Nelze nic spustit krom mozilly

Zpráva

Jogo · #1 Příspěvek od **Jogo** » 27 čer 2011 11:06

Zdravím,

takže mám nějaký vir v PC, ale nevím jak ho odstranit, zkoušel jsem zde uvedené návody jako obecné odstranění atd. ale nic nejde. Po zapnuti PC mi naběhne modré pozadi a nějaký MS removal tool, který mi hlásí, že mám v PC viry. Jediné co jde zapnout je mozilla, v ní můžu normálně chvíli projíždět stránky, ale pak se kousne, stáhnout nic nejde. Ani log nemůžu udělat, protože RSIT nemůžu spustit.

Díky předem za reakce.

#2 Příspěvek od **JaRon** » 27 čer 2011 11:09

ahoj,
pouzi postup kolegu:
http://www.viry.cz/forum/viewtopic.php? ... ll#p998327

Jogo · #3 Příspěvek od **Jogo** » 27 čer 2011 11:27

Nic, proste ani jeden ten Rkill se mi nepodařilo spustit a CF taky ne, prostě mi to vždycky při spouštění dole vyhodi hlášku, že ten program nelze spustit, protože je infikovanej.

#4 Příspěvek od **JaRon** » 27 čer 2011 11:48

ani v nudzovom rezime

Jogo · #5 Příspěvek od **Jogo** » 27 čer 2011 16:44

Nj to mě nenapadlo...
No takže v nouzovém režimu to jde, ale CF se nechce spustit kvůli AVGčku, který mi nejde odinstalovat : ))

Jogo · #6 Příspěvek od **Jogo** » 27 čer 2011 17:18

Tak dobrý, už jsme našel AVG removal tool, takže za chvíli uvidim jestli to pojede. Jinak kdybych sem hodil log z nouzového režimu, je to k něčemu ?

Jogo · #7 Příspěvek od **Jogo** » 27 čer 2011 17:56

Tak paráda, po odinstalu toho AVGčka už ten CF šel v pohodě a všechno smáznul, takže díky za help.

#8 Příspěvek od **cernohous13** » 27 čer 2011 18:08

Měl bys sem hodit log CF - bude potřeba kontrola a případné dočištění

Jogo · #9 Příspěvek od **Jogo** » 27 čer 2011 20:32

to je teda log co mi potom naběhl:

