Zwolniona praca komputera

[lolek2417]

logi z otl:

http://wklej.org/id/420928/

http://wklej.org/id/420929/

[jessica]

Nie widzę tu żadnej czynnej infekcji.

Uruchom OTL i w oknie Własne opcje skanowania/Script wklej to:

:OTL O33 - MountPoints2{42c8e248-dc5b-11df-8c1e-4d6564696130}\Shell\AutoRun\command - “” = J:\kyme.exe – File not found O33 - MountPoints2{42c8e248-dc5b-11df-8c1e-4d6564696130}\Shell\open\Command - “” = J:\kyme.exe – File not found O33 - MountPoints2{42c8e249-dc5b-11df-8c1e-4d6564696130}\Shell\AutoRun\command - “” = K:\kyme.exe – File not found O33 - MountPoints2{42c8e249-dc5b-11df-8c1e-4d6564696130}\Shell\open\Command - “” = K:\kyme.exe – File not found O4 - HKU.DEFAULT…\RunOnce: [nltide_2] File not found O4 - HKU\S-1-5-18…\RunOnce: [nltide_2] File not found O4 - HKU\S-1-5-19…\RunOnce: [nltide_2] File not found O4 - HKU\S-1-5-20…\RunOnce: [nltide_2] File not found O2 - BHO: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found O3 - HKLM…\Toolbar: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found O3 - HKU\S-1-5-21-220523388-1606980848-1417001333-1003…\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found [2010-10-24 17:24:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\btlet5oh.default\extensions\toolbar@ask.com [2010-02-04 16:45:40 | 000,002,254 | ---- | M] () – C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\btlet5oh.default\searchplugins\askcom.xml FF - prefs.js…browser.search.defaultengine: “Ask.com” FF - prefs.js…browser.search.defaultenginename: “Ask.com” FF - prefs.js…browser.search.order.1: “Ask.com” IE - HKU\S-1-5-21-220523388-1606980848-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15003&l=dis IE - HKU\S-1-5-21-220523388-1606980848-1417001333-1003…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found MsConfig - StartUpReg: ctfmon.exe - hkey= - key= - File not found MsConfig - StartUpReg: NeroFilterCheck - hkey= - key= - File not found MsConfig - StartUpReg: NvCplDaemon - hkey= - key= - File not found MsConfig - StartUpReg: NvMediaCenter - hkey= - key= - File not found [2010-10-24 17:24:57 | 000,000,234 | ---- | M] () – C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job :Files C:\Program Files\Ask.com kyme.exe /alldrives :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp]

Kliknij w Wykonaj Script. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

jessi