Antivir našel trojského koně PROSÍM POMOC

[cernohous13]

Máš to nějak čisté

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM

Kód: Vybrat vše

:Commands
[emptytemp]
[emptyflash]
[emptyjava]
[clearallrestorepoints]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.

[maxino]

spuštěno OTM, vložen skript, zmáčknuto MOVELT a program neodpovídá

PC jsem s pomocí Marty84 čistila minulý týden

[cernohous13]

Tak zkusíme po kouskách - máš tam zřejmě v tempech něco zašitého

OTM script

Kód: Vybrat vše

:Commands
[emptytemp]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

[maxino]

spuštěno OTM, vložen skript, zmáčknuto MOVELT a program nic nedělá, po 20 minutách jsem provedla restart

[cernohous13]

Restartuj do Nouzového režimu a proveď v něm

[maxino]

v nouzovém režimu provedna první část

[cernohous13]

log by nebyl?

[maxino]

Nic se mi neobjevilo. Je někde schovaný?

Už jsem našla, zde je

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 3413 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 13655992 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Verča
->Temp folder emptied: 294912 bytes
->Temporary Internet Files folder emptied: 5493700 bytes
->FireFox cache emptied: 29351270 bytes
->Flash cache emptied: 6242 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 47,00 mb

========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\$NtServicePackUninstall$\set16d.tmp moved successfully.
C:\WINDOWS\$NtServicePackUninstall$\set16e.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP205.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP31B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP350A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP351.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP35E4.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP360D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP430.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP451.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5BB.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP60C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP64E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP734.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP82D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP916.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP936.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA8D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB9E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBB8.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI190.tmp moved successfully.
C:\WINDOWS\SoftwareDistribution\Download\35c84bf17a60bca944e628a3ac0d96e9\BIT1B76.tmp moved successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 12142013_175955

[cernohous13]

OTM -> CleanUp!

ještě něco k řešení?

[maxino]

OTM provedno

smazanány všechny stažené utility

odinstalován MBAM

vyčištěno vše Cleanerem

Moc děkuji za pomoc a posílám příspěvek na podporu fóra

[cernohous13]

Z příspěvek děkujeme

Ty nemáš zač, je to naše zábava a nejdeš nás tu i příště

[vyosek]

Velmi pekne dekuji kolegovi za zasok a doreseni

A na zaklade Pravidla o zamykani temat