Wirus Ukash prośba o pomoc

[kelly2]

Logi OTL - http://wklej.org/id/987124/

[Atis]

Do okna Własne opcje skanowania / skrypt wklej:

:OTL SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld – (MySQL) SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\ArcaBit\ArcaUpdate\update.exe – (AVUpdate) SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\ArcaBit\Common\ArcaTasksService.exe – (AVTasks2) SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe – (ArcaRemoteService) SRV:64bit: - File not found [On_Demand | Stopped] – C:\Program Files\ArcaBit\Common\arcabit.core.loggingservice.exe – (ArcaBit.Core.LoggingService) SRV:64bit: - File not found [On_Demand | Stopped] – C:\Program Files\ArcaBit\Common\arcabit.core.configurator2.exe – (ArcaBit.Core.Configurator) SRV:64bit: - File not found [Auto | Stopped] – C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe – (ABMainSV) DRV:64bit: - File not found [Kernel | System | Stopped] – C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys – (ABTDI) DRV:64bit: - File not found [File_System | On_Demand | Stopped] – C:\Program Files\ArcaBit\ArcaVir\ABFLT.sys – (ABFLT) O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe” File not found O9:64bit: - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll File not found [2013-03-18 10:17:33 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Unotny [2013-03-18 10:17:33 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Udny [2013-03-18 10:17:33 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Okkos [2013-03-18 10:16:32 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Zeru [2013-03-18 10:16:32 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Veur [2013-03-18 10:16:32 | 000,000,000 | —D | C] – C:\Users\Saturn\AppData\Roaming\Geidu [2013-03-15 10:50:19 | 000,028,752 | ---- | M] () – C:\Users\Saturn\AppData\Roaming\wklnhst.dat [2012-01-11 09:15:01 | 000,098,304 | -HS- | C] () – C:\Users\Saturn\AppData\Roaming\skype.dat [2012-06-11 11:50:51 | 000,060,304 | ---- | C] () – C:\Users\Saturn\g2mdlhlpx.exe [2011-02-25 11:04:34 | 000,004,916 | ---- | C] () – C:\ProgramData\ojobkspa.ako [2011-11-17 22:45:49 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\55628 [2011-11-17 14:30:56 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\56255 [2012-03-08 21:14:17 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\Huviv [2012-09-14 11:46:36 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\Kaofo [2012-03-08 09:03:08 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\Uxboe [2010-10-28 13:01:40 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\webex [2012-05-18 21:32:44 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\Ypras [2012-09-13 08:10:15 | 000,000,000 | —D | M] – C:\Users\Saturn\AppData\Roaming\Yqpi :Commands [emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.