Pomalé načítání stránek,prosím o kontrolu logu.

[Hooker]

Zdravím Všechny na foru a prosím o kontrolu logu: Při potřebě provést restart v momentě "odhlašuji", probíhalo odhlašování asi 20min a musel jsem comp natvrdo vypnout síťovým vypínačem. Start proběhl normálně. Děkuji za ochotu.
Díky
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2011-09-08 22:50:17
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 53 GB (45%) free of 119 GB
Total RAM: 2047 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:50:38, on 8.9.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\wbem\unsecapp.exe
c:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jirka\Desktop\CLEAN\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: (no name) - {C9F97205-62A3-41F2-9F2C-D99392F882EB} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Advanced SystemCare 4] "C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-21-3770246164-1455068142-2756262975-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3770246164-1455068142-2756262975-1003\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'UpdatusUser')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\GetUrl.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://software.kuaiche.com
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

--
End of file - 6255 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.67, {987311C6-B504-4aa2-90BF-60CC49808D42}:2.2, {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.7, {89506680-e3f4-484c-a2c0-ed711d481eda}:0.9.5.7, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.11, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.2, {64161300-e22b-11db-8314-0800200c9a66}:0.9.6.1, {27A2FD41-CB23-4518-AB5C-C25BAFFDE531}:1.4.1, {7378B8C2-FC38-41b8-A8C9-875D1F5B0A24}:5.2.4.8, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.1, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {d5eeb813-935a-435d-b01e-b3a02f2cb408}:0.9.2, jsonview@brh.numbera.com:0.5, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3, {d47a9f51-8281-43fa-f450-f28ef8735e9a}:2.1.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, tineye@ideeinc.com:1.1, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.22, {2c088200-b973-11db-8314-0800200c9a66}:1.7.1"
prefs.js - "keyword.URL" - "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647]
"Description"=RealJukebox Netscape Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647]
"Description"=RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647]
"Description"=12.0.1.647
"Path"=c:\program files\real\realplayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsjsrealplayerplugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npDivxPlayerPlugin.dll
npLegitCheckPlugin.dll
npnul32.dll
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
nsIDivxPlayerPlugin.xpt
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\extensions\
beysim@beysim.net
DTToolbar@toolbarnet.com
jsonview@brh.numbera.com
smarterwiki@wikiatic(102).com
tineye@ideeinc.com
{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}(103)
{20a82645-c095-46ed-80e3-08825760534b}
{27A2FD41-CB23-4518-AB5C-C25BAFFDE531}
{2832ABCD-4444-1012-2D45-132D5447C445}
{2c088200-b973-11db-8314-0800200c9a66}
{35106bca-6c78-48c7-ac28-56df30b51d2a}
{37E4D8EA-8BDA-4831-8EA1-89053939A250}
{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}
{64161300-e22b-11db-8314-0800200c9a66}
{64161300-e22b-11db-8314-0800200c9a66}(194)
{7378B8C2-FC38-41b8-A8C9-875D1F5B0A24}
{89506680-e3f4-484c-a2c0-ed711d481eda}
{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
{987311C6-B504-4aa2-90BF-60CC49808D42}
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(195)
{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
{d47a9f51-8281-43fa-f450-f28ef8735e9a}
{d5eeb813-935a-435d-b01e-b3a02f2cb408}
{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}
{DDC359D1-844A-42a7-9AA1-88A850A938A8}
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\
4shared.xml
aviary.xml
bugmenot.xml
daemon-search.xml
datalife-engine-demo.xml
ddl-search-v2.xml
ddlspot.xml
downloadwarez.xml
filetubecom.xml
filmova-databaze-fdbcz.xml
infinitewarez.xml
kvaz-rapidshare-search.xml
rapidshare-google-arama.xml
search.xml
sfd.xml
warech.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-05-25 386776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2010-05-11 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C9F97205-62A3-41F2-9F2C-D99392F882EB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-12 6965792]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2007-12-21 1443072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"TkBellExe"=c:\program files\real\realplayer\update\realsched.exe [2011-05-25 273544]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-07-05 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"UIWatcher"=C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [2009-02-23 3508568]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"Advanced SystemCare 4"=C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe [2011-05-28 412560]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2010-11-16 422912]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.asv2"=asusasv2.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-08-24 10:38:11 ----A---- C:\Windows\system32\tzres.dll
2011-08-10 20:26:53 ----D---- C:\ProgramData\Apple Computer
2011-08-10 20:26:53 ----D---- C:\Program Files\QuickTime
2011-08-10 17:12:32 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-10 17:12:31 ----A---- C:\Windows\system32\jscript.dll
2011-08-10 17:12:31 ----A---- C:\Windows\system32\ieui.dll
2011-08-10 17:12:31 ----A---- C:\Windows\system32\iertutil.dll
2011-08-10 17:12:30 ----A---- C:\Windows\system32\wininet.dll
2011-08-10 17:12:30 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-10 17:12:30 ----A---- C:\Windows\system32\jscript9.dll
2011-08-10 17:12:29 ----A---- C:\Windows\system32\urlmon.dll
2011-08-10 17:12:29 ----A---- C:\Windows\system32\url.dll
2011-08-10 17:12:29 ----A---- C:\Windows\system32\ieframe.dll
2011-08-10 17:12:27 ----A---- C:\Windows\system32\mshtml.dll
2011-08-10 16:12:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 16:12:34 ----A---- C:\Windows\system32\winsrv.dll
2011-08-10 16:12:33 ----A---- C:\Windows\system32\xmllite.dll
2011-08-10 16:12:21 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-08-10 16:12:20 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-10 16:12:07 ----A---- C:\Windows\system32\drivers\tcpip.sys

