VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

https://forum.viry.cz:443/viewtopic.php?t=96892

Stránka 1 z 3

XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 17:27
od petrsulak
Známý mi přinesl PC ve kterém se mu objevilXP Antispyware 2010 a blokuje skoro všechny programy včetně prohlížeče a hlásí spostu virů a útoků. Vkládám log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-01-28 16:31:34
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 204 GB (86%) free of 238 GB
Total RAM: 1023 MB (77% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-23 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-28 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-23 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-07-23 8466432]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-07-23 81920]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Gainward"=C:\WINDOWS\TBPanel.exe [2007-06-26 2173480]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2007-09-04 54576]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"WindowsServicrss"=C:\WINDOWS\Installer.exe [2009-10-11 595466]
"av_md"=C:\WINDOWS\system32\av_md.exe [2009-12-01 27711]
"Regedit32"=C:\WINDOWS\system32\regedit.exe []
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"sysgif32"=C:\WINDOWS\TEMP\~TM41C.tmp [2010-01-23 15360]
"09605626"=C:\DOCUME~1\ALLUSE~1\DATAAP~1\09605626\09605626.exe [2010-01-23 1068032]
"CTFMON"=C:\WINDOWS\Temp\_ex-08.exe [2010-01-23 416768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-07-14 1961984]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-09-04 95536]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-11-20 39408]
"av_md"=C:\Documents and Settings\Administrator\av_md.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2007-12-04 79224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"avast! Web Scanner"=3
"avast! Mail Scanner"=3
"aswUpdSv"=2

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
algqeh32.exe
OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\HRY\Insane\insane\Game.exe"="C:\HRY\Insane\insane\Game.exe:*:Disabled:INSANE"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper"
"C:\HRY\fear\FEAR.exe"="C:\HRY\fear\FEAR.exe:*:Enabled:FEAR"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f8f42f12-d0e7-11de-be48-001d60915d7e}]
shell\AutoRun\command - I:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunmes.exe
shell\open\command - I:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunmes.exe


======File associations======

.exe - open - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\av.exe" /START "%1" %*

======List of files/folders created in the last 1 months======

2010-01-28 16:31:35 ----D---- C:\Program Files\trend micro
2010-01-28 16:31:33 ----D---- C:\rsit
2010-01-28 15:18:11 ----SHD---- C:\WINDOWS\CSC
2010-01-28 15:18:06 ----A---- C:\WINDOWS\ntbtlog.txt
2010-01-23 22:45:37 ----D---- C:\Program Files\WinPcap
2010-01-23 15:48:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\09605626
2010-01-22 00:11:20 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\java.exe
2010-01-14 19:38:06 ----D---- C:\WINDOWS\Sun
2010-01-14 18:54:51 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-14 18:54:32 ----D---- C:\Program Files\Java
2010-01-14 18:54:19 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sun

======List of files/folders modified in the last 1 months======

2010-01-28 16:31:35 ----RD---- C:\Program Files
2010-01-28 16:30:14 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-28 15:38:11 ----A---- C:\WINDOWS\wincmd.ini
2010-01-28 15:31:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-28 15:30:51 ----D---- C:\WINDOWS\Prefetch
2010-01-28 15:30:48 ----D---- C:\WINDOWS\Temp
2010-01-28 15:30:46 ----A---- C:\WINDOWS\DFC.INI
2010-01-28 15:18:11 ----D---- C:\WINDOWS
2010-01-28 15:17:03 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-01-28 14:57:07 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-28 14:57:02 ----D---- C:\WINDOWS\system32\drivers
2010-01-23 22:45:37 ----D---- C:\WINDOWS\system32
2010-01-23 14:35:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-01-15 17:36:29 ----D---- C:\WINDOWS\SoftwareDistribution
2010-01-15 16:46:28 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-15 16:11:14 ----SHD---- C:\WINDOWS\Installer
2010-01-15 16:10:57 ----HD---- C:\Config.Msi
2010-01-10 12:59:14 ----D---- C:\Documents and Settings\Administrator\Data aplikací\HPAppData
2010-01-06 18:27:32 ----D---- C:\WINDOWS\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2007-12-04 42912]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2007-11-06 137728]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2007-12-04 26624]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2007-12-04 94544]
S2 SetupNT;SetupNT; C:\WINDOWS\system32\SetupNT.sys [2000-10-25 3000]
S2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
S3 a8uop7f3;a8uop7f3; C:\WINDOWS\system32\drivers\a8uop7f3.sys []
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
S3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-06 93952]
S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2007-12-04 23152]
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 NPF;WinPcap Packet Driver (NPF); C:\WINDOWS\system32\drivers\NPF.sys [2007-11-15 34064]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-07-23 6807328]
S3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2007-12-04 140664]
S2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-07-23 155716]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-20 182768]
S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S4 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2007-12-04 17272]
S4 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2007-12-04 247160]
S4 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2007-12-04 345464]

-----------------EOF-----------------
Díky Petr

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 17:41
od pitimir
Vitaj na fore :welcome:

1) Stiahni SRENG. Spust program, klikni na "System Repair" -> "File Association". Tu zafajknes vsetky, ktore maju Error Status a klik na "Repair".


2) Stiahni OTM. Do laveho policka skopiruj:

Kód: Vybrat vše

:files
C:\WINDOWS\Installer.exe
C:\WINDOWS\system32\av_md.exe
C:\WINDOWS\system32\regedit.exe
C:\DOCUME~1\ALLUSE~1\DATAAP~1\09605626
C:\Documents and Settings\Administrator\av_md.exe
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\algqeh32.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\av.exe

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsServicrss"=-
"av_md"=-
"Regedit32"=-
"sysgif32"=-
"09605626"=-
"CTFMON"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"av_md"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f8f42f12-d0e7-11de-be48-001d60915d7e}]

:commands
[purity]
[emptytemp]
[reboot]
Klik na "Move It". Nasledne sa ti objavi v okne "Result" pokec, ktory sem cely skopiruj.

