VIRY.CZ

gmer je ok.

Stahněte z mého podpisu AVPTOOl http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

-Podle návodu nainstalujte a proveďte sken
-co najde nechejte léčit, mazat
-sken může trvat několik hodin
-vložte zde log z výsledky

scan proběhl. trval 45 minut našlo to nějaky trojan + ještě něco ale log mi umřel spolu s flashdiskem...

scan znovu? pro získání logu?

Jinak PC se chová pořád stejně systémová lišta pořád nereaguje programy zlobí já už se na to pc taky zlobím tak co dál?

Navíc ve správci zařízení se u zvuku vyskytují konflikty ovladačů kernel cosi kdesi ve vlastnostech to hlásí chyby v registrech

Máte nejspíš nabořený systém

ve správci zařízení se u zvuku vyskytují konflikty ovladačů kernel cosi kdesi ve vlastnostech to hlásí chyby v registrech

můžete dát screen?
Můžete ovladače od zvuku přeinstalovat?

reinstal ovladačů jsem dělal nepomohlo.... zkusil jsem nainstalovat znuvu service pack 3 -> cca 5 minut se to chovalo normálně a pak se to vrátilo do starých kolejí a ted jsem si všiml že ve složce windows je asi 20 složek s názvem uninstal KB + cisla

a taky jsem nasel ten log z rotkitu:

HKLM\SECURITY\Policy\Secrets\SAC* 2.9.2008 19:41 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 2.9.2008 19:41 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SCM:{3D14228D-FBE1-11D0-995D-00C04FD919C1}* 2.9.2008 19:25 0 bytes Key name contains embedded nulls (*)
HKLM\SYSTEM\ControlSet001\Services\PCIDump 20.12.2008 8:01 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet002\Services\PCIDump 8.4.2010 14:15 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet003\Services\PCIDump 8.4.2010 14:01 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet004\Services\PCIDump 8.4.2010 18:46 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet005\Services\PCIDump 8.4.2010 19:01 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet006\Services\PCIDump 8.4.2010 19:12 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet007\Services\PCIDump 8.4.2010 19:23 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet008\Services\PCIDump 8.4.2010 19:34 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet009\Services\PCIDump 9.4.2010 4:42 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet010\Services\PCIDump 9.4.2010 4:55 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet011\Services\PCIDump 9.4.2010 5:51 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet012\Services\PCIDump 12.4.2010 4:25 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet013\Services\PCIDump 12.4.2010 4:38 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet014\Services\PCIDump 14.4.2010 19:06 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet015\Services\PCIDump 14.4.2010 19:06 0 bytes Hidden from Windows API.
C:\$AttrDef 2.9.2008 21:04 2.50 KB Hidden from Windows API.
C:\$BadClus 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$BadClus:$Bad 2.9.2008 21:04 78.50 GB Hidden from Windows API.
C:\$Bitmap 2.9.2008 21:04 2.45 MB Hidden from Windows API.
C:\$Boot 2.9.2008 21:04 8.00 KB Hidden from Windows API.
C:\$Extend 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$Extend\$ObjId 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$Extend\$Quota 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$Extend\$Reparse 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$LogFile 2.9.2008 21:04 64.00 MB Hidden from Windows API.
C:\$MFT 2.9.2008 21:04 73.19 MB Hidden from Windows API.
C:\$MFTMirr 2.9.2008 21:04 4.00 KB Hidden from Windows API.
C:\$Secure 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\$UpCase 2.9.2008 21:04 128.00 KB Hidden from Windows API.
C:\$Volume 2.9.2008 21:04 0 bytes Hidden from Windows API.
C:\Documents and Settings\internet\Local Settings\Temp\Comodo\Firewall Pro\Data\TempFiles\clp_files_update.ini 14.4.2010 19:14 0 bytes Visible in directory index, but not Windows API or MFT.
C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf 14.4.2010 19:13 16.72 KB Hidden from Windows API.
D:\$AttrDef 2.9.2008 18:10 2.50 KB Hidden from Windows API.
D:\$BadClus 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$BadClus:$Bad 2.9.2008 18:10 154.39 GB Hidden from Windows API.
D:\$Bitmap 2.9.2008 18:10 4.82 MB Hidden from Windows API.
D:\$Boot 2.9.2008 18:10 8.00 KB Hidden from Windows API.
D:\$Extend 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$Extend\$ObjId 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$Extend\$Quota 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$Extend\$Reparse 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$LogFile 2.9.2008 18:10 64.00 MB Hidden from Windows API.
D:\$MFT 2.9.2008 18:10 41.31 MB Hidden from Windows API.
D:\$MFTMirr 2.9.2008 18:10 4.00 KB Hidden from Windows API.
D:\$Secure 2.9.2008 18:10 0 bytes Hidden from Windows API.
D:\$UpCase 2.9.2008 18:10 128.00 KB Hidden from Windows API.
D:\$Volume 2.9.2008 18:10 0 bytes Hidden from Windows API.



a udělal jsem ještě jeden:

HKU\S-1-5-21-299502267-796845957-839522115-1005\Console 20.4.2010 10:32 0 bytes Security mismatch.
HKLM\SECURITY\Policy\Secrets\SAC* 2.9.2008 19:41 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 2.9.2008 19:41 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SCM:{3D14228D-FBE1-11D0-995D-00C04FD919C1}* 2.9.2008 19:25 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Swearware\backup\winsock2 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012 20.4.2010 6:59 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013 20.4.2010 6:59 0 bytes Security mismatch.
C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf 20.4.2010 16:49 22.38 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MPCMDRUN.EXE-1F9D1CA1.pf 20.4.2010 16:57 71.55 KB Hidden from Windows API.






tak co dál?

Zkuste použít win xp manager - system repair (bez inst.cd)
http://www.viry.cz/forum/viewtopic.php?f=46&t=17549

na ty ovladače sem pošlu kolegu

ok diky moc zatím se pustím do oprav

Zatím není zač, kolega se Vám v noci ozve, mrkne na to

Zkuste najít ve složce Windows\Inf soubor wdmaudio.inf. Klikněte na něj pravým myšítkem a zvolte nainstalovat.
A napište mi, co je napsáno v editboxu "stav zařízení" když kliknete na ta zařízení s vykřičníkem.