Re: Po restartu CleanUp pouze Nouzový režim
Napsal: 21 dub 2010 14:19
Nyní tedy odjíždím a to vaše forum v případě úspěchu 100% podpořím !!!!
Spusťte OTL a do spodního okna vložte následující skript.
Kód: Vybrat vše
:OTL
SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService)
IE - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..\URLSearchHook: - Reg Error: Key error. File not found
O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - No CLSID value found.
O2 - BHO: (no name) - {B8A7839C-51E8-4067-ADA3-CA74BABC1976} - No CLSID value found.
O3 - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..\Toolbar\ShellBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O4 - HKU\S-1-5-21-73586283-1275210071-682003330-1003..\Run: [Power2GoExpress] File not found
O4 - HKU\S-1-5-21-73586283-1275210071-682003330-1003..\Run: [WEBTRAN] File not found
O4 - Startup: C:\Documents and Settings\Šeda\Nabídka Start\Programy\Po spuštění\_uninst_setup_9.0.0.722_18.04.2010_23-12.exe.lnk = C:\Documents and Settings\Šeda\Local Settings\Temp\_uninst_setup_9.0.0.722_18.04.2010_23-12.exe.bat File not found
O9 - Extra 'Tools' menuitem : GigaSize Toolbar - {18955D47-882E-48fc-B903-A4BDD030E7FD} - Reg Error: Value error. File not found
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKLM\..Trusted Domains: mojebanka.cz ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..Trusted Domains: ([]msn in My Computer)
O15 - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKU\S-1-5-21-73586283-1275210071-682003330-1003\..Trusted Domains: mojebanka.cz ([www] https in Trusted sites)
O20 - Winlogon\Notify\slbipsch: DllName - C:\WINDOWS\system32\slbipsch.dll - C:\WINDOWS\System32\slbipsch.dll File not found
O21 - SSODL: msmdev - {B2546A54-2D3A-4F7D-B749-15D6D5D11CDC} - CLSID or File not found.
O21 - SSODL: msmhost - {5E0AB119-E27E-4067-8D8C-FD648B2BC8EA} - CLSID or File not found.
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2010.04.21 14:57:03 | 000,802,304 | ---- | M] () -- C:\WINDOWS\System32\drivers\faybowoj.sys
[2010.04.21 14:57:02 | 000,586,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\katnq.sys
[2010.04.21 11:44:00 | 000,000,280 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010.04.21 11:35:05 | 000,000,280 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010.04.18 14:54:53 | 000,000,575 | ---- | M] () -- C:\Documents and Settings\Šeda\Plocha\CleanUp!.lnk
[2010.04.08 12:49:56 | 000,000,000 | ---- | C] () -- C:\m23apdfj.tmp.X
[2010.02.27 20:41:36 | 000,802,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\faybowoj.sys
[2010.02.27 20:40:50 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Šeda\Data aplikací\avdrn.dat
[2009.02.08 13:03:45 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Šeda\Data aplikací\inst.exe
[2008.09.22 07:40:24 | 000,053,395 | ---- | C] () -- C:\WINDOWS\System32\tdssinit.dll
[2007.02.22 15:36:25 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\winbri21.dll
[2006.11.26 10:21:35 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\gmcoinst.dll
[2006.09.25 10:15:03 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS7D.DLL
[2009.02.20 20:13:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{12DD4DFD-49D5-4382-9533-B21955C1FD4C}
[2009.02.23 23:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2009.02.20 20:12:49 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{6608C652-8B5C-4778-BAC8-B59DD368D024}
[2010.03.03 17:10:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
[2009.02.21 00:45:47 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{F40E9D30-5DFC-4B21-BFDB-A5CDEE6440A6}
[2001.05.24 13:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE
:Services
SSHNAS
:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\system32\~.exe" =-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
:Commands
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[RESETHOSTS]
[CREATERESTOREPOINT]
C:\WINDOWS\System32\BASSMOD.dll
(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)