P.S.: Keby program ziadal restart, potvr ho. Nasledujuci log najdes v "C:\_OTM\MovedFiles\".


3) Stiahni USBFix. Ukonci vsetky spustene veci a spust program. Vyber jazyk - v pripade anglictiny stlac E -> Enter. Dostanes do dalsieho menu. V nom stlac 2 -> Enter. Zacne sa scan, nezasahuj donho. Mozny je restart PC. Vytvoreny log najdes na "C:\UsbFix.txt", vloz ho sem.

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 18:38
od petrsulak
Takže jsem všechno musel dělat v nouzovém režimu, protože mě antispywar nedovolil spustit žádný program. Neuvědomil jsem si že spouštím z flešky tak jsem ho pustil znova po překopírování do pc.
Z flešky je tento log:

All processes killed
========== FILES ==========
C:\WINDOWS\Installer.exe moved successfully.
C:\WINDOWS\system32\av_md.exe moved successfully.
File/Folder C:\WINDOWS\system32\regedit.exe not found.
C:\DOCUME~1\ALLUSE~1\DATAAP~1\09605626 folder moved successfully.
File/Folder C:\Documents and Settings\Administrator\av_md.exe not found.
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\algqeh32.exe moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\av.exe moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsServicrss deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\av_md deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Regedit32 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\sysgif32 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\09605626 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\av_md deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f8f42f12-d0e7-11de-be48-001d60915d7e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8f42f12-d0e7-11de-be48-001d60915d7e}\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 617089030 bytes
->Temporary Internet Files folder emptied: 30617172 bytes
->Java cache emptied: 17767604 bytes

User: All Users

User: Default User
->Temp folder emptied: 114318249 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 3219198 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: setupstudio
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2225176 bytes
%systemroot%\System32 .tmp files removed: 2510 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2714227 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 191663 bytes
RecycleBin emptied: 684619 bytes

Total Files Cleaned = 752,00 mb


OTM by OldTimer - Version 3.1.7.0 log created on 01282010_182152
a po restartu v systemu:

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\Installer.exe not found.
File/Folder C:\WINDOWS\system32\av_md.exe not found.
File/Folder C:\WINDOWS\system32\regedit.exe not found.
File/Folder C:\DOCUME~1\ALLUSE~1\DATAAP~1\09605626 not found.
File/Folder C:\Documents and Settings\Administrator\av_md.exe not found.
File/Folder C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\algqeh32.exe not found.
File/Folder C:\Documents and Settings\Administrator\Local Settings\Data aplikací\av.exe not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsServicrss not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\av_md not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Regedit32 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\sysgif32 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\09605626 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\av_md not found.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f8f42f12-d0e7-11de-be48-001d60915d7e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8f42f12-d0e7-11de-be48-001d60915d7e}\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 50060 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: setupstudio
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2474 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.7.0 log created on 01282010_182547

Files moved on Reboot...

Registry entries deleted on Reboot...

UsbFix jsem bohužel nenašel

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 18:40
od pitimir
Ako nenasiel? Link ti nefunguje? Vyskusaj teraz, po aplikacii OTM.

A novy log z RSITu :)

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 18:57
od petrsulak
Odkaz na USBFIX nefungoval a googl mě odkazoval na úplně jiné programy. Teď najednou jde. Dobrá tady je ten log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-01-28 18:54:43
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 205 GB (86%) free of 238 GB
Total RAM: 1023 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:54:51, on 28.1.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
I:\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Gainward] C:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Kniha klipů HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Chytrý výběr - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.mojebanka.cz
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 7680 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-23 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-28 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-23 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-07-23 8466432]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-07-23 81920]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Gainward"=C:\WINDOWS\TBPanel.exe [2007-06-26 2173480]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2007-09-04 54576]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-07-14 1961984]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-09-04 95536]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-11-20 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2007-12-04 79224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"avast! Web Scanner"=3
"avast! Mail Scanner"=3
"aswUpdSv"=2

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\HRY\Insane\insane\Game.exe"="C:\HRY\Insane\insane\Game.exe:*:Disabled:INSANE"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper"
"C:\HRY\fear\FEAR.exe"="C:\HRY\fear\FEAR.exe:*:Enabled:FEAR"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-01-28 18:51:51 ----RASHD---- C:\autorun.inf
2010-01-28 18:50:09 ----A---- C:\UsbFix.txt
2010-01-28 18:46:42 ----D---- C:\UsbFix
2010-01-28 18:25:47 ----D---- C:\_OTM
2010-01-28 16:31:35 ----D---- C:\Program Files\trend micro
2010-01-28 16:31:33 ----D---- C:\rsit
2010-01-28 15:18:11 ----SHD---- C:\WINDOWS\CSC
2010-01-28 15:18:06 ----A---- C:\WINDOWS\ntbtlog.txt
2010-01-23 22:45:37 ----D---- C:\Program Files\WinPcap
2010-01-22 00:11:20 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-15 16:10:55 ----A---- C:\WINDOWS\system32\java.exe
2010-01-14 19:38:06 ----D---- C:\WINDOWS\Sun
2010-01-14 18:54:51 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-14 18:54:32 ----D---- C:\Program Files\Java
2010-01-14 18:54:19 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sun

