ochromeny pc

[cernohous13]

V návodu RSIT je psáno - klik pravým myšítkem a spustit jako správce/administrátor - totéž platí i pro OTM

ještě tam zbylo nějaké smetí

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „Moveit!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\

Script OTM

Kód: Vybrat vše

:Commands
[emptytemp]

:Files
C:\Program Files\AVG
C:\$AVG8.VAULT$
C:\Program Files\Microsoft Security Client
C:\Qoobox
C:\zmije.com
C:\zmije.com20474z
C:\zmije2.com
C:\zmije2.com30282z
C:\TDSSKiller.2.6.1.0_29.09.2011_03.09.18_log.txt
C:\TDSSKiller.2.6.1.0_29.09.2011_13.03.19_log.txt
C:\TDSSKiller.2.6.1.0_29.09.2011_12.57.12_log.txt
C:\TDSSKiller.2.6.1.0_29.09.2011_12.54.27_log.txt

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"=-
"{A057A204-BACC-4D26-9990-79A187E2698E}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]

Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.

a jestli nejsou problémy, tak jsme hotovi

[korkis]

laptop uz po predchozim cisteni vypadal klidne takze jsme zjevne na posledni strane topiku

posledni vec ktera me zere je ze mam na plose par nepotrebnych ikon rsitu a taky jednu se jmenem rkill viz obrazek zrejme byli napadeny a zmenili podobu a kdyz se je pokousim smazat tak mi to vyhodi hlasku: you need permission to perform this action....


a abych nezapomnel prikladam OTM log

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: halo 1
->Temp folder emptied: 209074692 bytes
->Temporary Internet Files folder emptied: 15513895 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 136431207 bytes
->Flash cache emptied: 782 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3063 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 1534993 bytes

Total Files Cleaned = 346.00 mb

========== FILES ==========
C:\Program Files\AVG\AVG8 folder moved successfully.
C:\Program Files\AVG folder moved successfully.
C:\$AVG8.VAULT$ folder moved successfully.
C:\Program Files\Microsoft Security Client\Antimalware folder moved successfully.
C:\Program Files\Microsoft Security Client folder moved successfully.
Folder move failed. C:\Qoobox\BackEnv scheduled to be moved on reboot.
C:\Qoobox folder moved successfully.
C:\zmije.com\N_ folder moved successfully.
C:\zmije.com\en-US folder moved successfully.
C:\zmije.com\en-GB folder moved successfully.
C:\zmije.com folder moved successfully.
C:\zmije.com20474z\N_ folder moved successfully.
C:\zmije.com20474z\en-US folder moved successfully.
C:\zmije.com20474z\en-GB folder moved successfully.
C:\zmije.com20474z folder moved successfully.
C:\zmije2.com folder moved successfully.
C:\zmije2.com30282z folder moved successfully.
C:\TDSSKiller.2.6.1.0_29.09.2011_03.09.18_log.txt moved successfully.
C:\TDSSKiller.2.6.1.0_29.09.2011_13.03.19_log.txt moved successfully.
C:\TDSSKiller.2.6.1.0_29.09.2011_12.57.12_log.txt moved successfully.
C:\TDSSKiller.2.6.1.0_29.09.2011_12.54.27_log.txt moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{A057A204-BACC-4D26-9990-79A187E2698E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found.

OTM by OldTimer - Version 3.1.18.0 log created on 09302011_031232

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File C:\Qoobox\BackEnv not found!

Registry entries deleted on Reboot...

[cernohous13]

Zkus je smazat po přihlášení do jiného účtu

při neúspěchu proveď
Stáhni "System Look" - http://jpshortstuff.247fixes.com/SystemLook.exe
Spusť jej a do okna zkopíruj

Kód: Vybrat vše

:folderfind
desktop

Klik na Look a po scanu sem zkopíruj výsledek hledání

[korkis]

SystemLook 30.07.11 by jpshortstuff
Log created at 09:31 on 01/10/2011 by halo 1
Administrator - Elevation successful

