Automatické aktualizace - Win XP

Zpráva

#31 Příspěvek od **cernohous13** » 22 dub 2011 15:40

skvělá práce.

c:\program files\IObit - nedoporučujeme používat soft této firmy - hezké obrázky, ale zmatek v systému - pokud na něm bytostně netrváš, tak odinstalace

stáhni MBR
http://www2.gmer.net/mbr/mbr.exe ulož ho na plochu (jen ulož ale nespouštěj)
klik na hlavním panelu tlačítko "Start" -> "Spustit..." - do příkazového řádku zkopíruj celý červený příkaz
"%userprofile%\plocha\mbr" -t -s -> OK
na ploše vznikne mbr.log - jeho obsah sem zkopíruj

sorche · #32 Příspěvek od **sorche** » 22 dub 2011 15:48

V Přidat nebo odebrat programy ten IObit nevidím, abych ho odinstalovala...

V Programech files jsou jen tyto dva soubory: License.dat a Sut_SoftUninstal.exe... to je zbytek po odinstalování a můžu je zrovna smazat?

#33 Příspěvek od **cernohous13** » 22 dub 2011 15:53

smažu ho následně

už máš nainstalované všechny aktualizace?

pak uděláš MBR

sorche · #34 Příspěvek od **sorche** » 22 dub 2011 15:54

cernohous13 píše:smažu ho následně

už máš nainstalované všechny aktualizace?

pak uděláš MBR

Ano, nainstalovalo se 80 aktualizací.

sorche · #35 Příspěvek od **sorche** » 22 dub 2011 15:59

Tady je log z MBR:

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST380811AS rev.3.AAB -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-10

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x89B5BAB8]
3 CLASSPNP[0xF7637FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000060[0x89B51900]
5 ACPI[0xF75AE620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP3T0L0-10[0x89B55940]
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
user & kernel MBR OK

#36 Příspěvek od **cernohous13** » 22 dub 2011 16:12

udělej aktuální RSIT - budeme uklízet

sorche · #37 Příspěvek od **sorche** » 22 dub 2011 16:16

Dobře, zde je aktuální log z RSIT (ten Combofix jsme ještě neodinstalovali, nevadí?):

Logfile of random's system information tool 1.08 (written by random/random)
Run by Knihovna at 2011-04-22 17:13:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 63 GB (82%) free of 76 GB
Total RAM: 1983 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:06, on 22.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Documents and Settings\Knihovna\Plocha\RSIT.exe
C:\Program Files\trend micro\Knihovna.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Zástupce - LWWW.lnk = C:\LWWW\LWWW.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 9854543375
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

