 14:52 - 3153920 _____ () C:\Program Files\openofficeorg341.msi
2013-01-18 14:52 - 2013-01-18 14:52 - 0475136 _____ () C:\Program Files\setup.exe
2013-01-18 14:52 - 2013-01-18 14:52 - 0000294 _____ () C:\Program Files\setup.ini
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum
Chce zobaczyc dwa raporty
Wklej do notatnika:
CloseProcesses:
Startup: C:\Documents and Settings\PC\Menu Start\Programy\Autostart\fpwgchdsch.exe [2015-06-18] (Borland Software Corporation)
URLSearchHook: [S-1-5-21-796845957-299502267-682003330-1007] ATTENTION == Default URLSearchHook is missing.
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
2015-06-23 22:05 - 2015-06-23 22:05 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00016F9D.exe
2015-06-23 21:21 - 2015-06-23 21:21 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00015ED4.exe
2015-06-23 20:00 - 2015-06-23 20:00 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003B79B5.exe
2015-06-23 19:00 - 2015-06-23 19:00 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00044283.exe
2015-06-23 17:05 - 2015-06-23 17:05 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0038BF38.exe
2015-06-23 16:04 - 2015-06-23 16:04 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001AAF0.exe
2015-06-23 15:37 - 2015-06-23 15:37 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\006F984C.exe
2015-06-23 14:37 - 2015-06-23 14:37 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003872AF.exe
2015-06-23 13:32 - 2015-06-23 13:32 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000176C1.exe
2015-06-22 18:05 - 2015-06-22 18:05 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00383E41.exe
2015-06-22 17:05 - 2015-06-22 17:05 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000138DD.exe
2015-06-22 16:48 - 2015-06-22 16:48 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000175B7.exe
2015-06-22 15:03 - 2015-06-22 15:03 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\006FC373.exe
2015-06-22 14:03 - 2015-06-22 14:03 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00389FF8.exe
2015-06-22 13:03 - 2015-06-22 13:03 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001968E.exe
2015-06-20 23:21 - 2015-06-20 23:21 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003870CA.exe
2015-06-20 22:21 - 2015-06-20 22:21 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000155CC.exe
2015-06-20 18:27 - 2015-06-20 18:27 - 21546080 _____ (Malwarebytes Corporation ) C:\Program Files\mbam-setup-2.1.6.1022.exe
2015-06-20 18:25 - 2015-06-20 18:25 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\007301B6.exe
2015-06-20 17:25 - 2015-06-20 17:25 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003BB9EA.exe
2015-06-20 16:25 - 2015-06-20 16:25 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004B7D3.exe
2015-06-20 13:41 - 2015-06-20 13:41 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000153C8.exe
2015-06-20 12:11 - 2015-06-20 12:11 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001482F.exe
2015-06-20 11:17 - 2015-06-20 11:17 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00386B3C.exe
2015-06-20 10:17 - 2015-06-20 10:17 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00014E0B.exe
2015-06-19 23:03 - 2015-06-19 23:03 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\001B4E7A.exe
2015-06-19 22:28 - 2015-06-19 22:28 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004B727.exe
2015-06-19 20:12 - 2015-06-19 20:12 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000155EB.exe
2015-06-19 17:19 - 2015-06-19 17:19 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003BEE1A.exe
2015-06-19 16:19 - 2015-06-19 16:19 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004BCA5.exe
2015-06-19 13:48 - 2015-06-19 13:48 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00018C8B.exe
2015-06-19 13:48 - 2015-06-19 13:48 - 00010391 _____ C:\Documents and Settings\PC\Dane aplikacji\DA576F927E2D6ACEEE5A9633AF9C4CAB
2015-06-19 13:48 - 2015-06-19 13:48 - 00000000 ____ D C:\Documents and Settings\PC\Dane aplikacji\0805B8B30F2D5F17EBAEC66CB41027C5
2015-06-18 22:46 - 2015-06-23 22:08 - 00000499 _____ C:\Documents and Settings\PC\Dane aplikacji\k63ddJN9zFc0EmTfAiHtSHfhZX
2015-06-18 22:45 - 2015-06-23 22:07 - 00242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\xdfasriob.exe
2015-06-22 17:05 - 2015-06-22 17:05 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000138DD.exe
2015-06-20 12:11 - 2015-06-20 12:11 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001482F.exe
2015-06-20 10:17 - 2015-06-20 10:17 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00014E0B.exe
2015-06-20 13:41 - 2015-06-20 13:41 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000153C8.exe
2015-06-20 22:21 - 2015-06-20 22:21 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000155CC.exe
2015-06-19 20:12 - 2015-06-19 20:12 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000155EB.exe
