28.12.2012, 01:07
W OTL, w pole Własne opcje skanowania / skrypt wklej:
Kliknij Wykonaj skrypt i zatwierdź restart.
Pokaż raport z usuwania i nowy log z opcji Skanuj.
Cytat::OTL
MOD - [2012-12-27 14:38:06 | 000,192,512 | ---- | M] () -- C:\Users\K01\AppData\Local\Temp\sfamcc00001.dll
MOD - [2012-12-27 14:38:05 | 000,158,720 | ---- | M] () -- C:\Users\K01\AppData\Local\Temp\sfareca00001.dll
O4 - HKLM..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r File not found
O4 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000..\Run: [ASRockXTU] File not found
O4 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000..\Run: [Service Protect] C:\Users\K01\AppData\Local\Temp\svcprotect.exe (Windows)
O4 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000..\Run: [Windefender] C:\Users\K01\AppData\Local\Temp\Windefender.exe (Windows)
O4 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000..\Run: [WinFirewall] C:\Users\K01\AppData\Local\Temp\WinFirewall.exe (Microsoft)
O4 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000..\Run: [zASRockInstantBoot] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2133679320-1674112584-1933062989-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
:Files
C:\Users\K01\AppData\Local\Temp\sfa*.dll
C:\Users\K01\AppData\Local\Temp\*.exe
C:\ProgramData\0tbpw.pad
:Commands
[resethosts]
[emptytemp]
[emptyjava]
Kliknij Wykonaj skrypt i zatwierdź restart.
Pokaż raport z usuwania i nowy log z opcji Skanuj.