======List of files/folders modified in the last 1 month======

2011-09-08 22:50:23 ----D---- C:\Windows\temp
2011-09-08 22:50:20 ----D---- C:\Program Files\Trend Micro
2011-09-08 22:50:17 ----D---- C:\rsit
2011-09-08 22:44:42 ----D---- C:\Windows\Prefetch
2011-09-08 04:29:12 ----D---- C:\Program Files\Mozilla Firefox
2011-09-08 04:21:04 ----SHD---- C:\System Volume Information
2011-09-07 08:31:03 ----D---- C:\Windows\winsxs
2011-09-07 08:31:02 ----D---- C:\Windows\system32\catroot
2011-09-05 16:59:26 ----D---- C:\ProgramData
2011-09-05 16:59:26 ----D---- C:\Program Files\Common Files\Adobe
2011-09-05 10:15:32 ----D---- C:\Users\Jirka\AppData\Roaming\Media Player Classic
2011-09-05 08:25:26 ----D---- C:\Windows\rescache
2011-09-05 08:14:09 ----D---- C:\Windows\inf
2011-09-05 08:14:09 ----AD---- C:\Windows\System32
2011-09-05 08:14:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-05 08:08:48 ----D---- C:\Windows
2011-09-03 13:23:26 ----RSD---- C:\Windows\assembly
2011-09-03 13:23:26 ----D---- C:\Windows\Microsoft.NET
2011-09-01 03:09:39 ----SHD---- C:\Windows\Installer
2011-08-25 04:50:04 ----D---- C:\Windows\system32\cs-CZ
2011-08-25 04:49:40 ----D---- C:\ProgramData\NVIDIA
2011-08-25 04:48:34 ----RD---- C:\Users
2011-08-25 04:48:26 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-25 04:46:21 ----D---- C:\Windows\system32\drivers
2011-08-23 22:16:21 ----D---- C:\Users\Jirka\AppData\Roaming\Skype
2011-08-23 20:59:02 ----D---- C:\Users\Jirka\AppData\Roaming\skypePM
2011-08-12 16:11:20 ----RD---- C:\Program Files
2011-08-12 16:04:01 ----D---- C:\Windows\system32\Tasks
2011-08-10 20:40:51 ----D---- C:\Windows\system32\catroot2
2011-08-10 20:37:46 ----D---- C:\Windows\system32\migration
2011-08-10 20:37:45 ----D---- C:\Program Files\Windows Mail
2011-08-10 20:37:45 ----D---- C:\Program Files\Internet Explorer
2011-08-10 17:10:26 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-05-10 691696]
R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 EIO;EIO; \??\C:\Windows\system32\drivers\EIO.sys [2006-06-14 12288]
R1 epfwtdi;epfwtdi; C:\Windows\system32\DRIVERS\epfwtdi.sys [2007-12-21 53768]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2007-12-21 71176]
R3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-04-20 674048]
R3 ASUSVRC;ASUSTeK Virtual Capture Device; C:\Windows\system32\DRIVERS\AsusVRC.sys [2007-01-29 18432]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2007-12-21 30728]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-12 2342688]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2011-05-21 10589800]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
S3 a3dpidhq;a3dpidhq; C:\Windows\system32\drivers\a3dpidhq.sys []
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-07-25 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-07-25 25512]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-06-15 47360]
S3 se3ebus;Sony Ericsson Device 062 (WDM); C:\Windows\system32\DRIVERS\se3ebus.sys [2007-04-10 83080]
S3 se3emdfl;Sony Ericsson Device 062 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\se3emdfl.sys [2007-04-10 15112]
S3 se3emdm;Sony Ericsson Device 062 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\se3emdm.sys [2007-04-10 108552]
S3 se3emgmt;Sony Ericsson Device 062 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\se3emgmt.sys [2007-04-10 100360]
S3 se3eobex;Sony Ericsson Device 062 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\se3eobex.sys [2007-04-10 98568]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Serial emulation modem driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-04-11 27648]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-05-21 615528]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2007-12-21 19200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

[Mc_Murphy]

Zdravím.

Předpokládám, že ten ESET máš legální = zakoupená licence?!
Jako první v nabídce Přidat nebo odebrat programy odinstaluj DAEMON Tools Toolbar.

Pro začátek stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Zaškrtni okénko Pro všechny uživatele.
• Zaškrtni okénko Kontrola na havěť "LOP".
• Zaškrtni okénko Kontrola na havěť "Purity".
• Stáři souborů změň z 30 dnů na 7 dnů.
• Do spodního okénka Vlastní skenování/opravy vlož tento skript:

Kód: Vybrat vše

safebootminimal 
safebootnetwork
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
/md5start
scecli.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
atapi.sys
cdrom.sys 
ndis.sys
ntfs.sys
tcpip.sys
%SystemDrive%\PhysicalMBR.bin
/md5stop
C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X 
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav 
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
*crack* /s
*keygen* /s
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

• Klikni na tlačítko Prohledat.
• Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.

[Hooker]

Jediné co vím o ESET je,že jsem platil za tento program při reinstalu VISTY, protože mi vyhodili AVG a nainstalovali toto. Je tam asi 1 a 1/2 roku a nebyl problem. Log OTL.txt je příliš dlouhý tak nevím co s tím udělat, zkusil jsemho dát na ULOŽto

http://www.ulozto.cz/10221697/otl-txt

OTL Extras logfile created on: 9.9.2011 16:51:46 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\Jirka\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 61,80% Memory free
4,24 Gb Paging File | 3,05 Gb Available in Paging File | 71,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 49,58 Gb Free Space | 42,58% Space Free | Partition Type: NTFS
Drive D: | 116,44 Gb Total Space | 46,90 Gb Free Space | 40,28% Space Free | Partition Type: NTFS
Drive F: | 967,73 Mb Total Space | 97,72 Mb Free Space | 10,10% Space Free | Partition Type: FAT

