Quote:
_GrGa_ kaže:
|
izbriši paretologic , to ti ne triba
1.otvori OTL i ovo kopiraj u prazno polje
Kod:
:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 33 AC 75 D7 44 58 CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://findgala.com/?&uid=8050&q={searchTerms}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
O1 - Hosts: 108.163.215.51 www.google-analytics.com.
O1 - Hosts: 108.163.215.51 ad-emea.doubleclick.net.
O1 - Hosts: 108.163.215.51 www.statcounter.com.
O1 - Hosts: 67.215.245.19 www.google-analytics.com.
O1 - Hosts: 67.215.245.19 ad-emea.doubleclick.net.
O1 - Hosts: 67.215.245.19 www.statcounter.com.
[2012.02.15 02:09:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\AVTISE
[2012.02.15 02:09:59 | 000,000,000 | -HSD | C] -- C:\Users\Grga\AppData\Roaming\AV Security Essentials
[2012.02.15 02:09:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\669078
[2012.03.03 18:00:00 | 000,000,464 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
[2012.02.15 02:10:01 | 000,001,649 | ---- | M] () -- C:\Users\Grga\Application Data\Microsoft\Internet Explorer\Quick Launch\AV Security Essentials.lnk
[2012.02.15 02:10:01 | 000,001,655 | ---- | C] () -- C:\Users\Grga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AV Security Essentials.lnk
[2012.02.15 02:10:01 | 000,001,649 | ---- | C] () -- C:\Users\Grga\Application Data\Microsoft\Internet Explorer\Quick Launch\AV Security Essentials.lnk
:Commands
[purity]
[emptytemp]
[resethosts]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
-klik na RUN FIX
-log koji dobiješ kopiraj
2.skini
tdsskiller i spremi na desktop
-pokreni program klikom na scan
-ako program zatraži restart dozvoli
-log se naazi u c:/ i izgleda otprilike ovako
C:\TDSSKiller.2.4.7_23.07.2010_15.31.43_log.txt
3.skini
combofix i spremi na desktop
-isključi antivirus
-pokreni combofix i na sve što traži odgovori potvrdno
-log koji dobješ kopiraj na pastebin
4.skini
malarebytes >instaliraj program>update>quick scan
-log kopiraj