======List of files/folders modified in the last 1 months======

2010-01-28 18:51:57 ----D---- C:\WINDOWS\Temp
2010-01-28 18:51:48 ----SHD---- C:\RECYCLER
2010-01-28 18:51:01 ----D---- C:\WINDOWS\Prefetch
2010-01-28 18:50:45 ----D---- C:\WINDOWS\system32
2010-01-28 18:49:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-28 18:47:22 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-01-28 18:42:29 ----A---- C:\WINDOWS\DFC.INI
2010-01-28 18:29:43 ----A---- C:\WINDOWS\wincmd.ini
2010-01-28 18:22:16 ----D---- C:\WINDOWS
2010-01-28 16:31:35 ----RD---- C:\Program Files
2010-01-28 16:30:14 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-28 14:57:07 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-28 14:57:02 ----D---- C:\WINDOWS\system32\drivers
2010-01-23 14:35:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-01-15 17:36:29 ----D---- C:\WINDOWS\SoftwareDistribution
2010-01-15 16:46:28 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-15 16:11:14 ----SHD---- C:\WINDOWS\Installer
2010-01-15 16:10:57 ----HD---- C:\Config.Msi
2010-01-10 12:59:14 ----D---- C:\Documents and Settings\Administrator\Data aplikací\HPAppData
2010-01-06 18:27:32 ----D---- C:\WINDOWS\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2007-12-04 26624]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2007-12-04 42912]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2007-12-04 94544]
R2 SetupNT;SetupNT; C:\WINDOWS\system32\SetupNT.sys [2000-10-25 3000]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-06 93952]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2007-11-06 137728]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-07-23 6807328]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2007-12-04 23152]
S3 azg3jxct;azg3jxct; C:\WINDOWS\system32\drivers\azg3jxct.sys []
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 NPF;WinPcap Packet Driver (NPF); C:\WINDOWS\system32\drivers\NPF.sys [2007-11-15 34064]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2007-12-04 140664]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-07-23 155716]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-20 182768]
S4 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2007-12-04 17272]
S4 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2007-12-04 247160]
S4 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2007-12-04 345464]

-----------------EOF-----------------

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 19:03
od pitimir
Mohol byt blokovany smejdami...

A log z USBFixu? :o

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 19:07
od petrsulak
############################## | UsbFix V6.080 |

User : Administrator (Administrators) # USER8
Update on 27/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 18:50:13 | 28.1.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(tm) 64 X2 Dual Core Processor 4200+
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 7.0.5730.11
Windows Firewall Status : Enabled
AV : avast! antivirus 4.7.1098 [VPS 080116-1] 4.7.1098 [ Enabled | (!) Outdated ]

A:\ -> Disketová jednotka 3 1/2"
C:\ -> Místní pevný disk # 232,88 Go (200,17 Go free) # NTFS
D:\ -> Disk CD-ROM
E:\ -> Disk CD-ROM
F:\ -> Disk CD-ROM
G:\ -> Disk CD-ROM
H:\ -> Disk CD-ROM
I:\ -> Vyměnitelný disk # 1,89 Go (1,16 Go free) [CORSAIR] # FAT

############################## | Active processes |

C:\WINDOWS\System32\smss.exe 600
C:\WINDOWS\system32\csrss.exe 660
C:\WINDOWS\system32\winlogon.exe 684
C:\WINDOWS\system32\services.exe 728
C:\WINDOWS\system32\lsass.exe 740
C:\WINDOWS\system32\svchost.exe 908
C:\WINDOWS\system32\svchost.exe 964
C:\WINDOWS\System32\svchost.exe 1060
C:\WINDOWS\system32\svchost.exe 1164
C:\WINDOWS\system32\svchost.exe 1252
C:\WINDOWS\system32\logonui.exe 1324
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1520
C:\WINDOWS\system32\userinit.exe 1624
C:\WINDOWS\Explorer.EXE 1640
C:\WINDOWS\system32\spoolsv.exe 1952
C:\WINDOWS\system32\svchost.exe 208
C:\Program Files\Java\jre6\bin\jqs.exe 304
C:\WINDOWS\System32\svchost.exe 476
C:\WINDOWS\system32\nvsvc32.exe 492
C:\WINDOWS\System32\svchost.exe 588
C:\WINDOWS\system32\svchost.exe 1012
C:\WINDOWS\System32\dmadmin.exe 1320
C:\WINDOWS\system32\wbem\wmiprvse.exe 2364

################## | Files # Infected Folders |

Deleted ! C:\WINDOWS\System32\autorun.inf
Deleted ! C:\Recycler\S-1-5-21-1960408961-1715567821-682003330-500
I:\autorun.inf -> Called file : "I:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunmes.exe" ( Not Found ! )
Deleted ! I:\autorun.inf
Deleted ! I:\Recycler\S-1-6-21-2434476501-1644491937-600003330-1213

################## | Registry # Infected Keys |


################## | Registry # Mountpoints2 |


################## | Listing of the present files |

[17.01.2008 18:55|--a------|0] C:\AUTOEXEC.BAT
[11.05.2008 12:03|---hs----|211] C:\boot.ini
[25.10.2001 13:00|-rahs----|4952] C:\Bootfont.bin
[17.01.2008 18:55|--a------|0] C:\CONFIG.SYS
[17.01.2008 19:49|--a------|4128] C:\INFCACHE.1
[17.01.2008 18:55|-rahs----|0] C:\IO.SYS
[17.01.2008 18:55|-rahs----|0] C:\MSDOS.SYS
[03.08.2004 19:38|-rahs----|47564] C:\NTDETECT.COM
[03.08.2004 19:59|-rahs----|250048] C:\ntldr
[?|?|?] C:\pagefile.sys
[28.01.2010 18:51|--a------|2777] C:\UsbFix.txt
[?|?|?] I:\VIRY.CZ Zobrazit t‚ma - Security Tool - vir.url
[?|?|?] I:\spouçtŘnˇ security tool jako n sledek napadejˇ troyanem Strana 4.url
[21.03.2009 19:46|--a------|781909] I:\RSIT.exe

################## | Vaccination |

# C:\autorun.inf -> Folder created by UsbFix.
# I:\autorun.inf -> Folder created by UsbFix.

################## | Upload |

Please send the file : C:\DOCUME~1\ADMINI~1\Plocha\UsbFix_Upload_Me_USER8.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.080 ! |

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 19:10
od pitimir
Menom autorov USBFixu ta prosim, aby si subor C:\DOCUME~1\ADMINI~1\Plocha\UsbFix_Upload_Me_USER8.zip uploadol na >>tuto<< stranku. Vdaka.

A teraz pokracujeme v nasom probleme:

Stiahni GMER, rozbal ho na plochu a spust. Program automaticky zacne scan (po jeho skonceni vloz log c. 1) - pokial pri scanovani nieco najde (=vyskoci nejake upozornenie), klik na "NO" a nastavis program podla obrazku:
Obrázek
Klik na "Scan". Po scane klik na "Save" a log c. 2 vloz sem.

