Prosím o preventivní kontrolu logu Vyřešeno

[jaro3]

Stáhni si program OTM (by OldTimer)
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:
Poznámka: Nepoužij k označení funkci VYBRAT VŠE

Kód: Vybrat vše

:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Documents and Settings\ADMIN\Dokumenty\ICQ\Mailer2.exe

:Commands
[purity]
[emptytemp]
[start explorer]
[CLEARALLRESTOREPOINTS]
[CREATERESTOREPOINT]
[Reboot]


- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMoveIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.

[Reklama]

[Nekac1]

Složka C:\System Volume Information\Microsoft tam opět nebyla

Log z aswMBR:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-28 01:48:39
-----------------------------
01:48:39.812 OS Version: Windows 5.1.2600 Service Pack 3
01:48:39.812 Number of processors: 2 586 0x604
01:48:39.812 ComputerName: FILIP UserName: ADMIN
01:48:40.687 Initialize success
01:48:40.781 AVAST engine defs: 12082700
01:48:44.234 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e
01:48:44.234 Disk 0 Vendor: WDC_WD6400AACS-00G8B1 05.04C05 Size: 610480MB BusType: 3
01:48:44.250 Disk 0 MBR read successfully
01:48:44.265 Disk 0 MBR scan
01:48:44.265 Disk 0 Windows XP default MBR code
01:48:44.265 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 60000 MB offset 63
01:48:44.296 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 350394 MB offset 122881185
01:48:44.312 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 200082 MB offset 840488670
01:48:44.328 Disk 0 scanning sectors +1250258625
01:48:44.453 Disk 0 scanning C:\windows\system32\drivers
01:49:06.828 Service scanning
01:49:14.250 Service sptd C:\windows\System32\Drivers\sptd.sys **LOCKED** 32
01:49:17.328 Modules scanning
01:49:44.765 Disk 0 trace - called modules:
01:49:44.796 ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys spug.sys hal.dll >>UNKNOWN [0x8a5ff938]<<
01:49:44.812 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a52cab8]
01:49:44.812 3 CLASSPNP.SYS[f7647fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-e[0x8a59fd98]
01:49:45.562 AVAST engine scan C:\windows
01:50:08.171 AVAST engine scan C:\windows\system32
01:58:42.250 AVAST engine scan C:\windows\system32\drivers
01:59:38.609 AVAST engine scan C:\Documents and Settings\ADMIN
02:15:58.984 File: C:\Documents and Settings\ADMIN\Dokumenty\ICQ\Mailer2.exe **INFECTED** Win32:Malware-gen
02:19:49.859 AVAST engine scan C:\Documents and Settings\All Users
02:33:25.000 Scan finished successfully
02:33:43.453 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\ADMIN\Plocha\MBR.dat"
02:33:43.468 The log file has been saved successfully to "C:\Documents and Settings\ADMIN\Plocha\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-29 12:20:21
-----------------------------
12:20:21.921 OS Version: Windows 5.1.2600 Service Pack 3
12:20:21.921 Number of processors: 2 586 0x604
12:20:21.921 ComputerName: FILIP UserName: ADMIN
12:20:22.250 Initialize success
12:20:22.343 AVAST engine defs: 12082900
12:20:23.734 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e
12:20:23.734 Disk 0 Vendor: WDC_WD6400AACS-00G8B1 05.04C05 Size: 610480MB BusType: 3
12:20:23.750 Disk 0 MBR read successfully
12:20:23.750 Disk 0 MBR scan
12:20:23.765 Disk 0 Windows XP default MBR code
12:20:23.765 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 60000 MB offset 63
12:20:23.781 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 350394 MB offset 122881185
12:20:23.796 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 200082 MB offset 840488670
12:20:23.812 Disk 0 scanning sectors +1250258625
12:20:23.859 Disk 0 scanning C:\windows\system32\drivers
12:20:33.500 Service scanning
12:20:41.468 Service sptd C:\windows\System32\Drivers\sptd.sys **LOCKED** 32
12:20:44.593 Modules scanning
12:20:48.765 Disk 0 trace - called modules:
12:20:48.796 ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys spgj.sys hal.dll >>UNKNOWN [0x8a5ff938]<<
12:20:48.796 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a59bab8]
12:20:48.812 3 CLASSPNP.SYS[f7647fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-e[0x8a593b00]
12:20:49.078 AVAST engine scan C:\windows
12:20:54.812 AVAST engine scan C:\windows\system32
12:23:23.687 AVAST engine scan C:\windows\system32\drivers
12:23:39.078 AVAST engine scan C:\Documents and Settings\ADMIN
12:33:42.031 File: C:\Documents and Settings\ADMIN\Dokumenty\ICQ\Mailer2.exe **INFECTED** Win32:Malware-gen
12:35:51.921 AVAST engine scan C:\Documents and Settings\All Users
12:43:44.562 Scan finished successfully
12:44:32.796 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\ADMIN\Plocha\MBR.dat"
12:44:32.828 The log file has been saved successfully to "C:\Documents and Settings\ADMIN\Plocha\aswMBR.txt"




Soubory file.txt:
oba stejne

Svazek v jednotce C je SYSTEM.
Sériové číslo svazku je E444-E769.


Log z OTM

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File/Folder C:\WINDOWS\System32\*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\system32\DUMP*.tmp not found.
c:\windows\Tasks\avast! Emergency Update.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
c:\windows\Tasks\StartTurnaje.job moved successfully.
File/Folder C:\*.tmp not found.
File/Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File/Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
C:\Documents and Settings\ADMIN\Dokumenty\ICQ\Mailer2.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: ADMIN
->Temp folder emptied: 589701 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 60806811 bytes
->Flash cache emptied: 562 bytes

User: All Users

User: boinc_master
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 67470 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 59,00 mb


Restore point Set: OTM Restore Point
Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.21.0 log created on 08292012_124858

Files moved on Reboot...

Registry entries deleted on Reboot...

[jaro3]

Spusť OTM a klikni na "Clean Up!"

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[Nekac1]

Jakmile zapnu štít antiviru Avast tak je PC neuvěřitelně zasekané, téměř neschopné práce. Nevíš čím by to mohlo být? Mám přeinstalovat na jiný antivirus?

[jaro3]

Zkus Aviru
http://free-av.de/

Nejprve odinstaluj Avast tímhle:
Jak odinstalovat avast! za použití nástroje aswClear:
Stáhněte aswClear.exe
http://files.avast.com/files/eng/aswclear.exe

na vaší pracovní plochu
Spusťte jej
Pokud jste instalovali avast! do jiného než výchozího adresáře, nalistujte jej. (Poznámka: Buďte opatrní! Obsah adresáře, který vyberete, bude smazán!!!
Stiskněte SMAZAT
Restartujte počítač

[Nekac1]

Ok, zkusím, díky za pomoc, dávám fajfku.