--
End of file - 5213 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-09 298160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll [2011-03-09 848952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-09 298160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-11-15 77824]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-06-29 286720]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1350WStatusDisplay]
C:\WINDOWS\system32\MSTMON_Q.EXE [2004-11-26 167936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Zástupce - ISHARE.lnk]
C:\LWWW\ISHARE.EXE [2011-04-15 275012]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Zástupce - LWWW.lnk - C:\LWWW\LWWW.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\winver.exe"="C:\WINDOWS\system32\winver.exe:*:Enabled:winver"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-04-22 15:33:03 ----A---- C:\WINDOWS\RtlRack.ini
2011-04-22 15:13:12 ----SHD---- C:\RECYCLER
2011-04-22 15:08:17 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-04-22 15:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2124261$
2011-04-22 15:03:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-04-22 15:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-04-22 15:02:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-04-22 15:02:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-04-22 15:02:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-04-22 15:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-04-22 15:00:28 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-04-22 15:00:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-04-22 14:59:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-04-22 14:59:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-04-22 14:59:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-04-22 14:59:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-04-22 14:58:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-04-22 14:58:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-04-22 14:58:34 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-04-22 14:58:00 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-04-22 14:57:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2506223$
2011-04-22 14:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-04-22 14:57:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-04-22 14:56:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-04-22 14:56:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-04-22 14:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-04-22 14:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-04-22 14:56:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-04-22 14:55:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-04-22 14:55:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-04-22 14:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-04-22 14:54:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2503658$
2011-04-22 14:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2290570$
2011-04-22 14:54:26 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-04-22 14:54:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-04-22 14:54:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-04-22 14:53:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-04-22 14:53:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-04-22 14:53:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2511455$
2011-04-22 14:53:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-04-22 14:52:11 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-04-22 14:51:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-04-22 14:50:57 ----D---- C:\WINDOWS\ie8updates
2011-04-22 14:50:48 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-04-22 14:50:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-04-22 14:50:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-04-22 14:50:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-04-22 14:49:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-04-22 11:26:23 ----D---- C:\WINDOWS\temp
2011-04-22 11:26:21 ----A---- C:\ComboFix.txt
2011-04-22 11:05:06 ----A---- C:\Boot.bak
2011-04-22 11:05:00 ----RASHD---- C:\cmdcons
2011-04-22 10:59:29 ----A---- C:\WINDOWS\SWREG.exe
2011-04-22 10:59:29 ----A---- C:\WINDOWS\PEV.exe
2011-04-22 10:59:29 ----A---- C:\WINDOWS\NIRCMD.exe
2011-04-22 10:59:29 ----A---- C:\WINDOWS\MBR.exe
2011-04-22 10:59:28 ----A---- C:\WINDOWS\zip.exe
2011-04-22 10:59:28 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-04-22 10:59:28 ----A---- C:\WINDOWS\SWSC.exe
2011-04-22 10:59:28 ----A---- C:\WINDOWS\sed.exe
2011-04-22 10:59:28 ----A---- C:\WINDOWS\grep.exe
2011-04-22 10:59:10 ----D---- C:\WINDOWS\ERDNT
2011-04-22 10:58:44 ----D---- C:\Qoobox
2011-04-21 21:44:40 ----D---- C:\Documents and Settings\Knihovna\Data aplikací\Malwarebytes
2011-04-21 21:44:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-04-21 21:44:33 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-04-21 21:44:28 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-04-21 21:44:28 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-04-21 18:58:17 ----A---- C:\WINDOWS\imsins.BAK
2011-04-21 16:05:59 ----D---- C:\Program Files\trend micro
2011-04-21 16:05:58 ----D---- C:\rsit
2011-04-16 17:22:31 ----D---- C:\WINDOWS\SoftwareDistribution
2011-04-15 22:51:05 ----D---- C:\WINDOWS\Prefetch
2011-04-15 22:48:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-04-15 22:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-04-15 22:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB953155$
2011-04-15 22:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-04-15 22:47:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-04-15 22:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-04-15 22:45:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-04-15 22:45:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-04-15 22:45:04 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-04-15 22:44:37 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-04-15 22:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-04-15 22:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-04-15 22:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2011-04-15 22:42:46 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-04-15 22:42:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-04-15 22:40:13 ----A---- C:\WINDOWS\000001_.tmp
2011-04-15 18:06:31 ----A---- C:\WINDOWS\RTacDbg.txt
2011-04-15 18:06:01 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2011-04-05 16:05:52 ----D---- C:\Program Files\Mozilla Firefox
2011-04-05 15:14:09 ----D---- C:\WINDOWS\WBEM
2011-04-05 15:12:51 ----HDC---- C:\WINDOWS\ie8
2011-03-28 13:35:16 ----D---- C:\Documents and Settings\Knihovna\Data aplikací\IObit
2011-03-28 13:35:15 ----D---- C:\Program Files\IObit
2011-03-28 13:33:50 ----D---- C:\Program Files\ESET
2011-03-28 13:33:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET

