Stránka 2 z 3

cernohous13

Napsal: 30 led 2011 18:46
od dasenka...
dekuji moc za pomoc

Re: facebook

Napsal: 30 led 2011 18:47
od cernohous13
vyosku díky za záskok

dasenka...
Stáhni a nainstaluj MBAM zde http://download.cnet.com/Malwarebytes-A ... tag=button
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

Re: facebook

Napsal: 30 led 2011 18:56
od dasenka...
ja vim jsem uplne blba ale me to nejde kopirovat

Re: facebook

Napsal: 30 led 2011 19:05
od cernohous13
co nejde kopírovat? :o

do textu který ti vyskočil klik pravým myšítkem "Vybrat vše" do textu znovu pravým "Kopírovat" a sem zase pravým "Vložit"
nebo v MBAM na 5.záložce "Protokoly" poklikat a stejným způsobem vložit sem

Re: facebook

Napsal: 30 led 2011 19:08
od dasenka...
jaa kdyz tam kliknu pravym...tak me tak kopirovat nenaskoci:(

Re: facebook

Napsal: 30 led 2011 19:13
od cernohous13
Tak celý text přejeď myší (levým) - označí se ti
klik Ctrl+C - zkopíruje se do schránky
a do své odpovědi klik Ctrl+V - vloží se tam

Re: facebook

Napsal: 30 led 2011 19:16
od dasenka...
me ten text nejde oznacit... jde jenom radek a kdyz to udelam tak se to nezkopiruje..

Re: facebook

Napsal: 30 led 2011 19:18
od cernohous13
musíš začít na začátku prvního řádku a táhnout až na konec posledního

Re: facebook

Napsal: 30 led 2011 19:22
od dasenka...
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5640

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

30.1.2011 19:21:39
mbam-log-2011-01-30 (19-21-34).txt

Typ kontroly: Rychlý test
Testované objekty: 227358
Uplynulý čas: 4 minut, 5 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 2
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor (Malware.Trace) -> Value: NVIDIA driver monitor -> No action taken.

Infikované datové položky v registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (PUM.Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Re: facebook

Napsal: 30 led 2011 19:22
od dasenka...
toto si chtel?

Re: facebook

Napsal: 30 led 2011 19:25
od cernohous13
:D Jsi šikovná - je to správně
MBAM spustit znovu - dát Úplná kontrola
:arrow: po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Infikované adresáře:
C:\Program Files\xxxxxx -> Quarantined and deleted successfully.
ten bych taky rád viděl :)

Re: facebook

Napsal: 30 led 2011 20:25
od dasenka...
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5640

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

30.1.2011 20:23:35
mbam-log-2011-01-30 (20-23-31).txt

Typ kontroly: Úplný test (C:\|D:\|)
Testované objekty: 278620
Uplynulý čas: 19 minut, 39 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 2
Infikované složky: 0
Infikované soubory: 59

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor (Malware.Trace) -> Value: NVIDIA driver monitor -> No action taken.

