...napřed jsem musel zjistit, že naše dopisování pokračuje na 2.straně (
posting.php?mode=reply&f=70&t=51249#). Pak se dostat do postiženého compu - to je v ponděl trochu problém (stále jsou některé úlohy paradoxně důležitější)...
Pak provedl - log přikládám.
Co se týká chování PC - vypadá že je klid. provoz na síti koresponduje s předpokladem podle práce na PC, okolním PC přes noc také nepřišly žádné "výhodné nabídky" v PDF.
... jak to vypadá?....
Jirka
************************************************************
All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Ask.com" removed from browser.search.selectedEngine
Prefs.js:
toolbar@ask.com:3.4.4.118 removed from extensions.enabledItems
Prefs.js: "http://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=DVSV5&o=15012&locale=en_US&q=" removed from keyword.URL
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\searchplugins folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\logs folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\datastore folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-04-Mar-2010-08-31-31-GMT folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-15-Feb-2010-06-09-55-GMT folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\extensions\toolbar@ask.com folder moved successfully.
C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\00ie86ms.default\searchplugins\askcom.xml moved successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:smrgdf C:\Program Files\iolo\System Mechanic 6\ deleted successfully.
========== FILES ==========
C:\Windows\002865_.tmp moved successfully.
C:\Windows\SET25.tmp moved successfully.
C:\Windows\SET3.tmp moved successfully.
C:\Windows\SET4.tmp moved successfully.
C:\Windows\SET8.tmp moved successfully.
C:\Windows\System32\CONFIG.TMP moved successfully.
C:\Windows\System32\SET48F5.tmp moved successfully.
C:\Windows\System32\SET48F9.tmp moved successfully.
C:\Windows\System32\SET48FA.tmp moved successfully.
C:\Windows\System32\SET4901.tmp moved successfully.
C:\Windows\System32\SET494B.tmp moved successfully.
C:\WINDOWS\System32\drivers\OLDB08.tmp moved successfully.
File\Folder C:\Recycler not found.
File\Folder C:\$RECYCLE.BIN not found.
File\Folder C:\Documents and Settings\NetworkService\Data aplikací\rbuwzv.dat not found.
C:\Documents and Settings\admin\Plocha\find.bat moved successfully.
C:\Windows\tasks\SA.DAT moved successfully.
========== REGISTRY ==========
========== COMMANDS ==========
[EMPTYTEMP]
User: admin
->Temp folder emptied: 6359154 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 67466860 bytes
->FireFox cache emptied: 80132979 bytes
->Flash cache emptied: 649 bytes
User: All Users
User: CURRENT_USER
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 897 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 147,00 mb
[EMPTYFLASH]
User: admin
->Flash cache emptied: 0 bytes
User: All Users
User: CURRENT_USER
User: Default User
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.1.37.0 log created on 03152010_123156
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
*********************************************************************************************
