Wirusy podczas rutynowego skanowania systemu

mykusz · 3 Październik 2010 12:25

Dzień dobry:)

Podczas skanowania systemu Avira wykryła trojana : TR/Spy.QQtail.M a Malwarebyte wirus w C:\Windows\system32\secushr.dat.

Dlatego proszę was o sprawdzenia moich logów czy nie mam jeszcze jakiś śmieci.

OTL

http://www.wklej.eu/index.php?id=29f176cc4b

OTL Extras

http://www.wklej.eu/index.php?id=b2ec57701f

Mykusz

Leon1 · 3 Październik 2010 13:30

OTL w oknie Custom Scans-Fixes wklej następujący skrypt:

:OTL O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found. O3 - HKU\S-1-5-21-2000478354-1644491937-725345543-1003…\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-2000478354-1644491937-725345543-1003…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKU\S-1-5-21-2000478354-1644491937-725345543-1003…\Run: [ABBYY Screenshot Reader Retail] File not found MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Windows Search.lnk - C:\PROGRA~1\WI459E~1\WINDOW~1.EXE - File not found MsConfig - StartUpReg: ALLUpdate - hkey= - key= - D:\Programy\ALLPlayer\ALLUpdate.exe File not found MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - D:\Programy\DAEMON Tools Lite\daemon.exe File not found MsConfig - StartUpReg: EPSON Stylus C42 Series - hkey= - key= - File not found MsConfig - StartUpReg: nwiz - hkey= - key= - File not found MsConfig - StartUpReg: SearchSettings - hkey= - key= - C:\Program Files\pdfforge Toolbar\SearchSettings.exe File not found MsConfig - StartUpReg: Sony Ericsson PC Suite - hkey= - key= - D:\Programy\Sony eric k510 pc suite\Application Launcher\Application Launcher.exe File not found MsConfig - StartUpReg: SpywareTerminator - hkey= - key= - C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe File not found :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “D:\Programy\VideoSpin\Programs\RM.exe”=- “D:\Programy\VideoSpin\Programs\umi.exe”=- “D:\Programy\VideoSpin\Programs\VideoSpin.exe”=- “D:\Gry\Frontlines Fuel of war\Binaries\FFOW.exe”=- “D:\Programy\FlashGet universal\FlashGet.exe”=- “D:\Gry\UrT\ioUrbanTerror.exe”=- “D:\Gry\Twierdza2\game.dat”=- “D:\Programy\DAP\DAP.exe”=- “D:\Programy\FlashGet 3\FlashGet3.exe”=- “D:\Gry\ET\ET.exe”=- “D:\Gry\AA3\Binaries\AA3Game.exe”=- “D:\Gry\Alien Arena 7_33\crx.exe”=- “D:\Gry\World of Padman\wop.exe”=- :Commands [emptytemp] [resethosts] [start explorer] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

potem nowy log OTL robiony opcją Run Scan