ComboFix 11-06-26.02 - Administrator 27.06.2011 18:31:24.1.2 - x86 MINIMAL
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3583.3208 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Data aplikací\jI28601PmOnP28601
c:\documents and settings\All Users\Data aplikací\jI28601PmOnP28601\jI28601PmOnP28601
c:\documents and settings\All Users\Data aplikací\jI28601PmOnP28601\jI28601PmOnP28601.exe
c:\documents and settings\Jogo\WINDOWS
c:\program files\extravideo
c:\program files\extravideo\Uninstall.exe
c:\program files\Search Settings
c:\program files\Search Settings\kb127\SearchSettings.dll
c:\program files\Search Settings\kb127\SearchSettingsRes409.dll
c:\program files\Search Settings\SearchSettings.exe
C:\resycled
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MSQPDXSERV.SYS
-------\Service_msqpdxserv.sys
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-27 do 2011-06-27 )))))))))))))))))))))))))))))))
.
.
2011-06-27 15:25 . 2011-06-27 15:25 -------- d-----w- c:\documents and settings\Administrator
2011-06-25 09:13 . 2011-06-25 09:13 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-06-25 09:13 . 2011-06-25 09:13 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-02 15:32 . 2008-11-12 18:32 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 16:19 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 16:06 . 2008-04-14 06:52 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-04-25 16:06 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 16:06 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-04-25 12:01 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2008-04-13 22:47 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2009-09-04 17:01 . 2009-09-04 17:01 525656 ----a-w- c:\program files\DXSETUP.exe
2009-09-04 17:01 . 2009-09-04 17:01 94024 ----a-w- c:\program files\DSETUP.dll
2009-09-04 17:01 . 2009-09-04 17:01 1691464 ----a-w- c:\program files\dsetup32.dll
2011-06-25 09:13 . 2011-03-24 13:13 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-11-18 10:58 333192 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192]
.
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192]
.
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Octoshape Streaming Services"="c:\documents and settings\Jogo\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-06 26102056]
"OscarEditor"="c:\program files\OSCAR Editor X7\OscarEditor.exe" [2010-07-22 2636800]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-05-03 3071384]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-01 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-30 16269312]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-08 149280]
"WheelMouse"="c:\advanc~1\wh_exec.exe" [2010-05-26 147456]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-14 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jogo^Nabídka Start^Programy^Po spuštění^hamachi.lnk]
path=c:\documents and settings\Jogo\Nabídka Start\Programy\Po spuštění\hamachi.lnk
backup=c:\windows\pss\hamachi.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jogo^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Jogo\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-02-01 11:06 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Tortun\\gui.exe"=
"c:\\Program Files\\Psygnosis\\Rollcage Stage II\\BIN\\Rollcage D3D.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\World of Warcraft\\Launcher.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.0.9.9551-to-3.1.0.9767-enGB-downloader.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Documents and Settings\\Jogo\\Data aplikací\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Heroes of Newerth\\hon.exe"=
"c:\\Program Files\\Ascaron Entertainment\\Sacred Underworld\\gameserver.exe"=
"c:\\Program Files\\Ascaron Entertainment\\Sacred Underworld\\sacred.exe"=
"c:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\StrongDC++\\StrongDC.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Codemasters\\The Lord of the Rings Online\\lotroclient.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"58245:TCP"= 58245:TCP:Pando Media Booster
"58245:UDP"= 58245:UDP:Pando Media Booster
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [16.2.2009 16:33 717296]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [14.4.2008 8:52 14336]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [13.11.2008 18:53 247096]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.6.2010 16:43 136176]
S3 GarenaPEngine;GarenaPEngine;c:\docume~1\Jogo\LOCALS~1\Temp\FZG57.tmp [22.7.2009 14:32 18704]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [7.6.2010 16:43 136176]
S3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\drivers\whfltr2k.sys [15.6.2010 13:26 7424]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{00ecb38c-fba4-11df-88db-001fd03ec098}]
\Shell\AutoRun\command - G:\lpl.exe
\Shell\open\Command - G:\lpl.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{22b4f78f-b11c-11dd-963a-806d6172696f}]
\Shell\AutoRun\command - D:\Run.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-07 14:43]
.
2011-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-07 14:43]
.
2011-06-27 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-12-30 21:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uInternet Connection Wizard,ShellNext = hxxp://www.atlas.cz/?from=icqhp
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Compare Prices with &Dealio - c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\DealioSearch.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} -
FF - ProfilePath - c:\documents and settings\Jogo\Data aplikací\Mozilla\Firefox\Profiles\k1lqse3s.default\
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=hp
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
URLSearchHooks-{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKCU-Run-PlayNC Launcher - (no file)
HKLM-Run-SearchSettings - c:\program files\Search Settings\SearchSettings.exe
Notify-avgrsstarter - avgrsstx.dll
AddRemove-Expekt Poker - c:\poker\Expekt Poker\_SetupPoker.exe
AddRemove-extravideo - c:\program files\extravideo\Uninstall.exe
AddRemove-KeyCraft - c:\windows\unvise32.exe
AddRemove-Score List_is1 - c:\program files\Score List\unins000.exe
AddRemove-World of Warcraft Public Test - c:\program files\Common Files\Blizzard Entertainment\World of Warcraft Public Test-PTR\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-27 18:37
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Jogo\LOCALS~1\Temp\FZG57.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(808)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(1500)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\AcSignIcon.dll
c:\program files\Common Files\Autodesk Shared\AcSignCore16.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\system32\dwwin.exe
.
**************************************************************************
.
Celkový čas: 2011-06-27 18:40:42 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-06-27 16:40
.
Před spuštěním: 9 293 451 264
Po spuštění: 9 405 952 000
.
- - End Of File - - 8ED771A9672805062F17FC179BC641B4

#10 Příspěvek od **cernohous13** » 27 čer 2011 21:47

Jsou pro tebe nezbytné programy Akamai a Garena?
Doporučuji odinstalaci pro potenciální hrozbu.

zbavíme se zbytečností

Pokud nemáš ComboFix na ploše, přesuň jej tam.
Otevři Poznámkový blok (Notepad) a zkopíruj celý zelený text z "CFscriptu".
Soubor ulož na plochu jako CFscript.txt a jeho ikonu přetáhni myší nad ikonu ComboFixu - tam pusť.

