kontrola logu - pomalé otváranie aplikacii a spomalený pc

[Márty84]

Jezkovy voci, kde jste to vyhrabala?
S touhle RAMkou - Total RAM: 446 MB to asi moc dobre nepojede, i kdyz to bude ciste

Hlavne uz konecne odinstalujte jeden antivir! Perou se a zpomaluje to.

Nez ten log zkontroluju, nejakou dobu to potrva.

[AndreaP]

No to netuším, asi mi to niekto rozumný takto doporučil a ja blbá kúpila

[Márty84]

Tak ono zalezi, jak dlouho uz ho mate Kdysi mohl byt slusny, ale na dnesni dobu je to katastrofa

[AndreaP]

No práve že viac ako 3- 4 roky určite nie

[AndreaP]

A pod čím nájdem ten antivirus na odstranenie mse? Ved ho nikde nevidim

[Márty84]

Ale je tam


http://support.microsoft.com/kb/2435760/cs

[Márty84]

Zkuste najit tento soubor
C:\Documents and Settings\All Users\Application Data\Codecs Pack\2.2.529.166\{16cdff19-861d-48e3-a751-d99a27784753}\codecmngr.exe
a otestujte mi ho na virustotal, pripadne jotti http://forum.viry.cz/viewtopic.php?f=29&t=5846 a nahlaste vysledek, pripadne zkopirujte odkaz

[AndreaP]

File already analysed

This file was already analysed by VirusTotal on 2012-08-01 09:49:42.

Detection ratio: 0/41

You can take a look at the last analysis or analyse it again now.

[Márty84]

Zkuste jeste radeji ten jotti. Protoze tady se pise, ze se to testovalo 2012-08-01 09:49:42. Takze bud je to chyba, nebo to neni ten vas soubor Pak uz mam pripraveno dalsi mazani

[AndreaP]

Jotti's malware scan
Filename: codecmngr.exe
Status:
Scan finished. 0 out of 20 scanners reported malware.
Scan taken on: Mon 13 Aug 2012 23:29:46 (CET) Permalink

[AndreaP]

a nic nenalezeno. Aky bude další postup?

[Márty84]

Vyborne, takze jedeme dale. Dam vam ukoly a musim na nejakou dobu odejit od pc 30-45 minut.
Pokud uz se na to necitite, muzem to dodelat zitra Ale ja se tu kazdopadne jeste podivam.




Pokud se nepovedlo odinstalovat MSE, zkuste toto http://go.microsoft.com/?linkid=9748340




Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Restartujte pc a najedte do nouzoveho rezimu.
Spustte OTM.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]
[ClearAllRestorePoints]

:services
ICQ Service
JavaQuickStarterService
gusvc

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\WINDOWS\tasks\Codecs Pack.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1292428093-725345543-1003Core.job
C:\Program Files\Mozilla Firefox\searchplugins\avg_igeared.xml
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
C:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\engine@conduit.com
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\ffxtlbr@babylon.com
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\toolbar@ask.com
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\{37483b40-c254-4a72-bda4-22ee90182c1e}
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\extensions\{dd02a4eb-4afd-4d60-99d8-e67f964ca813}
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\askcom.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\conduit.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\daemon-search.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-1.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-10.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-11.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-12.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-13.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-14.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-15.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-16.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-17.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-18.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-19.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-2.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-20.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-21.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-22.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-23.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-24.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-25.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-26.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-27.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-28.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-29.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-3.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-30.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-31.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-32.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-33.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-34.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-35.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-36.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-37.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-38.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-39.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-4.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-40.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-41.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-42.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-43.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-44.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-45.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-46.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-47.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-48.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-5.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-6.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-7.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-8.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin-9.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin.gif
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin.src
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\icqplugin.xml
C:\Documents and Settings\Andrea\Application Data\Mozilla\Firefox\Profiles\97t7ufki.default\searchplugins\sweetim.xml
C:\123.exe
C:\Program Files\ConduitEngine
C:\Program Files\Conduit
C:\Program Files\ICQ6Toolbar
C:\Program Files\BabylonToolbar

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
"{D5D47440-0750-463D-BAEF-A47D02414806}"=-
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
"{D0F4A166-B8D4-48b8-9D63-80849FE137CB}"=-

Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)





Potom (je jedno, jestli v nouzovem ci normalnim rezimu)
Udelejte !!!uplnou!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[AndreaP]

Mse sa mi podarilo odinstalovat, ak sa dá, radsej by som pokracovala zajtra, lebo už mi to ani nemyslí

[Márty84]

Tak pokracujte OTM a MBAM. Ja jdu

OK, zitra to dorazime, snad Brou noc

[AndreaP]

ten odkaz do ľavého okna treba vlepiť do toho OTM, čo nainštalujem? A MBM stiahnem hned pri tom sťahovaní OTM alebo mi to pôjde aj potom?