Miko

Wszystko działa jak należy, dziękuję za pomoc. Temat do zamknięcia.

Log z msconfig. OTL logfile created on: 2012-07-30 01:44:48 - Run 4 OTL by OldTimer - Version 3.2.55.0 Folder = E:\ 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 1,80 Gb Available Physical Memory | 60,03% Memory free 5,99 Gb Paging File | 4,59 Gb Available in Paging File | 76,62% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 421,81 Gb Total Space | 343,07 Gb Free Space | 81,33% Space Free | Partition Type: NTFS Drive D: | 29,00 Gb Total Space | 26,64 Gb Free Space | 91,89% Space Free | Partition Type: NTFS Drive E: | 1,92 Gb Total Space | 1,92 Gb Free Space | 99,96% Space Free | Partition Type: FAT Computer Name: EURO-LOGISTIC | User Name: Mateusz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GammaTray.lnk - C:\Program Files (x86)\MagicTune Premium\GammaTray.exe - () MsConfig:64bit - StartUpFolder: C:^Users^Mateusz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe - () MsConfig:64bit - StartUpReg: 331BigDog - hkey= - key= - C:\Program Files (x86)\USB Camera\VM331_STI.EXE (Vimicro) MsConfig:64bit - StartUpReg: APSDaemon - hkey= - key= - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) MsConfig:64bit - StartUpReg: Gadu-Gadu 10 - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) MsConfig:64bit - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.) MsConfig:64bit - StartUpReg: Logitech Download Assistant - hkey= - key= - C:\windows\SysNative\rundll32.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: MagicTuneLauncher - hkey= - key= - C:\Program Files (x86)\MagicTune Premium\MagicTuneLauncher.exe () MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.) MsConfig:64bit - StartUpReg: RpcPing - hkey= - key= - File not found MsConfig:64bit - StartUpReg: UCam_Menu - hkey= - key= - C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) MsConfig:64bit - StartUpReg: VeriFaceManager - hkey= - key= - File not found MsConfig:64bit - StartUpReg: YouCam Mirror Tray icon - hkey= - key= - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.) MsConfig:64bit - State: "bootini" - Reg Error: Key error. MsConfig:64bit - State: "startup" - Reg Error: Key error.

Witam. Zostałem poproszony o pomoc w usunięciu popularnej ostatnio infekcji. Nie znam historii komputera ale zauważyłem pozostałości po ComboFixie i UsbFix. Zablokowałem uruchamianie pliku (msconfig i zmiana nazwy na *.vir) odpowiedzialnego za wyświetlanie komunikatu. Proszę o pomoc w wyczyszczeniu pozostałości. Win 7 HP 64 bit. Logi wykonane po normalnym uruchomieniu komputera. Z góry dziękuję za pomoc. OTL.Txt Extras.Txt