
http://wklej.org/id/200098/
z góry dziękuje za pomoc,
B.
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O4 - HKCU..\Run: [cdoosoft] C:\DOCUME~1\ODODLI~1\USTAWI~1\Temp\herss.exe File not found
O32 - AutoRun File - [2009-02-28 18:18:42 | 00,000,000 | ---D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-02-28 18:18:42 | 00,000,000 | ---D | M] - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{27d9093a-aa09-11de-964e-001485c62b36}\Shell\AutoRun\command - "" = nds0q.exe
O33 - MountPoints2\{27d9093a-aa09-11de-964e-001485c62b36}\Shell\open\Command - "" = nds0q.exe
O33 - MountPoints2\{2e75229e-8a9a-11de-9609-00140b011cfb}\Shell\AutoRun\command - "" = nds0q.exe
O33 - MountPoints2\{2e75229e-8a9a-11de-9609-00140b011cfb}\Shell\open\Command - "" = nds0q.exe
O33 - MountPoints2\{73ee28ca-c028-11de-9662-00140b011cfb}\Shell\AutoRun\command - "" = nds0q.exe
O33 - MountPoints2\{73ee28ca-c028-11de-9662-00140b011cfb}\Shell\open\Command - "" = nds0q.exe
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{db1b3e60-05ac-11de-a5d3-00001cd72a97}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
:Commands
[emptytemp]
[start explorer]
[Reboot]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 10 gości