Computer Name: JIRKA-PC | User Name: Jirka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
http [open] -- Reg Error: Value error.
https [open] -- Reg Error: Value error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 1
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" = C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3 -- (Trend Media Corporation Limited)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{013E4938-7F91-44D1-A5D8-D0117B4AC001}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{02911373-DF6E-41A3-B161-6520015D5EB0}" = lport=137 | protocol=17 | dir=in | app=system |
"{067D4293-08B4-42AC-B622-BBBB9FE12A75}" = lport=139 | protocol=6 | dir=in | app=system |
"{2B84C062-B458-4232-ABC8-A9BAEBDD6A7E}" = rport=139 | protocol=6 | dir=out | app=system |
"{4272EDD2-77FD-41E3-87ED-CFBA0DCAF707}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{6CAE4CC6-87DE-49A0-B724-2EF31A2E4798}" = rport=445 | protocol=6 | dir=out | app=system |
"{711672AD-1A76-4701-891B-3A817240585D}" = rport=137 | protocol=17 | dir=out | app=system |
"{7D73A989-DDFF-4E4C-B64A-6F5C575A63E9}" = lport=138 | protocol=17 | dir=in | app=system |
"{9163D6A7-9039-43B6-B4AA-CF1A6277ADAF}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{A1570CAF-9D24-475C-A0AD-A4AB194F89A4}" = lport=445 | protocol=6 | dir=in | app=system |
"{CF3DADBF-7C2E-48A8-B27E-3C5A3EC5616F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DDE6B10F-CF7D-4C71-86FC-AFC4686F0CD6}" = rport=138 | protocol=17 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{112A1BD0-0861-4CAA-B359-74A3CF02A17C}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{28132401-AECF-43EA-AAE3-9A46EA3BDA81}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{39811362-AFD9-4026-B997-D87F2C14DE19}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{4A3C44EE-ADFD-4FA3-B1A6-40C4C5CBD3DD}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{63260BC6-5FF6-4554-8041-E05432DECA70}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{6D3F99B5-5573-471E-B221-825DBFFC69D7}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8CEE54CB-4D63-4DBB-B7E4-F6172207B6B6}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{CF9C4567-5AD5-4EDE-BF1B-9B54C9E09CAE}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D7C25054-FE60-451E-BE30-D02B3D1C2B22}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{E46F46ED-59C7-40B4-91F0-35A24958172F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{3D28D16F-5851-46D4-A5E0-54D436756286}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{4E6AE428-2848-4571-8B93-A8CCB3D6B9C8}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{D915B6FD-629C-4BD6-94A1-93E3848D4A68}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=6 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe |
"UDP Query User{A296D2E2-C7C4-460A-918B-E0EC91FC6D1B}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=17 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe |
"UDP Query User{C55DF9F6-B7AE-4C3E-B78E-44DBD451C719}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{E89E1F32-9712-4A4B-B8FF-3BF8EA11D958}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1407B87C-36E3-4FC1-9051-D08B21E1096F}" = Windows Live Sync
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20CCA435-1465-4567-885C-4A0AFCD0EB05}" = F2100_Help
"{24557DC0-0839-496f-82F9-C4EB72EFE4FA}" = HP Deskjet All-In-One Software 8.0
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 26
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{657F8B33-CBBB-45F4-9087-274F22C89400}" = DJ_AIO_ProductContext
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.8.0.193h
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{8EA4D12F-1571-4998-9BD1-D20C4A767D24}" = ASUS Utilities
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{977CCCA9-B420-405A-9A4A-2A610F28D10F}" = Opera 11.10
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9ECB4705-B9CB-405A-B6D4-33BDF707308E}" = DJ_AIO_Software
"{A1350B64-1AF8-497B-AC07-307DF67FB8D4}" = ESET Smart Security
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1029-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 280.26
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 280.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.4.28
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B96D2269-568B-4CBF-9332-12FAE8B158F7}" = Medieval CUE Splitter
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5A9DA4B-E4F9-FB49-017D-769FC540F1F0}" = EA Download Manager UI
"{DC158DF7-6B36-4C6F-BC91-109014297994}" = FIFA 11 Demo
"{DC83F417-8068-4074-BA2F-C4F8AB872556}" = DJ_AIO_Software_min
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{DDD5104F-1C44-49EB-9E6B-29EC5D27658B}" = HP Update
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.078
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F6F90406-4726-4559-B6F7-3A96529CDD45}" = F2100
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Advanced SystemCare 4_is1" = Advanced SystemCare 4
"AoA Audio Extractor_is1" = AoA Audio Extractor 1.0
"Ashampoo Burning Studio 2009_is1" = Ashampoo Burning Studio 2009
"Ashampoo Burning Studio 2010 Advanced_is1" = Ashampoo Burning Studio 2010 Advanced
"Ashampoo UnInstaller 3_is1" = Ashampoo UnInstaller 3.12
"CCleaner" = CCleaner
"com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-09-21 16:18
"Defraggler" = Defraggler
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX Setup
"EA Download Manager" = EA Download Manager
"Error Messages for Windows" = Error Messages for Windows
"ESET Online Scanner" = ESET Online Scanner v3
"FlashGet 3.5" = FlashGet 3.5
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"InstallShield_{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware verze 1.51.1.1800
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Monkey's Audio_is1" = Monkey's Audio
"Mozilla Firefox (3.6.22)" = Mozilla Firefox (3.6.22)
"Mozilla Thunderbird (3.0.1)" = Mozilla Thunderbird (3.0.1)
"NOD32 v3.x FiX 1.1 by TemDono_is1" = NOD32 v3.x FiX 1.1 by TemDono (Free Updates - Expire in 2050)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"OpenSSL_is1" = OpenSSL 0.9.6m
"PPTView97" = Microsoft PowerPoint Viewer 97
"RealPlayer 12.0" = RealPlayer
"Recuva" = Recuva
"ScreenshotCaptor_is1" = Screenshot Captor 2.78.01
"Update Service" = Update Service
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Xvid_is1" = Xvid 1.2.1 final uninstall

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5.9.2011 2:12:17 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5.9.2011 2:12:17 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5.9.2011 2:12:53 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5.9.2011 2:12:53 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 8.9.2011 2:33:59 | Computer Name = Jirka-PC | Source = ESENT | ID = 467
Description = Windows (2148) Windows: Databáze C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
Index System_KindText405 tabulky SystemIndex_0A je poškozen (0).

Error - 8.9.2011 2:34:00 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 7040
Description =

Error - 8.9.2011 20:30:53 | Computer Name = Jirka-PC | Source = SDWinSec.exe | ID = 0
Description =

Error - 8.9.2011 20:31:27 | Computer Name = Jirka-PC | Source = SDWinSec.exe | ID = 0
Description =

Error - 8.9.2011 23:21:55 | Computer Name = Jirka-PC | Source = VSS | ID = 8194
Description =

Error - 9.9.2011 0:07:27 | Computer Name = Jirka-PC | Source = Application Error | ID = 1000
Description = Chybující aplikace RecordingManager.exe, verze 12.0.1.647, časové
razítko 0x4d921bc9, chybující modul rjm4pln.dll, verze 12.0.1.647, časové razítko
0x4d921c05, kód výjimky 0xc0000005, posun chyby 0x000058a6, ID procesu 0x594, čas
spuštění aplikace 0x01cc6ea5f53e3780.

[ Media Center Events ]
Error - 29.6.2011 4:44:30 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 13.7.2011 8:16:31 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 14.7.2011 7:11:43 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 15.7.2011 9:56:42 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 18.7.2011 15:16:34 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 23.7.2011 3:27:46 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 28.7.2011 11:32:52 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 10.8.2011 14:43:14 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 5.9.2011 2:11:04 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

Error - 8.9.2011 22:52:25 | Computer Name = Jirka-PC | Source = ehRecvr | ID = 4
Description =

[ System Events ]
Error - 5.9.2011 2:08:17 | Computer Name = Jirka-PC | Source = volmgr | ID = 262190
Description = Inicializace výpisu stavu systému se nezdařila.

Error - 5.9.2011 2:08:41 | Computer Name = Jirka-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 5.9.2011 2:09:18 | Computer Name = Jirka-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (7:51:46, 5.9.2011) bylo neočekávané.

Error - 5.9.2011 2:08:48 | Computer Name = Jirka-PC | Source = volmgr | ID = 262190
Description = Inicializace výpisu stavu systému se nezdařila.

Error - 8.9.2011 19:52:02 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 8.9.2011 19:53:21 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 8.9.2011 22:50:02 | Computer Name = Jirka-PC | Source = volmgr | ID = 262190
Description = Inicializace výpisu stavu systému se nezdařila.

Error - 8.9.2011 22:50:02 | Computer Name = Jirka-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 8.9.2011 22:50:10 | Computer Name = Jirka-PC | Source = volmgr | ID = 262190
Description = Inicializace výpisu stavu systému se nezdařila.