======List of files/folders modified in the last 1 months======

2011-04-22 16:55:42 ----A---- C:\WINDOWS\wincmd.ini
2011-04-22 16:28:52 ----D---- C:\WINDOWS\system32\inetsrv
2011-04-22 16:27:14 ----D---- C:\TEMP
2011-04-22 16:26:47 ----D---- C:\WINDOWS\Registration
2011-04-22 16:19:36 ----AD---- C:\ISHARE
2011-04-22 16:16:01 ----AD---- C:\LWWW
2011-04-22 16:15:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-22 15:33:03 ----D---- C:\WINDOWS
2011-04-22 15:26:26 ----D---- C:\WINDOWS\system32
2011-04-22 15:22:28 ----A---- C:\WINDOWS\system32\MRT.exe
2011-04-22 15:22:24 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-22 15:22:24 ----HD---- C:\WINDOWS\inf
2011-04-22 15:22:23 ----D---- C:\WINDOWS\system32\drivers
2011-04-22 15:22:22 ----D---- C:\WINDOWS\system32\CatRoot
2011-04-22 15:20:56 ----D---- C:\WINDOWS\system32\CatRoot2
2011-04-22 15:06:28 ----HD---- C:\WINDOWS\$hf_mig$
2011-04-22 15:06:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-22 15:04:30 ----D---- C:\WINDOWS\system32\wbem
2011-04-22 15:04:30 ----D---- C:\WINDOWS\AppPatch
2011-04-22 15:02:03 ----D---- C:\WINDOWS\WinSxS
2011-04-22 14:55:45 ----D---- C:\Program Files\Internet Explorer
2011-04-22 14:52:46 ----D---- C:\Program Files\Outlook Express
2011-04-22 14:52:13 ----D---- C:\Program Files\Movie Maker
2011-04-22 14:52:00 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-04-22 14:51:35 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-04-22 14:51:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-04-22 11:24:22 ----A---- C:\WINDOWS\system.ini
2011-04-22 11:24:15 ----D---- C:\WINDOWS\system32\drivers\etc
2011-04-22 11:22:25 ----D---- C:\Program Files\Common Files
2011-04-22 11:05:07 ----RASH---- C:\boot.ini
2011-04-21 22:08:45 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-04-21 21:44:28 ----RD---- C:\Program Files
2011-04-21 19:04:37 ----D---- C:\WINDOWS\system32\cs-cz
2011-04-21 19:03:17 ----D---- C:\WINDOWS\Debug
2011-04-21 18:55:31 ----HD---- C:\Program Files\InstallShield Installation Information
2011-04-21 18:40:26 ----D---- C:\totalcmd
2011-04-16 19:00:10 ----D---- C:\Documents and Settings\Knihovna\Data aplikací\ICQ
2011-04-15 23:05:12 ----D---- C:\WINDOWS\network diagnostic
2011-04-15 22:43:45 ----D---- C:\Program Files\Messenger
2011-04-15 22:40:58 ----D---- C:\WINDOWS\Help
2011-04-15 22:40:57 ----D---- C:\WINDOWS\system32\oobe
2011-04-15 22:40:21 ----D---- C:\WINDOWS\security
2011-04-15 22:39:21 ----D---- C:\WINDOWS\ehome
2011-04-15 19:26:46 ----SHD---- C:\WINDOWS\Installer
2011-04-15 18:06:03 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-04-05 16:06:26 ----D---- C:\Documents and Settings\Knihovna\Data aplikací\Mozilla
2011-04-05 15:14:00 ----D---- C:\WINDOWS\Media
2011-03-28 13:29:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-18 36992]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-03-03 11776]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2011-04-15 21035]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 MLPTDR_Q;MLPTDR_Q; \??\C:\WINDOWS\system32\MLPTDR_Q.SYS []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]
R3 rtl8139;Realtek RTL8139/810x Family Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\R8139n51.SYS [2003-07-31 46976]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-03-04 243200]
S2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys []
S3 BELKIN;Belkin Wireless G USB Network Adapter; C:\WINDOWS\system32\DRIVERS\BLKWGU.sys []
S3 BS_DEF;BS_DEF; \??\C:\Program Files\ASUS\AsusUpdate\BS_DEF.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Knihovna\LOCALS~1\Temp\catchme.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\Knihovna\LOCALS~1\Temp\mbr.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 SMTPSVC;Simple Mail Transport Protocol (SMTP); C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-09 135664]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-03-09 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

