Prośba o analizę logów

[kilerlu]

Proszę o analizę logów.
Problemem jest przeglądarka. Zauważyłem zmiany w hasłach.
Po przeskanowaniu Malwarebytes oraz HitmanPro usunęło
kilkanaście malware. Chciałbym się dowiedzieć czy jest coś jeszcze w systemie.
Z góry dziękuje za pomoc.

[Aby zobaczyć linki, zarejestruj się tutaj]

- OTL

[Aby zobaczyć linki, zarejestruj się tutaj]

EXTRAS

[Twoja stara]

Jak możesz daj jeszcze log z Malwarebytes
I zaktualizuj jave
A najlepiej ją usuń jak Ci niepotrzebna

[kilerlu]

log z malwarebytes

[Aby zobaczyć linki, zarejestruj się tutaj]

a javą zaraz się zajmę
dzięki za zainteresowanie

[Twoja stara]

Chodzi mi o log ze skanowania w którym zostały wykryte wirusy

[kilerlu]

no niestety nie mam tych logów bo w programie zostały tylko te
bez zagrożeń. Skanowałem system kilka razy

jest jeszcze log z HitmanPRO

[Aby zobaczyć linki, zarejestruj się tutaj]

[tachion]

W własne opcje skanowania skrypt wklej i wykonaj,przedstaw log z otl.

Kod:

