Odstranění

[Sabinaleop]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\AIMActiveXDLL.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Addins\OEActiveXDLL.DesktopOEAddin1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c5096216-7703-409e-b85a-8a6ee7395128}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.

Infikované hodnoty registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{0ba0192d-94a5-45e3-b2b8-3ec5a1a0b5ec} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{2224e955-00e9-4613-a844-ce69fccaae91} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{872a1c39-df0b-4c8b-ad84-12ba24a3b781} (Adware.DoubleD) -> Quarantined and deleted successfully.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
C:\Documents and Settings\PC\Data aplikací\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data\PC (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data (Adware.DoubleD) -> Quarantined and deleted successfully.

Infikované soubory:
C:\Documents and Settings\All Users\Data aplikací\{F444439B-B473-48E8-8DE5-4CB929C79A9F}\OFFLINE\mFileBagIDE.dll\bag\SSD.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\{F444439B-B473-48E8-8DE5-4CB929C79A9F}\OFFLINE\mFileBagIDE.dll\bag\stbreaim.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\{F444439B-B473-48E8-8DE5-4CB929C79A9F}\OFFLINE\mFileBagIDE.dll\bag\stbrewlm.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\{F444439B-B473-48E8-8DE5-4CB929C79A9F}\OFFLINE\mFileBagIDE.dll\bag\stbrunwlm.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\{F444439B-B473-48E8-8DE5-4CB929C79A9F}\OFFLINE\mFileBagIDE.dll\bag\stbterm.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7D82F6E8-2C7B-426C-ADBD-AEB5302DB1FA}\RP369\A0167917.sys (Malware.Trace) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7D82F6E8-2C7B-426C-ADBD-AEB5302DB1FA}\RP369\A0168114.sys (Malware.Trace) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{7D82F6E8-2C7B-426C-ADBD-AEB5302DB1FA}\RP369\A0168185.sys (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data\PC\avatar.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data\PC\outfit.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data\PC\register.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\PC\Data aplikací\FunWebProducts\Data\PC\zbucks.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\eacore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.


Udělala jsem to dobře?

[stell]

pefectne
Teraz napis ze aky subor mas este na ploche,nazov cestu,

system volume information/restore (Obnova systému):
1. Je potřeba vypnout nástroj obnova systému - Ovládací panely>systém>obnovení systému>vypnout nástroj obnovení systému>OK nebo použít a nyní jen restartovat PC
2. Po restartu je tento adresář kompletně smazán, obnovu opět zapnout.

zopakuj skan s Malwarebytes,

[Sabinaleop]

dfffffffffff

[stell]

spravne si odpisala cestu,??ak ano script pre Avanger,uz si to robila.

Kód: Vybrat vše

files to delete:
C:\Documents and Settings\PC\plocha\kabelka

[Sabinaleop]

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Error: file "C:\Documents and Settings\PC\Plocha\kabelka" not found!
Deletion of file "C:\Documents and Settings\PC\Plocha\kabelka" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

[stell]

1:
stiahni na plochu
system look
spust<do okna vloz script a klik look,da ti log na plochu>vloz sem

Kód: Vybrat vše

:dir
%userprofile%\Plocha /s

[Sabinaleop]

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 15:52 on 19/01/2010 by PC (Administrator - Elevation successful)

========== dir ==========

C:\Documents and Settings\PC\Plocha - Parameters: "/s"