ComboFix se spustí - počkej na log a vlož ho sem.

CFscript

Kód: Vybrat vše

KillAll::

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"=-
[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[-HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{00ecb38c-fba4-11df-88db-001fd03ec098}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{22b4f78f-b11c-11dd-963a-806d6172696f}]

Folder::
c:\program files\AskBarDis

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Driver::
ICQ Service

DDS::
IE: Compare Prices with &Dealio - c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\DealioSearch.html

Stáhni a nainstaluj MBAM zde http://www.download.com/Malwarebytes-An ... tag=button
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Úplná kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení a program nech spuštěný

oba logy vlož sem - pak budeme po akci uklízet

Jogo · #11 Příspěvek od **Jogo** » 28 čer 2011 08:10

Takže log z ComboFixu:

ComboFix 11-06-27.03 - Jogo 28.06.2011 8:07.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3583.2807 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jogo\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jogo\Plocha\CFScript.txt
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Jogo\Data aplikací\.#
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc14.exe
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc17007343.txt
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc17012062.txt
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc219.exe
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc237
c:\documents and settings\Jogo\Data aplikací\Adobe\plugs\mmc237.exe
c:\documents and settings\Jogo\Data aplikací\Adobe\shed
c:\documents and settings\Jogo\Data aplikací\Adobe\shed\thr1.chm
c:\documents and settings\Jogo\Data aplikací\Dealio
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\alerts.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\alerts_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\alerts_rec.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\alerts_rec_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\deal_report.jpg
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\DealioSearch.html
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\deals-leftcap.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\ebay_login.jpg
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\err_mainwindow.html
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\err_toolbar.html
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\global_scripts.js
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\headerbgthin.jpg
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\highlight-bg.png
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\chevron-small.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\logo.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\logo_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\man_toolbar.css
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\man_toolbar.html
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\man_toolbar.js
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\man_toolbarl.js
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\post-this-deal.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\post-this-deal_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\scripts.js
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\scroller.js
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\search-chevron.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\search-chevron_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\search_bg_blink.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\separator.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\settings.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\settings_over.gif
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\res\yahoo-search.png
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\index.76.35
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.10.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.109.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.110.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.12.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.13.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.130.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.135.50
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.153.44
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.155.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.156.49
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.16.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.161.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.178.66
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.184.55
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.188.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.189.45
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.196.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.198.56
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.199.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.200.53
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.201.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.202.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.203.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.205.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.213.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.214.49
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.215.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.216.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.217.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.218.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.219.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.220.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.221.57
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.222.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.223.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.226.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.227.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.228.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.229.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.23.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.239.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.24.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.240.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.241.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.242.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.243.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.244.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.245.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.247.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.248.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.249.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.250.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.251.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.252.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.253.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.254.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.255.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.256.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.257.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.279.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.28.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.282.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.283.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.284.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.289.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.290.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.291.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.296.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.297.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.304.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.307.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.308.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.31.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.310.46
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.311.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.315.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.316.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.317.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.318.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.319.49
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.32.48
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.334.44
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.335.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.336.44
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.337.44
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.338.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.339.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.34.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.340.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.341.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.349.50
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.35.48
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.350.50
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.351.51
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.352.54
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.353.51
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.354.51
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.357.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.358.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.359.52
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.360.53
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.361.54
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.362.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.363.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.364.54
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.365.53
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.367.56
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.368.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.369.55
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.370.56
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.371.56
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.372.57
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.373.55
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.375.56
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.376.57
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.377.55
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.378.65
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.384.58
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.386.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.387.59
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.388.59
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.389.59
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.390.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.391.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.392.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.393.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.394.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.396.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.397.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.398.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.399.60