#38 Příspěvek od **cernohous13** » 22 dub 2011 17:25

Klikni na https://www.virustotal.com/cs/
klik "Procházet" > do zadávacího pole "Název souboru" jen zkopíruj:

C:\WINDOWS\system32\inetsrv\inetinfo.exe

"Send file" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit

sorche · #39 Příspěvek od **sorche** » 22 dub 2011 17:57

Tady je výsledek z VT:

http://www.virustotal.com/file-scan/rep ... 1303491275

#40 Příspěvek od **cernohous13** » 22 dub 2011 18:03

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „Moveit!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\

Script OTM

Kód: Vybrat vše

:Commands
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

:Files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\Documents and Settings\Knihovna\Data aplikací\IObit
C:\Program Files\IObit
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-

:Services
gupdate
gusvc

sorche · #41 Příspěvek od **sorche** » 22 dub 2011 18:09

Log z OTM:

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Knihovna
->Temp folder emptied: 94476 bytes
->Temporary Internet Files folder emptied: 6591196 bytes
->FireFox cache emptied: 12903010 bytes
->Flash cache emptied: 745 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2153722 bytes
%systemroot%\System32 .tmp files removed: 19905992 bytes
%systemroot%\System32\dllcache .tmp files removed: 1221248 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 41,00 mb

Restore points cleared and new OTM Restore Point set!
========== FILES ==========
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Documents and Settings\Knihovna\Data aplikací\IObit\Advanced Uninsataller folder moved successfully.
C:\Documents and Settings\Knihovna\Data aplikací\IObit\Advanced SystemCare\Backup\Registry folder moved successfully.
C:\Documents and Settings\Knihovna\Data aplikací\IObit\Advanced SystemCare\Backup folder moved successfully.
C:\Documents and Settings\Knihovna\Data aplikací\IObit\Advanced SystemCare folder moved successfully.
C:\Documents and Settings\Knihovna\Data aplikací\IObit folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 3 folder moved successfully.
C:\Program Files\IObit folder moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\Installer\MSI2E23.tmp moved successfully.
C:\WINDOWS\Installer\MSIF7.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\07c90dcbdedfe16c2b58e68ce910936a\BIT130B.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\21d6331d541a8a6e8be11d421ad5373e\BIT1307.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\267c9b9d4f28406fc6768d7056acda1e\BIT12F8.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\2a86ecf59fd361a254057c2bd8a2fc84\BIT12F9.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\2fc4dec0729be72ede0de711a02133ed\BIT1300.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\41b2219405346d6421a1b21083eb6dd7\BIT1306.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\48b4f66aba2f3ddfff3e2d0cb40a06d9\BIT12FA.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\508483484f3a183df6329500a0689df5\BIT1311.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\5098dd9035927e206645a10b773e39d3\BIT1308.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\509ce25d45fe208ee57ad15aa1012d9c\BIT1305.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\5b1bf3c709a0479f95a0d490dc626aff\BIT1315.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\61f7d5de6024ca5f0df8e4d6b84147bc\BIT2C92.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\6ad907f561fabcd9e89ddbe4b2b4d4ae\BIT12FE.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\6eb64538d1eb8e0e92baa96fc62ba854\BIT130C.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\8058ebceb452c83425841a510aaccdfb\BIT1302.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\8573f895b9caebec15a2846b147c4acc\BIT1303.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\872cdbc2aa908a12ab47c2f32baffa55\BIT256C.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\892b8e1f3f940e2b4a0d3d2491323f80\BIT12FF.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\8c495b699f609d8f5a3f0c079f0148de\BIT1316.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\8e8fb6c243dc806cf8d12f60695a91d8\BIT12FD.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\93d1a82220a5c35e4ccb66b51432c9bf\BIT130F.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\9434f38734605ee74bf380b05e9ff9a2\BIT1310.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\9a72d7ab7525b39585dec9f9e7f10b44\BIT1301.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\a79ed409f1e327c589b9075eb5cbef44\BIT131A.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\a9de1b2071cad5998138befbe3b835b7\BIT1314.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\af5e05ccd2c15416e9facffaeb01ca3b\BIT1319.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\b063f356f9664bd7343d099ddfdac7fc\BIT130D.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\b3ba0f7542150a0ff634f02bb11873ed\BIT1304.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\b44c9002180e450d88cff54ce8e1390b\BIT131E.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\b66048432d7341c70ef08a575b3c4ee7\BIT1312.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\c7009c335500dda6e89a802c109fc30b\BIT130E.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\cb0f38ed286b9b731b45e45765e59ca2\BIT131D.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\e1d56846412df84708a3244922d10045\BIT1318.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\eaf4967673e984f5edbd6a38697f439e\BIT12FB.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\f107d5b05da955cab1bd84bb76f4f00b\BIT1317.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\f49885d21d44f7cdbdd317c7ba76656e\BIT1309.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\f5e3940b5bd958bd79ba427de6730940\BIT130A.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\f7209051c8f89b2168bc2707ba9bdfae\BIT131B.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\f84ab9bd5b110ad6073165b9357fa2b9\BIT131C.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\fa5f3faa18dd78f73661bcbc7c66f517\BIT1313.tmp moved successfully.
C:\WINDOWS\SoftwareDistributionold\Download\fd674b0793556498419dc6d88ead9cda\BIT12FC.tmp moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gusvc stopped successfully!
Service gusvc deleted successfully!