Ak nic nenajde (=nevyskoci nic), zaskrtaj vpravo vsetko a spusti scan. Po jeho ukonceni klik na "Copy" a vloz log c. 2.

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 19:47
od petrsulak
Gmer si logy neukládá? Nikde jsem nenašel log1. Musím si ho uložit sám přes save? Potřebuješ ten log1. Mám GMER spustit znovu?Na začátku mi vyskočila nějaká hláška takže jsem nastavil GMER podle obrázku a dal jsem scan

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 19:51
od pitimir
Prvy scan zacne robit program sam pri spusteni. Potom treba kliknut na "Save" a ulozit si ho. Ak nevyskoci nijaka hlaska, nijaky oznam o rootkite, tak zaskrtas vsetky stvorceky vpravo a kliknes na "Scan". Po jeho skonceni opat "Scan" a do fora treba vlozit oba vzniknute logy.

Pokial by vyskocilo nejake upozornenie, kliknes na "No" a nastavis program podla obrazka. Potom je uz postup rovnaky: "Scan" -> "Scan" a vlozit logy.

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 21:29
od petrsulak
Log 1
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-28 19:53:05
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\kxtdapob.sys


---- System - GMER 1.0.15 ----

SSDT spnw.sys ZwEnumerateKey [0xF72A5CA2] <-- ROOTKIT !!!
SSDT spnw.sys ZwEnumerateValueKey [0xF72A6030] <-- ROOTKIT !!!

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 865AC1F0

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device \FileSystem\Fastfat \Fat 84A721F8

AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- Services - GMER 1.0.15 ----

Service (*** hidden *** ) [BOOT] idyoflsm <-- ROOTKIT !!!

---- EOF - GMER 1.0.15 ----

log2
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-01-28 21:26:15
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\kxtdapob.sys


---- System - GMER 1.0.15 ----

SSDT spnw.sys ZwCreateKey [0xF72870E0] <-- ROOTKIT !!!
SSDT spnw.sys ZwEnumerateKey [0xF72A5CA2] <-- ROOTKIT !!!
SSDT spnw.sys ZwEnumerateValueKey [0xF72A6030] <-- ROOTKIT !!!
SSDT spnw.sys ZwOpenKey [0xF72870C0] <-- ROOTKIT !!!
SSDT spnw.sys ZwQueryKey [0xF72A6108] <-- ROOTKIT !!!
SSDT spnw.sys ZwQueryValueKey [0xF72A5F88] <-- ROOTKIT !!!
SSDT spnw.sys ZwSetValueKey [0xF72A619A] <-- ROOTKIT !!!

INT 0x63 ? 862D8BF8
INT 0x73 ? 865DCBF8
INT 0x83 ? 865DCBF8

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 865AC1F0

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device \FileSystem\Fastfat \FatCdrom 84A721F8

AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device \Driver\PCI_PNP4468 \Device\00000041 spnw.sys
Device \Driver\NetBT \Device\NetBT_Tcpip_{91F26C14-91C1-46AF-94AB-68B90DAD6D7C} 8500D1F8
Device \Driver\usbohci \Device\USBPDO-0 862D71F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 865DD1F8
Device \Driver\dmio \Device\DmControl\DmConfig 865DD1F8
Device \Driver\dmio \Device\DmControl\DmPnP 865DD1F8
Device \Driver\dmio \Device\DmControl\DmInfo 865DD1F8
Device \Driver\usbehci \Device\USBPDO-1 862CA1F8

AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device \Driver\USBSTOR \Device\00000070 84A651F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 8656E1F8
Device \Driver\USBSTOR \Device\00000071 84A651F8
Device \Driver\Cdrom \Device\CdRom0 862BB1F8
Device \Driver\Cdrom \Device\CdRom1 862BB1F8
Device \Driver\atapi \Device\Ide\IdePort0 8656D1F8
Device \Driver\atapi \Device\Ide\IdePort1 8656D1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 8656D1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c 8656D1F8
Device \Driver\Cdrom \Device\CdRom2 862BB1F8
Device \Driver\sptd \Device\768175718 spnw.sys
Device \Driver\Cdrom \Device\CdRom3 862BB1F8
Device \Driver\Cdrom \Device\CdRom4 862BB1F8
Device \Driver\NetBT \Device\NetBt_Wins_Export 8500D1F8
Device \Driver\NetBT \Device\NetbiosSmb 8500D1F8

AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device \Driver\usbohci \Device\USBFDO-0 862D71F8
Device \Driver\nvata \Device\NvAta0 865DC1F8
Device \Driver\usbehci \Device\USBFDO-1 862CA1F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 84FFF1F8
Device \Driver\nvata \Device\NvAta1 865DC1F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 84FFF1F8
Device \Driver\Ftdisk \Device\FtControl 8656E1F8
Device \Driver\apntvu65 \Device\Scsi\apntvu651Port4Path0Target0Lun0 8620D1F8
Device \Driver\apntvu65 \Device\Scsi\apntvu651 8620D1F8
Device \Driver\apntvu65 \Device\Scsi\apntvu651Port4Path0Target2Lun0 8620D1F8
Device \Driver\apntvu65 \Device\Scsi\apntvu651Port4Path0Target3Lun0 8620D1F8
Device \Driver\apntvu65 \Device\Scsi\apntvu651Port4Path0Target1Lun0 8620D1F8
Device \FileSystem\Fastfat \Fat 84A721F8

AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device \FileSystem\Cdfs \Cdfs 84FB91F8

---- Services - GMER 1.0.15 ----

Service (*** hidden *** ) [BOOT] idyoflsm <-- ROOTKIT !!!