---Files---
2.jpg --a--- 79388 bytes [15:46 13/01/2010] [15:46 13/01/2010]
3.jpg --a--- 112603 bytes [15:46 13/01/2010] [15:46 13/01/2010]
avenger.exe --a--- 731136 bytes [15:19 17/01/2010] [15:19 17/01/2010]
Dokumenty.lnk --a--- 327 bytes [06:21 27/09/2009] [06:21 27/09/2009]
emo-ucesy-47.jpg --a--- 38973 bytes [10:49 16/01/2010] [10:49 16/01/2010]
emo-ucesy-52.jpg --a--- 12878 bytes [10:51 16/01/2010] [10:51 16/01/2010]
emo-ucesy-57.jpg --a--- 9181 bytes [10:52 16/01/2010] [10:52 16/01/2010]
emo-ucesy-64.jpg --a--- 12779 bytes [10:55 16/01/2010] [10:55 16/01/2010]
emo-ucesy-67.jpg --a--- 16291 bytes [10:56 16/01/2010] [10:56 16/01/2010]
FIWWSetup(2).exe --a--- 952000 bytes [11:45 17/01/2010] [11:45 17/01/2010]
FIWWSetup.exe --a--- 1191785 bytes [11:38 17/01/2010] [11:39 17/01/2010]
Free Internet Window Washer.lnk --a--- 725 bytes [11:41 17/01/2010] [11:41 17/01/2010]
kabelka... --a--- 0 bytes [13:20 03/11/2009] [13:20 03/11/2009]
mbam-log-2010-01-18 (18-00-12).txt --a--- 9029 bytes [17:00 18/01/2010] [17:00 18/01/2010]
Místa v síti.lnk --a--- 104 bytes [06:21 27/09/2009] [06:21 27/09/2009]
P08-01-10_15.57.JPG --a--- 30863 bytes [20:04 14/01/2010] [15:01 11/01/2010]
P16-02-09_13.50.JPG --a--- 59130 bytes [20:04 14/01/2010] [17:55 06/01/2010]
silvestr.3gp --a--- 3118082 bytes [11:03 16/01/2010] [10:49 15/01/2010]
Sunshine, Lollipops and Rainbows Leslie Gore Lyrics.mp3 --a--- 782852 bytes [13:51 17/01/2010] [13:52 17/01/2010]
SystemLook.exe --a--- 100908 bytes [14:51 19/01/2010] [14:51 19/01/2010]
SystemLook.txt --a--- 0 bytes [14:52 19/01/2010] [14:52 19/01/2010]
Tento počítač.lnk --a--- 104 bytes [12:10 03/10/2009] [06:21 27/09/2009]
Thumbs.db --ahs- 1553408 bytes [13:50 21/12/2008] [15:18 13/01/2010]
V080110_19.50.3gp --a--- 2137881 bytes [11:03 16/01/2010] [18:50 08/01/2010]
V271209_23.16.3gp --a--- 18967585 bytes [11:03 16/01/2010] [10:49 15/01/2010]
Video000.3gp --a--- 689105 bytes [11:03 16/01/2010] [12:10 15/06/2009]
Video004.3gp --a--- 758399 bytes [11:03 16/01/2010] [15:52 15/06/2009]
Video005.3gp --a--- 1070100 bytes [11:03 16/01/2010] [17:31 16/06/2009]
~WRL3850.tmp ---h-- 37888 bytes [17:51 04/01/2010] [05:54 06/01/2010]

C:\Documents and Settings\PC\Plocha\Nepoužívané odkazy plochy d----- [08:58 09/01/2010]
Skype.lnk --a--- 2289 bytes [09:02 18/07/2009] [17:37 09/01/2010]

C:\Documents and Settings\PC\Plocha\Nepoužívané odkazy plochy\Happy Foto.{410AEE10-AB1F-4D31-8432-779CCE247A01} d----- [08:58 09/01/2010]

C:\Documents and Settings\PC\Plocha\Nová složka d----- [19:13 28/12/2009]
bufetr.jpg --a--- 559457 bytes [19:57 27/12/2009] [17:31 28/12/2009]
facebook.jpg --a--- 294299 bytes [19:30 27/12/2009] [12:16 09/01/2010]
faceee.jpg --a--- 432899 bytes [19:53 27/12/2009] [17:31 28/12/2009]
musim.jpg --a--- 417356 bytes [19:57 27/12/2009] [17:31 28/12/2009]
prosinec2009 064.jpg --a--- 412689 bytes [19:35 27/12/2009] [17:31 28/12/2009]
takyyy.jpg --a--- 332489 bytes [19:51 27/12/2009] [17:31 28/12/2009]
Thumbs.db --ahs- 30720 bytes [19:15 28/12/2009] [15:18 13/01/2010]
vanoce.jpg --a--- 592896 bytes [20:31 27/12/2009] [17:32 28/12/2009]

