Zasekávání PC + "pomalost"

[Mr.Reyals]

Ahoj,

nevím co se mi děje s počítačem, ale něco je rozhodně špatně, někdy trvá třeba jen otevření Firefoxu i několik minut, otevření složky trvá někdy i třeba 10sekund (počítač mám výkonný dost)
no prostě: nekdy to jde rychleji někdy pomaleji, a občas se stane, že se z ničeho nic objeví místo kurzoru přesípací hodiny, chvíli to trvá cca 10 - 60sekund a pak se počítač bud sám vypne nebo normálně pracuje dál... Prosím o kontrolu logu:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Main at 2011-10-21 14:38:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 3 GB (15%) free of 17 GB
Total RAM: 1919 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:38:52, on 21.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
D:\Program Files\Intel\IntelAppStore\bin\AppUp.exe
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\GamePark2\gpcl.exe
C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
D:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Razer\DeathAdder\razertra.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\Program Files\Razer\DeathAdder\vdDaemon.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Main\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Main.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=bf2&s={searchTerms}&f=4
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing)
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (file missing)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [DeathAdder] C:\Program Files\Razer\DeathAdder\razerhid.exe
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "D:\Program Files\Intel\IntelAppStore\bin\ismagent.lnk"
O4 - HKLM\..\Run: [Intel AppUp(SM) center_Nagware] "D:\Program Files\Intel\IntelAppStore\bin\AppUp.lnk"
O4 - HKLM\..\Run: [BabylonToolbar] "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Registration .LNK = D:\Program Files\Ubisoft\Peter Jackson's King Kong - The Official Game of the Movie\RegistrationReminder.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: Visit in &3D using ExitReality - http://3d.exitreality.com/TransmogrifyPage.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Plants vs. Zombies\Images\stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Plants vs. Zombies\Images\armhelper.ocx
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Acunetix WVS Scheduler v6 (AcuWVSSchedulerv6) - Acunetix Ltd. - C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 9260 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "about:home"
prefs.js - "extensions.enabledItems" - "{AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778, testpilot@labs.mozilla.com:1.0.3, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... ource=2&q="

"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2088]
"Description"=RealMedia Plugin
"Path"=D:\Program Files\K-Lite Codec Pack\real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1069]
"Description"=6.0.12.1069
"Path"=D:\Program Files\K-Lite Codec Pack\real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

D:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll
npPDFXCviewNPPlugin.dll

D:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\
ffxtlbr@babylon.com
ffxtlbr@Facemoods.com
{51a86bb3-6602-4c85-92a5-130ee4864f13}
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\searchplugins\
conduit.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-01-12 63128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
CescrtHlpr Object - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll [2010-11-07 225720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll [2010-11-07 184760]
{51a86bb3-6602-4c85-92a5-130ee4864f13} - BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll [2011-03-28 176936]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-03-28 176936]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll []
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-09-30 16864768]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-11-18 2219184]
"DeathAdder"=C:\Program Files\Razer\DeathAdder\razerhid.exe [2011-03-21 248320]
"Intel AppUp(SM) center"=D:\Program Files\Intel\IntelAppStore\bin\ismagent.lnk [2011-08-14 985]
"Intel AppUp(SM) center_Nagware"=D:\Program Files\Intel\IntelAppStore\bin\AppUp.lnk [2011-08-14 1074]
"BabylonToolbar"=C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe [2010-11-07 286720]
"LogMeIn Hamachi Ui"=D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]
"facemoods"=C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe /md I []
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-08-03 111208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe