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\idyoflsm@Type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\idyoflsm@Start 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\idyoflsm@ErrorControl 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\idyoflsm@Group Boot Bus Extender
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xFB 0x11 0x66 0xB7 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x0F 0x56 0xC3 0xCB ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x2C 0x9A 0xDE 0x1F ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0xE0 0x31 0x81 0x82 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0xA2 0xCD 0xF9 0xCF ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43@khjeh 0x60 0x3D 0x00 0xB6 ...
Reg HKLM\SYSTEM\ControlSet002\Services\idyoflsm@Type 1
Reg HKLM\SYSTEM\ControlSet002\Services\idyoflsm@Start 0
Reg HKLM\SYSTEM\ControlSet002\Services\idyoflsm@ErrorControl 0
Reg HKLM\SYSTEM\ControlSet002\Services\idyoflsm@Group Boot Bus Extender
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xFB 0x11 0x66 0xB7 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x0F 0x56 0xC3 0xCB ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x2C 0x9A 0xDE 0x1F ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0xE0 0x31 0x81 0x82 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0xA2 0xCD 0xF9 0xCF ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43@khjeh 0x60 0x3D 0x00 0xB6 ...

---- EOF - GMER 1.0.15 ----

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 21:39
od pitimir
Aky fesak sa nam ukazal... :)

1) Stiahni Avenger. Spust ho a suhlas s podmienkami atd.
Do bieleho pola v strede programu vloz skript:

Kód: Vybrat vše

Files to delete:
C:\WINDOWS\system32\drivers\idyoflsm.sys 

Drivers to delete:
idyoflsm
Stlac "Execute" -> "Yes". Restart a vloz log.


2) Novy scan s GMERom.


3) Stiahni na plochu CureIt. Zatial ho nespustat. Restart do nudoveho rezimu (>>klik<<) a v nom spravis nasledovne:
  • Spust program dvojklikom, zrus pripadne vyzvy na stiahnutie novsej verzie a klikni na "Start".
  • Potvrd okna a automaticky zacne expresny scan. Ak sa pri tomto kratkom scane najdu infikovane subory, klikni na "Vyber vsetky" -> "Liecit" -> "Odstran neliecitelne".
  • Vo vrchnom menu klikni na "Volby" -> "Zmenit Nastavenia" a vyfajkni Heuristicka analyza a Vyzva na akciu -> "OK". Vrat sa naspat do hlavneho menu, v nom zvol komplet scan a klikni na zelenu sipku naprvo pod logom Dr. Web.
  • Ked bude scan hotovy, vo vrchnom menu klik na "File" a zvol "Uloz...". Uloz log na plochu, otvor v poznamkovom bloku a vloz ho sem. Nezabudni restartovat PC.

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 22:05
od petrsulak
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\system32\drivers\idyoflsm.sys" deleted successfully.
Driver "idyoflsm" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-01-28 22:00:14
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\kxtdapob.sys


---- System - GMER 1.0.15 ----

SSDT sprp.sys ZwEnumerateKey [0xF72A5CA2]
SSDT sprp.sys ZwEnumerateValueKey [0xF72A6030]

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 8636B1F8

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device \FileSystem\Fastfat \Fat 85E8B500

AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- EOF - GMER 1.0.15 ----
Jdu na ten nouzový režim

