Quote:
ante83 kaže:
|
otvori OTl i ovo kopiraj u prazno polje
Kod:
:OTL
PRC - [2010.07.23 00:21:33 | 000,708,608 | RHS- | M] (CosSs) -- C:\WINDOWS\updater.exe
SRV - File not found [Auto | Stopped] -- -- (PCToolsSSDMonitorSvc)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://myfastwebsearch.com/
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Driver Control Manager v2.8] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\brpet.exe File not found
O4 - HKLM..\Run: [updater.exe] C:\WINDOWS\updater.exe (CosSs)
O4 - HKCU..\Run: [0x017] File not found
O4 - HKCU..\Run: [Driver Control Manager v2.8] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\brpet.exe File not found
O4 - HKCU..\Run: [updater.exe] C:\WINDOWS\updater.exe (CosSs)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - Reg Error: Key error. File not found
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\homepg.cmd ()
O33 - MountPoints2\{be56257c-699f-11df-a86a-0810743ba3f0}\Shell\AutoRun\command - "" = H:\cold\hott\updater.exe -- File not found
O33 - MountPoints2\{be56257c-699f-11df-a86a-0810743ba3f0}\Shell\Explore\Command - "" = H:\cold\hott\updater.exe -- File not found
O33 - MountPoints2\{be56257c-699f-11df-a86a-0810743ba3f0}\Shell\open\command - "" = H:\cold\hott\updater.exe -- File not found
[2010.07.21 18:15:46 | 000,708,608 | RHS- | C] (CosSs) -- C:\WINDOWS\updater.exe
[2010.07.20 12:44:51 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\System32
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2010.08.05 20:00:00 | 000,000,376 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010.06.26 18:51:23 | 000,004,178 | ---- | M] () -- C:\WINDOWS\svchost.dat
:Commands
[purity]
[emptytemp]
[resethosts]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]
klik na runfix
log koji dobiješ kopiraj na forum
2. skini combofix sa ove stranice
http://www.bleepingcomputer.com/down...virus/combofix
-spremi na desktop
-antivirus postavi na disble
-pokreni combofix i na sve što traži odgovori potvrdno
-nakon restarta, combofix će izbaciti log kojeg ćeš kopirati na pastebix, a linkna forum