mam wirusa "hi" na facebooku i nie moge go usunąć.

[izullciaaa]

tez mam tego wirusa ;(

// Zrób własny temat i wklej tam logi z OTL.
// djarta

-- 24 sie 2011, 19:26 --

zaraz podam logi pomoze mi ktos?? ;(

OTL
Dostępne tylko dla zarejestrowanych użytkowników

I CO TERAZ MAM ZROBIC Z TYM?

[djkamil09061991]

Uruchom OTL i w oknie Własne opcje skanowania/Script wklej to:

:OTL
MOD - [2011-08-22 18:26:49 | 000,137,728 | ---- | M] () -- C:\Windows\systemup.exe
MOD - [2011-08-21 15:55:00 | 000,232,960 | ---- | M] () -- C:\Windows\l1rezerv.exe
MOD - [2011-08-21 15:20:55 | 001,216,000 | -H-- | M] () -- C:\Windows\update.tray-2-0-lnk\svchost.exe
MOD - [2011-08-21 15:20:55 | 001,216,000 | -H-- | M] () -- C:\Windows\update.tray-2-0\svchost.exe
SRV - [2011-08-21 15:48:48 | 000,382,464 | ---- | M] () [Auto | Running] -- C:\Windows\update.7.1\svchostdriver.exe -- (ddservice)
SRV - [2011-08-21 15:34:08 | 000,258,048 | ---- | M] () [Auto | Running] -- C:\Windows\sysdriver32.exe -- (srvsysdriver32)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [egui] File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [2193362.exe] C:\Users\LIDKA\AppData\Local\Temp\2193362.exe ()
O4 - HKLM..\Run: [4637842.exe] C:\Windows\Temp\4637842.exe ()
O4 - HKLM..\Run: [5745537.exe] C:\Users\LIDKA\AppData\Local\Temp\5745537.exe ()
O4 - HKLM..\Run: [5968257.exe] C:\Windows\Temp\5968257.exe ()
O4 - HKLM..\Run: [6580407.exe] C:\Windows\Temp\6580407.exe ()
O4 - HKLM..\Run: [9389965.exe] C:\Users\LIDKA\AppData\Local\Temp\9389965.exe ()
O4 - HKLM..\Run: [l1rezerv.exe] C:\Windows\l1rezerv.exe ()
O4 - HKLM..\Run: [sysdriver32.exe] C:\Windows\sysdriver32.exe ()
O4 - HKLM..\Run: [sysdriver32_.exe] C:\Windows\sysdriver32_.exe ()
O4 - HKLM..\Run: [systemup] C:\Windows\systemup.exe ()
O4 - HKLM..\Run: [tray_ico] File not found
O4 - HKLM..\Run: [tray_ico0] C:\Windows\update.tray-2-0\svchost.exe ()
O4 - HKLM..\Run: [tray_ico1] File not found
O4 - HKLM..\Run: [tray_ico2] File not found
O4 - HKLM..\Run: [tray_ico3] File not found
O4 - HKLM..\Run: [tray_ico4] File not found
O4 - HKLM..\Run: [wxpdrv] C:\Windows\services32.exe ()
O31 - SafeBoot: AlternateShell - services32.exe
[2011-08-21 16:15:02 | 000,000,000 | ---D | C] -- C:\Windows\ufa
[2011-08-21 16:15:02 | 000,000,000 | ---D | C] -- C:\Windows\rpcminer
[2011-08-21 16:15:02 | 000,000,000 | ---D | C] -- C:\Windows\phoenix
[2011-08-21 16:10:01 | 000,000,000 | -H-D | C] -- C:\Windows\update.5.0
[2011-08-21 15:48:49 | 000,000,000 | -H-D | C] -- C:\Windows\update.7.1
[2011-08-21 15:46:25 | 000,000,000 | -H-D | C] -- C:\Windows\update.2
[2011-08-21 15:42:40 | 000,000,000 | ---D | C] -- C:\Users\LIDKA\AppData\Roaming\WinRAR
[2011-08-21 15:33:58 | 000,000,000 | ---D | C] -- C:\Windows\av_ico
[2011-08-21 15:32:19 | 000,000,000 | -H-D | C] -- C:\Windows\update.1
[2011-08-21 15:32:16 | 000,000,000 | -H-D | C] -- C:\Windows\update.tray-2-0-lnk
[2011-08-21 15:32:16 | 000,000,000 | -H-D | C] -- C:\Windows\update.tray-2-0
[2011-08-24 16:56:31 | 000,000,734 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hîsts
[2011-08-24 11:42:04 | 005,589,370 | ---- | M] () -- C:\Windows\phoenix.rar
[2011-08-24 11:42:04 | 001,075,284 | ---- | M] () -- C:\Windows\rpcminer.rar
[2011-08-24 11:42:04 | 000,246,272 | ---- | M] () -- C:\Windows\unrar.exe
[2011-08-24 11:42:04 | 000,182,617 | ---- | M] () -- C:\Windows\ufa.rar
[2011-08-24 11:39:38 | 000,000,201 | ---- | M] () -- C:\Windows\info1
[2011-08-22 18:26:49 | 000,137,728 | ---- | M] () -- C:\Windows\systemup.exe
[2011-08-21 17:57:20 | 000,000,000 | ---- | M] () -- C:\Windows\loader2.exe_ok
[2011-08-21 15:55:00 | 000,232,960 | ---- | M] () -- C:\Windows\l1rezerv.exe
[2011-08-21 15:42:39 | 000,904,792 | ---- | M] () -- C:\Windows\geoiplist.rar
[2011-08-21 15:34:08 | 000,258,048 | ---- | M] () -- C:\Windows\sysdriver32_.exe
[2011-08-21 15:34:08 | 000,258,048 | ---- | M] () -- C:\Windows\sysdriver32.exe
[2011-08-21 15:20:55 | 001,216,000 | ---- | M] () -- C:\Windows\services32.exe
[2011-08-21 15:18:13 | 001,216,000 | ---- | M] () -- C:\Users\LIDKA\Desktop\Flash-Player.exe
[2011-08-21 15:42:40 | 004,636,907 | ---- | C] () -- C:\Windows\geoiplist

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptyflash]
[resethosts]
[emptytemp]

Uruchom to poprzez Wykonaj skrypt i zatwierdź restart.
Po restarcie wykonaj nowy zestaw logów OTL oraz pokaż raport z usuwania OTL powstały po wykonaniu powyższego skryptu.