Zamulony komputer ,cpu >50%

[pro_xy (Xxx Paka)]

w wiekszosci taskmgr.exe , wltray.exe , explorer.exe

logi z otl

http://wklejto.pl/66014

[jessica]

Nie widać tu żadnej aktywnej infekcji, choć są ślady po dwóch infekcjach.

Kosmetyka:

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL O3 - HKCU…\Toolbar\WebBrowser: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found. O4 - HKLM…\Run: [services] C:\WINDOWS\services.exe File not found O20 - AppInit_DLLs: (sockspy.dll) - File not found O20 - AppInit_DLLs: (sockspy.dll) - File not found O20 - AppInit_DLLs: (sockspy.dll) - File not found O20 - AppInit_DLLs: (sockspy.dll) - File not found O33 - MountPoints2{9c17b45c-fab1-11dd-807b-0014a4571df3}\Shell\AutoRun\command - “” = F:\wx8o0bt1.com – File not found O33 - MountPoints2{9c17b45c-fab1-11dd-807b-0014a4571df3}\Shell\open\Command - “” = F:\wx8o0bt1.com – File not found :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] “AppInit_DLLs”="" :Commands [emptytemp] [Reboot]

Kliknij w Run Fix.

jessi