
otl http://www.wklej.org/id/265399/ extras http://www.wklej.org/id/265402/
:OTL
O4 - HKU\S-1-5-21-1078081533-1645522239-839522115-1004..\Run: [cdoosoft] C:\DOCUME~1\pomost\USTAWI~1\Temp\herss.exe File not found
O32 - AutoRun File - [2010-01-20 15:49:47 | 00,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-01-20 15:49:47 | 00,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{3f03767a-e895-11de-889c-000b6a8ae719}\Shell\AutoRun\command - "" = F:\nqdymj.exe -- File not found
O33 - MountPoints2\{3f03767a-e895-11de-889c-000b6a8ae719}\Shell\open\Command - "" = F:\nqdymj.exe -- File not found
O33 - MountPoints2\{434eb071-450f-11de-883c-000b6a8ae719}\Shell\AutoRun\command - "" = F:\nq0cq.cmd -- File not found
O33 - MountPoints2\{434eb071-450f-11de-883c-000b6a8ae719}\Shell\explore\Command - "" = F:\nq0cq.cmd -- File not found
O33 - MountPoints2\{434eb071-450f-11de-883c-000b6a8ae719}\Shell\open\Command - "" = F:\nq0cq.cmd -- File not found
O33 - MountPoints2\{676e9c30-b27a-11de-886a-000b6a8ae719}\Shell\AutoRun\command - "" = EGXPRY5W628PVKFMN40SW9NKC\EGXPRY5W628PVKFMN40SW9NKC.exe
O33 - MountPoints2\{676e9c30-b27a-11de-886a-000b6a8ae719}\Shell\eXpLorE\CoMmAnD - "" = EGXPRY5W628PVKFMN40SW9NKC\EGXPRY5W628PVKFMN40SW9NKC.exe
O33 - MountPoints2\{676e9c30-b27a-11de-886a-000b6a8ae719}\Shell\oPeN\cOmMaNd - "" = EGXPRY5W628PVKFMN40SW9NKC\EGXPRY5W628PVKFMN40SW9NKC.exe
O33 - MountPoints2\{873ba845-44f1-11d9-a359-806d6172696f}\Shell\AutoRun\command - "" = C:\h0.exe -- File not found
O33 - MountPoints2\{873ba845-44f1-11d9-a359-806d6172696f}\Shell\open\Command - "" = C:\h0.exe -- File not found
O33 - MountPoints2\{873ba846-44f1-11d9-a359-806d6172696f}\Shell\AutoRun\command - "" = h0.exe
O33 - MountPoints2\{873ba846-44f1-11d9-a359-806d6172696f}\Shell\open\Command - "" = h0.exe
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 13 gości