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 23:44
od petrsulak
av_md.exe;C:\WINDOWS\system32\config\systemprofile;Trojan.Inject.7433;Smazán.;
atapi.sys\data001;C:\WINDOWS\system32\dllcache\atapi.sys;BackDoor.Bulknet.408;;
atapi.sys;C:\WINDOWS\system32\dllcache;Kontejner obsahuje nakažené objekty ;Přesunut.;
atapi.sys\data001;C:\WINDOWS\system32\drivers\atapi.sys;BackDoor.Bulknet.408;;
atapi.sys;C:\WINDOWS\system32\drivers;Kontejner obsahuje nakažené objekty ;Přesunut.;
av.exe;c:\documents and settings\localservice\local settings\data aplikací;Pravděpodobně Trojan.Packed.633;Nevyléčitelný.Smazán.;
idyoflsm.sys;C:\Avenger;Trojan.NtRootKit.5303;Nevyléčitelný.Přesunut.;
Mv2PlayerPlus.exe;C:\Program Files\Mv2Player;Trojan.PWS.Banker.28836;Smazán.;
A0027015.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245\A0027015.sys;BackDoor.Bulknet.408;;
A0027015.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0027016.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245\A0027016.sys;BackDoor.Bulknet.408;;
A0027016.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0027027.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245\A0027027.sys;BackDoor.Bulknet.408;;
A0027027.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0027028.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245\A0027028.sys;BackDoor.Bulknet.408;;
A0027028.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP245;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0027044.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0027044.sys;BackDoor.Bulknet.408;;
A0027044.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0027045.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0027045.sys;BackDoor.Bulknet.408;;
A0027045.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028047.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028047.sys;BackDoor.Bulknet.408;;
A0028047.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028048.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028048.sys;BackDoor.Bulknet.408;;
A0028048.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028062.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028062.sys;BackDoor.Bulknet.408;;
A0028062.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028063.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028063.sys;BackDoor.Bulknet.408;;
A0028063.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028074.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028074.sys;BackDoor.Bulknet.408;;
A0028074.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028075.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028075.sys;BackDoor.Bulknet.408;;
A0028075.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028085.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028085.sys;BackDoor.Bulknet.408;;
A0028085.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028086.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246\A0028086.sys;BackDoor.Bulknet.408;;
A0028086.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP246;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028099.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP247\A0028099.sys;BackDoor.Bulknet.408;;
A0028099.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP247;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028100.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP247\A0028100.sys;BackDoor.Bulknet.408;;
A0028100.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP247;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028114.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP248\A0028114.sys;BackDoor.Bulknet.408;;
A0028114.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP248;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028115.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP248\A0028115.sys;BackDoor.Bulknet.408;;
A0028115.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP248;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028129.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249\A0028129.sys;BackDoor.Bulknet.408;;
A0028129.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028130.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249\A0028130.sys;BackDoor.Bulknet.408;;
A0028130.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028139.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249\A0028139.sys;BackDoor.Bulknet.408;;
A0028139.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028140.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249\A0028140.sys;BackDoor.Bulknet.408;;
A0028140.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP249;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028156.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028156.sys;BackDoor.Bulknet.408;;
A0028156.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028157.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028157.sys;BackDoor.Bulknet.408;;
A0028157.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028167.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028167.sys;BackDoor.Bulknet.408;;
A0028167.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028168.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028168.sys;BackDoor.Bulknet.408;;
A0028168.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028178.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028178.sys;BackDoor.Bulknet.408;;
A0028178.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028179.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250\A0028179.sys;BackDoor.Bulknet.408;;
A0028179.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP250;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028195.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP251\A0028195.sys;BackDoor.Bulknet.408;;
A0028195.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP251;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028196.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP251\A0028196.sys;BackDoor.Bulknet.408;;
A0028196.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP251;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028210.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252\A0028210.sys;BackDoor.Bulknet.408;;
A0028210.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028211.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252\A0028211.sys;BackDoor.Bulknet.408;;
A0028211.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028220.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252\A0028220.sys;BackDoor.Bulknet.408;;
A0028220.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028221.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252\A0028221.sys;BackDoor.Bulknet.408;;
A0028221.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP252;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028235.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP253\A0028235.sys;BackDoor.Bulknet.408;;
A0028235.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP253;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028236.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP253\A0028236.sys;BackDoor.Bulknet.408;;
A0028236.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP253;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028250.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP254\A0028250.sys;BackDoor.Bulknet.408;;
A0028250.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP254;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028251.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP254\A0028251.sys;BackDoor.Bulknet.408;;
A0028251.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP254;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028265.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028265.sys;BackDoor.Bulknet.408;;
A0028265.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028266.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028266.sys;BackDoor.Bulknet.408;;
A0028266.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028276.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028276.sys;BackDoor.Bulknet.408;;
A0028276.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028277.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028277.sys;BackDoor.Bulknet.408;;
A0028277.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028288.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028288.sys;BackDoor.Bulknet.408;;
A0028288.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028289.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255\A0028289.sys;BackDoor.Bulknet.408;;
A0028289.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP255;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028302.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0028302.sys;BackDoor.Bulknet.408;;
A0028302.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028303.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0028303.sys;BackDoor.Bulknet.408;;
A0028303.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028312.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0028312.sys;BackDoor.Bulknet.408;;
A0028312.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0028313.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0028313.sys;BackDoor.Bulknet.408;;
A0028313.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0029314.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0029314.sys;BackDoor.Bulknet.408;;
A0029314.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0029315.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0029315.sys;BackDoor.Bulknet.408;;
A0029315.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0029325.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0029325.sys;BackDoor.Bulknet.408;;
A0029325.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0029326.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0029326.sys;BackDoor.Bulknet.408;;
A0029326.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030326.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0030326.sys;BackDoor.Bulknet.408;;
A0030326.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030327.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256\A0030327.sys;BackDoor.Bulknet.408;;
A0030327.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP256;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030341.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP257\A0030341.sys;BackDoor.Bulknet.408;;
A0030341.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP257;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030342.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP257\A0030342.sys;BackDoor.Bulknet.408;;
A0030342.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP257;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030370.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030370.sys;BackDoor.Bulknet.408;;
A0030370.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030371.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030371.sys;BackDoor.Bulknet.408;;
A0030371.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030391.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030391.sys;BackDoor.Bulknet.408;;
A0030391.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030392.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030392.sys;BackDoor.Bulknet.408;;
A0030392.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030402.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030402.sys;BackDoor.Bulknet.408;;
A0030402.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030403.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030403.sys;BackDoor.Bulknet.408;;
A0030403.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030413.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030413.sys;BackDoor.Bulknet.408;;
A0030413.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030414.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258\A0030414.sys;BackDoor.Bulknet.408;;
A0030414.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP258;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030433.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP259\A0030433.sys;BackDoor.Bulknet.408;;
A0030433.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP259;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030434.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP259\A0030434.sys;BackDoor.Bulknet.408;;
A0030434.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP259;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030450.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260\A0030450.sys;BackDoor.Bulknet.408;;
A0030450.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030451.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260\A0030451.sys;BackDoor.Bulknet.408;;
