Do aktualizacji:
Java(TM) 6 Update 22
Adobe Reader 9.4.1
Mozilla Firefox (3.6.10)
Odinstaluj:
DAEMON Tools Toolbar
Sam zainstalowales: [2011-07-26 13:02:37 | 001,507,840 | ---- | C] () -- C:\Windows\bitcoind.exe ? Jezeli nie to tez usun.
Wykonaj skrypt w OTL:
:OTL
IE - HKU\S-1-5-21-1120873359-3930613828-848009013-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://vshare.toolbarhome.com/?hp=df [binary data]
IE - HKU\S-1-5-21-1120873359-3930613828-848009013-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: DTToolbar(_at_)toolbarnet.com:1.1.7.0190
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
[2011-05-01 15:47:33 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Qba\AppData\Roaming\mozilla\Firefox\Profiles\awsa8h9h.default\extensions\DTToolbar@toolbarnet.com
[2011-04-01 21:27:46 | 000,000,000 | ---D | M] (vShare) -- C:\Users\Qba\AppData\Roaming\mozilla\Firefox\Profiles\awsa8h9h.default\extensions\vshare@toolbar
[2011-05-01 15:47:29 | 000,002,055 | ---- | M] () -- C:\Users\Qba\AppData\Roaming\Mozilla\Firefox\Profiles\awsa8h9h.default\searchplugins\daemon-search.xml
[2011-04-01 21:27:52 | 000,001,583 | ---- | M] () -- C:\Users\Qba\AppData\Roaming\Mozilla\Firefox\Profiles\awsa8h9h.default\searchplugins\web-search.xml
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-1120873359-3930613828-848009013-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKLM..\Run: [avast5] File not found
O4 - HKLM..\Run: [tray_ico] File not found
O4 - HKLM..\Run: [tray_ico1] File not found
O4 - HKLM..\Run: [tray_ico2] File not found
O4 - HKLM..\Run: [tray_ico3] File not found
O4 - HKLM..\Run: [tray_ico4] File not found
O4 - HKU\S-1-5-21-1120873359-3930613828-848009013-1001..\Run: [EA Core] File not found
[2011-07-26 12:59:03 | 000,000,000 | -H-D | C] -- C:\Windows\update.4.1
[2011-07-25 11:57:27 | 000,000,000 | -H-D | C] -- C:\Windows\update.3
[2011-07-25 11:44:33 | 000,000,000 | ---D | C] -- C:\Windows\ufa
[2011-07-25 11:44:33 | 000,000,000 | ---D | C] -- C:\Windows\phoenix
[2011-07-25 11:43:10 | 000,000,000 | -H-D | C] -- C:\Windows\update.5.0
[2011-07-25 11:39:58 | 000,000,000 | -H-D | C] -- C:\Windows\update.2
[2011-07-25 11:37:18 | 000,000,000 | ---D | C] -- C:\Windows\av_ico
[2011-07-25 11:36:02 | 000,000,000 | -H-D | C] -- C:\Windows\update.1
[2011-07-25 11:36:01 | 000,000,000 | -H-D | C] -- C:\Windows\update.tray-7-0-lnk
[2011-07-25 11:36:01 | 000,000,000 | -H-D | C] -- C:\Windows\update.tray-7-0
[2011-07-26 22:16:13 | 000,000,200 | ---- | M] () -- C:\Windows\info1
[2011-07-25 11:44:32 | 005,589,370 | ---- | M] () -- C:\Windows\phoenix.rar
[2011-07-25 11:44:32 | 001,075,284 | ---- | M] () -- C:\Windows\rpcminer.rar
[2011-07-25 11:44:32 | 000,246,272 | ---- | M] () -- C:\Windows\unrar.exe
[2011-07-25 11:44:32 | 000,182,617 | ---- | M] () -- C:\Windows\ufa.rar
[2011-07-25 11:42:50 | 000,000,000 | ---- | M] () -- C:\Windows\loader2.exe_ok
[2011-07-25 11:40:22 | 000,000,734 | ---- | M] () -- C:\Windows\System32\drivers\etc\hîsts
[2011-07-25 11:39:02 | 000,904,792 | ---- | M] () -- C:\Windows\geoiplist.rar
[2011-07-17 03:24:20 | 004,636,907 | ---- | M] () -- C:\Windows\geoiplist
:Commands
[emptytemp]
Po wykonaniu daj nowy log z OTL.
Zrob tez skan przy pomocy cureit.