Error - 9.9.2011 10:37:26 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7011
Description =


< End of report >

[Mc_Murphy]

Odinstaluj Advanced SystemCare 4 a následně i vše od IObit - jsou to čínske šmejdy! Databázi havěti ukradli jiné renomované společnosti. Účinek na PC je spíše nulový a jen dokáže s PC dělat psí kusy.

Stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento skript:

Kód: Vybrat vše

:Commands
[emptytemp]
[resethosts]
[purity]
[clearallrestorepoints]

:OTL
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
O3 - HKU\S-1-5-21-3770246164-1455068142-2756262975-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-3770246164-1455068142-2756262975-1000\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O4 - HKU\S-1-5-21-3770246164-1455068142-2756262975-1000..\Run: [Advanced SystemCare 4] C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-3770246164-1455068142-2756262975-1000..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe (ashampoo GmbH & Co. KG)
[2010.04.02 10:48:59 | 000,000,224 | ---- | M] () -- \Users\Jirka\Desktop\ \OTESTOVAT\Video Avatar Maker+crack\Video Avatar Maker+crack.txt
[2010.04.02 10:35:11 | 006,737,187 | ---- | M] () -- \Users\Jirka\Desktop\ \OTESTOVAT\Video Avatar Maker+crack\VIDEOAVATAR_CRACK_RAED55.rar
[2010.07.10 03:29:22 | 000,000,964 | ---- | M] () -- \Users\Jirka\Desktop\ \VELKÁ_SL\PODPIS\HOOK\Megaupload_crack.txt
[2010.06.11 04:10:30 | 000,001,137 | ---- | M] () -- \Users\Jirka\Desktop\ \VELKÁ_SL\TXT\Cracks.txt
[2011.06.15 20:51:44 | 000,000,164 | ---- | M] () -- \Users\Jirka\Favorites\Nová složka\Folder Lock v5.8.0 Latest version + Crack   download,rapidshare.com,upnito,hellshare,czshare.URL
@Alternate Data Stream - 5384 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 5384 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6001.18000_none_b3dc8e9f30720cdd\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 5384 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6000.16386_none_b1a5cca33386fc09\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 5384 bytes -> C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:8CE646EE

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
"QuickTime Task"=-
"TkBellExe"=-
"Adobe Reader Speed Launcher"=-
"HP Software Update"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"UIWatcher"=-
"Advanced SystemCare 4"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
[HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1003\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\daemon-search.xml
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\downloadwarez.xml
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\infinitewarez.xml
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\warech.xml

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí nebo mi jej uploadni třeba na http://leteckaposta.cz/

[Hooker]

Odinstalováno !

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Jirka
->Temp folder emptied: 27340193 bytes
->Temporary Internet Files folder emptied: 6136731 bytes
->Java cache emptied: 22159425 bytes
->FireFox cache emptied: 86474777 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 765 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 14328528 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 23374 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 473197822 bytes

Total Files Cleaned = 601,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

========== OTL ==========
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Registry value HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A057A204-BACC-4D26-9990-79A187E2698E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found.
Registry value HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 4 not found.
File C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe not found.
Registry value HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1000\Software\Microsoft\Windows\CurrentVersion\Run\\UIWatcher deleted successfully.
C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe moved successfully.
File \Users\Jirka\Desktop\ \OTESTOVAT\Video Avatar Maker+crack\Video Avatar Maker+crack.txt not found.
File \Users\Jirka\Desktop\ \OTESTOVAT\Video Avatar Maker+crack\VIDEOAVATAR_CRACK_RAED55.rar not found.
File \Users\Jirka\Desktop\ \VELKÁ_SL\PODPIS\HOOK\Megaupload_crack.txt not found.
File \Users\Jirka\Desktop\ \VELKÁ_SL\TXT\Cracks.txt not found.
File move failed. \Users\Jirka\Favorites\Nová složka\Folder Lock v5.8.0 Latest version + Crack download,rapidshare.com,upnito,hellshare,czshare.URL scheduled to be moved on reboot.
ADS C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh deleted successfully.
Unable to delete ADS C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6001.18000_none_b3dc8e9f30720cdd\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh .
Unable to delete ADS C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6000.16386_none_b1a5cca33386fc09\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh .
Unable to delete ADS C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh .
ADS C:\ProgramData\TEMP:8CE646EE deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\UIWatcher not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 4 not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3770246164-1455068142-2756262975-1003\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
C:\Windows\system32\SET8549.tmp moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2567.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4805.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP49A9.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP55C7.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5870.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5C9C.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP68.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8F98.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC234.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDF10.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE12C.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEB60.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEFE5.tmp folder moved successfully.
C:\Windows\Installer\MSI4349.tmp moved successfully.
C:\Windows\Installer\MSI458C.tmp moved successfully.
C:\Windows\Installer\MSI4723.tmp moved successfully.
C:\Windows\Installer\MSIF2D8.tmp moved successfully.
C:\Windows\SoftwareDistribution\Download\fa496b7529b33187440c2c1eae40e700\BIT75AC.tmp moved successfully.
C:\Windows\twain_32\hpqgnds2.tmp moved successfully.
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\downloadwarez.xml moved successfully.
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\infinitewarez.xml moved successfully.
C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\warech.xml moved successfully.