========== folderfind ==========

Searching for "desktop"
C:\Program Files\Hp\HPNetworkAssistant\HTML\GTHomeNet\Brand\GTConnect\GTConnect_Main\Movies\Generic\Desktop d------ [15:14 27/11/2008]
C:\ProgramData\Desktop d--hs-- [13:02 02/11/2006]
C:\Users\All Users\Desktop d--hs-- [13:02 02/11/2006]
C:\Users\Default\Desktop dr----- [11:18 02/11/2006]
C:\Users\halo 1\Desktop dr----- [13:12 19/04/2008]
C:\Users\Public\Desktop dr-h--- [11:18 02/11/2006]
C:\Windows\ServiceProfiles\LocalService\Desktop dr----- [12:47 02/11/2006]
C:\Windows\ServiceProfiles\NetworkService\Desktop dr----- [12:47 02/11/2006]

-= EOF =-

[cernohous13]

Opět spustíš SystemLook a zkopíruješ zelený text

Kód: Vybrat vše

:dir
C:\ProgramData\Desktop
C:\Users\All Users\Desktop
C:\Users\Default\Desktop
C:\Users\halo 1\Desktop
C:\Users\Public\Desktop
C:\Windows\ServiceProfiles\LocalService\Desktop
C:\Windows\ServiceProfiles\NetworkService\Desktop

výsledek mi ukaž - použijeme kladivo

[korkis]

bejt to muj notas tak to asi vyhodim z okna

SystemLook 30.07.11 by jpshortstuff
Log created at 11:25 on 01/10/2011 by halo 1
Administrator - Elevation successful

========== dir ==========

C:\ProgramData\Desktop - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

C:\Users\All Users\Desktop - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

C:\Users\Default\Desktop - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

C:\Users\halo 1\Desktop - Parameters: "(none)"