C:\Documents and Settings\PC\Plocha\Nová složka (2) d----- [12:21 02/01/2010]
Dum001.3gp --a--- 1157091 bytes [12:22 02/01/2010] [16:21 21/05/2008]
HARRY POTTER. - 3GP.3gp --a--- 5431276 bytes [12:22 02/01/2010] [17:28 23/04/2008]
Ja a vej..3gp --a--- 691289 bytes [12:22 02/01/2010] [17:04 11/06/2009]
Jesus.3gp --a--- 879670 bytes [12:22 02/01/2010] [08:01 06/04/2008]
krtek a hovna.3gp --a--- 3610581 bytes [12:22 02/01/2010] [14:38 11/08/2009]
Malovaný obrázky.mp4 --a--- 3720768 bytes [12:22 02/01/2010] [08:00 06/04/2008]
moto_1188.3gp --a--- 1347032 bytes [12:22 02/01/2010] [15:40 13/05/2008]
MOV00015.3gp --a--- 1979172 bytes [12:22 02/01/2010] [09:57 04/06/2009]
Thumbs.db --ahs- 49664 bytes [12:42 02/01/2010] [15:18 13/01/2010]
Video003.3gp --a--- 153051 bytes [12:22 02/01/2010] [15:41 08/07/2009]
Video005.3gp --a--- 3101582 bytes [12:22 02/01/2010] [09:01 25/06/2009]
Video011.3gp --a--- 279363 bytes [12:22 02/01/2010] [17:22 09/05/2008]
YouTube - karel gott - trezor.3gp --a--- 1063496 bytes [12:22 02/01/2010] [07:49 02/06/2009]