OTL by OldTimer - Version 3.2.27.0 log created on 09092011_201736

Files\Folders moved on Reboot...
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\68OB9VCAODFIM8CAX2X2ZGCA2MDC6CCACN879XCA72RIEVCA5Z3AD3CAHHLI8NCAT8DKCQCADF02PXCAKL2QEQCA5IF4PDCAOEEN80CAQH2CL7CA1J4WD9CA3V579ZCA2WW8EJCAM7DAXHCAD0L1GBCAI4S9MG not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\7JJ2J5CAYO1EA2CATK3J0CCAUU1DW0CAEVZ103CAJM41MLCAK0NM4LCAO904V9CAFMLFCACAFSWQTMCAEXY51DCA1R9FD4CA4208JQCA6BMBBZCAWFYGOHCAZFR4WFCAF006OCCARXUPEJCAYLRFWMCA0863L2 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\9Y5KOLCAE0QDESCAYS1L9BCAF9ZTPICAF4B5VWCA7PXKS8CAQTVJMECA9OWM3FCAP5PYNKCALRC71SCAYLM6OBCA3CFT3ACABCG2MKCAIAGO9FCAXQX8C4CA9NLD8BCA1M41ALCA3MM9MLCA50UXWACA5BLDMV not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\MTMZN7CALHHRIMCAYFJPX8CA6VBQNKCAA45L32CAZEBMB3CA4W3D33CALYBJX7CA0RUQWICAQP1B59CALCKIXFCAZZ2G51CA8GND1VCANCP3TMCAMFILZ0CAR2G27ZCAGS1ZZ0CA10A2WMCA99XZBXCAT4BPPJ not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\R1X3KBCAVB8WBJCAA2SAGVCAPCFWEFCARZOAW3CAW1YFKDCA2KJC6KCASNNRZACAY4GIZ7CAXWB12YCALOSAHDCAIKURZECA38YSXNCA9TC7QWCA3TKZZ2CAPJX834CANYS4EKCA37JYXZCAWBQ7A1CAQXDVJW not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\YDT9NLEP\VL3P8GCAE14Q3NCAP31AC4CAKZ45CSCA9U10MQCAJJ48KVCAM72C5WCAFL1CQCCAH0XB02CAVO3H7NCAAUG7WSCAA3X3STCAREZ6TTCAC1MPWUCA7DERTKCA58D7KDCAA34WITCACB7J3LCA3511K4CA5MZDME not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\17694PCA0PH91ZCAVB1EGFCAO4I0MACAPAHJIKCAIP4ZFGCAOC6088CAWYYKFQCAYQ94ZACALUCZ5MCAXD5NYXCAZOX6FHCA2F6PULCA3NV4G4CAVZK7DJCAVIV7IBCARWUD3CCAACGT94CAQ54E9VCAZ9NG9T not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\1AQYJ9CAZYKE32CAUSUL0ZCAG4FK36CAERWR3OCAULN4S2CAVQ8RJMCAQEXYZWCA2GQLGECAOY0ET4CAKUSC1ACATP1IKFCA3OIB0VCATWAF8GCAQD8Z7YCARTXHLTCAGLCCR2CACXRROFCAOZUTKNCA9OWFQK not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\1QSKV9CALBPZZSCAVYIL7ACASIWRFOCAZ7CARUCARZCITNCACMUN4CCABRFA2XCA33PF4XCABOZI47CAKFPPDHCAY34CA6CAY9L8SGCAMVYLGBCALDGAV0CAA3OJ5RCASNELBICAHHUNYPCA6L48NRCAA8Y082 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\2UOVKUCAZSBKSHCA45IWGICACMSZ67CAQPJ6EMCANIM93HCAERY4WFCAPFST3GCA3ONVXNCASCP3LECAAV2A2XCAEQRCTDCA8FS3PCCA20DJDKCAGT268FCA1H66ZLCAS7R7JDCAE60YE1CAMXATXFCAGMTJWV not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\8873NKCAGY9QKICAASNNQECACOM8CYCAR5XTYECAOE3LG5CAR5627YCAETF6VRCA6E879YCANVOLRECAYNOG1VCACBA5ZLCANG7SWCCAC9UWTACAHP1WNACAJR7PASCABLXMQNCAV25HI0CAO3KC0CCATL4WVG not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\BAIXOTCA9IPC5GCA30P0BACAYFG4DMCAS5PSXKCA11GWUCCAHN4MY3CAAEIG0TCAA1Q9JXCA00KUSKCA6SF51UCA387HUACANNL8GUCAHIMRCECAVX9G90CALI3WVDCA1UXFGGCA6UGUHUCABMDCKUCA5HBQQD not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\CHWB19CAZ13WDJCAHO19N1CASAN7DZCADYSMJ3CALXJGL5CAPEX4RQCAN3R75PCAPEMZBDCAIZ6QNOCATXN6HLCAMXWHHOCA4YWM5JCA61P4AUCAFTS9O8CAU29HX7CAJ2BDZVCABXS9DDCAXUGGJICANYWZFZ not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\GN81RBCALNT5WXCARQT77XCAEJ7BAUCAB895JNCA3SRGEBCAD2I0I0CA9W8R6CCALKB63MCA4TCRSHCAO8VPORCAWAGM18CANSU86LCA9VIVQICA29YHBZCAF871A7CAXBRMF6CADHPKPVCARWSLDMCA2LMQBQ not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\P1FJRYCAYOBYX9CAA6BQPWCAJ1CGCXCAP8CP7YCAPNQH76CASW6UQ8CAJVPSGVCAVIL0QOCA33WVFKCACK9O18CAOGJ6A8CAO44ZEBCAV9H8I2CAM2XHENCANF4LW2CAU5CEDACA1Y7OA7CARMTLX9CA6M8MVV not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\R972BPCACHG7MJCA33NDEQCAFQ90GQCA2P0H49CANWFOPECANHTJ6FCAY1A1CXCALXR3XHCAUZV10UCAOQ8J50CAN9SVGVCA9U9CXECAMW3ST3CA8YUR5SCAYZT2ZVCAQZ28ZBCAXCK105CAELBWLXCA5164EW not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\U42ETBM8\ZN0PZICANCWYH5CA0VKX6ICAJ3W4M6CAVCUTSMCA18L5VZCAHYLQI2CAVFDQYUCAPS53N9CAW23NLICAQLOMGWCAJJ5730CAKMLR6XCAGIO7ZBCAMX03UXCAW1X4CLCAZ58IASCAAQ2AVJCAP9371CCALK7MGC not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\6AT0H5CAQ190F0CAE20MGZCAMTBQJ9CAQ7MT59CAWCFFFOCA7KOE91CAU89L4FCAZ4L6IMCAKBGUJMCAM87PO5CA2MSVMNCAR7T3E0CA80SA32CA7NPMK5CAXF2ZFICALY9PNQCA2J9AD1CAGU0QZQCA0055BD not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\81QA5YCA8VPBPHCA5XIIL8CANQG7E2CA9RU7JFCA52U3S0CACN9UP2CADEQ2JBCALQYYXOCAN515M3CABP5O6ECAKA3O1NCA8JDY30CAGGD485CAP5PETGCAG31UOFCAPBRTW7CA6G0M6PCART4E3ZCAW5F6F1 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\BQ0IGDCA9BKEN3CA0XCWKFCASWBC4CCANF8UGDCA0FHXGECAAULQ5XCABT877ECA7Z12YMCAG116BKCA8189Z7CASNQ3TACA6RXH0ICAFVLTT2CAK5LMFUCAZIJMHPCAH78A00CATC0BCKCAH93HU1CANU08UT