ZwytklyChlopak

Error - 2013-04-05 12:05:27 | Computer Name = AAA-FBB97DC668B | Source = Disk | ID = 262151
Description = W urządzeniu \Device\Harddisk0\D wystąpił zły blok.

Windows Live Toolbar
ESET Online Scanner v3
Gadu-Gadu 7.7 i zainstaluj coś noweszego

:Services
MkS_Scan
catchme
3259

:OTL
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119816&tt=260213_ynew&babsrc=SP_ss&mntrId=1c6a83c700000000000000304f46f3d2
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - Reg Error: Value error. File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Reg Error: Value error. File not found

:Files
C:\windows\System32\a3d.exe
C:\Documents and Settings\All Users\Dane aplikacji\3b1cvm3gy4h32n37n2q6m551x0wm0we1sh67sn
C:\Documents and Settings\Rodiyna\Ustawienia lokalne\Dane aplikacji\3b1cvm3gy4h32n37n2q6m551x0wm0we1sh67sn

:Commands
[emptytemp]

• POwiedz skąd uruchamiany był Combofix
• Daj log z Autoruns'a ->http://www.forum.twe...uns-t51856.html
• Daj nowe logi z OTL'a

:Files
C:\windows\1200575633
C:\windows\SWREG.exe
C:\windows\SWSC.exe
C:\windows\SWXCACLS.exe
C:\windows\NIRCMD.exe
C:\Qoobox
C:\windows\PEV.exe
C:\windows\MBR.exe
C:\windows\sed.exe
C:\windows\grep.exe
C:\windows\zip.exe

:Commands
[reboot]

• W OTL'u kliknij "Sprzątanie"
• W Autrouns odznacz w kluczu:
  "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
  "SunJavaUpdateSched"
  "HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components"]/b]
  "1"
  "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects"
  Wszystko
  [b]"Task Scheduler"
  Wszystko