
OTL
http://www.wklej.org/id/440110/
Extras
http://www.wklej.org/id/440112/
GMER
http://www.wklej.org/id/440155/
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\lgusbmodem.sys -- (USBModem)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\lgusbdiag.sys -- (UsbDiag)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\lgusbbus.sys -- (usbbus)
DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\vbtenum.sys -- (BTHidEnum)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\btcusb.sys -- (Btcsrusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\blueletaudio.sys -- (BlueletAudio)
IE - HKU\S-1-5-21-1614895754-562591055-1417001333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2417076
FF - prefs.js..browser.search.defaultenginename: "BearShare Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "gry Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2417076&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "BearShare Web Search"
FF - prefs.js..browser.search.selectedEngine: "BearShare Web Search"
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - Reg Error: Value error. File not found
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:E965A533
:Files
C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\wsl23ybf.default\searchplugins\BearShareWebSearch.xml
C:\Documents and Settings\User\Dane aplikacji\Mozilla\Firefox\Profiles\wsl23ybf.default\searchplugins\conduit.xml
C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml
C:\WINDOWS\System32\alg.exe|C:\alg.exe /replace
C:\WINDOWS\System32\cisvc.exe|C:cisvc.exe /replace
:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]
dadamczuk2 napisał(a):Na Twoim miejscu zrobiłbym format bo naprawdę by Ci się przydał
dadamczuk2 napisał(a):A combofix wcale nie jest taki dobry bo robi dużo nie potrzebnych plików które uruchamiają się wraz z systemem
:Files
C:\WINDOWS\System32\cisvc.exe|C:\cisvc.exe /replace
:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE]
@=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,74,00,25,\
00,5c,00,70,00,63,00,68,00,65,00,61,00,6c,00,74,00,68,00,5c,00,68,00,65,00,\
6c,00,70,00,63,00,74,00,72,00,5c,00,42,00,69,00,6e,00,61,00,72,00,69,00,65,\
00,73,00,5c,00,4d,00,53,00,43,00,4f,00,4e,00,46,00,49,00,47,00,2e,00,45,00,\
58,00,45,00,00,00
expand X:\i386\msconfig.ex_ C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe
:Files
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe|C:\msconfig.exe /replace
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 19 gości