Help me prosim

[zonik]

nešlo mi to sem přihlásit, tak jsem se musel přihlásit pod jiným nickem

omlouvám se za tlačení, chápu, že tohle děláte ve volném čase, ty soubory jsou z vkadre.ru tam si je natahl brácha, hlavně hudbu tam tahá, už jsem to promáznul, a ted teda k tomu zararování, jak to mám udělat

[zonik]

nevím kde najdu tu složku a jak mám postupovat, sem analfabet v tomhle

[vyosek]

Slozka je na disku C pod nazvem Qoobox - je to zaloha utility ComboFix neco se s nim delat muselo, mohl bych vedet co

Jeji obsah si tedy vytahnu sam...

Podivejte se jestli mate na disku C soubor ComboFix.txt - obsah mi sem kdyztak vlozte

Stahnete SytemLook (viz muj podpis) a ulozte jej na plochu

• Do okna vlozte skript nize

• Kód: Vybrat vše

  :dir
  C:\Qoobox /sub

• Kliknete na Look
• Tlacitko Look se zmeni na Scanning a zsedne
• Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
• Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

[zonik]

mě vyjelo tohle

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 10:46 on 23/07/2010 by Martin (Administrator - Elevation successful)

========== dir ==========

C:\Qoobox - Unable to find folder.

-=End Of File=-

a je teda fakt, že se načítá už i mozzila

[vyosek]

Super, nekdo si hral s CF a jeste po nem smazal stopy

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
  DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
  DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
  DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.medion.com/
  IE - HKU\S-1-5-21-2126688981-4244795158-810744998-1000\..\URLSearchHook: - Reg Error: Key error. File not found
  FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
  FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
  FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
  FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&q="
  [2009.10.15 19:27:30 | 000,002,399 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\daemon-search.xml
  [2010.07.22 10:54:27 | 000,001,056 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\icqplugin.xml
  [2010.01.03 04:32:51 | 000,002,362 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\vkadreru.xml
  O3 - HKU\S-1-5-21-2126688981-4244795158-810744998-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
  O4 - Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe File not found
  O33 - MountPoints2\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\Shell - "" = AutoRun
  O33 - MountPoints2\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\Shell - "" = AutoRun
  [3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  [1 C:\Users\Martin\Documents\*.tmp files -> C:\Users\Martin\Documents\*.tmp -> ]
  [1 C:\Users\Martin\Desktop\*.tmp files -> C:\Users\Martin\Desktop\*.tmp -> ]
  @Alternate Data Stream - 64 bytes -> C:\Users\Martin\Michal David 50-hudba(2010)TVRip.avi:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Martin\Cimrman - Vyšetřování ztráty třídní knihy DVDRip.avi:TOC.WMV
  
  :files
  C:\WINDOWS\system32\*.tmp.dll /s
  C:\WINDOWS\system32\SET*.tmp /s
  C:\WINDOWS\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [CLEARALLRESTOREPOINTS]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[zonik]

All processes killed
========== OTL ==========
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkflt.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File C:\Windows\System32\DRIVERS\ipinip.sys not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File C:\Windows\System32\drivers\blbdrive.sys not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2126688981-4244795158-810744998-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" removed from browser.search.defaulturl
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.icq.com/search/afe_result ... id=afex&q=" removed from keyword.URL
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\vkadreru.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-2126688981-4244795158-810744998-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Media Player.lnk moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\ not found.
C:\Windows\System32\is-LT47P.tmp deleted successfully.
C:\Windows\System32\is-V1GH9.tmp deleted successfully.
C:\Windows\System32\is-VJ8RD.tmp deleted successfully.
Unable to delete ADS C:\Users\Martin\Michal David 50-hudba(2010)TVRip.avi:TOC.WMV .
Unable to delete ADS C:\Users\Martin\Cimrman - Vyšetřování ztráty třídní knihy DVDRip.avi:TOC.WMV .
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1BCF.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9B79.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE42.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI892.tmp moved successfully.
File move failed. C:\WINDOWS\System32\DriverStore\FileRepository\hposcu08.inf_6b5c1a40\drivers\scanner\hpqgends.tmp scheduled to be moved on reboot.
C:\WINDOWS\Temp\nshFA09.tmp folder moved successfully.
C:\WINDOWS\Temp\_avast5_\unp176346044.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp179552245.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp44521952.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp44777498.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp45383496.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp88112570.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp92108841.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41085 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Martin
->Temp folder emptied: 395539 bytes
->Temporary Internet Files folder emptied: 6897784 bytes
->Java cache emptied: 179317563 bytes
->FireFox cache emptied: 30429434 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1579697 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3286 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 209,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb



OTL by OldTimer - Version 3.2.9.1 log created on 07232010_105657

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\System32\DriverStore\FileRepository\hposcu08.inf_6b5c1a40\drivers\scanner\hpqgends.tmp scheduled to be moved on reboot.
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF4174.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF41A0.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF420A.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF4319.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DFC12C.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DFC142.tmp not found!
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W6WATJ7B\afr[1].htm moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W6WATJ7B\viewtopic[2].htm moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[vyosek]

Co na skript pocitac, jak se chova

[zonik]

stránky se načítají, i ty co před tím nešli a mozzila jde spustit bez problému, je to uplně jiný pohled

jste génius

[vyosek]

Ja bych spise rad videl toho "genia" co si hral s CF a jeste smazal jeho veci

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Poprosim o novy log ze RSITu

[zonik]

u cc cleanu mi to píše toto

Soubor nápovědy: %SystemRoot%\IME\IMETC10\HELPIMTCEN.CHM nebyl nalezen. Toto je častý problém vznikající neúplnou odinstalací.

Řešení: Vymazat hodnotu z registru.

kde to vymžu prosím Vás nebo spíš jak

[zonik]

a ještě tohle

Přípona souboru MXtra.DhtmlWrapper odkazuje na neplatný program. Toto je častý problém vznikající neúplnou odinstalací.

Řešení: Vymazat hodnotu z registru.

[vyosek]

Klik na opravit vsechny problemy

[zonik]

to jsem dal, ale napsalo mi to tohle a ted se mi to už nezobrazuje

[vyosek]

Co se Vam uz nezobrazuje? Znovu ta hlaska? Kdyz date hledat problemy - zobrazi se tam nejake

[zonik]

nezobrazí se již nic