Infikované datové položky v registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (PUM.Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\dasa.doma-d074ff335e\dokumenty\stažené soubory\facebook-pic000934519(2).exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\dasa.doma-d074ff335e\dokumenty\stažené soubory\facebook-pic000934519.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\dasa.doma-d074ff335e\Plocha\ostatní\removewga.exe (PUP.RemoveWGA) -> No action taken.
c:\program files\trend micro\dasa.exe (PWS.Fignotok) -> No action taken.
c:\program files\trend micro\hijackthis.exe (PWS.Fignotok) -> No action taken.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0174564.exe (PWS.Fignotok) -> No action taken.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0174968.exe (PUP.RemoveWGA) -> No action taken.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0175126.exe (PWS.Fignotok) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0003100.exe (RiskWare.Tool.CK) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004081.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004084.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004122.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004123.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004129.exe (RiskWare.Tool.CK) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004130.exe (RiskWare.Tool.CK) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004254.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004255.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004278.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004279.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0005299.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0006293.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0006294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0007293.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0007295.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0008292.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0008294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004295.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0018300.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0009299.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0010299.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0011292.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0011294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0012299.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0013294.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0013296.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0014292.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0014294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0015292.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0015294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0016295.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0016296.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0019300.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021294.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021296.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021305.exe (RiskWare.Tool.CK) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0022294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0023294.exe (Backdoor.Bot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0023297.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0024294.exe (Backdoor.RBot) -> No action taken.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0025294.exe (Backdoor.RBot) -> No action taken.
c:\WINDOWS\system32\spoolsvc.exe (Backdoor.Bot) -> No action taken.
c:\WINDOWS\Temp\sig1.tmp (Backdoor.Bot) -> No action taken.
c:\WINDOWS\Temp\sig2.tmp (Backdoor.Bot) -> No action taken.
c:\_OTM\movedfiles\01302011_172642\c_windows.0\nvsvc32.exe (Backdoor.Bot) -> No action taken.
d:\instalačky\clone cd 4.2.0.2\clonecd keygen.exe (Trojan.Agent.CK) -> No action taken.
d:\instalačky\clone instal\setupclonecd3341.exe (Trojan.Agent.CK) -> No action taken.
d:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0176625.exe (Trojan.Agent.CK) -> No action taken.
d:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0176629.exe (Trojan.Agent.CK) -> No action taken.
d:\vsechno\removewga.exe (PUP.RemoveWGA) -> No action taken.

Re: facebook

Napsal: 30 led 2011 20:26
od dasenka...
me vyjelo jen toto

Re: facebook

Napsal: 30 led 2011 20:29
od cernohous13
Pokud jsi ještě MBAM nezavřela, tak postupuj podle návodu
:arrow: po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\xxxxxx -> Quarantined and deleted successfully.
ten bych taky rád viděl :)

Re: facebook

Napsal: 30 led 2011 20:39
od dasenka...
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5640

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

30.1.2011 20:39:26
mbam-log-2011-01-30 (20-39-26).txt

Typ kontroly: Úplný test (C:\|D:\|)
Testované objekty: 278620
Uplynulý čas: 19 minut, 39 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 2
Infikované složky: 0
Infikované soubory: 59

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor (Malware.Trace) -> Value: NVIDIA driver monitor -> Quarantined and deleted successfully.

Infikované datové položky v registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (PUM.Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\dasa.doma-d074ff335e\dokumenty\stažené soubory\facebook-pic000934519(2).exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\documents and settings\dasa.doma-d074ff335e\dokumenty\stažené soubory\facebook-pic000934519.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\documents and settings\dasa.doma-d074ff335e\Plocha\ostatní\removewga.exe (PUP.RemoveWGA) -> Not selected for removal.
c:\program files\trend micro\dasa.exe (PWS.Fignotok) -> Quarantined and deleted successfully.
c:\program files\trend micro\hijackthis.exe (PWS.Fignotok) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0174564.exe (PWS.Fignotok) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0174968.exe (PUP.RemoveWGA) -> Not selected for removal.
c:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0175126.exe (PWS.Fignotok) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0003100.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004081.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004084.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004122.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004123.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004129.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP8\A0004130.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004254.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004255.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004278.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004279.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0005299.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0006293.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0006294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0007293.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0007295.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0008292.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0008294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0004295.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0018300.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0009299.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0010299.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0011292.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0011294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0012299.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0013294.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0013296.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0014292.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0014294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0015292.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0015294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0016295.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0016296.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0019300.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021294.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021296.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0021305.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0022294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0023294.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0023297.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0024294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0857eada-94c8-4496-a7f0-834407685969}\RP9\A0025294.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\spoolsvc.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\sig1.tmp (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\sig2.tmp (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\_OTM\movedfiles\01302011_172642\c_windows.0\nvsvc32.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
d:\instalačky\clone cd 4.2.0.2\clonecd keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
d:\instalačky\clone instal\setupclonecd3341.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
d:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0176625.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
d:\system volume information\_restore{0571390c-c3d0-4100-9b6d-65e0c9d23b77}\RP314\A0176629.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
d:\vsechno\removewga.exe (PUP.RemoveWGA) -> Not selected for removal.