REKLAMA

10212013_231310.txt

Jak usunąć trojana z USB, który tworzy skróty do cmd.exe?

Przy końcu wykonywania skryptu avast zaczął krzyczeć o OTL.exe i przeniósł go do kwarantanny, ale chyba udało się wszystko wyegzekwować. Pliki nie są już skrótami, dziękuję !


Pobierz plik - link do postu

========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-65817511-2009588810-3967907026-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
C:\Users\Svartetta\AppData\Roaming\mozilla\firefox\profiles\aqy5xk11.default-1349005122530\searchplugins\dogpile.xml moved successfully.
C:\Users\Svartetta\AppData\Roaming\mozilla\firefox\profiles\aqy5xk11.default-1349005122530\searchplugins\duckduckgo.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ not found.
Registry value HKEY_USERS\S-1-5-21-65817511-2009588810-3967907026-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
ADS C:\ProgramData\TEMP:B946D9EE deleted successfully.
ADS C:\Users\Svartetta\AppData\Local\Temp:HiqzwI4A0tjw6kf4vEozWibZv0 deleted successfully.
========== FILES ==========
[color=#A23BEC] & lt; attrib /D /S -S -H K:\* /C & gt; [/color]
E:\cmd.bat deleted successfully.
E:\cmd.txt deleted successfully.
K:\LISTING.lnk moved successfully.
K:\DSC_0080.lnk moved successfully.
K:\DSC_0081.lnk moved successfully.
K:\Kolodion.lnk moved successfully.
K:\IMG_1840.lnk moved successfully.
K:\scarf.lnk moved successfully.
K:\lista prezentow.lnk moved successfully.
K:\scarf II.lnk moved successfully.
K:\photo.lnk moved successfully.
K:\DSC_0084.lnk moved successfully.
K:\Kotara rulez.lnk moved successfully.
K:\Lista polska.lnk moved successfully.
K:\.Trashes.lnk moved successfully.
K:\magnet.lnk moved successfully.
K:\INV_414969895_200075812_201208161133.lnk moved successfully.
K:\The Photograph and Ambrotype Manual - A Practical Treatise - by N.lnk moved successfully.
K:\Biologiczne znaczenie pierwiastkow.lnk moved successfully.
K:\.Spotlight-V100.lnk moved successfully.
K:\.fseventsd.lnk moved successfully.
K:\lightroom presets unknown.lnk moved successfully.
K:\Amintiri.Din.Epoca.De.Aur.2009.DVDRip.DivX.AC3.RO.lnk moved successfully.
K:\Do zapisu lub weryfikacji.lnk moved successfully.
K:\Hotele.lnk moved successfully.
K:\Nowy folder.lnk moved successfully.
K:\Assymetry.lnk moved successfully.
K:\00601-00900.lnk moved successfully.
K:\Panorama test.lnk moved successfully.
K:\Czcionki.lnk moved successfully.
K:\PK-5(35n 635 935 735 835).lnk moved successfully.
K:\Gautier tranche.lnk moved successfully.
K:\Faktury.lnk moved successfully.
K:\dmde-home-2.4.4-win32-gui.lnk moved successfully.
L:\._ moved successfully.
L:\._autorun.inf moved successfully.
L:\autorun.inf moved successfully.
L:\Recycled folder moved successfully.
L:\RECYCLER\S-1-5-21-602162358-813497703-839522115-1003 folder moved successfully.
L:\RECYCLER folder moved successfully.
L:\rioul.exe moved successfully.
L:\Thumbs.db moved successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 10212013_231310