Xxxxxxxxxxxxxxxxx

[przerad (Po Co Mi Email)]

Komputer bardzo “wolno chodzi”.

OTL: http://wklej.to/Ixud

Proszę o pomoc.

[jessica]

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL MOD - [2010-02-25 11:06:05 | 000,090,112 | RHS- | M] () – C:\Documents and Settings\Stachaczyk\Ustawienia lokalne\Temp\cvasds0.dll O4 - HKCU…\Run: [cdoosoft] C:\Documents and Settings\Stachaczyk\Ustawienia lokalne\Temp\herss.exe () O28 - HKLM ShellExecuteHooks: {BB4C402F-882A-4526-8C08-51278EA437C1} - C:\WINDOWS\system32\e8main0.dll () O32 - AutoRun File - [2010-02-25 16:29:22 | 000,000,051 | RHS- | M] () - C:\autorun.inf – [NTFS] O32 - AutoRun File - [2010-02-24 11:40:43 | 000,000,049 | RHS- | M] () - D:\AUTORUN.FCB – [NTFS] O32 - AutoRun File - [2010-02-25 16:29:22 | 000,000,051 | RHS- | M] () - D:\autorun.inf – [NTFS] O33 - MountPoints2{0187e70b-059c-11df-a246-00c09f8e8e0d}\Shell - “” = AutoRun O33 - MountPoints2{0187e70b-059c-11df-a246-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\AutoRun.exe – File not found O33 - MountPoints2{752857e4-205c-11df-a259-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\s1.exe – File not found O33 - MountPoints2{752857e4-205c-11df-a259-00c09f8e8e0d}\Shell\open\Command - “” = F:\s1.exe – File not found O33 - MountPoints2{849553f8-250d-11de-a15c-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{849553f8-250d-11de-a15c-00c09f8e8e0d}\Shell\open\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{989a1374-1537-11de-a106-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{989a1374-1537-11de-a106-00c09f8e8e0d}\Shell\open\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{b12793d6-14a9-11df-a24d-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{b12793d6-14a9-11df-a24d-00c09f8e8e0d}\Shell\open\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{d201a986-5670-11de-a202-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{d201a986-5670-11de-a202-00c09f8e8e0d}\Shell\open\command - “” = F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\dll32.exe – File not found O33 - MountPoints2{d3cf45d2-0dbd-11de-b7c4-806d6172696f}\Shell\AutoRun\command - “” = D:\s1.exe – [2010-02-25 11:00:22 | 000,096,256 | RHS- | M] () O33 - MountPoints2{d3cf45d2-0dbd-11de-b7c4-806d6172696f}\Shell\open\Command - “” = D:\s1.exe – [2010-02-25 11:00:22 | 000,096,256 | RHS- | M] () O33 - MountPoints2{d3cf45d4-0dbd-11de-b7c4-806d6172696f}\Shell\AutoRun\command - “” = C:\s1.exe – [2010-02-25 11:00:22 | 000,096,256 | RHS- | M] () O33 - MountPoints2{d3cf45d4-0dbd-11de-b7c4-806d6172696f}\Shell\open\Command - “” = C:\s1.exe – [2010-02-25 11:00:22 | 000,096,256 | RHS- | M] () O33 - MountPoints2{d86cc3b8-240d-11de-a155-00c09f8e8e0d}\Shell\AutoRun\command - “” = F:\d9c.bat – File not found O33 - MountPoints2{d86cc3b8-240d-11de-a155-00c09f8e8e0d}\Shell\open\Command - “” = F:\d9c.bat – File not found [2010-02-25 11:00:49 | 000,096,256 | RHS- | C] () – C:\s1.exe [2009-06-26 13:22:26 | 000,099,328 | RHS- | C] () – C:\WINDOWS\System32\nmdfgds0.dll [2004-08-03 23:44:20 | 000,078,848 | ---- | C] () – C:\WINDOWS\System32\e8main0.dll :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “SuperHidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “Hidden”=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] “ShowSuperHidden”=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] “CheckedValue”=dword:00000001 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden] @="" :Commands [emptytemp] [resethosts] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

[przerad (Po Co Mi Email)]

1. http://wklej.to/VE5o

2. http://wklej.to/PAbb

[jessica]

Zamiast raportu z usuwania jest stary log.

W nowym logu nie widzę już nic podejrzanego.

Użyj szczepionki >Flash Disinfector

W OTL kliknij na przycisk “CleanUp” - to go usunie razem z jego Kwarantanną.

Usuń kopie szkodników z folderu “System Volume Information” poprzez chwilowe wyłączenie “Przywracania Systemu”:

>START>Panel Sterowania>System>Przywracanie Systemu>>zaznacz w okienku przy “Wyłącz przywracanie na wszystkich dyskach”>Zastosuj>OK. (W czasie tego chwilowego wyłączenia te kopie usuną się samoczynnie, więc nie ma potrzeby zaglądania do folderu.) Potem możesz powrócić do poprzedniego ustawienia (czyli usunąć zaznaczenie z okienka).

jessi

[przerad (Po Co Mi Email)]

dziękuję za pomoc