A0030451.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030459.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260\A0030459.sys;BackDoor.Bulknet.408;;
A0030459.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030460.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260\A0030460.sys;BackDoor.Bulknet.408;;
A0030460.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP260;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030481.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP261\A0030481.sys;BackDoor.Bulknet.408;;
A0030481.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP261;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030482.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP261\A0030482.sys;BackDoor.Bulknet.408;;
A0030482.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP261;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030495.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030495.sys;BackDoor.Bulknet.408;;
A0030495.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030496.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030496.sys;BackDoor.Bulknet.408;;
A0030496.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030504.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030504.sys;BackDoor.Bulknet.408;;
A0030504.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030505.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030505.sys;BackDoor.Bulknet.408;;
A0030505.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030519.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030519.sys;BackDoor.Bulknet.408;;
A0030519.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030520.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262\A0030520.sys;BackDoor.Bulknet.408;;
A0030520.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP262;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030540.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP263\A0030540.sys;BackDoor.Bulknet.408;;
A0030540.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP263;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030541.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP263\A0030541.sys;BackDoor.Bulknet.408;;
A0030541.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP263;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030558.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP264\A0030558.sys;BackDoor.Bulknet.408;;
A0030558.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP264;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030559.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP264\A0030559.sys;BackDoor.Bulknet.408;;
A0030559.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP264;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030577.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP265\A0030577.sys;BackDoor.Bulknet.408;;
A0030577.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP265;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030578.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP265\A0030578.sys;BackDoor.Bulknet.408;;
A0030578.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP265;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030594.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030594.sys;BackDoor.Bulknet.408;;
A0030594.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030595.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030595.sys;BackDoor.Bulknet.408;;
A0030595.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030605.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030605.sys;BackDoor.Bulknet.408;;
A0030605.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030606.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030606.sys;BackDoor.Bulknet.408;;
A0030606.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030617.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030617.sys;BackDoor.Bulknet.408;;
A0030617.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030618.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030618.sys;BackDoor.Bulknet.408;;
A0030618.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030657.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030657.sys;BackDoor.Bulknet.408;;
A0030657.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030658.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030658.sys;BackDoor.Bulknet.408;;
A0030658.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030669.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030669.sys;BackDoor.Bulknet.408;;
A0030669.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030670.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030670.sys;BackDoor.Bulknet.408;;
A0030670.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030681.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030681.sys;BackDoor.Bulknet.408;;
A0030681.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030682.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266\A0030682.sys;BackDoor.Bulknet.408;;
A0030682.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP266;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030697.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0030697.sys;BackDoor.Bulknet.408;;
A0030697.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0030698.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0030698.sys;BackDoor.Bulknet.408;;
A0030698.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0031699.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0031699.sys;BackDoor.Bulknet.408;;
A0031699.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0031700.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0031700.sys;BackDoor.Bulknet.408;;
A0031700.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0031710.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0031710.sys;BackDoor.Bulknet.408;;
A0031710.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0031711.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0031711.sys;BackDoor.Bulknet.408;;
A0031711.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032712.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032712.sys;BackDoor.Bulknet.408;;
A0032712.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032713.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032713.sys;BackDoor.Bulknet.408;;
A0032713.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032723.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032723.sys;BackDoor.Bulknet.408;;
A0032723.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032724.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032724.sys;BackDoor.Bulknet.408;;
A0032724.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032735.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032735.sys;BackDoor.Bulknet.408;;
A0032735.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032736.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267\A0032736.sys;BackDoor.Bulknet.408;;
A0032736.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP267;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032754.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032754.sys;BackDoor.Bulknet.408;;
A0032754.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032755.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032755.sys;BackDoor.Bulknet.408;;
A0032755.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032766.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032766.sys;BackDoor.Bulknet.408;;
A0032766.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032767.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032767.sys;BackDoor.Bulknet.408;;
A0032767.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032780.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032780.sys;BackDoor.Bulknet.408;;
A0032780.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032781.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268\A0032781.sys;BackDoor.Bulknet.408;;
A0032781.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP268;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032805.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032805.sys;BackDoor.Bulknet.408;;
A0032805.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032806.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032806.sys;BackDoor.Bulknet.408;;
A0032806.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032817.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032817.sys;BackDoor.Bulknet.408;;
A0032817.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032818.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032818.sys;BackDoor.Bulknet.408;;
A0032818.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032835.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032835.sys;BackDoor.Bulknet.408;;
A0032835.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032836.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032836.sys;BackDoor.Bulknet.408;;
A0032836.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032846.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032846.sys;BackDoor.Bulknet.408;;
A0032846.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032847.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269\A0032847.sys;BackDoor.Bulknet.408;;
A0032847.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP269;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032864.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270\A0032864.sys;BackDoor.Bulknet.408;;
A0032864.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032865.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270\A0032865.sys;BackDoor.Bulknet.408;;
A0032865.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032875.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270\A0032875.sys;BackDoor.Bulknet.408;;
A0032875.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032876.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270\A0032876.sys;BackDoor.Bulknet.408;;
A0032876.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP270;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032897.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0032897.sys;BackDoor.Bulknet.408;;
A0032897.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0032898.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0032898.sys;BackDoor.Bulknet.408;;
A0032898.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033897.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0033897.sys;BackDoor.Bulknet.408;;
A0033897.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033898.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0033898.sys;BackDoor.Bulknet.408;;
A0033898.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033927.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0033927.sys;BackDoor.Bulknet.408;;
A0033927.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033928.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271\A0033928.sys;BackDoor.Bulknet.408;;
A0033928.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP271;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033942.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033942.sys;BackDoor.Bulknet.408;;
A0033942.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033943.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033943.sys;BackDoor.Bulknet.408;;
A0033943.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033964.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033964.sys;BackDoor.Bulknet.408;;
A0033964.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033965.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033965.sys;BackDoor.Bulknet.408;;
A0033965.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033997.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033997.sys;BackDoor.Bulknet.408;;
A0033997.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0033998.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272\A0033998.sys;BackDoor.Bulknet.408;;
A0033998.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP272;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034017.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034017.sys;BackDoor.Bulknet.408;;
A0034017.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034018.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034018.sys;BackDoor.Bulknet.408;;
A0034018.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034032.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034032.sys;BackDoor.Bulknet.408;;
A0034032.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034033.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034033.sys;BackDoor.Bulknet.408;;
