prosím o pomoc s virem

[rado...]

DObrý večer,
žádám o pomoc na notebooku přítelkyně. Problém spočívá v tom, že se ji všechny ikony na ploše předělaly na značku windows media player, nejde spustit jakykoliv program, vše se spouští přes zmiňovaný media player,to samý u jakéhokoliv programu, antiviráku apod. nejde obnova systému protože se mi opět otevře media pl., nejde ani nainstalovat RSIT abych vám poslal log protože se rovněž spustí. Nejde nic kromě internetu. Prosím o radu co s tím, jak Vám poslat log abychom věděli copak se nám stalo.
Děkuji moc za radu.

RK

[vyosek]

Zdravim a pekny vecre preji

Prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Aplikujte Daft http://www.diallix.net/index.php?option ... &Itemid=65 kolegy Diallixe jestli nejsou porusene asociace

Zkuste ci se povede log z RSIT

[rado...]

tak programek DAFT jsem nainstaloval, nasel chybu a tu taky fixnul. RSIT se mi nepodarilo spustit ani v danem nouzaku v siti ani v normalu.

[vyosek]

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

Zkuste spustit tento prejmenovany RSIT http:\\vyosek.ic.cz/pro_usery/Motyl.com

Je nejaka hlaska nebo proc Vam nejde RSIT spustit

[rado...]

tak rskill se spustil a ukoncil nejaky prcesy, vyplivnul i tento log o průběhu
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 20.04.2011 at 21:32:07.
Operating System: Windows Vista (TM) Home Premium


Processes terminated by Rkill or while it was running:



Rkill completed on 20.04.2011 at 21:32:12.


jinak přejmenovaný RSIT umím stáhnout, dám spustit, nebo uložit a spustit ale nic ne nerozjede ani žádnou hlášku to nenapíše. mám to zkusit v nějakým nouzáku?

[vyosek]

Zkuste ty kroky co jsem napsal vyse (rkill, prejmenovany rsit), udelat v nouzaku, myslel jsme ze tam jste...

[rado...]

jinak se chování notebooku ještě zhoršilo, právě to otvírání windows media player.........nyní se otvírá neustále, po zavření se ihned otvírá sám znovu

[vyosek]

Otravuje to i v nouzovem rezimu Pokud ne, tak pracujte jen zatim v nem...

[rado...]

tak několikrát se přejmenovanej rsit spustil, nedal výsledek ale nakonec se povedlo

Logfile of random's system information tool 1.08 (written by random/random)
Run by Nikol at 2011-04-20 22:05:24
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 98 GB (55%) free of 177 GB
Total RAM: 1790 MB (63% free)


======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21A88CB9-84D2-4020-A2D1-B25A21034884}]
HistoryTriggerBHO Class - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll [2011-01-13 35688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-04-21 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-17 298160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll [2011-03-17 848952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-26 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\1011071105\ICQToolBar.dll [2010-04-13 1018616]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-17 298160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-05-26 949376]
"QuickTime Task"=C:\Windows\system32\qttask.exe [2009-06-05 98304]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-05-20 111928]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-07-02 13789728]
"UpdateReminder"=C:\Program Files\Eset\UpdateReminder.exe [2010-12-01 434176]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-04-21 24264488]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-26 39408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"PowerArchiver Tray"=C:\Program Files\PowerArchiver\PASTARTER.EXE [2007-06-11 140328]
"NVIDIA driver monitor"=C:\Users\Public\nvsvc32.exe []
"ICQ"=~C:\Program Files\ICQ7.2\ICQ.exe silent loginmode=4 []
"LG LinkAir"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-04-20 21:58:25 ----D---- C:\Program Files\trend micro
2011-04-20 21:58:24 ----D---- C:\rsit
2011-04-20 21:26:03 ----A---- C:\Windows\NeroDigital.ini
2011-04-20 20:26:12 ----A---- C:\Windows\ntbtlog.txt
2011-04-14 16:34:20 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 16:34:19 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 16:34:15 ----A---- C:\Windows\system32\mshtml.dll
2011-04-14 16:34:14 ----A---- C:\Windows\system32\urlmon.dll
2011-04-14 16:34:14 ----A---- C:\Windows\system32\ieframe.dll
2011-04-14 16:34:13 ----A---- C:\Windows\system32\wininet.dll
2011-04-14 16:34:11 ----A---- C:\Windows\system32\mstime.dll
2011-04-14 16:34:11 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-14 16:34:11 ----A---- C:\Windows\system32\iertutil.dll
2011-04-14 16:34:11 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-14 16:34:10 ----A---- C:\Windows\system32\occache.dll
2011-04-14 16:34:10 ----A---- C:\Windows\system32\ieui.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\ieUnatt.exe
2011-04-14 16:34:08 ----A---- C:\Windows\system32\iesysprep.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\iesetup.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\iernonce.dll
2011-04-14 16:34:08 ----A---- C:\Windows\system32\iepeers.dll
2011-04-14 16:34:07 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-14 16:34:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-14 16:34:07 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-14 16:34:07 ----A---- C:\Windows\system32\ie4uinit.exe
2011-04-14 16:34:04 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 16:34:04 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 16:34:03 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 16:34:03 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-14 16:34:01 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 16:34:01 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 16:33:56 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 16:33:55 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 16:33:54 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 16:33:51 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 16:33:50 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 16:33:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 16:33:45 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 16:33:43 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 16:33:41 ----A---- C:\Windows\system32\vbscript.dll
2011-04-14 16:33:41 ----A---- C:\Windows\system32\jscript.dll
2011-04-13 20:17:31 ----D---- C:\Users\Nikol\AppData\Roaming\BSplayer Pro
2011-04-13 20:17:31 ----D---- C:\Users\Nikol\AppData\Roaming\BSplayer
2011-04-13 20:17:23 ----D---- C:\Program Files\Webteh
2011-03-26 17:04:39 ----D---- C:\ProgramData\Sun
2011-03-26 17:04:38 ----D---- C:\Program Files\Common Files\Java
2011-03-26 17:03:29 ----A---- C:\Windows\system32\javaws.exe
2011-03-26 17:03:29 ----A---- C:\Windows\system32\javaw.exe
2011-03-26 17:03:29 ----A---- C:\Windows\system32\java.exe
2011-03-26 17:03:29 ----A---- C:\Windows\system32\deployJava1.dll
2011-03-26 17:02:58 ----D---- C:\Program Files\Java