C:\Documents and Settings\PC\Plocha\Nová složka (2)\Pictures d----- [12:23 02/01/2010]
P010110_06.35.jpg --a--- 1375741 bytes [12:24 02/01/2010] [05:35 01/01/2010]
P010110_07.18.jpg --a--- 1025660 bytes [12:24 02/01/2010] [06:18 01/01/2010]
P010110_07.18_[01].jpg --a--- 997177 bytes [12:24 02/01/2010] [06:18 01/01/2010]
P20-02-09_13.07.JPG --a--- 56214 bytes [12:23 02/01/2010] [18:52 20/02/2009]
P281209_15.02.jpg --a--- 1384112 bytes [12:23 02/01/2010] [14:03 28/12/2009]
P281209_15.03.jpg --a--- 1710511 bytes [12:23 02/01/2010] [14:03 28/12/2009]
P281209_15.03_[01].jpg --a--- 2099635 bytes [12:23 02/01/2010] [14:03 28/12/2009]
P281209_15.03_[02].jpg --a--- 1822188 bytes [12:23 02/01/2010] [14:03 28/12/2009]
P281209_15.03_[03].jpg ------ 1693121 bytes [12:23 02/01/2010] [14:03 28/12/2009]
P281209_15.41.jpg --a--- 1183179 bytes [12:23 02/01/2010] [14:41 28/12/2009]
P281209_15.43.jpg --a--- 1276164 bytes [12:23 02/01/2010] [14:43 28/12/2009]
P281209_15.43_[01].jpg --a--- 1265921 bytes [12:23 02/01/2010] [14:43 28/12/2009]
P281209_15.44.jpg --a--- 1356913 bytes [12:23 02/01/2010] [14:44 28/12/2009]
P281209_15.45.jpg --a--- 1661021 bytes [12:23 02/01/2010] [14:45 28/12/2009]
P281209_15.45_[01].jpg --a--- 1534354 bytes [12:23 02/01/2010] [14:45 28/12/2009]
P281209_15.47.jpg --a--- 1211351 bytes [12:23 02/01/2010] [14:47 28/12/2009]
P281209_15.48.jpg --a--- 1322825 bytes [12:23 02/01/2010] [14:48 28/12/2009]
P281209_17.08_[01].jpg --a--- 1158260 bytes [12:23 02/01/2010] [16:08 28/12/2009]
P281209_17.09.jpg --a--- 951248 bytes [12:23 02/01/2010] [16:09 28/12/2009]
P281209_17.09_[01].jpg --a--- 930345 bytes [12:23 02/01/2010] [16:09 28/12/2009]
P281209_17.09_[02].jpg --a--- 1250770 bytes [12:23 02/01/2010] [16:09 28/12/2009]
P281209_17.11.jpg --a--- 1296035 bytes [12:23 02/01/2010] [16:11 28/12/2009]
P281209_17.13.jpg --a--- 1012873 bytes [12:23 02/01/2010] [16:13 28/12/2009]
P281209_17.14.jpg --a--- 1148121 bytes [12:23 02/01/2010] [16:14 28/12/2009]
P281209_17.14_[02].jpg --a--- 1402094 bytes [12:23 02/01/2010] [16:14 28/12/2009]
P281209_17.18.jpg --a--- 1170025 bytes [12:23 02/01/2010] [16:18 28/12/2009]
P281209_18.03.jpg --a--- 1229451 bytes [12:23 02/01/2010] [17:03 28/12/2009]
P281209_18.04.jpg --a--- 1330752 bytes [12:23 02/01/2010] [17:04 28/12/2009]
P281209_18.04_[01].jpg --a--- 1200868 bytes [12:23 02/01/2010] [17:04 28/12/2009]
P281209_18.04_[02].jpg --a--- 1241530 bytes [12:23 02/01/2010] [17:04 28/12/2009]
P281209_18.04_[03].jpg --a--- 1298033 bytes [12:23 02/01/2010] [17:04 28/12/2009]
P281209_18.04_[04].jpg --a--- 1359043 bytes [12:23 02/01/2010] [17:04 28/12/2009]
P281209_18.05_[02].jpg --a--- 1047858 bytes [12:23 02/01/2010] [17:05 28/12/2009]
P281209_18.05_[03].jpg --a--- 1291936 bytes [12:23 02/01/2010] [17:05 28/12/2009]
P281209_18.05_[04].jpg --a--- 1024589 bytes [12:23 02/01/2010] [17:05 28/12/2009]
P281209_18.05_[05].jpg --a--- 1255573 bytes [12:23 02/01/2010] [17:06 28/12/2009]
P281209_18.06_[01].jpg --a--- 1157626 bytes [12:23 02/01/2010] [17:06 28/12/2009]
P281209_20.43.jpg --a--- 1329800 bytes [12:23 02/01/2010] [19:43 28/12/2009]
P291209_12.58.jpg --a--- 870482 bytes [12:23 02/01/2010] [11:58 29/12/2009]
P291209_12.58_[01].jpg --a--- 784144 bytes [12:23 02/01/2010] [11:58 29/12/2009]
P311209_17.15.jpg --a--- 910097 bytes [12:23 02/01/2010] [16:15 31/12/2009]
P311209_22.17.jpg --a--- 1245049 bytes [12:23 02/01/2010] [21:17 31/12/2009]
P311209_22.17_[01].jpg --a--- 1369720 bytes [12:23 02/01/2010] [21:17 31/12/2009]
P311209_22.18.jpg --a--- 1340787 bytes [12:23 02/01/2010] [21:18 31/12/2009]
P311209_22.19.jpg --a--- 1263433 bytes [12:24 02/01/2010] [21:19 31/12/2009]
P311209_22.19_[01].jpg --a--- 1325454 bytes [12:24 02/01/2010] [21:20 31/12/2009]
P311209_22.20.jpg --a--- 937060 bytes [12:24 02/01/2010] [21:20 31/12/2009]
P311209_22.20_[01].jpg --a--- 1471960 bytes [12:24 02/01/2010] [21:20 31/12/2009]
P311209_22.20_[02].jpg --a--- 1220248 bytes [12:24 02/01/2010] [21:20 31/12/2009]
P311209_22.21.jpg --a--- 1255428 bytes [12:24 02/01/2010] [21:21 31/12/2009]
P311209_22.21_[01].jpg --a--- 1346543 bytes [12:24 02/01/2010] [21:21 31/12/2009]
P311209_22.21_[02].jpg --a--- 1008364 bytes [12:24 02/01/2010] [21:21 31/12/2009]
P311209_22.45.jpg --a--- 1523005 bytes [12:24 02/01/2010] [21:45 31/12/2009]
P311209_22.45_[01].jpg --a--- 1670197 bytes [12:24 02/01/2010] [21:45 31/12/2009]
P311209_22.45_[02].jpg --a--- 1531751 bytes [12:24 02/01/2010] [21:45 31/12/2009]
P311209_22.46.jpg --a--- 1416777 bytes [12:24 02/01/2010] [21:46 31/12/2009]
P311209_22.46_[01].jpg --a--- 1304669 bytes [12:24 02/01/2010] [21:46 31/12/2009]
P311209_22.46_[02].jpg --a--- 1347201 bytes [12:24 02/01/2010] [21:46 31/12/2009]
P311209_22.46_[03].jpg --a--- 1125618 bytes [12:24 02/01/2010] [21:47 31/12/2009]
Thumbs.db --ahs- 159744 bytes [12:42 02/01/2010] [10:19 03/01/2010]

