Wolny start Visty SP 1

wnuczus · 27 Grudzień 2008 16:34

Witam mam viste prawie rok ale od ostatniego tyogodnia wlacza sie około 5min!

YURC503.exe i te pliki ciągle się odradzaja!

MichaelP · 27 Grudzień 2008 16:39

O4 - HKCU…\Run: [\YUR2451.exe] C:\Windows\system32\YUR2451.exe O4 - HKCU…\Run: [\YUR2470.exe] C:\Windows\system32\YUR2470.exe O4 - HKCU…\Run: [\YUR26C1.exe] C:\Windows\system32\YUR26C1.exe O4 - HKCU…\Run: [\YUR4317.exe] C:\Windows\system32\YUR4317.exe O4 - HKCU…\Run: [\YUR4327.exe] C:\Windows\system32\YUR4327.exe O4 - HKCU…\Run: [\YUR4346.exe] C:\Windows\system32\YUR4346.exe O4 - HKCU…\Run: [\YUR5994.exe] C:\Windows\system32\YUR5994.exe O4 - HKCU…\Run: [\YURC4D4.exe] C:\Windows\system32\YURC4D4.exe O4 - HKCU…\Run: [\YURC503.exe] C:\Windows\system32\YURC503.exe O4 - HKCU…\Run: [\YURC6D7.exe] C:\Windows\system32\YURC6D7.exe O4 - HKCU…\Run: [\YURC7D0.exe] C:\Windows\system32\YURC7D0.exe O4 - HKCU…\Run: [\YUR6D81.exe] C:\Windows\system32\YUR6D81.exe O4 - HKCU…\Run: [\YUR6E8A.exe] C:\Windows\system32\YUR6E8A.exe O4 - HKCU…\Run: [\YUR7FE8.exe] C:\Windows\system32\YUR7FE8.exe O4 - HKCU…\Run: [\YUR673A.exe] C:\Windows\system32\YUR673A.exe O4 - HKCU…\Run: [\YUR4A58.exe] C:\Windows\system32\YUR4A58.exe O4 - HKCU…\Run: [\YURB366.exe] C:\Windows\system32\YURB366.exe O4 - HKCU…\Run: [\YUR2AD6.exe] C:\Windows\system32\YUR2AD6.exe O4 - HKCU…\Run: [\YUR4E0.exe] C:\Windows\system32\YUR4E0.exe O4 - HKCU…\Run: [\YUR5FDA.exe] C:\Windows\system32\YUR5FDA.exe O4 - HKCU…\Run: [\YUR3310.exe] C:\Windows\system32\YUR3310.exe O4 - HKCU…\Run: [\YUR97BC.exe] C:\Windows\system32\YUR97BC.exe O4 - HKCU…\Run: [\YUR3A12.exe] C:\Windows\system32\YUR3A12.exe O4 - HKCU…\Run: [\YUR88FD.exe] C:\Windows\system32\YUR88FD.exe O4 - HKCU…\Run: [\YUR5E26.exe] C:\Windows\system32\YUR5E26.exe O4 - HKCU…\Run: [\YURAB.exe] C:\Windows\system32\YURAB.exe O4 - HKCU…\Run: [\YUR6BEB.exe] C:\Windows\system32\YUR6BEB.exe O4 - HKCU…\Run: [\YURAE86.exe] C:\Windows\system32\YURAE86.exe O4 - HKCU…\Run: [\YUR6D52.exe] C:\Windows\system32\YUR6D52.exe O4 - HKCU…\Run: [\YUR6306.exe] C:\Windows\system32\YUR6306.exe O4 - HKCU…\Run: [\YUR8B5D.exe] C:\Windows\system32\YUR8B5D.exe O4 - HKCU…\Run: [\YURA321.exe] C:\Windows\system32\YURA321.exe O4 - HKCU…\Run: [\YUR85F1.exe] C:\Windows\system32\YUR85F1.exe O4 - HKCU…\Run: [\YUR8574.exe] C:\Windows\system32\YUR8574.exe O4 - HKCU…\Run: [\YUR8757.exe] C:\Windows\system32\YUR8757.exe O4 - HKCU…\Run: [\YUR5BC5.exe] C:\Windows\system32\YUR5BC5.exe O4 - HKCU…\Run: [\YUR56B6.exe] C:\Windows\system32\YUR56B6.exe O4 - HKCU…\Run: [\YUR907B.exe] C:\Windows\system32\YUR907B.exe O4 - HKCU…\Run: [\YURC37D.exe] C:\Windows\system32\YURC37D.exe O4 - HKCU…\Run: [\YURBEBC.exe] C:\Windows\system32\YURBEBC.exe O4 - HKCU…\Run: [\YUR8120.exe] C:\Windows\system32\YUR8120.exe O4 - HKCU…\Run: [\YUR4AC5.exe] C:\Windows\system32\YUR4AC5.exe O4 - HKCU…\Run: [\YUR847A.exe] C:\Windows\system32\YUR847A.exe O4 - HKCU…\Run: [\YURA801.exe] C:\Windows\system32\YURA801.exe