not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\DJ4DWACAYS162LCARMWDGXCAN73TFCCAZYVVSMCAYY8WGQCA12JPJ1CAKNLEMOCAJOLUELCAZ76AACCA6LKGRDCA0640Q6CAY4ZBAQCAIS3GQMCA1QPXD7CA3X4R71CAYKV9JMCA1Q0UOMCAYYO4K0CAP18G3U not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\IML975CAJ01EO4CANICD50CANDSPVCCA3RFB10CAIF1HBYCA26J1WJCA19D12KCAEPQI35CA1LHCSZCAODRGRUCATM2F4WCA7T75UDCAU8BQAUCAA1IMRNCANCE9XNCAQU3P15CA3W1IVYCAW2JKR2CA9OXQZS not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\J4IW82CAHIZN36CA8L4I8UCARFE9BPCALNJKDCCARF9AOICAWZWRB9CA5TCJV0CAU65N2KCACI85P6CA7NZ2BMCAGMAW0TCAWI205ZCA888E1RCAH42E2NCADU5SAGCAXV7ZVUCA19TN0CCA5EPUC1CAYA0006 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\KXEXD6CAHEIMUCCA736IB0CAPYBCKOCA0845WCCAKZYRYOCAGTUOMZCAUK79AMCA7DBX60CAXCFVMSCA5BOFKUCAAWZVPTCAFWP8L9CA69BWPXCAKL137ACALL1PM8CAR9TBWPCAMLEF2VCARSDVJHCAYVV5XW not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\MMEM1ICACE27DICA2DBA3LCAAVOJLWCARB2040CA77E7ESCAMGNP8ICAVDN66ZCA6ZR07QCAACC0SKCADDHGIJCA9QYY2KCAOAO3M1CAGFWWK6CAO0O0HTCA95PHVUCAGF4R1ACAN0TF04CAS3F6FUCARV7DK7 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\Q92TRDCA4N1U1HCAQCQS8MCACQZP14CADLFTZACALEUJTUCA488RS2CAHFYN11CAUNPKM6CAPPJLH5CAYZT069CAMF0OA9CAA5LZ9ACAYVCJR9CAC2J353CAN103YCCAL2E4GMCA5SJHB9CADIZ1N6CAKD6LL8 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\S9G64DCAX9A54MCAYY7DFOCAI5AWGACA9WJ5LDCAA3GZUPCADAKG1ACA2XX1K1CASD4QQ6CAL6H5ACCAJTSBS4CAB08BMBCADJ1EZ4CASZD5K5CAVOYB7JCA1FHV2DCAXS5EVLCAKVI3R7CARM5XBGCA0V53HL not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\NRA5200Z\W5LK86CA2W08DKCA27QLPLCAPS8KMVCADEDVFKCA29V8J6CA7GRSV3CADJVZTDCAQF50C3CA6RH260CATN9HLGCAUV592OCA77FO33CARK4SSQCAQZCSF3CAB75PI1CAIRUSCFCA5J87YSCAQXWCN3CA8XW3N9 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\0Z3CJ2CAA43N1ECAEUA4NACA50DYBICAFEPR7RCAMF2Z5NCAKTJEEDCA7WFL0OCAN1VA8RCA6IJ2J6CASBM339CAYKY2ZDCAAJ2KJLCANWDAD7CACKXGNWCAVYRB0XCAQIAC5GCAWY0I72CAF84GURCAV571C9 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\3S2JUHCAFYRET5CAMWZUFMCARJ21XRCAXOVE14CAJZYXRMCALJPAZ1CABINJW0CAIZP54GCALJU1DKCACCFU7UCAZXAX46CAP6V322CAQ6EL21CAEQAR8NCAF3308SCA36S9F1CAZ0WJL4CAHKNW2MCALJKQW6 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\3WWVZKCAHOASODCAU3AK2SCA87163ZCA7B98JKCAVJJ84HCAUNW8SRCA2FNH4ICA0L4I82CA53AP9OCA3280MWCAI0U8P8CATQ31FDCAPC4HYBCA9IJOI2CAO2KM0WCAZL2JZDCA3NNKBGCAYRF9B5CAB7RJEB not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\42V2JDCAEG6YKDCA8DII0LCAQH88YRCAHD81PXCAKTCQ11CA16ZDSBCAZKBCW3CA2T67TTCAUM1MJSCAC398EICAXYMC8TCAPVDMRNCATITUX2CAAQ2MUHCA8TTI03CAM78GATCARUL6X2CAQ8V9YGCAWI7U8C not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\789MW3CAR7XLL6CAZH19K1CAPBPZ7LCAFQLMEJCA5IOU3VCAKFKAWOCALMU9RCCA9E51JMCAEVD2GICA3W588LCALAY0PECAYTV5KHCAA13LBWCA0PM58GCAL16AMICAEZYQQHCAYNUP4LCAWFW7O3CAIY7HFH not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\A8OELSCAMUOEKNCAUE7IQ9CA1WKYG1CA4X6NB3CAAGLG0OCAMGPPZFCA9RPDD7CA30DKJWCAXS1C7UCAP82KZDCATSOJABCA0L94KCCAZSP3Z1CATBFL3BCA7NAOKOCAU54FF8CAPH618ICA1RID3HCA7OCFLQ not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\QG93IPCA1NES02CAJ7IX1OCADF0IEICA9JHNYFCA3IR00YCABEJO6CCAG13Q01CACWD70ZCA2XA9XICALQCSW7CA3O55X3CAGBE9ZICAJT7NVNCAKJ3O66CAOR84COCAJTX8O0CAJG0ZQQCAMD0AE7CA4B6K7O not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\SMOSAWCAR25SMNCAWT86SFCA2KI748CAX3FQP3CA1E0W5ACAXD4M81CAQ6D81QCAFFQUN7CAQC7IBKCAX5ZF5ICAK1NAC5CAE9WJ3DCAR7MJCKCAWJ3RLXCA2BHCM6CAAEMBAOCAP8OBO3CAXDEVELCATU5QUA not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\V4QP4JCAM97OMDCAMQVQUJCAK9AUZ3CA1JTSZACAOIP2F2CA26HGCDCA7BN59PCAQCQLEECAQ1MB0VCA9MCKUMCA0N7MHHCAMEUJO2CASXF0DGCAE97KLRCAOWE5OWCAGTQP2YCA18FT0JCA1N9X93CAVUYM51 not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\X1AIFNCATGPJRICASIGTIACAVRN3Q0CAR0S3VMCA0TGHNGCA7M2JSDCAH2B2U2CAPN0T9ICAU9L38OCAA13E6WCAHN3VY8CADM1HMNCALA1QT1CAMIZPPQCA77NNVYCA5QXJL9CADAW4JDCAEWT6Y7CAOQOB0U not found!
File\Folder C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(161)\Content.IE5\9DUXSSVG\Z93PL7CAFZ2253CAQRRBHECAEPGO3UCAXNH0UOCAT9VL9CCAEEZ8C7CAU8PHC9CAZGMGHCCAC4QQFBCAYM3VOXCA54F8SOCANE5068CAJZ5F0CCA4KO51VCA4VWK68CA3F2JT1CAEQ3OS2CAK1970HCARFEKPX not found!
File\Folder C:\Windows\System32\SET8549.tmp not found!
File move failed. \Users\Jirka\Favorites\Nová složka\Folder Lock v5.8.0 Latest version + Crack download,rapidshare.com,upnito,hellshare,czshare.URL scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[Mc_Murphy]