C:\Documents and Settings\PC\Plocha\Programy atd d----- [19:02 01/05/2009]
Adobe Audition 1.5.lnk --a--- 1732 bytes [12:53 18/07/2009] [12:54 18/07/2009]
Adobe Reader 8.lnk --a--- 1729 bytes [19:21 01/05/2009] [08:11 01/01/2009]
avast! Antivirus.lnk --a--- 1709 bytes [19:21 01/05/2009] [17:46 14/12/2008]
BSplayer.lnk --a--- 775 bytes [16:35 09/02/2009] [16:35 09/02/2009]
CX4300_5500_DX4400 Manuál.lnk --a--- 1892 bytes [19:21 01/05/2009] [12:30 19/12/2008]
DVDFab Platinum 4.lnk --a--- 705 bytes [07:34 19/12/2008] [07:34 19/12/2008]
eBay.lnk --a--- 966 bytes [16:22 11/05/2009] [16:22 11/05/2009]
EPSON File Manager (3).lnk --a--- 1907 bytes [19:23 01/05/2009] [19:23 01/05/2009]
EPSON Scan.lnk --a--- 665 bytes [19:21 01/05/2009] [19:21 01/05/2009]
Hudba1.nra --a--- 14627 bytes [16:22 10/03/2009] [16:22 10/03/2009]
jxpiinstall-6u13-fcs-bin-b03-windows-i586-09_mar_2009.exe --a--- 607640 bytes [09:14 31/05/2009] [09:14 31/05/2009]
LG PC Suite II.lnk --a--- 1459 bytes [11:26 27/12/2009] [11:26 27/12/2009]
Microsoft Outlook (6).lnk --a--- 104 bytes [19:25 01/05/2009] [19:25 01/05/2009]
Microsoft Outlook.lnk --a--- 104 bytes [03:54 13/05/2009] [03:54 13/05/2009]
Nero StartSmart.lnk --a--- 2369 bytes [18:13 14/12/2008] [18:13 14/12/2008]
PhotoFiltre Studio.lnk --a--- 757 bytes [14:39 23/11/2009] [14:39 23/11/2009]
PhotoFiltre.lnk --a--- 718 bytes [16:37 20/12/2008] [14:13 28/12/2008]
ps701up.exe --a--- 13445041 bytes [12:46 27/05/2009] [12:49 27/05/2009]
QuickTime Player.lnk --a--- 1684 bytes [07:29 19/12/2008] [07:29 19/12/2008]
rajče.lnk --a--- 592 bytes [12:04 12/06/2009] [12:04 12/06/2009]
VDownloader.lnk --a--- 660 bytes [16:22 11/05/2009] [16:22 11/05/2009]
WebMate.lnk --a--- 1581 bytes [08:44 18/07/2009] [09:13 18/07/2009]
Zoner Photo Studio 10.lnk --a--- 1688 bytes [17:39 14/12/2008] [17:39 14/12/2008]