---Files---
AccountHistory.csv --a---- 3798 bytes [21:03 10/01/2011] [22:44 10/01/2011]
ActivInspire Readme.txt --a---- 12626 bytes [12:20 09/02/2011] [12:20 09/02/2011]
Activkeyboard.exe --a---- 565248 bytes [09:26 05/03/2010] [09:26 05/03/2010]
ACTIVmarker2057.chm --a---- 135866 bytes [12:20 12/10/2004] [12:20 12/10/2004]
activsystem1.dll --a---- 381952 bytes [10:18 17/12/2010] [10:18 17/12/2010]
amarker.exe --a---- 360448 bytes [10:39 21/05/2010] [10:39 21/05/2010]
ascommon.dll --a---- 42496 bytes [11:10 09/02/2011] [11:10 09/02/2011]
ASGdiPlus.dll --a---- 98304 bytes [07:31 09/10/2006] [07:31 09/10/2006]
asinspireprimarygui.dll --a---- 5444096 bytes [12:06 09/02/2011] [12:06 09/02/2011]
asinspirestudiogui.dll --a---- 4964864 bytes [12:03 09/02/2011] [12:03 09/02/2011]
aslocale.dll --a---- 489984 bytes [11:13 09/02/2011] [11:13 09/02/2011]
asprint.dll --a---- 12288 bytes [11:15 09/02/2011] [11:15 09/02/2011]
assharedcalc.dll --a---- 75776 bytes [11:49 09/02/2011] [11:49 09/02/2011]
AVLegacy.exe --a---- 299008 bytes [11:35 08/12/2010] [11:35 08/12/2010]
desktop picture.jpg --a---- 26455 bytes [03:05 30/09/2011] [03:08 30/09/2011]
desktop.ini --ahs-- 282 bytes [13:32 19/04/2008] [13:32 19/04/2008]
DMAnim.exe --a---- 24576 bytes [09:33 16/07/2007] [09:33 16/07/2007]
exh1.xls --a---- 43008 bytes [21:53 12/07/2011] [11:33 11/07/2011]
figures.docx --a---- 1191562 bytes [18:14 10/03/2011] [18:14 10/03/2011]
flipchart.ico --a---- 99678 bytes [01:05 02/02/2011] [01:05 02/02/2011]
Google Chrome.lnk --a---- 2047 bytes [11:34 29/09/2011] [11:34 29/09/2011]
Inspire.exe --a---- 8687616 bytes [11:49 09/02/2011] [11:49 09/02/2011]
inspire.ico --a---- 1435030 bytes [01:05 02/02/2011] [01:05 02/02/2011]
kfloat.dll --a---- 49152 bytes [14:57 22/08/2001] [14:57 22/08/2001]
KfloatRes.dll --a---- 539648 bytes [10:45 26/08/2004] [10:45 26/08/2004]
kmr.csv --a---- 15026 bytes [13:55 01/03/2011] [05:38 23/07/2011]
Microfit 5.LNK --a---- 772 bytes [18:11 17/07/2011] [18:11 17/07/2011]
OTM log.txt --a---- 6700 bytes [02:30 30/09/2011] [02:30 30/09/2011]
phonon4.dll --a---- 232960 bytes [12:46 10/08/2010] [12:46 10/08/2010]
project2011-1 HUW.doc --a---- 39936 bytes [19:40 22/03/2011] [19:40 22/03/2011]
QtCore4.dll --a---- 2146304 bytes [08:52 03/08/2010] [08:52 03/08/2010]
QtGui4.dll --a---- 7983104 bytes [07:19 09/09/2010] [07:19 09/09/2010]
QtNetwork4.dll --a---- 685056 bytes [08:54 03/08/2010] [08:54 03/08/2010]
QtOpenGL4.dll --a---- 610816 bytes [12:46 10/08/2010] [12:46 10/08/2010]
QtSql4.dll --a---- 187904 bytes [09:10 03/08/2010] [09:10 03/08/2010]
QtSvg4.dll --a---- 268800 bytes [12:47 10/08/2010] [12:47 10/08/2010]
QtXml4.dll --a---- 335360 bytes [08:52 03/08/2010] [08:52 03/08/2010]
rbs.csv --a---- 14562 bytes [12:09 01/03/2011] [04:50 03/03/2011]
rbs.xlsm --a---- 23241 bytes [10:54 03/03/2011] [10:54 03/03/2011]
rkill.com --a---- 1008092 bytes [07:21 26/09/2011] [07:16 26/09/2011]
RSIT (2).exe --a---- 781383 bytes [11:15 24/09/2011] [09:31 24/09/2011]
RSIT (3).exe --a---- 781383 bytes [14:56 24/09/2011] [09:31 24/09/2011]
Sky Broadband Help.url --a---- 210 bytes [14:08 18/09/2010] [14:12 18/09/2010]
t1f3d5t.exe --a---- 781383 bytes [16:11 24/09/2011] [11:06 24/09/2011]
table.csv --a---- 563 bytes [19:20 15/12/2010] [22:52 15/12/2010]
test1.scr --a---- 1008092 bytes [08:27 26/09/2011] [08:26 26/09/2011]
TrueSight.sys --a---- 60800 bytes [14:13 25/09/2011] [14:13 25/09/2011]
Wd0000018.doc --a---- 448512 bytes [07:30 09/01/2011] [07:30 09/01/2011]
XpdfRasterizer.dll --a---- 1728512 bytes [01:03 02/02/2011] [01:03 02/02/2011]
ZoneAlarm Security.lnk --a---- 871 bytes [03:27 30/09/2011] [03:27 30/09/2011]

---Folders---
Activities and templates d------ [20:04 29/09/2011]
amardeep d------ [12:47 25/03/2011]
Backgrounds d------ [20:04 29/09/2011]
dictionaries d------ [20:03 29/09/2011]
disk d------ [20:47 12/06/2008]
EconometricsDemi d------ [09:57 29/05/2011]
Grids d------ [20:04 29/09/2011]
help d------ [20:03 29/09/2011]
helperplugins d------ [20:03 29/09/2011]
hwr d------ [20:03 29/09/2011]
imageformats d------ [20:03 29/09/2011]
intfinance d------ [18:15 10/03/2011]
lectureandjournals d------ [00:38 19/02/2011]
lectureslides d------ [10:43 28/01/2011]
lectureslides2 d------ [12:32 04/02/2011]
lectureslidesandmidterm d------ [13:09 04/03/2011]
Lesson building tools d------ [20:04 29/09/2011]
logs d------ [21:09 26/09/2011]
phonon_backend d------ [20:03 29/09/2011]
Resource packs d------ [20:04 29/09/2011]
RK_Quarantine d------ [14:12 25/09/2011]
sounds d------ [20:03 29/09/2011]
SP2 d------ [10:14 29/09/2011]
spf d------ [10:19 05/01/2011]
sqldrivers d------ [20:03 29/09/2011]
stellar d------ [15:31 10/09/2011]
translations d------ [20:03 29/09/2011]
Veronika d------ [20:54 29/09/2011]

