Prosím o kontrolu logu Vyřešeno

[Bretal]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Service HidServ stopped successfully!
Service HidServ deleted successfully!
File File not found not found.
Prefs.js: "Winamp Search" removed from browser.search.defaultenginename
Prefs.js: {3112ca9c-de6d-4884-a869-9855de68056c}:7.1.20101113Wb1 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 removed from extensions.enabledItems
Prefs.js: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16 removed from extensions.enabledItems
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Extensions folder moved successfully.
Folder C:\Documents and Settings\Breta\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\ not found.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\META-INF folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\lib folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\custombuttons folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\contenthandling folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\components folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\searchplugins folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\logs folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\datastore folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-21-Sep-2011-18-18-20-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-08-Nov-2011-07-44-44-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-15-Dec-2011-09-59-56-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-10-Nov-2011-14-02-00-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-30-Oct-2011-13-56-09-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-16-Oct-2011-15-54-57-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-11-Jul-2011-14-05-09-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-09-Jan-2012-09-38-38-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-25-Nov-2011-15-15-49-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-14-Oct-2011-19-21-11-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-01-Jul-2011-10-30-03-GMT folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\toolbar@ask.com folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\cs@dictionaries.addons.mozilla.org\dictionaries folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions\cs@dictionaries.addons.mozilla.org folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\extensions folder moved successfully.
C:\Documents and Settings\Breta\Data aplikací\Mozilla\Firefox\Profiles\cbnlzhx3.default\searchplugins\winamp-search.xml moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\locale folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions folder moved successfully.
Folder C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
127.0.0.1 localhost removed from HOSTS file successfully
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
C:\WINDOWS\system32\perfh009.dat moved successfully.
C:\WINDOWS\system32\perfh005.dat moved successfully.
C:\WINDOWS\system32\perfc005.dat moved successfully.
C:\WINDOWS\system32\perfc009.dat moved successfully.
File C:\WINDOWS\System32\perfh009.dat not found.
File C:\WINDOWS\System32\perfh005.dat not found.
C:\WINDOWS\system32\perfi009.dat moved successfully.
C:\WINDOWS\system32\perfi005.dat moved successfully.
File C:\WINDOWS\System32\perfc005.dat not found.
File C:\WINDOWS\System32\perfc009.dat not found.
C:\WINDOWS\system32\perfd005.dat moved successfully.
C:\WINDOWS\system32\perfd009.dat moved successfully.
C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP\WiseCustomCalla.dll deleted successfully.
C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP folder deleted successfully.
C:\Documents and Settings\Breta\Data aplikací\fspro2_1.tmp deleted successfully.
C:\WINDOWS\System32\Security.dll moved successfully.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.31.0 log created on 02102012_123524

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Reklama]

[Bretal]

omlouvám se, ale měl jsem dost hektický týden v práci na PC už nezbýval čas, takže pokračuju až nyní. Výše je log z OTL.

[Bretal]

program disk1 - vůbec nevím co to je - nic to nedělá, hledá v čem to spustit - nevím
OTVREG - dtto - taky vůbec netuším - je tam jediný soubor, který má podle hlášení 0kB a nic nedělá - ghledá v čem spustit

určitě jsem ani jeden z programů vědomně neinstaloval ani je nenahrával atp.

[Bretal]

jak dlouho s ety soubory ve virus totalu asi testují - testuju ten první už víc jak hodinu a furt nic

[jaro3]

Zkus programy najít v přidat/odebrat programy a odinstaluj , pokud nenajdeš , smaž tyto složky:

C:\Program Files\disk1
C:\Documents and Settings\Breta\Data aplikací\OTVREG

Toto otestuj na Virustotal
C:\WINDOWS\System32\drivers\sptd1549.sys
C:\WINDOWS\Brownie.ini
C:\WINDOWS\BRVIDEO.INI
C:\WINDOWS\BRDIAG.INI
je tam nějaký nález , testoval jsi je?

[Bretal]

momentálně se už asi 2. hodinu testuje (lépe řečeno načítá - červená čárka načítání - stále žádná změna - furt stejná) tento soubor: sptd1549.sys

k těm ostatním jsem se zatím nedostal - nevím jak dlouho ta kontrola má trvat - jestli to radši nespustit znova - píše to - nezavírat, dokud neskončím (nenahraju), tak nezavíram (píše to anglicky)

[Bretal]

sptd1549 se prostě nechtěl načíst, takže jsem začal testovat ty další. tady je první - bez nákazy:

https://www.virustotal.com/file/4111a94 ... 328882912/

[Bretal]

https://www.virustotal.com/file/fa458dc ... 328883172/

taky 0

[Bretal]

poslední - taky 0

https://www.virustotal.com/file/cec7861 ... 328883276/

[Bretal]

ty programy v přidat/odpbrat nejsou, takže je smažu sám (?)

[jaro3]

jo , smaž , a jak to vypadá?

[Bretal]

no, popravdě mám pořád pocit, že to není ten fičák co dřív, ale lepší to je určitě. Díky za pomoc. co všechny ty nainstalované programy - mám něco odstranit nebo tak?