win32/Fynloski.AA trojan

[Retardinjo]

Zdravo,

treba mi mala pomoc.
Antivirus ga je detektovao ali ne moze da ga skine.
Predpostavljam da moram da ga odstranim manuelno, samo mi treba objashnjenje kako

Puno pozdrava i hvala unapred

[Basa Mrkalj]

Preuzmi program DDS na desktop http://download.bleepingcomputer.com/sUBs/dds.scr
Dvoklikom pokreni DDS
Sacekaj malo, izbacice ti dva loga
Kopiraj mi log DDS.txt na http://pastebin.com/

Klikni Submit pa kopiraj link sa izvestajem u poruci

[Retardinjo]

Uradio

http://pastebin.com/BE0h3aWk

Hvala na pomoci

[Basa Mrkalj]

C:\Users\Mata\AppData\Roaming\feederico.exe

Posalji ovaj fajl na https://www.virustotal.com/

Okaci link sa izvestajem ovde.

[Retardinjo]

https://www.virustotal.com/file/cdde...is/1334846513/

Uradio

[Basa Mrkalj]

Preuzmi na desktop http://oldtimer.geekstogo.com/OTM.exe

U levi prozor programa ispod Paste Instructions for Items to be Moved) kopiraj:

:files
C:\Users\Mata\AppData\Roaming\dclogs
C:\Users\Mata\AppData\Roaming\feederico.exe

:commands
[purity]
[emptytemp]
[Reboot]

Klikni MoveIt

Prihvati restart i kopiraj mi log.


Ujedno javi da li Nod jos uvek prijavljuje.

[Retardinjo]

Ok uradio sam kako si mi rekao

All processes killed
========== FILES ==========
C:\Users\Mata\AppData\Roaming\dclogs folder moved successfully.
C:\Users\Mata\AppData\Roaming\feederico.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mata
->Temp folder emptied: 17497384511 bytes
->Temporary Internet Files folder emptied: 66939715 bytes
->Java cache emptied: 17363670 bytes
->FireFox cache emptied: 377030356 bytes
->Google Chrome cache emptied: 390582259 bytes
->Flash cache emptied: 198097 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 356352 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 29403023 bytes
%systemroot%\sysnative\config\systemprofile\AppDat a\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 311790 bytes
RecycleBin emptied: 9450202577 bytes

Total Files Cleaned = 26,541.00 mb


OTM by OldTimer - Version 3.1.19.0 log created on 04192012_171431

Files moved on Reboot...
C:\Users\Mata\AppData\Local\Temp\FXSAPIDebugLogFil e.txt moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\Cache\1\7D\68774d01 moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\Cache\_CACHE_001_ moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\Cache\_CACHE_002_ moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\Cache\_CACHE_003_ moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\Cache\_CACHE_MAP_ moved successfully.
C:\Users\Mata\AppData\Local\Mozilla\Firefox\Profil es\po3jrqic.default\urlclassifier3.sqlite moved successfully.

Registry entries deleted on Reboot...

Sada cu da vidim josh da li Nod prijavljuje neshto
Edit:
Nishta, 0 infected files, mislim da je to to.
Basa hvala puno na pomoci

[Basa Mrkalj]

Pokreni OTM i klikni CleanUp.

[Retardinjo]

Uradio i reboot-ovao

[Basa Mrkalj]

OK, pozz.

[borisgut]

Skini Malwarebytes Anti-Malware i skeniraj racunar,i log postavi ovde.