ji83j.exe - jak to usunąć?

[szuberti]

Witam, mam problem z plikiem ji83j.exe
Czy możecie mi podpowiedzieć jak to usunąć?
Logi z OTL

log

http://www.wklej.eu/index.php?id=8ddc956f82

extras
http://www.wklej.eu/index.php?id=8316939653

Jestem nowy i proszę o pomoc. Pozdrawiam i z góry dziękuję

[mateo8898]

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
MOD - [2010-03-21 08:06:33 | 000,080,384 | RHS- | M] () -- C:\Documents and Settings\Andrzej Siedlaczek\Ustawienia lokalne\Temp\cvasds1.dll
O4 - HKCU..\Run: [amva] C:\WINDOWS\system32\amvo.exe ()
O4 - HKCU..\Run: [cdoosoft] C:\Documents and Settings\Andrzej Siedlaczek\Ustawienia lokalne\Temp\herss.exe ()
O32 - AutoRun File - [2010-03-21 10:18:10 | 000,000,057 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]

:Files
C:\Documents and Settings\Andrzej Siedlaczek\Ustawienia lokalne\Temp\cvasds1.dll
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk
C:\ji83j.exe
C:\ggpw.exe
C:\WINDOWS\tasks\User_Feed_Synchronization-{47B22F98-0F6E-4863-BD76-D1EBC16E089F}.job

:Reg
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""

:Commands
[emptytemp]

Klikasz Run Fix. Dajesz log z usuwania + nowe logi z OTL

Wylecz pamięci przenośne Flash Disinfector lub sformatuj

[szuberti]

Witam. Mam kolejny problem na 2 komputerach. Plik to ggpw.exe . Przesyłam logi z otl

http://www.wklej.eu/index.php?id=fcdd823985

i extras:

http://www.wklej.eu/index.php?id=4b2ffdc77d

[mateo8898]

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
MOD - [2010-05-17 21:17:17 | 000,083,968 | RHS- | M] () -- C:\Documents and Settings\Szubert\Ustawienia lokalne\Temp\cvasds0.dll
O4 - HKU\S-1-5-21-854245398-1580818891-839522115-1004..\Run: [cdoosoft] C:\Documents and Settings\Szubert\Ustawienia lokalne\Temp\herss.exe ()
O32 - AutoRun File - [2010-05-17 21:26:08 | 000,000,055 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-05-17 21:26:08 | 000,000,055 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-05-17 21:26:08 | 000,000,055 | RHS- | M] () - F:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{04a74c2f-fdf2-11dd-8ce0-081074118869}\Shell\AutoRun\command - "" = G:\ej10fkdo.bat -- File not found
O33 - MountPoints2\{04a74c2f-fdf2-11dd-8ce0-081074118869}\Shell\open\Command - "" = G:\ej10fkdo.bat -- File not found
O33 - MountPoints2\{09450f23-b6ed-11de-8dcf-081074118869}\Shell\AutoRun\command - "" = k1d.exe
O33 - MountPoints2\{09450f23-b6ed-11de-8dcf-081074118869}\Shell\open\Command - "" = k1d.exe
O33 - MountPoints2\{15dbcfc1-2b87-11de-8d23-081074118869}\Shell\AutoRun\command - "" = G:\ggpw.exe -- File not found
O33 - MountPoints2\{15dbcfc1-2b87-11de-8d23-081074118869}\Shell\open\Command - "" = G:\ggpw.exe -- File not found
O33 - MountPoints2\{3d99cbb8-4006-11df-8e3a-979597e5fa2c}\Shell\AutoRun\command - "" = ggpw.exe
O33 - MountPoints2\{3d99cbb8-4006-11df-8e3a-979597e5fa2c}\Shell\open\Command - "" = ggpw.exe
O33 - MountPoints2\{3e9e683e-1c59-11dd-8b7e-081074118869}\Shell - "" = AutoRun
O33 - MountPoints2\{94d2b1b0-0f06-11de-8cf6-081074118869}\Shell\AutoRun\command - "" = u.com
O33 - MountPoints2\{94d2b1b0-0f06-11de-8cf6-081074118869}\Shell\open\Command - "" = u.com
O33 - MountPoints2\{bada7ff0-f254-11de-8e02-b8d3d6ca3ee4}\Shell - "" = AutoRun
[2010-05-10 16:18:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

:Files
C:\Documents and Settings\Szubert\Ustawienia lokalne\Temp\cvasds0.dll
C:\ggpw.exe
E:\ggpw.exe
F:\ggpw.exe

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"WheelMouse"=-

:Commands
[resethosts]
[emptytemp]

Klikasz Run Fix. Dajesz log z usuwania + nowe logi z OTL

Wylecz pamięci przenośne Flash Disinfector lub sformatuj