Zainfekowany komputer

[El_Presidento]

Witam Serdecznie, komputer jest zainfekowany proszę o sprawdzenie loga:

http://wklejto.pl/70969

[jessica]

Nie widać tu żadnej infekcji, choć są ślady po infekcji pendrivowej.

Uruchom OTL i w oknie Custom Scans/Fixes ( Własne opcje skanowania/Script )wklej to:

:OTL O33 - MountPoints2{19b17c14-0f0b-11de-a93d-001060d13dc7}\Shell\AutoRun\command - “” = p1y2.cmd O33 - MountPoints2{19b17c14-0f0b-11de-a93d-001060d13dc7}\Shell\explore\Command - “” = p1y2.cmd O33 - MountPoints2{19b17c14-0f0b-11de-a93d-001060d13dc7}\Shell\open\Command - “” = p1y2.cmd O33 - MountPoints2{2b42ae27-0e60-11df-ab25-001060d13dc7}\Shell\AutoRun\command - “” = ymfgIg.exe O33 - MountPoints2{2b42ae27-0e60-11df-ab25-001060d13dc7}\Shell\opeN\ComManD - “” = YmfgIG.EXE O33 - MountPoints2{70a8c6a6-081e-11de-a92d-001060d13dc7}\Shell\AutoRun\command - “” = F:\idmafb.exe – File not found O33 - MountPoints2{70a8c6a6-081e-11de-a92d-001060d13dc7}\Shell\explore\Command - “” = F:\idmafb.exe – File not found O33 - MountPoints2{70a8c6a6-081e-11de-a92d-001060d13dc7}\Shell\open\Command - “” = F:\idmafb.exe – File not found O33 - MountPoints2{8659e4a6-09ab-11df-ab18-001060d13dc7}\Shell\AutoRun\command - “” = F:\TRASH\bin.exe – File not found O33 - MountPoints2{8659e4a6-09ab-11df-ab18-001060d13dc7}\Shell\open\command - “” = F:\TRASH\bin.exe – File not found O33 - MountPoints2{97094305-8bc6-11dd-a73a-001060d13dc7}\Shell - “” = AutoRun O33 - MountPoints2{9a2e238a-6d07-11dd-a721-001060d13dc7}\Shell\AutoRun\command - “” = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isee.exe – File not found O33 - MountPoints2{9a2e238a-6d07-11dd-a721-001060d13dc7}\Shell\open\command - “” = E:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isee.exe – File not found O33 - MountPoints2{dd383e01-291b-11de-a979-001060d13dc7}\Shell\AutoRun\command - “” = INFO\solar.exe O33 - MountPoints2{dd383e01-291b-11de-a979-001060d13dc7}\Shell\explore\command - “” = .////INFO/\\solar.exe O33 - MountPoints2{dd383e01-291b-11de-a979-001060d13dc7}\Shell\open\command - “” = INFO/////\\solar.exe O33 - MountPoints2{e75c5d58-8d53-11dd-a74c-001060d13dc7}\Shell\AutoRun\command - “” = E:\wjlfhtfm.cmd – File not found O33 - MountPoints2{e75c5d58-8d53-11dd-a74c-001060d13dc7}\Shell\explore\Command - “” = E:\wjlfhtfm.cmd – File not found O33 - MountPoints2{e75c5d58-8d53-11dd-a74c-001060d13dc7}\Shell\open\Command - “” = E:\wjlfhtfm.cmd – File not found :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp]

Kliknij w Run Fix ( Wykonaj Script ). Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie, i pokaż go tu.

jessi