Zpomalený PC, funuje jen nouzový režim

[fiki7]

Udělal jsem ale nevím jak získat log, na ploše nyní po restartu žádný nový není - jako byl minule.

[Caroprd111]

Podívejte se do C:\_OTL\MovedFiles

[fiki7]

Posílám log:

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-1409082233-682003330-725345543-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_USERS\S-1-5-21-1409082233-682003330-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\pf-kb.cz\web1\ deleted successfully.
File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
Starting removal of ActiveX control DirectAnimation Java Classes
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
C:\WINDOWS\002199_.tmp deleted successfully.
C:\WINDOWS\005392_.tmp deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SETA.tmp deleted successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 3446082 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: FERKLOVI
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 35960199 bytes
->Flash cache emptied: 2325 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 1856 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1680 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 38,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: FERKLOVI
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.9.0 log created on 07162010_205726

[Caroprd111]

S PC pořád stejný problém

[fiki7]

Stejné, WinXP jen v nouzovém režimu, Avast nejde zapnout, Firefox se nepřipojí na web.

[Caroprd111]

Pokračujte podle návodu http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[fiki7]

Posílám výsledek od Kaspersky VRT:

Autoscan: completed 5 hours ago (events: 8, objects: 191378, time: 03:41:27)
16.7.2010 22:13:10 Task started
16.7.2010 22:17:24 Detected: Backdoor.Win32.IRCBot.osw C:\Documents and Settings\FERKLOVI\Dokumenty\Programy\RapidDown\RapidShare Manager.exe
16.7.2010 22:17:29 Deleted: Backdoor.Win32.IRCBot.osw C:\Documents and Settings\FERKLOVI\Dokumenty\Programy\RapidDown\RapidShare Manager.exe
16.7.2010 22:17:29 Deleted: Backdoor.Win32.IRCBot.osw C:\Documents and Settings\FERKLOVI\Dokumenty\Programy\RapidDown\RapidShare Manager.exe
16.7.2010 23:26:40 Detected: Backdoor.Win32.IRCBot.osw C:\Documents and Settings\FERKLOVI\Dokumenty\Programy\RapidDown\RSMInitp.zip/RapidShare Manager.exe
16.7.2010 23:26:43 Deleted: Backdoor.Win32.IRCBot.osw C:\Documents and Settings\FERKLOVI\Dokumenty\Programy\RapidDown\RSMInitp.zip/RapidShare Manager.exe
17.7.2010 1:18:05 Processing error C:\Program Files\Microsoft Office\Office10\Xlators\HG30DOS.DLL Read error
17.7.2010 1:54:38 Task completed

[Caroprd111]

Zkuste opravu systému pomocí WinXP Manageru http://www.viry.cz/forum/viewtopic.php?f=46&t=17549

[fiki7]

Mám problém s instalací WinXP Manageru - nejde nainstalovat, napsáno Tato instalace je zakázána zásadami nastavenými správcem systému. Instaluji v nouzovém režimu jako administrátor - nejde nainstalovat ani Microsoft.NET Framework2.0

[Caroprd111]

Proveďte opravu systému pomocí instalačního CD http://www.viry.cz/forum/viewtopic.php?f=46&t=41036