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.403.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.404.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.405.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.406.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.407.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.408.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.409.61
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.412.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.413.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.414.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.415.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.416.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.417.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.418.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.419.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.420.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.421.62
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.423.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.424.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.425.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.426.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.427.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.428.65
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.429.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.430.63
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.432.65
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.433.64
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.434.65
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.435.64
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.436.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.437.64
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.438.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.439.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.440.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.442.73
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.443.73
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.444.73
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.445.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.446.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.450.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.451.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.452.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.453.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.454.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.456.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.457.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.458.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.459.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.460.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.462.74
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.463.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.464.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.465.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.468.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.469.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.470.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.471.73
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.472.70
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.478.74
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.479.73
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.480.68
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.481.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.482.74
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.49.67
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.50.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.500.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.501.74
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.502.71
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.51.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.52.72
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.520.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.521.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.522.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.53.51
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.531.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.532.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.534.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.54.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.55.45
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.56.69
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.57.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.58.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.593.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.595.76
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.63.57
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.66.47
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.70.75
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\rules\rules.1.71.43
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\temp\dealio-15151.log
c:\documents and settings\Jogo\Data aplikací\Dealio\kb127\temp\dod_cache.xml
c:\documents and settings\Jogo\Nabídka Start\Programy\extravideo
c:\documents and settings\Jogo\Nabídka Start\Programy\extravideo\Uninstall.lnk
c:\program files\AskBarDis
c:\program files\AskBarDis\bar\bin\askBar.dll
c:\program files\AskBarDis\bar\bin\askPopStp.dll
c:\program files\AskBarDis\bar\bin\psvince.dll
c:\program files\AskBarDis\bar\Cache\0096164D
c:\program files\AskBarDis\bar\Cache\009619E7.bin
c:\program files\AskBarDis\bar\Cache\00961C0A.bin
c:\program files\AskBarDis\bar\Cache\00961EB9.bin
c:\program files\AskBarDis\bar\Cache\00962001.bin
c:\program files\AskBarDis\bar\Cache\00962169.bin
c:\program files\AskBarDis\bar\Cache\009622B1.bin
c:\program files\AskBarDis\bar\Cache\009623F9.bin
c:\program files\AskBarDis\bar\Cache\009627C2.bin
c:\program files\AskBarDis\bar\Cache\0096290A.bin
c:\program files\AskBarDis\bar\Cache\00962A42.bin
c:\program files\AskBarDis\bar\Cache\files.ini
c:\program files\AskBarDis\bar\History\search
c:\program files\AskBarDis\bar\Settings\config.dat
c:\program files\AskBarDis\bar\Settings\config.dat.bak
c:\program files\AskBarDis\bar\Settings\prevcfg.htm
c:\program files\AskBarDis\bar\Settings\prevCfg2.htm
c:\program files\AskBarDis\unins000.dat
c:\program files\AskBarDis\unins000.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ICQ_SERVICE
-------\Service_ICQ Service
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-28 do 2011-06-28 )))))))))))))))))))))))))))))))
.
.
2011-06-27 15:25 . 2011-06-27 15:25 -------- d-----w- c:\documents and settings\Administrator
2011-06-25 09:13 . 2011-06-25 09:13 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-06-25 09:13 . 2011-06-25 09:13 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-02 15:32 . 2008-11-12 18:32 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 16:19 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 16:06 . 2008-04-14 06:52 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-04-25 16:06 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 16:06 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-04-25 12:01 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2008-04-13 22:47 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2009-09-04 17:01 . 2009-09-04 17:01 525656 ----a-w- c:\program files\DXSETUP.exe
2009-09-04 17:01 . 2009-09-04 17:01 94024 ----a-w- c:\program files\DSETUP.dll
2009-09-04 17:01 . 2009-09-04 17:01 1691464 ----a-w- c:\program files\dsetup32.dll
2011-06-25 09:13 . 2011-03-24 13:13 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-06-27_16.37.12 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-06-28 06:13 . 2011-06-28 06:13 16384 c:\windows\temp\Perflib_Perfdata_3d8.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Octoshape Streaming Services"="c:\documents and settings\Jogo\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-06 26102056]
"OscarEditor"="c:\program files\OSCAR Editor X7\OscarEditor.exe" [2010-07-22 2636800]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-05-03 3071384]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-01 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-30 16269312]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-08 149280]
"WheelMouse"="c:\advanc~1\wh_exec.exe" [2010-05-26 147456]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-14 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jogo^Nabídka Start^Programy^Po spuštění^hamachi.lnk]
path=c:\documents and settings\Jogo\Nabídka Start\Programy\Po spuštění\hamachi.lnk
backup=c:\windows\pss\hamachi.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Jogo^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Jogo\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-02-01 11:06 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Tortun\\gui.exe"=
"c:\\Program Files\\Psygnosis\\Rollcage Stage II\\BIN\\Rollcage D3D.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\World of Warcraft\\Launcher.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.0.9.9551-to-3.1.0.9767-enGB-downloader.exe"=
"c:\\Documents and Settings\\Jogo\\Data aplikací\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Heroes of Newerth\\hon.exe"=
"c:\\Program Files\\Ascaron Entertainment\\Sacred Underworld\\gameserver.exe"=
"c:\\Program Files\\Ascaron Entertainment\\Sacred Underworld\\sacred.exe"=
"c:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\StrongDC++\\StrongDC.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Codemasters\\The Lord of the Rings Online\\lotroclient.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"58245:TCP"= 58245:TCP:Pando Media Booster
"58245:UDP"= 58245:UDP:Pando Media Booster
"1036:TCP"= 1036:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [16.2.2009 16:33 717296]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.6.2010 16:43 136176]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Jogo\LOCALS~1\Temp\FZG57.tmp --> c:\docume~1\Jogo\LOCALS~1\Temp\FZG57.tmp [?]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [7.6.2010 16:43 136176]
S3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\drivers\whfltr2k.sys [15.6.2010 13:26 7424]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-28 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-12-30 21:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uInternet Connection Wizard,ShellNext = hxxp://www.atlas.cz/?from=icqhp
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe
TCP: DhcpNameServer = 192.168.100.1
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} -
FF - ProfilePath - c:\documents and settings\Jogo\Data aplikací\Mozilla\Firefox\Profiles\k1lqse3s.default\
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=hp
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-28 08:13
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Jogo\LOCALS~1\Temp\FZG57.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(816)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2328)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\AcSignIcon.dll
c:\program files\Common Files\Autodesk Shared\AcSignCore16.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\RTHDCPL.EXE
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\dwwin.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2011-06-28 08:16:33 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-06-28 06:16
ComboFix2.txt 2011-06-27 16:40
.
Před spuštěním: Volných bajtů: 11 504 926 720
Po spuštění: Volných bajtů: 16 625 819 648
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer
.
- - End Of File - - 66AEDF0379BE03289E9F66E4BCD575ED