C:\Users\Public\Desktop - Parameters: "(none)"

---Files---
ActivInspire.lnk --a---- 1996 bytes [20:03 29/09/2011] [20:03 29/09/2011]
Adobe Reader 8.lnk --a---- 1887 bytes [12:11 11/08/2011] [12:11 11/08/2011]
avast! Free Antivirus.lnk --a---- 1829 bytes [11:22 29/09/2011] [11:22 29/09/2011]
CCleaner.lnk --a---- 804 bytes [02:24 29/09/2011] [02:24 29/09/2011]
Defraggler.lnk --a---- 1702 bytes [02:32 29/09/2011] [02:32 29/09/2011]
desktop.ini ---hs-- 174 bytes [12:50 02/11/2006] [18:32 18/11/2008]
HP Total Care Advisor.lnk --a---- 1865 bytes [13:22 19/04/2008] [16:20 26/11/2007]
Malwarebytes' Anti-Malware.lnk --a---- 906 bytes [12:05 26/09/2011] [12:05 26/09/2011]
My HP Games.lnk --a---- 2033 bytes [16:15 27/01/2008] [16:15 27/01/2008]
My PC Choice.lnk --a---- 2081 bytes [13:22 19/04/2008] [16:18 26/11/2007]
Skype.lnk --a---- 1878 bytes [11:35 07/06/2011] [11:35 07/06/2011]
Visit eBay.co.uk.lnk --a---- 2019 bytes [13:22 19/04/2008] [16:16 26/11/2007]
WinRAR.lnk --a---- 814 bytes [17:49 07/05/2008] [17:49 07/05/2008]

---Folders---
None found.

C:\Windows\ServiceProfiles\LocalService\Desktop - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

C:\Windows\ServiceProfiles\NetworkService\Desktop - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

-= EOF =-

[cernohous13]

Stahni Avenger zde:
http://swandog46.geekstogo.com/avenger.exe
Spusť a všude souhlas „Yes“
Hlavní okno

dole dej fajfku do obou čtverečků

Do pole „Input script here“ zkopíruj zelený text scriptu -> „Execute“ -> „Yes“
Bude restart a je potřeba vyčkat na otevření Notepadu a jeho obsah sem vložit. (C:\avenger.txt)

Script

Kód: Vybrat vše

Files to delete:
C:\Users\halo 1\Desktop\t1f3d5t.exe
C:\Users\halo 1\Desktop\RSIT (3).exe
C:\Users\halo 1\Desktop\RSIT (2).exe
C:\Users\halo 1\Desktop\rkill.com
C:\Users\halo 1\Desktop\t1f3d5t (2).exe

Folders to delete:
C:\Users\halo 1\Desktop\RK_Quarantine

Jestli se zadařilo, tak použij znovu T-cleaner

[korkis]

takze avenger uspesne smazl ty opruzy z plochy akorat je divny ze T-cleaner chvili po spusteni vypise error a hned se sam ukonci... zkousel jsem tak petkrat po vypsani toho erroru udelat print screen ale ani jednou se mi to nezadarilo... je holt rychlejsi....

bude asi slozity zjistit kde ta chyba prameni nicmene laptop je nyni bezproblemu tak myslim ze to tu muzeme uzamcit....

takze poklona a diky moc pane bez Vasi pomoci by majitel sel prehrat novy widle

[cernohous13]

Nemáš zač - rádo se stalo a jsme tady i příště