Wykonałem skrypt, otrzymałem log po restarcie (1512otl) zrobiłem skan mbam i otrzymałem log (wykryto 12trojanów i 1robaka) wszystko zostało usunięte. Po wszystkim zrobiłem skan otlem (otl55) Komputer został odwirusowany, brontoka już nie mam na 100%.
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Tok-Cirrhatus deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Tok-Cirrhatus-1695 deleted successfully.
C:\Users\franek\AppData\Local\br4413on.exe moved successfully.
C:\Users\franek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif moved successfully.
C:\Users\franek\AppData\Local\Bron.tok.A17.em.bin moved successfully.
C:\Users\franek\AppData\Local\JunkAtx.bin moved successfully.
========== FILES ==========
C:\Users\franek\AppData\Local\csrss.exe moved successfully.
C:\Users\franek\AppData\Local\inetinfo.exe moved successfully.
File move failed. C:\Users\franek\AppData\Local\lsass.exe scheduled to be moved on reboot.
File move failed. C:\Users\franek\AppData\Local\services.exe scheduled to be moved on reboot.
C:\Users\franek\AppData\Local\smss.exe moved successfully.
C:\Users\franek\AppData\Local\svchost.exe moved successfully.
File move failed. C:\Users\franek\AppData\Local\winlogon.exe scheduled to be moved on reboot.
OTL by OldTimer - Version 3.2.69.0 log created on 12152012_112628
Files\Folders moved on Reboot...
C:\Users\franek\AppData\Local\lsass.exe moved successfully.
C:\Users\franek\AppData\Local\services.exe moved successfully.
C:\Users\franek\AppData\Local\winlogon.exe moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...