======List of files/folders modified in the last 1 months======

2011-04-20 21:59:55 ----D---- C:\Windows\System32
2011-04-20 21:59:55 ----D---- C:\Windows\inf
2011-04-20 21:59:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-20 21:58:25 ----RD---- C:\Program Files
2011-04-20 21:54:04 ----D---- C:\Windows\Temp
2011-04-20 21:46:28 ----D---- C:\Windows\Prefetch
2011-04-20 21:26:03 ----D---- C:\Windows
2011-04-20 20:15:34 ----SHD---- C:\System Volume Information
2011-04-17 18:59:48 ----SHD---- C:\Windows\Installer
2011-04-17 18:59:29 ----D---- C:\Windows\system32\drivers
2011-04-17 18:59:26 ----D---- C:\Program Files\LG Electronics
2011-04-15 16:39:40 ----D---- C:\Users\Nikol\AppData\Roaming\dvdcss
2011-04-15 09:37:30 ----D---- C:\Program Files\Mozilla Firefox
2011-04-15 03:46:17 ----D---- C:\Windows\Microsoft.NET
2011-04-15 03:45:52 ----RSD---- C:\Windows\assembly
2011-04-15 03:33:19 ----D---- C:\Program Files\Internet Explorer
2011-04-15 03:33:18 ----D---- C:\Windows\system32\migration
2011-04-15 03:16:28 ----D---- C:\Windows\winsxs
2011-04-15 03:16:26 ----D---- C:\Windows\system32\catroot
2011-04-15 03:16:25 ----D---- C:\Windows\system32\catroot2
2011-04-15 03:14:23 ----D---- C:\ProgramData\Microsoft Help
2011-04-15 03:06:17 ----D---- C:\Program Files\Windows Mail
2011-04-15 03:03:31 ----A---- C:\Windows\system32\mrt.exe
2011-04-03 17:43:37 ----D---- C:\Program Files\ICQ7.2
2011-04-03 16:43:28 ----D---- C:\Users\Nikol\AppData\Roaming\ICQ
2011-03-26 17:04:39 ----HD---- C:\ProgramData
2011-03-26 17:04:38 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-05 908800]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-06-03 15928]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-07-08 1050656]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-07-22 15872]
S1 nod32drv;nod32drv; C:\Windows\system32\drivers\nod32drv.sys [2009-05-26 15424]
S2 AMON;AMON; C:\Windows\system32\drivers\amon.sys [2009-05-26 512096]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-04-07 36608]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2008-09-26 101760]
S3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
S3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-07-02 9786752]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys []
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-01 135664]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-04-13 246520]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-05-26 552064]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-07-02 211488]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-12-28 654848]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-03-01 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

[vyosek]

Ten NOD32 co tam je, ten je predpokladam legalni = zakoupena licence

[rado...]

to netuším, přítelkyně povídá že taky neví, že má PC z rodiny takže neumím odpovědět. Pokud je něco v nepořádku, nedělá mi problém to odinstalovat

[vyosek]

nektere radky z logu napovidaji ze neni - takze po ukonceni leceni tam dame free reseni

Zatim budte porad v nouzovem rezimu

Stahnete OTM (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
• Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

• Kód: Vybrat vše

  :services
  ICQ Service
  gupdate
  
  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Skype"=-
  "swg"=-
  "PowerArchiver Tray"=-
  "NVIDIA driver monitor"=-
  "ICQ"=-
  "LG LinkAir"=-
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "QuickTime Task"=-
  "WinampAgent"=-
  "SweetIM"=-
  "NeroFilterCheck"=-
  "Adobe Reader Speed Launcher"=-
  "UpdateReminder"=-
  "SunJavaUpdateSched"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  "{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
  
  :files
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Program Files\ICQ6Toolbar
  C:\Program Files\SweetIM
  C:\Users\Public\nvsvc32.exe
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Kliknete na cervene tlacitko MoveIt!
• Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

[rado...]

možná dělám někde chybu ale spustit mi nejde.... pod pravým mám jen možnosti otevřít a přehrát

[vyosek]

Tak jej spustte normalne dvojklikem...

[rado...]

to právě taky nejde nejdřív se mi otevřela tabulka s možnostmi jako spustit, storno atd.... teď už se ani ta tabulka nezobrazila po několikeré zkoušce

myslím že to necháme na zítra, je dost hodin. vezmu si notebook do práce a pokusím se postup udělat ještě jednou. Prozatím děkuju za Váš čas a přeji dobrou noc.

RK