O4 - HKCU…\Run: [\YUR6A46.exe] C:\Windows\system32\YUR6A46.exe O4 - HKCU…\Run: [\YUR64BB.exe] C:\Windows\system32\YUR64BB.exe O4 - HKCU…\Run: [\YURBC8A.exe] C:\Windows\system32\YURBC8A.exe O4 - HKCU…\Run: [\YUR42F8.exe] C:\Windows\system32\YUR42F8.exe O4 - HKCU…\Run: [\YUR60A5.exe] C:\Windows\system32\YUR60A5.exe O4 - HKCU…\Run: [\YURC64A.exe] C:\Windows\system32\YURC64A.exe O4 - HKCU…\Run: [\YUR1054.exe] C:\Windows\system32\YUR1054.exe O4 - HKCU…\Run: [\YUR8F63.exe] C:\Windows\system32\YUR8F63.exe O4 - HKCU…\Run: [\YUR360D.exe] C:\Windows\system32\YUR360D.exe O4 - HKCU…\Run: [\YUR7F2D.exe] C:\Windows\system32\YUR7F2D.exe O4 - HKCU…\Run: [\YUR92EB.exe] C:\Windows\system32\YUR92EB.exe O4 - HKCU…\Run: [\YUR56A7.exe] C:\Windows\system32\YUR56A7.exe O4 - HKCU…\Run: [\YUR5F10.exe] C:\Windows\system32\YUR5F10.exe O4 - HKCU…\Run: [\YURAC35.exe] C:\Windows\system32\YURAC35.exe O4 - HKCU…\Run: [\YURBA1A.exe] C:\Windows\system32\YURBA1A.exe O4 - HKCU…\Run: [\YUR8D02.exe] C:\Windows\system32\YUR8D02.exe O4 - HKCU…\Run: [\YURC438.exe] C:\Windows\system32\YURC438.exe O4 - HKCU…\Run: [\YUR16F9.exe] C:\Windows\system32\YUR16F9.exe O4 - HKCU…\Run: [\YURA9A.exe] C:\Windows\system32\YURA9A.exe O4 - HKCU…\Run: [\YURA88D.exe] C:\Windows\system32\YURA88D.exe O4 - HKCU…\Run: [\YURC467.exe] C:\Windows\system32\YURC467.exe O4 - HKCU…\Run: [\YUR8A73.exe] C:\Windows\system32\YUR8A73.exe O4 - HKCU…\Run: [\YUR271F.exe] C:\Windows\system32\YUR271F.exe O4 - HKCU…\Run: [\YUR7203.exe] C:\Windows\system32\YUR7203.exe O4 - HKCU…\Run: [\YUR99FD.exe] C:\Windows\system32\YUR99FD.exe O4 - HKCU…\Run: [\YURFB4E.exe] C:\Windows\system32\YURFB4E.exe O4 - HKCU…\Run: [\YURC5DD.exe] C:\Windows\system32\YURC5DD.exe O4 - HKCU…\Run: [\YUR9E12.exe] C:\Windows\system32\YUR9E12.exe O4 - HKCU…\Run: [\YUR8EA7.exe] C:\Windows\system32\YUR8EA7.exe O4 - HKCU…\Run: [\YUR59C2.exe] C:\Windows\system32\YUR59C2.exe O4 - HKCU…\Run: [\YUR4BFD.exe] C:\Windows\system32\YUR4BFD.exe O4 - HKCU…\Run: [\YUR4153.exe] C:\Windows\system32\YUR4153.exe O4 - HKCU…\Run: [\YUR59E2.exe] C:\Windows\system32\YUR59E2.exe O4 - HKCU…\Run: [\YUR4FB4.exe] C:\Windows\system32\YUR4FB4.exe O4 - HKCU…\Run: [\YUR4B61.exe] C:\Windows\system32\YUR4B61.exe O4 - HKCU…\Run: [\YURFA16.exe] C:\Windows\system32\YURFA16.exe O4 - HKCU…\Run: [\YUR63A3.exe] C:\Windows\system32\YUR63A3.exe O4 - HKCU…\Run: [\YUR9913.exe] C:\Windows\system32\YUR9913.exe O4 - HKCU…\Run: [\YURA69A.exe] C:\Windows\system32\YURA69A.exe O4 - HKCU…\Run: [\YUR54A7.exe] C:\Windows\system32\YUR54A7.exe O4 - HKCU…\Run: [\YUR9491.exe] C:\Windows\system32\YUR9491.exe

Fix w HijackThis. Instrukcja viewtopic.php?f=16&t=36654

Podejrzane wpisy:

O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure internet security\fsps\program\fslsp.dll

Podaj log z Combofix. Instrukcja viewtopic.php?f=16&t=36654

wnuczus · 27 Grudzień 2008 16:41

ale ja je usuwam a one i tak się klonują kiedyś już to było naprawiane

MichaelP · 27 Grudzień 2008 16:42

Podaj log z Combofix.