OTM by OldTimer - Version 3.1.17.2 log created on 04222011_190603

Files moved on Reboot...

Registry entries deleted on Reboot...

#42 Příspěvek od **cernohous13** » 22 dub 2011 18:33

zdá se, že máš čisto
a jestli už nenacházíš nic podivného, tak po sobě uklidím

ComboFix odinstalujeme
jdi Start -> Spustit... a zkopíruj ComboFix /Uninstall (pozor, za x je mezera) -> OK

Stáhni a spusť T-cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe - uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš

stáhni program OTC tady: http://oldtimer.geekstogo.com/OTC.exe - spusť ho -> "CleanUp" (smaže dříve použité čističe)

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

Nakonec mi napiš o současných problémech

Po vyčištění by se hodila defragmentace
doporučuji http://www.slunecnice.cz/sw/defraggler/ + čeština

sorche · #43 Příspěvek od **sorche** » 22 dub 2011 20:04

Tak už jsem vše provedla vč. defragmentace a žádné problémy nepozoruji... vypadá, že už vše funguje, jak má.

Takže Vám opravdu moc děkuji za všechny rady a strávený čas! Mějte se hezky.

#44 Příspěvek od **cernohous13** » 22 dub 2011 20:12

Nemáš zač - rádo se stalo a jsme tady i příště Obrázek

sorche · #45 Příspěvek od **sorche** » 23 dub 2011 11:38

Dobrý den, tak jsem přece jen ještě dnes narazila na jeden menší problém - nefunguje funkce AutoRun. Když připojím Flash disk nebo vložím CD-ROM do mechaniky nenaskočí taková ta nabídka. V registrech je nastavena správně, může být vypnuta ještě někde jinde?

EDIT:
Tím, že je v registrech správně, jsme myslela, že jsem zkontrolovala tyto dva klíče:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom
hodnota AutoRun v pravém okně editoru registrů nastavena na 1

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ Explorer\NoDriveTypeAutoRun
hexadecimální hodnota tohoto klíče musí být pro správné fungování funkce Autorun nastavena na 91

EDIT2:
Jak jej zapnout jsem už našla asi tady: http://www.viry.cz/forum/viewtopic.php?f=4&t=109333
Teď si ale nejsem jistá, jestli jsme AutoRun nevypnuli schválně kvůli virům?

VIRY.CZ

Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP

Re: Automatické aktualizace - Win XP