Win32: patched-hn

[kaczoris]

Witam. To moj pierwszy post, także prosze o wyrozumiałość.
Od wczoraj walcze z tym ustrojstwem i nie moge niczego zdziałać. Wklejam logi z HT i OTL. Mam też na dysku avengera.

HT:
http://wklej.org/id/240567/

OTL:
http://wklej.org/id/240751/

pozdrawiam i proszę o pomoc

[wojtas]

Uruchom OTL i w oknie Custom Scans/Fixes wklej :

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKCU..\Run: [cdoosoft] C:\Documents and Settings\Halina\Ustawienia lokalne\Temp\herss.exe ()
O32 - AutoRun File - [2009-12-19 14:25:14 | 00,000,059 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-12-19 14:25:14 | 00,000,059 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-12-19 14:25:16 | 00,000,059 | RHS- | M] () - E:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{3779a7ce-93dd-11de-ae2d-001377b526a5}\Shell\AutoRun\command - "" = D:\setup.exe -- File not found
O33 - MountPoints2\{65a6c994-ea25-11de-a593-0026b6205ec9}\Shell\AutoRun\command - "" = E:\sbcatf.exe -- [2009-12-06 16:42:32 | 00,116,387 | RHS- | M] ()
O33 - MountPoints2\{65a6c994-ea25-11de-a593-0026b6205ec9}\Shell\open\Command - "" = E:\sbcatf.exe -- [2009-12-06 16:42:32 | 00,116,387 | RHS- | M] ()

:Files
C:\sbcatf.exe
d:\sbcatf.exe
e:\sbcatf.exe

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]
[start explorer]
[Reboot]

Kliknij w Run Fix. I potwierdz reset kompa .

Następnie uruchamiasz OTL z opcją Run Scan. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia kompa