OK, to je dobře.

Teď ještě pro jistotu stáhni a nainstaluj Malwarebytes' Anti-Malware (zkráceně MBAM) podle návodu z tohoto topicu.

• Proveď aktualizaci virové databáze.
• V záložce Kontrolor zvol Úplná kontrola a zaškrtni všechny pevné disky, které máš na počítači.
• Předem nic nemaž!!
• MBAM mívá občas falešné detekce, proto vlož jeho log do příspěvku a počkej na posouzení!

[Mc_Murphy]

Něco jsem, zdá se, přehlédl!!

Předpokládám, že ten ESET máš legální = zakoupená licence?!

a

Jediné co vím o ESET je,že jsem platil za tento program při reinstalu VISTY, protože mi vyhodili AVG a nainstalovali toto. Je tam asi 1 a 1/2 roku a nebyl problem.

Ale v logu je:

Kód: Vybrat vše

"NOD32 v3.x FiX 1.1 by TemDono_is1" = NOD32 v3.x FiX 1.1 by TemDono (Free Updates - Expire in 2050)

Takže ESET je nelegální, co s tím provedeme?

[Hooker]

Tak tady je ten žádaný LOG. Chviličku to trvalo, protože jsem u toho čekání usnul.


Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Verze databáze: 7685

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

9.9.2011 21:14:33
mbam-log-2011-09-09 (21-14-33).txt

Typ: Úplná kontrola (C:\|D:\|)
Kontrolované objekty: 312990
Uplynulý čas: 35 minut, 53 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Mc_Murphy]

Počkám si ještě na tu odpověď.

[Hooker]

Tak jsem zpět. Omlouvám se za zdržení, ale celý veekend jsem byl terorizován vnoučaty.
Co se týče toho NODA, tak toho odinstaluji a budu muset nahradit něčím jiným, ale nemám nejmenší tušení čím. To se odinstaluje i ten "Eset Smart Security" , nebo jenom ten "NOD" ? Musím za něj mít nějaký jiný antivir, nebo postačí , pokud zůstane, ten "Eset" ? Poraď, prosím, co s tím a co jiného nainstalovat. Díky.

[Mc_Murphy]

V pořádku, nikam nespěchám.
Jo, vnoučata umí potrápit, co? ...

ESET je nelegální, musíte odinstalovat komplet celý balíček, ne jen antivirus!
K odinstalování použijte tento program: http://kb.eset.com/esetkb/index?page=co ... d=SOLN2116

Počítač bych nezabezpečený rozhodně nenechával! Přečtěte si zde toto téma a vyberte si nějakou vhodnou variantu.
Osobně se přikláním k Avastu jako antivir, Zone Alarmu jako firewall a SUPERAntiSpyware na občasný scan.

[Hooker]

Tak já na to mrknu a zítra se zde opět ozvu. Tak zatím ahoj.

[Mc_Murphy]

OK, v pohodě, počkám si na výsledky. Dobrou noc.

[Hooker]

Omlouvám se za delší pauzu, musel jsem za kolegu vzít nějaké noční 12 hod. směny a teprve dnes v 7.00 jsem skončil. Teď budu doma celých 8 dní.
Tak ten Eset i NOD jsem odinstaloval a místo toho jsem nainstaloval Avast- Free Antivirus. Ve Vistách jsem zapnul firewall , tak je zapnuto vše. Nevím, jesti ten Avast je to samé co jsi mi doporučil. Nevím, jestli mám instalovat ten firewall, když je ve Vistě a nějaké štíty jsou i v Avastu. Tomu totiž vůbec nerozumím, taky nevím, jestli ten Avast i ten Zone Alarm nemusím nějak nastavovat. Chtěl jsem dát screenshot na ImageShack a vůbec se nemohu připojit. tak nevím, z toho jsem měl strach. Posílám nový log "RSIT"





logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2011-09-18 20:56:34
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 51 GB (43%) free of 119 GB
Total RAM: 2047 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:57:18, on 18.9.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jirka\Desktop\CLEAN\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: (no name) - {C9F97205-62A3-41F2-9F2C-D99392F882EB} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
O4 - HKUS\S-1-5-21-3770246164-1455068142-2756262975-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\GetUrl.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://software.kuaiche.com
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 5456 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9, {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.67, {987311C6-B504-4aa2-90BF-60CC49808D42}:2.2, {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.7, {89506680-e3f4-484c-a2c0-ed711d481eda}:0.9.5.7, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.11, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.2, {64161300-e22b-11db-8314-0800200c9a66}:0.9.6.1, {27A2FD41-CB23-4518-AB5C-C25BAFFDE531}:1.4.1, {7378B8C2-FC38-41b8-A8C9-875D1F5B0A24}:5.2.4.8, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.1, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {d5eeb813-935a-435d-b01e-b3a02f2cb408}:0.9.2, jsonview@brh.numbera.com:0.5, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3, {d47a9f51-8281-43fa-f450-f28ef8735e9a}:2.1.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, tineye@ideeinc.com:1.1, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, wrc@avast.com:6.0.1289, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.22, {2c088200-b973-11db-8314-0800200c9a66}:1.7.1"
prefs.js - "keyword.URL" - "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647]
"Description"=RealJukebox Netscape Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647]
"Description"=RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647]
"Description"=12.0.1.647
"Path"=c:\program files\real\realplayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsjsrealplayerplugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npDivxPlayerPlugin.dll
npLegitCheckPlugin.dll
npnul32.dll
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
nsIDivxPlayerPlugin.xpt
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\extensions\
beysim@beysim.net
jsonview@brh.numbera.com
smarterwiki@wikiatic(102).com
tineye@ideeinc.com
{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}(103)
{20a82645-c095-46ed-80e3-08825760534b}
{27A2FD41-CB23-4518-AB5C-C25BAFFDE531}
{2832ABCD-4444-1012-2D45-132D5447C445}
{2c088200-b973-11db-8314-0800200c9a66}
{35106bca-6c78-48c7-ac28-56df30b51d2a}
{37E4D8EA-8BDA-4831-8EA1-89053939A250}
{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}
{64161300-e22b-11db-8314-0800200c9a66}
{64161300-e22b-11db-8314-0800200c9a66}(194)
{7378B8C2-FC38-41b8-A8C9-875D1F5B0A24}
{89506680-e3f4-484c-a2c0-ed711d481eda}
{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
{987311C6-B504-4aa2-90BF-60CC49808D42}
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}(195)
{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
{d47a9f51-8281-43fa-f450-f28ef8735e9a}
{d5eeb813-935a-435d-b01e-b3a02f2cb408}
{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}
{DDC359D1-844A-42a7-9AA1-88A850A938A8}
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\vuhsvq3u.default\searchplugins\
4shared.xml
aviary.xml
bugmenot.xml
datalife-engine-demo.xml
ddl-search-v2.xml
ddlspot.xml
filetubecom.xml
filmova-databaze-fdbcz.xml
kvaz-rapidshare-search.xml
rapidshare-google-arama.xml
search.xml
sfd.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-05-25 386776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Users\Jirka\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2010-05-11 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C9F97205-62A3-41F2-9F2C-D99392F882EB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-12 6965792]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"UIWatcher"=C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [2010-02-09 3509080]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.asv2"=asusasv2.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-09-18 20:30:38 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-09-18 20:30:38 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-09-18 20:30:34 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-09-18 20:30:34 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-09-18 20:30:33 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-09-18 20:30:33 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-09-18 20:30:04 ----A---- C:\Windows\system32\aswBoot.exe
2011-09-18 20:30:04 ----A---- C:\Windows\avastSS.scr
2011-09-18 20:29:51 ----D---- C:\ProgramData\AVAST Software
2011-09-18 20:29:51 ----D---- C:\Program Files\AVAST Software
2011-09-10 20:53:13 ----D---- C:\Users\Jirka\AppData\Roaming\NVIDIA
2011-09-09 20:17:36 ----D---- C:\_OTL
2011-09-09 05:18:42 ----A---- C:\Windows\system32\OpenCL.dll
2011-09-09 05:18:42 ----A---- C:\Windows\system32\nvwgf2um.dll
2011-09-09 05:18:42 ----A---- C:\Windows\system32\nvoglv32.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvgenco32.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvdispco32.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvcuvid.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvcuda.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\nvcompiler.dll
2011-09-09 05:18:41 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-08-24 10:38:11 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2011-09-18 20:56:49 ----D---- C:\Windows\Prefetch
2011-09-18 20:56:47 ----D---- C:\Program Files\Trend Micro
2011-09-18 20:56:41 ----D---- C:\Windows\temp
2011-09-18 20:38:18 ----SHD---- C:\System Volume Information
2011-09-18 20:30:38 ----D---- C:\Windows\system32\drivers
2011-09-18 20:30:30 ----SHD---- C:\Windows\Installer
2011-09-18 20:30:28 ----D---- C:\Windows\winsxs
2011-09-18 20:30:05 ----D---- C:\Program Files\Windows Sidebar
2011-09-18 20:30:04 ----D---- C:\Windows
2011-09-18 20:30:04 ----AD---- C:\Windows\System32
2011-09-18 20:29:51 ----RD---- C:\Program Files
2011-09-18 20:29:51 ----D---- C:\ProgramData
2011-09-18 20:22:05 ----D---- C:\ProgramData\NVIDIA
2011-09-18 20:19:31 ----D---- C:\Windows\system32\catroot
2011-09-18 20:19:31 ----D---- C:\Windows\inf
2011-09-18 19:46:46 ----D---- C:\Windows\system32\Tasks
2011-09-18 19:46:13 ----D---- C:\Program Files\CCleaner
2011-09-18 19:41:38 ----D---- C:\Users\Jirka\AppData\Roaming\Media Player Classic
2011-09-18 06:48:40 ----D---- C:\Program Files\Common Files\Adobe
2011-09-17 22:54:58 ----D---- C:\Program Files\Ashampoo
2011-09-15 11:37:02 ----D---- C:\Program Files\Windows Mail
2011-09-15 11:35:13 ----A---- C:\Windows\system32\mrt.exe
2011-09-15 10:22:04 ----D---- C:\Windows\system32\catroot2
2011-09-09 20:18:12 ----D---- C:\Windows\twain_32
2011-09-09 20:17:57 ----D---- C:\Windows\system32\drivers\etc
2011-09-09 19:54:35 ----D---- C:\Users\Jirka\AppData\Roaming\IObit
2011-09-09 05:22:34 ----D---- C:\Program Files\NVIDIA Corporation
2011-09-09 05:22:03 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-09 05:17:23 ----D---- C:\NVIDIA
2011-09-09 01:16:29 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-08 22:50:17 ----D---- C:\rsit
2011-09-08 04:29:12 ----D---- C:\Program Files\Mozilla Firefox
2011-09-05 08:25:26 ----D---- C:\Windows\rescache
2011-09-05 08:14:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-03 13:23:26 ----RSD---- C:\Windows\assembly
2011-09-03 13:23:26 ----D---- C:\Windows\Microsoft.NET
2011-08-25 04:50:04 ----D---- C:\Windows\system32\cs-CZ
2011-08-25 04:48:34 ----RD---- C:\Users
2011-08-23 22:16:21 ----D---- C:\Users\Jirka\AppData\Roaming\Skype
2011-08-23 20:59:02 ----D---- C:\Users\Jirka\AppData\Roaming\skypePM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-05-10 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 EIO;EIO; \??\C:\Windows\system32\drivers\EIO.sys [2006-06-14 12288]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]
R3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-04-20 674048]
R3 ASUSVRC;ASUSTeK Virtual Capture Device; C:\Windows\system32\DRIVERS\AsusVRC.sys [2007-01-29 18432]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-12 2342688]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2011-08-03 10304104]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
S3 a0r7idb4;a0r7idb4; C:\Windows\system32\drivers\a0r7idb4.sys []
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-07-25 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-07-25 25512]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-06-15 47360]
S3 se3ebus;Sony Ericsson Device 062 (WDM); C:\Windows\system32\DRIVERS\se3ebus.sys [2007-04-10 83080]
S3 se3emdfl;Sony Ericsson Device 062 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\se3emdfl.sys [2007-04-10 15112]
S3 se3emdm;Sony Ericsson Device 062 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\se3emdm.sys [2007-04-10 108552]
S3 se3emgmt;Sony Ericsson Device 062 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\se3emgmt.sys [2007-04-10 100360]
S3 se3eobex;Sony Ericsson Device 062 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\se3eobex.sys [2007-04-10 98568]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Serial emulation modem driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-04-11 27648]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-08-03 599144]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-03 379496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Tak zatím ahoj, sedím když tak tady.

[Mc_Murphy]

Za pauzu se neomlouvej, každý máme přece svůj soukromý život a nemůžeme tu sedět 24 hodin denně.
Nočních směn jsem si užil za život dost a dost, proto Ti je vůbec nezávidím a chápu Tě.
Avast je v pořádku, ten si tam nech.
Co se týče firewallu, tak bych Ti asi spíše doporučil vypnout ten, co je standardně ve Vistách a raději si hodit externí. Ale pokud budeš rozumný, co se týče surfování po internetu a stahování různých programů, můžeš to nechat klidně i takhle, jak to máš, tudíž Avast a integrovaný firewall, co je ve Vistách.

Fixni ještě v HJT tyto položky:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/mediaget/{73D ... 8F1ADD3AC3}
O2 - BHO: (no name) - {C9F97205-62A3-41F2-9F2C-D99392F882EB} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O15 - Trusted Zone: http://software.kuaiche.com
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

"Fixnout" znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
HJT najdeš zde: C:\Program Files\trend micro\Jirka.exe

Jak je na tom počítač?