:Files
C:\Users\Bredart\AppData\Roaming\Yhmek\pias.exe

:OTL
O4 - HKU\S-1-5-21-3667917603-3575867684-340283657-1000..\Run: [AdobeBridge]File not found
O4 - HKLM..\Run: []File not found
O4 - HKU\S-1-5-21-3667917603-3575867684-340283657-1000..\Run: [AdobeBridge]File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
[2012-10-27 19:22:39 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Agwyc
[2012-10-29 16:30:27 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Alsed
[2012-10-28 09:18:47 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Amfyf
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Apxe
[2012-11-09 14:23:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Aqylv
[2012-11-07 06:16:37 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Azlo
[2012-11-08 17:38:36 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Biur
[2012-11-10 08:27:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ceemk
[2011-08-11 23:09:51 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012-11-02 08:35:01 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Dala
[2012-10-30 22:17:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Dawiqa
[2012-11-07 06:16:37 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Digy
[2012-10-29 08:30:32 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ebud
[2012-11-09 14:23:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ecle
[2012-11-04 18:48:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ecpoe
[2012-10-30 14:16:43 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Egba
[2012-11-03 15:06:37 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Engaa
[2012-11-08 08:11:14 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Epalux
[2012-11-08 08:11:14 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Epfiq
[2012-10-29 16:30:27 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Epimh
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Epyh
[2012-11-11 09:36:55 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Eqet
[2011-08-13 21:55:50 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\EurekaLog
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ewfey
[2012-11-02 08:35:00 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ewryt
[2012-11-09 22:24:11 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ewwaop
[2012-10-30 22:17:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Feuz
[2012-10-28 18:37:43 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Gedag
[2012-06-09 12:40:25 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\GHISLER
[2012-11-01 06:19:33 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Giur
[2012-11-09 06:23:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Guro
[2012-11-05 14:18:50 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Heug
[2012-11-11 00:28:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Hocak
[2012-11-07 06:16:37 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Icude
[2012-10-26 21:27:26 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Idadzu
[2012-11-04 18:48:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Idriyq
[2012-10-30 06:16:32 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ifygpy
[2012-10-28 18:37:43 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Igehuk
[2012-10-29 08:30:32 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Imtian
[2012-04-21 14:01:52 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\inkscape
[2012-11-04 08:12:51 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ipziu
[2012-10-27 19:22:39 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Iximo
[2012-11-03 06:07:20 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Keke
[2012-11-07 16:24:54 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Kicuxi
[2012-11-06 14:56:46 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Koka
[2012-11-09 14:23:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Koubyd
[2012-10-29 08:30:32 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Liluok
[2012-11-03 18:00:22 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Mafym
[2012-11-05 06:12:13 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Makaru
[2012-11-04 08:12:51 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Meakz
[2012-11-02 08:35:01 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Mopa
[2012-11-07 16:24:54 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Nepaeb
[2012-11-11 09:36:55 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Niiqb
[2012-11-09 22:24:11 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Noyr
[2012-11-05 14:18:50 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Obihcu
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Odwe
[2012-11-11 17:37:18 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ogup
[2012-11-06 14:56:47 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Osta
[2012-11-09 06:23:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Osti
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Osweir
[2012-10-31 14:18:18 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Owpuri
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Oxwek
[2012-11-05 14:18:50 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ozikha
[2012-11-08 08:11:14 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Pufaek
[2012-11-03 18:00:22 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Pyefo
[2012-10-31 22:18:55 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Qaivyx
[2012-10-31 22:18:55 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Qaxe
[2012-10-31 06:17:24 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Qekux
[2012-11-10 08:27:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Qeogta
[2012-06-03 15:42:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\QuickScan
[2012-10-28 18:37:43 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ridety
[2012-11-11 17:37:18 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Rygyg
[2012-10-30 14:16:43 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Sikeva
[2012-11-09 22:24:11 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Sirave
[2012-11-06 14:56:47 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Syuhsa
[2012-11-03 18:00:22 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Sywoi
[2012-11-03 06:07:20 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Teixik
[2011-08-07 16:11:39 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Thunderbird
[2012-10-31 06:17:24 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ucosce
[2012-11-11 09:36:55 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Uduz
[2012-11-06 06:19:35 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ufne
[2012-11-06 06:19:35 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Uhtys
[2012-11-03 15:06:36 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ukloq
[2012-11-03 15:06:36 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ulqe
[2012-11-07 16:24:54 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Umonse
[2012-11-11 17:37:18 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Unoqsy
[2012-11-04 08:12:51 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Uqip
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Urygq
[2012-10-31 14:18:18 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Usera
[2012-10-27 19:22:39 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Uxop
[2012-10-30 06:16:32 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Votegy
[2012-11-06 06:19:35 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Waog
[2012-11-02 16:35:58 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Wyabyz
[2012-11-05 06:12:13 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Wygyi
[2012-11-11 00:28:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Xapuhe
[2012-11-01 06:19:33 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Xuhi
[2012-11-10 08:27:04 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Yddoes
[2012-11-03 06:07:20 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ygva
[2012-10-26 21:27:26 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Yhmek
[2012-11-14 13:54:41 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ynhory
[2012-11-02 16:35:58 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ytcu
[2012-11-08 17:38:36 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Yvhuo
[2012-11-05 06:12:13 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Ywapot
[2012-11-09 06:23:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Yxet
[2012-11-02 16:35:58 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Yxpyit
[2012-10-28 09:18:47 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Zemeqa
[2012-10-28 09:18:47 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Zoir
[2012-11-14 13:45:59 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Zovy
[2012-11-04 18:48:03 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Zuag
[2012-11-11 00:28:17 | 000,000,000 | ---D | M] -- C:\Users\Bredart\AppData\Roaming\Zytei
@Alternate Data Stream - 128 bytes -> C:\Program Files\HeloCut:{76003100-6900-4E00-7400-2F0050004F00}

:Commands
[emptytemp]

[kilerlu]

po wykonaniu skryptu komputer się zrestartował i wyszedł taki log:

[Aby zobaczyć linki, zarejestruj się tutaj]

Potem jeszcze raz przeskanowałem OTL:

[Aby zobaczyć linki, zarejestruj się tutaj]

- OTL

[Aby zobaczyć linki, zarejestruj się tutaj]

- EXTRAS

Dzięki wielkie za zainteresowanie

[tachion]

Tak więc ok foldery utworzone i tak były puste nic więcej już tu nie widzę,można przejść do sprzątania w otl.

[kilerlu]

dziękuje serdecznie za pomoc
Muszę teraz przeczytać dział o zabezpieczeniach
pozdrawiam