2015-06-23 21:21 - 2015-06-23 21:21 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00015ED4.exe
2015-06-23 22:05 - 2015-06-23 22:05 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00016F9D.exe
2015-06-22 16:48 - 2015-06-22 16:48 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000175B7.exe
2015-06-23 13:32 - 2015-06-23 13:32 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\000176C1.exe
2015-06-19 13:48 - 2015-06-19 13:48 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00018C8B.exe
2015-06-22 13:03 - 2015-06-22 13:03 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001968E.exe
2015-06-23 16:04 - 2015-06-23 16:04 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0001AAF0.exe
2015-06-23 19:00 - 2015-06-23 19:00 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00044283.exe
2015-06-19 22:28 - 2015-06-19 22:28 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004B727.exe
2015-06-20 16:25 - 2015-06-20 16:25 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004B7D3.exe
2015-06-19 16:19 - 2015-06-19 16:19 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0004BCA5.exe
2015-06-19 23:03 - 2015-06-19 23:03 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\001B4E7A.exe
2015-06-22 18:05 - 2015-06-22 18:05 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00383E41.exe
2015-06-20 11:17 - 2015-06-20 11:17 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00386B3C.exe
2015-06-20 23:21 - 2015-06-20 23:21 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003870CA.exe
2015-06-23 14:37 - 2015-06-23 14:37 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003872AF.exe
2015-06-22 14:03 - 2015-06-22 14:03 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\00389FF8.exe
2015-06-23 17:05 - 2015-06-23 17:05 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\0038BF38.exe
2015-06-23 20:00 - 2015-06-23 20:00 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003B79B5.exe
2015-06-20 17:25 - 2015-06-20 17:25 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003BB9EA.exe
2015-06-19 17:19 - 2015-06-19 17:19 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\003BEE1A.exe
2015-06-23 15:37 - 2015-06-23 15:37 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\006F984C.exe
2015-06-22 15:03 - 2015-06-22 15:03 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\006FC373.exe
2015-06-20 18:25 - 2015-06-20 18:25 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\007301B6.exe
2015-06-19 13:48 - 2015-06-19 13:48 - 0010391 _____ () C:\Documents and Settings\PC\Dane aplikacji\DA576F927E2D6ACEEE5A9633AF9C4CAB
2015-06-18 22:46 - 2015-06-23 22:08 - 0000499 _____ () C:\Documents and Settings\PC\Dane aplikacji\k63ddJN9zFc0EmTfAiHtSHfhZX
2015-06-18 22:45 - 2015-06-23 22:07 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\xdfasriob.exe
C:\Documents and Settings\PC\Ustawienia lokalne\Temp\0001.tmp.exe
C:\Documents and Settings\PC\Ustawienia lokalne\Temp\0002.tmp.exe
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum
Wklej do notatnika:
CloseProcesses:
C:\Documents and Settings\PC\Dane aplikacji\*.exe
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix
Usuń folder C:\FRST z dysku
Wykonaj ponownie pełny skan KVRT http://www.kaspersky.com/antivirus-removal-tool?form=1
Po tym pokaż nowy raport FRST
Wklej do notatnika:
CloseProcesses:
2015-06-25 07:50 - 2015-06-25 23:52 - 00000000 ____ D C:\Documents and Settings\PC\Dane aplikacji\0805B8B30F2D5F17EBAEC66CB41027C5
2015-06-25 07:50 - 2015-06-25 23:41 - 00000487 _____ C:\Documents and Settings\PC\Dane aplikacji\k63ddJN9zFc0EmTfAiHtSHfhZX
2015-06-25 07:50 - 2015-06-25 07:50 - 00010391 _____ C:\Documents and Settings\PC\Dane aplikacji\DA576F927E2D6ACEEE5A9633AF9C4CAB
2015-06-24 23:33 - 2015-06-24 23:33 - 00000000 ____ D C:\Program Files\FRST-OlderVersion
C:\Documents and Settings\PC\Dane aplikacji\{a16df612-14b7-5f81-e98d-bb1fa16df612}
C:\Documents and Settings\PC\Ustawienia lokalne\Temp\0001.tmp.exe
C:\Documents and Settings\PC\Ustawienia lokalne\Temp\{E08AACE6-5FA9-4215-9B02-63FB6BF364BE}.exe
C:\Documents and Settings\PC\Ustawienia lokalne\Temp
2015-06-25 07:50 - 2015-06-25 07:50 - 0010391 _____ () C:\Documents and Settings\PC\Dane aplikacji\DA576F927E2D6ACEEE5A9633AF9C4CAB
2015-06-25 07:50 - 2015-06-25 23:41 - 0000487 _____ () C:\Documents and Settings\PC\Dane aplikacji\k63ddJN9zFc0EmTfAiHtSHfhZX
2015-06-25 23:40 - 2015-06-25 23:40 - 0242176 _____ (Borland Software Corporation) C:\Documents and Settings\PC\Dane aplikacji\xdfasriob.exe
C:\Documents and Settings\PC\Pulpit\iexplore.exe
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum.
Ty mi wkleiłeś raport FRST.txt robiony kilka dni temu
Ja potrzebuje aktualny, jak zrobisz skan to wklej raport.
Odinstaluj KVRT http://support.kaspersky.com/pl/6184
Użyj DelFix instrukcja http://www.fixitpc.pl/topic/5-dezynfekcja-kroki-finalizuj�’> pokaż raport na forum