

Załączam logi z OTL.
:OTL
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2673167795-1827110280-4014185955-1002\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2673167795-1827110280-4014185955-1002\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found
O4 - HKLM..\Run: [S6000Mnt] C:\windows\SysWOW64\Rundll32.exe S6000Rmv.dll,WinMainRmv /StartStillMnt File not found
O4 - HKU\S-1-5-21-2673167795-1827110280-4014185955-1002..\Run: [] File not found
O4 - HKU\S-1-5-21-2673167795-1827110280-4014185955-1002..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
[2012-08-10 21:24:07 | 000,000,000 | ---D | C] -- C:\ProgramData\oqlwysgfirktfxl
[2012-08-10 21:24:07 | 000,000,051 | ---- | M] () -- C:\ProgramData\retbrryiuixykct
[2012-08-10 21:23:49 | 000,057,344 | ---- | M] () -- C:\ProgramData\vnvqgdax.exe
@Alternate Data Stream - 4096 bytes -> C:\Users\Public\Documents\desktop.ini:gs5sys
@Alternate Data Stream - 4096 bytes -> C:\ProgramData:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Users\disgst\Documents\desktop.ini:gs5sys
@Alternate Data Stream - 1210 bytes -> C:\Users\disgst\AppData\Local\tmd9gNk6JI:WeQS3IOTHGYzMdWvPVGQYNGJ
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 18 gości