C:\Documents and Settings\PC\Plocha\Programy atd\to odvirovní d----- [08:28 17/01/2010]
CCleaner.lnk --a--- 1548 bytes [20:16 16/01/2010] [20:16 16/01/2010]
ccsetup227.exe --a--- 3357024 bytes [19:57 16/01/2010] [20:15 16/01/2010]
cc_20100116_215015.reg --a--- 120686 bytes [20:50 16/01/2010] [20:50 16/01/2010]
cc_20100116_215051.reg --a--- 3298 bytes [20:50 16/01/2010] [20:51 16/01/2010]
cc_20100116_215113.reg --a--- 508 bytes [20:51 16/01/2010] [20:51 16/01/2010]
cc_20100116_215308.reg --a--- 448 bytes [20:53 16/01/2010] [20:53 16/01/2010]
Extras.Txt --a--- 43138 bytes [13:07 15/01/2010] [13:07 15/01/2010]
mbam-log-2010-01-16 (17-18-49).txt --a--- 34466 bytes [16:19 16/01/2010] [16:19 16/01/2010]
mbam-setup.exe --a--- 5061512 bytes [11:35 16/01/2010] [11:36 16/01/2010]
OTL.exe --a--- 544256 bytes [12:58 15/01/2010] [12:58 15/01/2010]
OTL.Txt --a--- 150948 bytes [13:06 15/01/2010] [13:06 15/01/2010]

-=End Of File=-

[stell]

spust program OTL>do okna customscan/Fixes>.vloz zeleny text a klik RUNFIX>log vloz sem,

Kód: Vybrat vše

:files
C:\Documents and Settings\PC\Plocha\kabelka...
:commands
[EmptyTemp]

[Sabinaleop]

All processes killed
========== FILES ==========
File\Folder C:\Documents and Settings\PC\Plocha\kabelka... not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: PC
->Temp folder emptied: 39022369 bytes
->Temporary Internet Files folder emptied: 14240869 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 83070718 bytes
->Opera cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 164323 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 896601324 bytes

Total Files Cleaned = 985,00 mb


OTL by OldTimer - Version 3.1.24.1 log created on 01192010_171854

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_5c8.dat moved successfully.

Registry entries deleted on Reboot...


Tyjo, snad je to ono, mam v tom už trochu bordel. Kdyby ne, udělám to znova

[stell]

no kabelka este stale je tam,skus tento program,stiahnes nainstalujes,das Browse>najdes kabelku a klik na prvy gombik delete via dos short name a potom napis
http://www.softpedia.com/get/System/OS- ... ctor.shtml

[Sabinaleop]

File cannot be deleted with this metod.

Myslíte, že se to vůbec podaří smazat?

[stell]

najdi subor este raz a skus dalsi gombik

[Sabinaleop]

No UNC name avaiable for this file

[stell]

ak kliknes pravym na subor mozes ho premenovat??napriklad na taska.com

[Sabinaleop]

Soubor nelze přejmenovat: Ze zdrojového souboru nebo disku nejde číst.