a tady z MBAMu:

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

28.6.2011 9:01:18
mbam-log-2011-06-28 (09-01-18).txt

Typ: Úplná kontrola (A:\|C:\|D:\|E:\|F:\|)
Kontrolované objekty: 350233
Uplynulý čas: 40 minut, 31 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 3
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 3

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_CLASSES_ROOT\extravideo (Trojan.DNSChanger) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\extravideo (Trojan.DNSChanger) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\{NSINAME} (Trojan.Agent) -> Quarantined and deleted successfully.

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\program files\bsplayer pro\bsplayer.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\program files\extravideo\uninstall.exe.vir (Trojan.DNSChanger) -> Quarantined and deleted successfully.
c:\system volume information\_restore{99e884f2-7c14-4ff3-abb5-5a4ae495a12d}\RP1\A0000233.exe (Trojan.DNSChanger) -> Quarantined and deleted successfully.

Jogo · #12 Příspěvek od **Jogo** » 28 čer 2011 08:13

Hm, ja zapomněl, že to nemám mazat

#13 Příspěvek od **JaRon** » 28 čer 2011 08:43

OK - malo by to byt ciste - ak mas kus casu preventivne prescanuj PC s AVPTool

#14 Příspěvek od **cernohous13** » 28 čer 2011 08:49

Jogo píše:Hm, ja zapomněl, že to nemám mazat

Máš kliku - nic systémového

Udělej JaRonovi kontrolu AVPTool (návod máme v podpisech

)

Jogo · #15 Příspěvek od **Jogo** » 28 čer 2011 08:54

Ok jdu na to, jinak teda děkuju moc za pomoc.

VIRY.CZ

Nelze nic spustit krom mozilly

Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly

Re: Nelze nic spustit krom mozilly