A0034033.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034043.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034043.sys;BackDoor.Bulknet.408;;
A0034043.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034044.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034044.sys;BackDoor.Bulknet.408;;
A0034044.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034056.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034056.sys;BackDoor.Bulknet.408;;
A0034056.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0034057.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273\A0034057.sys;BackDoor.Bulknet.408;;
A0034057.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP273;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035081.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274\A0035081.sys;BackDoor.Bulknet.408;;
A0035081.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035082.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274\A0035082.sys;BackDoor.Bulknet.408;;
A0035082.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035102.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274\A0035102.sys;BackDoor.Bulknet.408;;
A0035102.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035103.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274\A0035103.sys;BackDoor.Bulknet.408;;
A0035103.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP274;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035121.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0035121.sys;BackDoor.Bulknet.408;;
A0035121.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0035122.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0035122.sys;BackDoor.Bulknet.408;;
A0035122.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036123.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0036123.sys;BackDoor.Bulknet.408;;
A0036123.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036124.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0036124.sys;BackDoor.Bulknet.408;;
A0036124.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036134.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0036134.sys;BackDoor.Bulknet.408;;
A0036134.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036135.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275\A0036135.sys;BackDoor.Bulknet.408;;
A0036135.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP275;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036149.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP276\A0036149.sys;BackDoor.Bulknet.408;;
A0036149.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP276;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036150.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP276\A0036150.sys;BackDoor.Bulknet.408;;
A0036150.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP276;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036186.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036186.sys;BackDoor.Bulknet.408;;
A0036186.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036187.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036187.sys;BackDoor.Bulknet.408;;
A0036187.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036201.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036201.sys;BackDoor.Bulknet.408;;
A0036201.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036202.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036202.sys;BackDoor.Bulknet.408;;
A0036202.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036214.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036214.sys;BackDoor.Bulknet.408;;
A0036214.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036215.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036215.sys;BackDoor.Bulknet.408;;
A0036215.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036225.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036225.sys;BackDoor.Bulknet.408;;
A0036225.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036226.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277\A0036226.sys;BackDoor.Bulknet.408;;
A0036226.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP277;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036246.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP278\A0036246.sys;BackDoor.Bulknet.408;;
A0036246.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP278;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036247.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP278\A0036247.sys;BackDoor.Bulknet.408;;
A0036247.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP278;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036265.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP279\A0036265.sys;BackDoor.Bulknet.408;;
A0036265.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP279;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036266.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP279\A0036266.sys;BackDoor.Bulknet.408;;
A0036266.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP279;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036282.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280\A0036282.sys;BackDoor.Bulknet.408;;
A0036282.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036283.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280\A0036283.sys;BackDoor.Bulknet.408;;
A0036283.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036293.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280\A0036293.sys;BackDoor.Bulknet.408;;
A0036293.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036294.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280\A0036294.sys;BackDoor.Bulknet.408;;
A0036294.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP280;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036312.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036312.sys;BackDoor.Bulknet.408;;
A0036312.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036313.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036313.sys;BackDoor.Bulknet.408;;
A0036313.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036323.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036323.sys;BackDoor.Bulknet.408;;
A0036323.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036324.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036324.sys;BackDoor.Bulknet.408;;
A0036324.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036335.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036335.sys;BackDoor.Bulknet.408;;
A0036335.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036336.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281\A0036336.sys;BackDoor.Bulknet.408;;
A0036336.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP281;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036360.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283\A0036360.sys;BackDoor.Bulknet.408;;
A0036360.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036361.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283\A0036361.sys;BackDoor.Bulknet.408;;
A0036361.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036371.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283\A0036371.sys;BackDoor.Bulknet.408;;
A0036371.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036372.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283\A0036372.sys;BackDoor.Bulknet.408;;
A0036372.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP283;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036512.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036512.sys;BackDoor.Bulknet.408;;
A0036512.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036513.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036513.sys;BackDoor.Bulknet.408;;
A0036513.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036524.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036524.sys;BackDoor.Bulknet.408;;
A0036524.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036525.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036525.sys;BackDoor.Bulknet.408;;
A0036525.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036537.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036537.sys;BackDoor.Bulknet.408;;
A0036537.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036538.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036538.sys;BackDoor.Bulknet.408;;
A0036538.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036548.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036548.sys;BackDoor.Bulknet.408;;
A0036548.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036549.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036549.sys;BackDoor.Bulknet.408;;
A0036549.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036560.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036560.sys;BackDoor.Bulknet.408;;
A0036560.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036561.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285\A0036561.sys;BackDoor.Bulknet.408;;
A0036561.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP285;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036579.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286\A0036579.sys;BackDoor.Bulknet.408;;
A0036579.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036580.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286\A0036580.sys;BackDoor.Bulknet.408;;
A0036580.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036591.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286\A0036591.sys;BackDoor.Bulknet.408;;
A0036591.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036592.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286\A0036592.sys;BackDoor.Bulknet.408;;
A0036592.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP286;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036606.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP287\A0036606.sys;BackDoor.Bulknet.408;;
A0036606.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP287;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036607.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP287\A0036607.sys;BackDoor.Bulknet.408;;
A0036607.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP287;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036758.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP290\A0036758.sys;BackDoor.Bulknet.408;;
A0036758.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP290;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0036759.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP290\A0036759.sys;BackDoor.Bulknet.408;;
A0036759.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP290;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0039950.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.Packed.2362;Nevyléčitelný.Přesunut.;
A0039951.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.Inject.7433;Smazán.;
A0039953.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.Fakealert.8499;Smazán.;
A0039954.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;BackDoor.Siggen.4115;Smazán.;
A0042036.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.Inject.7433;Smazán.;
A0042037.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292\A0042037.sys;BackDoor.Bulknet.408;;
A0042037.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0042038.sys\data001;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292\A0042038.sys;BackDoor.Bulknet.408;;
A0042038.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Kontejner obsahuje nakažené objekty ;Přesunut.;
A0042039.sys;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.NtRootKit.5303;Nevyléčitelný.Přesunut.;
A0042040.exe;C:\System Volume Information\_restore{95A1A99F-660B-4BDA-82F3-580A9361349F}\RP292;Trojan.PWS.Banker.28836;Smazán.;
Kill_P.exe;C:\UsbFix\Tools;Tool.Prockill;;
Polaris_CustomRUU.exe;I:\HTC\ROM\Rom 6.5\Radio rom;Trojan.StartPage.22094;Smazán.;
UsbFix.exe\Tools\Kill_P.exe;I:\RSIT\UsbFix.exe;Tool.Prockill;;
UsbFix.exe;I:\RSIT;V archivu jsou infikované objekty;Přesunut.;
Installer.exe;I:\_OTM\MovedFiles\01282010_182152\C_WINDOWS;Trojan.Packed.2362;Nevyléčitelný.Přesunut.;
av_md.exe;I:\_OTM\MovedFiles\01282010_182152\C_WINDOWS\system32;Trojan.Inject.7433;Smazán.;
09605626.exe;I:\_OTM\MovedFiles\01282010_182152\C_DOCUME~1\ALLUSE~1\DATAAP~1\09605626;Trojan.Fakealert.8499;Smazán.;
algqeh32.exe;I:\_OTM\MovedFiles\01282010_182152\C_Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění;BackDoor.Siggen.4115;Smazán.;

Re: XP Antispyware 2010 vyskakuje v mnoha oknech a blokuje PC

Napsal: 28 led 2010 23:49
od petrsulak
po restartu pc nenaběhne a pokaždé se znovu restartuje
Všechny časy jsou v UTC+01:00
Stránka 1 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz