
Windows 7 64 bity
Proszę o sprawdzenie logów:
OTL.txt
http://wklej.org/id/807303/
Extras.txt
http://wklej.org/id/807304/
logi z GMER (rezultaty pojawiły się w karcie rootkit)
http://wklej.org/id/807305/
:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4
IE - HKU\S-1-5-21-3656635699-3365646334-2227106756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddr
IE - HKU\S-1-5-21-3656635699-3365646334-2227106756-1000\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4
IE - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = socks=127.0.0.1:8080
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
[2010-04-16 22:09:10 | 000,000,000 | ---D | M] (Foxit Toolbar) -- C:\Users\uzytkownik\AppData\Roaming\mozilla\Firefox\Profiles\xrlt60sf.default\extensions\toolbar@ask.com
[2011-03-20 16:47:39 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml
O3 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Rosary Reminder] C:\PROGRA~2\VIRTUA~1\reminder.exe File not found
O4 - HKLM..\Run: [Tunnelizer Client End] C:\PROGRA~2\TUNNEL~1\TUNNEL~1\TzCeUi.exe File not found
O4 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1000..\Run: [] File not found
O4 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003..\Run: [Download Accelerator Manager] C:\Program Files (x86)\Tensons\Download Accelerator Manager\daman.exe /s File not found
O4 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003..\Run: [HW_OPENEYE_OUC_blueconnect] "C:\Program Files (x86)\blueconnect\UpdateDog\ouc.exe" File not found
O4 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1003..\Run: [NETELLER app] "C:\Program Files (x86)\NETELLER app\NETELLER-app.exe" /BOOT File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-3656635699-3365646334-2227106756-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10o_Plugin.exe -update plugin File not found
O4 - Startup: C:\Users\uzytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech blank Rejestracja produktu.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O33 - MountPoints2\{57af2952-2eba-11df-b871-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{57af2952-2eba-11df-b871-005056c00008}\Shell\AutoRun\command - "" = E:\autorun.exe
O33 - MountPoints2\{658e0bc1-2e19-11df-b7f4-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{658e0bc1-2e19-11df-b7f4-806e6f6e6963}\Shell\AutoRun\command - "" = D:\livebox_tp.EXE
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 30 gości