Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:
Kód: Vybrat vše
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
IE - HKU\S-1-5-21-1023915045-4271176276-1453689397-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM32\blank.htm
IE - HKU\S-1-5-21-1023915045-4271176276-1453689397-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
[2011.07.11 20:50:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Roman a Magda\Data aplikací\Mozilla\Extensions
[2011.07.11 21:09:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Roman a Magda\Data aplikací\Mozilla\Firefox\Profiles\pz93f4pa.default\extensions
[2011.07.11 20:50:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1023915045-4271176276-1453689397-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\msdaipp - No CLSID value found
[2011.07.14 18:22:38 | 000,446,152 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.07.14 18:22:38 | 000,443,092 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011.07.14 18:22:38 | 000,085,224 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011.07.14 18:22:38 | 000,073,358 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.05.04 13:38:32 | 000,443,092 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2010.05.04 13:38:32 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2010.05.04 13:38:32 | 000,085,224 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2010.05.04 13:38:32 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2010.05.04 13:38:17 | 000,446,152 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2010.05.04 13:38:17 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2010.05.04 13:38:17 | 000,073,358 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2010.05.04 13:38:17 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Qoobox
C:\Documents and Settings\Roman a Magda\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\WINDOWS\System32\ezsidmv.dat
C:\WINDOWS\AMove.exe
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" =-
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[start explorer]
[Reboot]
Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.