VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Help me prosim

https://forum.viry.cz:443/viewtopic.php?t=102954

Stránka 2 z 3

Re: Help me prosim

Napsal: 23 črc 2010 09:31
od zonik
nešlo mi to sem přihlásit, tak jsem se musel přihlásit pod jiným nickem

omlouvám se za tlačení, chápu, že tohle děláte ve volném čase, ty soubory jsou z vkadre.ru tam si je natahl brácha, hlavně hudbu tam tahá, už jsem to promáznul, a ted teda k tomu zararování, jak to mám udělat

Re: Help me prosim

Napsal: 23 črc 2010 09:37
od zonik
nevím kde najdu tu složku a jak mám postupovat, sem analfabet v tomhle :(

Re: Help me prosim

Napsal: 23 črc 2010 09:44
od vyosek
Slozka je na disku C pod nazvem Qoobox - je to zaloha utility ComboFix neco se s nim delat muselo, mohl bych vedet co :???:

:arrow: Jeji obsah si tedy vytahnu sam...

:arrow: Podivejte se jestli mate na disku C soubor ComboFix.txt - obsah mi sem kdyztak vlozte

:arrow: Stahnete SytemLook (viz muj podpis) a ulozte jej na plochu
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    :dir
C:\Qoobox /sub
  • Kliknete na Look
  • Tlacitko Look se zmeni na Scanning a zsedne
  • Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
  • Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

Re: Help me prosim

Napsal: 23 črc 2010 09:47
od zonik
mě vyjelo tohle

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 10:46 on 23/07/2010 by Martin (Administrator - Elevation successful)

========== dir ==========

C:\Qoobox - Unable to find folder.

-=End Of File=-

a je teda fakt, že se načítá už i mozzila

Re: Help me prosim

Napsal: 23 črc 2010 09:53
od vyosek
Super, nekdo si hral s CF a jeste po nem smazal stopy :?:

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    :otl
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.medion.com/
IE - HKU\S-1-5-21-2126688981-4244795158-810744998-1000\..\URLSearchHook: - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&q="
[2009.10.15 19:27:30 | 000,002,399 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\daemon-search.xml
[2010.07.22 10:54:27 | 000,001,056 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\icqplugin.xml
[2010.01.03 04:32:51 | 000,002,362 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\vkadreru.xml
O3 - HKU\S-1-5-21-2126688981-4244795158-810744998-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe File not found
O33 - MountPoints2\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\Shell - "" = AutoRun
O33 - MountPoints2\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\Shell - "" = AutoRun
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Users\Martin\Documents\*.tmp files -> C:\Users\Martin\Documents\*.tmp -> ]
[1 C:\Users\Martin\Desktop\*.tmp files -> C:\Users\Martin\Desktop\*.tmp -> ]
@Alternate Data Stream - 64 bytes -> C:\Users\Martin\Michal David 50-hudba(2010)TVRip.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Martin\Cimrman - Vyšetřování ztráty třídní knihy DVDRip.avi:TOC.WMV

:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Help me prosim

Napsal: 23 črc 2010 10:07
od zonik
All processes killed
========== OTL ==========
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkflt.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File C:\Windows\System32\DRIVERS\ipinip.sys not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File C:\Windows\System32\drivers\blbdrive.sys not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2126688981-4244795158-810744998-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" removed from browser.search.defaulturl
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.icq.com/search/afe_result ... id=afex&q=" removed from keyword.URL
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\vkadreru.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-2126688981-4244795158-810744998-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Media Player.lnk moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6d961d4-b9af-11de-9b91-0019dbb9c262}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6d961eb-b9af-11de-9b91-0019dbb9c262}\ not found.
C:\Windows\System32\is-LT47P.tmp deleted successfully.
C:\Windows\System32\is-V1GH9.tmp deleted successfully.
C:\Windows\System32\is-VJ8RD.tmp deleted successfully.
Unable to delete ADS C:\Users\Martin\Michal David 50-hudba(2010)TVRip.avi:TOC.WMV .
Unable to delete ADS C:\Users\Martin\Cimrman - Vyšetřování ztráty třídní knihy DVDRip.avi:TOC.WMV .
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1BCF.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9B79.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE42.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI892.tmp moved successfully.
File move failed. C:\WINDOWS\System32\DriverStore\FileRepository\hposcu08.inf_6b5c1a40\drivers\scanner\hpqgends.tmp scheduled to be moved on reboot.
C:\WINDOWS\Temp\nshFA09.tmp folder moved successfully.
C:\WINDOWS\Temp\_avast5_\unp176346044.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp179552245.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp44521952.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp44777498.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp45383496.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp88112570.tmp moved successfully.
C:\WINDOWS\Temp\_avast5_\unp92108841.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41085 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Martin
->Temp folder emptied: 395539 bytes
->Temporary Internet Files folder emptied: 6897784 bytes
->Java cache emptied: 179317563 bytes
->FireFox cache emptied: 30429434 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1579697 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3286 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 209,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb



OTL by OldTimer - Version 3.2.9.1 log created on 07232010_105657

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\System32\DriverStore\FileRepository\hposcu08.inf_6b5c1a40\drivers\scanner\hpqgends.tmp scheduled to be moved on reboot.
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF4174.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF41A0.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF420A.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DF4319.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DFC12C.tmp not found!
File\Folder C:\Users\Martin\AppData\Local\Temp\~DFC142.tmp not found!
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W6WATJ7B\afr[1].htm moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W6WATJ7B\viewtopic[2].htm moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
C:\Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Re: Help me prosim

Napsal: 23 črc 2010 10:09
od vyosek
Co na skript pocitac, jak se chova :???:

Re: Help me prosim

Napsal: 23 črc 2010 10:15
od zonik
stránky se načítají, i ty co před tím nešli a mozzila jde spustit bez problému, je to uplně jiný pohled

jste génius

Re: Help me prosim

Napsal: 23 črc 2010 10:18
od vyosek
Ja bych spise rad videl toho "genia" co si hral s CF a jeste smazal jeho veci :?:

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC
:arrow: Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Poprosim o novy log ze RSITu

Re: Help me prosim

Napsal: 23 črc 2010 10:39
od zonik
u cc cleanu mi to píše toto

Soubor nápovědy: %SystemRoot%\IME\IMETC10\HELPIMTCEN.CHM nebyl nalezen. Toto je častý problém vznikající neúplnou odinstalací.

Řešení: Vymazat hodnotu z registru.

kde to vymžu prosím Vás nebo spíš jak

Re: Help me prosim

Napsal: 23 črc 2010 10:40
od zonik
a ještě tohle

Přípona souboru MXtra.DhtmlWrapper odkazuje na neplatný program. Toto je častý problém vznikající neúplnou odinstalací.

Řešení: Vymazat hodnotu z registru.

Re: Help me prosim

Napsal: 23 črc 2010 10:41
od vyosek
Klik na opravit vsechny problemy :wink:

Re: Help me prosim

Napsal: 23 črc 2010 10:43
od zonik
to jsem dal, ale napsalo mi to tohle a ted se mi to už nezobrazuje

Re: Help me prosim

Napsal: 23 črc 2010 10:45
od vyosek
Co se Vam uz nezobrazuje? Znovu ta hlaska? Kdyz date hledat problemy - zobrazi se tam nejake :???:

Re: Help me prosim

Napsal: 23 črc 2010 10:47
od zonik
nezobrazí se již nic
Všechny časy jsou v UTC+01:00
Stránka 2 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz