
http://wklej.to/DEEj
Dziwnym trafem nie otrzymałem extrasa, nie wiedzieć czemu.
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-117609710-1547161642-725345543-1003..\Run: [cdoosoft] C:\Documents and Settings\HyperX\Ustawienia lokalne\Temp\herss.exe File not found
O32 - AutoRun File - [2009-08-16 10:16:04 | 00,000,061 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-08-16 10:16:06 | 00,000,061 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-08-16 10:16:08 | 00,000,061 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{27e2a95e-dcc8-11dd-89e8-0060b3ffaca0}\Shell\AutoRun\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{27e2a95e-dcc8-11dd-89e8-0060b3ffaca0}\Shell\open\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{37b1c13c-afd0-11dd-897b-0060b3ffaca0}\Shell\AutoRun\command - "" = F:\m1eqos3.exe -- File not found
O33 - MountPoints2\{37b1c13c-afd0-11dd-897b-0060b3ffaca0}\Shell\open\Command - "" = F:\m1eqos3.exe -- File not found
O33 - MountPoints2\{847377da-becb-11dd-89a4-0060b3ffaca0}\Shell\AutoRun\command - "" = svdioajm.cmd
O33 - MountPoints2\{847377da-becb-11dd-89a4-0060b3ffaca0}\Shell\explore\Command - "" = svdioajm.cmd
O33 - MountPoints2\{847377da-becb-11dd-89a4-0060b3ffaca0}\Shell\open\Command - "" = svdioajm.cmd
O33 - MountPoints2\{e6afa506-1525-11de-8a71-0060b3ffaca0}\Shell\AutoRun\command - "" = jl.com
O33 - MountPoints2\{e6afa506-1525-11de-8a71-0060b3ffaca0}\Shell\explore\Command - "" = jl.com
O33 - MountPoints2\{e6afa506-1525-11de-8a71-0060b3ffaca0}\Shell\open\Command - "" = jl.com
O33 - MountPoints2\{e8cea4b4-91e7-11dd-8925-0060b3ffaca0}\Shell\AutoRun\command - "" = nhbivui.exe
O33 - MountPoints2\{e8cea4b4-91e7-11dd-8925-0060b3ffaca0}\Shell\explore\Command - "" = nhbivui.exe
O33 - MountPoints2\{e8cea4b4-91e7-11dd-8925-0060b3ffaca0}\Shell\open\Command - "" = nhbivui.exe
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{db1b3e60-05ac-11de-a5d3-00001cd72a97}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
:Commands
[emptytemp]
[start explorer]
[Reboot]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 33 gości