Sprawdzanie loga HijackThis = proszę pomocy

http://wklej.eu/index.php?id=721d14bd1d

Uruchom HijackThis Do a system scan only w okienku programu pokaże się log zaznacz kratki przy podanych wpisach klikasz Fix checked

Kod:

O4 - Startup: zip.exe.lnk = C:\WINDOWS\system32\zip.exe

Podaj logi z OTL i GMER

Log z OTL
http://wklej.eu/index.php?id=c051819d65

GMER nie mogę otworzyć bo wystąpił błąd z aplikacja...

Jaki jest w ogóle powód sprawdzania logów???

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
PRC - [2001-10-26 18:29:52 | 01,002,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Fast Browser Search"
FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={DE00D016-E13F-5305-A901-6E73B4965899}&q="
[2009-11-09 19:01:39 | 00,003,700 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009-11-09 19:01:38 | 00,001,963 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.xml

:Files
C:\WINDOWS\System32\zip.exe

:Commands
[emptytemp]
[start explorer]
[Reboot]

.
Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL

http://wklej.eu/index.php?id=b8af8db9d4

Nowy log z OTL podaj jeszcze.

http://wklej.eu/index.php?id=42ddc08948

Coś nie chce zejść.

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
PRC - [2001-10-26 18:29:52 | 01,002,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Fast Browser Search"
FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={DE00D016-E13F-5305-A901-6E73B4965899}&q="
FF - prefs.js..extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.4.0
[2009-11-22 17:43:56 | 00,003,700 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009-11-22 17:43:56 | 00,001,963 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.xml

:Files
C:\Program Files\Mozilla Firefox\searchplugins\fast.png
C:\Program Files\Mozilla Firefox\searchplugins\fast.xml
C:\Program Files\Fast Browser Search

:Commands
[start explorer]

Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL

log z usuwania z OTL
http://wklej.eu/index.php?id=892ae466cf

nowy log z OTL
http://wklej.eu/index.php?id=97ed632940

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
PRC - [2001-10-26 18:29:52 | 01,002,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2009-11-22 20:28:22 | 00,003,700 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009-11-22 20:28:23 | 00,001,963 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.xml
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O4 - HKLM..\Run: [FBSearch] C:\Program Files\Search Guard Plus\SearchGuardPlus.exe ()
O4 - HKLM..\Run: [SGPUpdater] C:\Program Files\Search Guard PlusU\sgpUpdaters.exe ()

:Files
C:\Program Files\Mozilla Firefox\searchplugins\fast.png
C:\Program Files\Mozilla Firefox\searchplugins\fast.xml
C:\Program Files\SGPSA
C:\Program Files\Fast Browser Search
C:\Program Files\Search Guard Plus
C:\Program Files\Search Guard PlusU

:Commands
[start explorer]
[Reboot]

Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL

log usuwania z OTL
http://wklej.eu/index.php?id=458bfd1474

nowy log z OTL
http://wklej.eu/index.php?id=a377975e1f

Myślę, że to już ostatni skrypt będzie.

Uruchom OTL w oknie Custom Scans/Fixes wklej:

:OTL
PRC - [2001-10-26 18:29:52 | 01,002,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.4.0
FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={DE00D016-E13F-5305-A901-6E73B4965899}&q="
[2009-11-23 18:51:11 | 00,003,700 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009-11-23 18:51:11 | 00,001,963 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.xml

:Commands
[start explorer]

Klikasz Run Fix. Dajesz log z usuwania + nowy log z OTL

log usuwania z OTL
http://wklej.eu/index.php?id=ccc0a727a9

nowy log z OTL
http://wklej.eu/index.php?id=b07e35b4f8

Ten syf cały czas wraca, ale cóż się dziwić jak się żadnego SP nie ma, już o antywirze nie wspominając. Pobierz Combofix, przeskanuj system i daj log

log z Combofix

http://wklej.eu/index.php?id=68ee158c2f