Kolejna Prośba O Sprawdzenie Logów

[nethaker]

Witam.

Uprzejmie proszę o sprawdzenie logów (jest problem z herss.exe) i napisanie jak dalej postąpić.

 

http://wklej.org/id/287390/

 

http://wklej.org/id/287407/

 

Dzięki 8O

Edytowane 27 Lutego 2010 przez Nethaker

[Kolobos]

Wklej to do OTL i nacisnij Run Fix:

 

:OTL

O4 - HKLM..\Run: [] File not found

O4 - HKCU..\Run: [cdoosoft] C:\DOCUME~1\pawel\USTAWI~1\Temp\herss.exe File not found

O32 - AutoRun File - [2010-02-27 23:53:39 | 000,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010-02-27 23:53:39 | 000,000,051 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010-02-27 23:53:39 | 000,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010-02-27 23:53:39 | 000,000,051 | RHS- | M] () - F:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2010-02-27 23:53:40 | 000,000,051 | -H-- | M] () - I:\autorun.inf -- [ FAT32 ]

O32 - AutoRun File - [2010-02-27 23:53:40 | 000,000,051 | RHS- | M] () - I:\AUTORUN_.INF -- [ FAT32 ]

O33 - MountPoints2\{44ba6ec3-f3c1-11de-80f2-806d6172696f}\Shell\AutoRun\command - "" = C:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec3-f3c1-11de-80f2-806d6172696f}\Shell\open\Command - "" = C:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec6-f3c1-11de-80f2-806d6172696f}\Shell\AutoRun\command - "" = D:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec6-f3c1-11de-80f2-806d6172696f}\Shell\open\Command - "" = D:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec7-f3c1-11de-80f2-806d6172696f}\Shell\AutoRun\command - "" = E:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec7-f3c1-11de-80f2-806d6172696f}\Shell\open\Command - "" = E:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec8-f3c1-11de-80f2-806d6172696f}\Shell\AutoRun\command - "" = F:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{44ba6ec8-f3c1-11de-80f2-806d6172696f}\Shell\open\Command - "" = F:\s1.exe -- [2010-02-27 13:42:20 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{f6e1e92f-f3bd-11de-bf39-f2c4d6279f63}\Shell\AutoRun\command - "" = I:\s1.exe -- [2010-02-27 13:42:22 | 000,098,816 | RHS- | M] ()

O33 - MountPoints2\{f6e1e92f-f3bd-11de-bf39-f2c4d6279f63}\Shell\open\Command - "" = I:\s1.exe -- [2010-02-27 13:42:22 | 000,098,816 | RHS- | M] ()

 

:Files

C:\s1.exe

C:\autorun.inf

d:\s1.exe

d:\autorun.inf

e:\s1.exe

e:\autorun.inf

f:\s1.exe

f:\autorun.inf

i:\s1.exe

i:\autorun.inf

 

 

 

Po wykonaniu zabezpiecz pendrive panda oraz zainstaluj KB971029.

Edytowane 28 Lutego 2010 przez Kolobos