C:\Documents and Settings\Main\Nabídka Start\Programy\Po spuštění
Registration .LNK - D:\Program Files\Ubisoft\Peter Jackson's King Kong - The Official Game of the Movie\RegistrationReminder.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-10-29 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Program Files\uTorrent\uTorrent.exe"="D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\totalcmd\TOTALCMD.EXE"="D:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"D:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe"="D:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe:*:Enabled:Media Player Classic"
"C:\WINDOWS\nc.exe"="C:\WINDOWS\nc.exe:*:Enabled:nc"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\Ventrilo\Ventrilo.exe"="D:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"D:\Program Files\Steam\steamapps\amvvay\team fortress 2\hl2.exe"="D:\Program Files\Steam\steamapps\amvvay\team fortress 2\hl2.exe:*:Enabled:hl2"
"D:\Program Files\Steam\steamapps\amvvay\counter-strike\hl.exe"="D:\Program Files\Steam\steamapps\amvvay\counter-strike\hl.exe:*:Enabled:Counter-Strike"
"D:\Program Files\Valve\hl.exe"="D:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"E:\EasySetupAssistant\EasySetupAssistant.exe"="E:\EasySetupAssistant\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant"
"D:\Teraria\TerrariaServer.exe"="D:\Teraria\TerrariaServer.exe:*:Enabled:Terraria"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Documents and Settings\Main\Local Settings\temp\DSOClient\app.n3app"="C:\Documents and Settings\Main\Local Settings\temp\DSOClient\app.n3app:*:Enabled:app"
"D:\hry\Counter-Strike 1.6\hl.exe"="D:\hry\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\Funcom\Age of Conan\ConanPatcher.exe"="D:\Program Files\Funcom\Age of Conan\ConanPatcher.exe:*:Enabled:Age of Conan Update Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="D:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"vidc.XVID"=xvidvfw.dll
"msacm.lameacm"=lameACM.acm
"vidc.3iv2"=3ivxVfWCodec.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.wmv3"=wmv9vcm.dll
"VIDC.VP60"=vp6vfw.dll
"VIDC.VP61"=vp6vfw.dll
"VIDC.VP62"=vp6vfw.dll
"VIDC.VP31"=vp31vfw.dll
"vidc.MPG4"=mpg4c32.dll
"vidc.MP42"=mpg4c32.dll
"vidc.MP43"=mpg4c32.dll
"msacm.ac3acm"=AC3ACM.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"VIDC.FPS1"=frapsvid.dll
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"vidc.dvsd"=mcdvd_32.dll

======File associations======

.txt - open - notepad.exe %1

======List of files/folders created in the last 1 month======

2011-10-20 15:54:15 ----D---- C:\Casino
2011-10-16 22:19:36 ----D---- C:\Program Files\GamePark2
2011-10-16 09:51:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-10-15 21:37:30 ----D---- C:\WINDOWS\RegisteredPackages
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-10-15 21:37:07 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-10-15 21:37:03 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-10-12 08:34:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-12 08:31:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-12 08:31:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-10-12 08:28:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2586448$
2011-10-11 17:25:21 ----D---- C:\WINDOWS\nview
2011-10-11 08:37:21 ----D---- C:\Program Files\SweetIM
2011-10-11 08:37:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2011-10-11 08:36:22 ----D---- C:\Program Files\facemoods.com
2011-10-09 21:47:08 ----A---- C:\WINDOWS\vypalovac.ini
2011-10-05 15:09:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-10-05 13:37:15 ----D---- C:\Documents and Settings\Main\Data aplikací\pymclevel
2011-10-03 17:33:30 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-10-03 17:33:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-10-03 17:33:23 ----D---- C:\Program Files\NortonInstaller
2011-10-03 17:33:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-09-30 20:15:22 ----A---- C:\WINDOWS\eSellerateEngine.dll
2011-09-28 10:35:50 ----D---- C:\Program Files\Xfire_CON
2011-09-28 10:35:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\media center programs
2011-09-26 16:55:00 ----D---- C:\WINDOWS\system32\PlayLinc
2011-09-26 16:06:08 ----A---- C:\WINDOWS\system32\trltmpct.dll
2011-09-23 17:14:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Premium
2011-09-23 17:14:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallMate

======List of files/folders modified in the last 1 month======

2011-10-21 14:38:49 ----D---- C:\Program Files\trend micro
2011-10-21 14:38:48 ----D---- C:\WINDOWS\temp
2011-10-21 14:38:29 ----D---- C:\WINDOWS\Prefetch
2011-10-21 14:23:07 ----D---- C:\WINDOWS
2011-10-21 14:20:55 ----RD---- C:\Program Files
2011-10-21 14:20:55 ----D---- C:\WINDOWS\system32\drivers
2011-10-21 14:20:53 ----SD---- C:\WINDOWS\Tasks
2011-10-21 13:44:10 ----D---- C:\Documents and Settings\Main\Data aplikací\Skype
2011-10-21 12:03:48 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-21 08:04:29 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-10-20 09:32:39 ----SHD---- C:\WINDOWS\Installer
2011-10-18 18:06:05 ----D---- C:\Documents and Settings\Main\Data aplikací\uTorrent
2011-10-18 16:42:57 ----D---- C:\WINDOWS\system32
2011-10-18 16:42:56 ----HD---- C:\Program Files\InstallShield Installation Information
2011-10-17 10:25:10 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-10-16 22:18:19 ----D---- C:\Config.Msi
2011-10-16 09:52:03 ----HD---- C:\WINDOWS\inf
2011-10-16 09:51:55 ----D---- C:\WINDOWS\system32\CatRoot
2011-10-16 08:43:06 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-15 21:37:44 ----D---- C:\WINDOWS\system32\DirectX
2011-10-15 21:37:35 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-15 21:35:11 ----A---- C:\WINDOWS\game.ini
2011-10-15 21:25:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-10-15 21:25:15 ----D---- C:\Program Files\Common Files\Adobe
2011-10-15 13:03:54 ----RD---- C:\Program Files\Skype
2011-10-13 14:33:01 ----D---- C:\WINDOWS\Minidump
2011-10-13 14:33:01 ----D---- C:\WINDOWS\Debug
2011-10-12 16:51:46 ----RSD---- C:\WINDOWS\assembly
2011-10-12 16:51:46 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-12 14:16:03 ----D---- C:\Documents and Settings\Main\Data aplikací\.minecraft
2011-10-12 08:34:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-12 08:34:20 ----D---- C:\WINDOWS\WinSxS
2011-10-12 08:31:12 ----A---- C:\WINDOWS\system32\MRT.exe
2011-10-11 17:28:52 ----D---- C:\WINDOWS\Help
2011-10-11 17:21:59 ----D---- C:\NVIDIA
2011-10-11 10:29:37 ----A---- C:\WINDOWS\DUMP63ea.tmp
2011-10-10 22:44:38 ----A---- C:\WINDOWS\DUMP63da.tmp
2011-09-27 16:54:38 ----D---- C:\Temp
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\oleaccrc.dll
2011-09-26 11:41:20 ----A---- C:\WINDOWS\system32\oleacc.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-01-09 218176]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-08-03 95896]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 cpuz135;cpuz135; \??\C:\WINDOWS\system32\drivers\cpuz135_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 hidusb;HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-06-25 35088]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-10-29 3341824]
R3 danewFltr;NewDeathAdder Mouse; C:\WINDOWS\system32\drivers\danew.sys [2009-04-21 11136]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidkmdf;Filter Driver Service for HID-KMDF Interface layer; C:\WINDOWS\system32\DRIVERS\hidkmdf.sys [2010-09-25 6656]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-10-02 4878336]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 VKbms;Virtual HID Minidriver; C:\WINDOWS\system32\DRIVERS\VKbms.sys [2010-10-01 10240]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\Main\LOCALS~1\Temp\ALSysIO.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CYUSB;Cypress Generic USB Driver; C:\WINDOWS\System32\Drivers\CYUSB.sys [2009-08-10 38528]
S3 ESEADriver2;ESEADriver2; \??\C:\DOCUME~1\Main\LOCALS~1\Temp\ESEADriver2.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi_oem;PlayLinc Adapter; C:\WINDOWS\system32\DRIVERS\gan_adapter.sys [2006-08-28 10664]
S3 msloop;Microsoft Loopback Adapter Driver; C:\WINDOWS\system32\DRIVERS\loop.sys [2001-08-17 4992]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 S1TRACE;S1TRACE; \??\D:\UR\BzzZ\ProcDump 1.6.2\ProcDump 1.6.2\ProcDump 1.6.2\vxdbody.kmd []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vHidDev;Razer Gaming Device; C:\WINDOWS\system32\DRIVERS\vHidDev.sys [2009-12-21 5760]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcuWVSSchedulerv6;Acunetix WVS Scheduler v6; C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe [2008-11-24 994952]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-10-29 585728]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; D:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-18 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-10-17 214520]
R2 SNMP;SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 32768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-02 136176]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-18 33584]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-02 136176]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 SNMPTRAP;Zachytávání pro službu SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Mc_Murphy]

Zdravím.

Dej mi minutku, hnedle se na to mrknu.

[Mc_Murphy]

Inu, příteli Vrbo, bodejť by to nebylo "pomalé", když to máš zaflákané jako auto po rallye Bohemia.
Samý toolbar a po startu se spouští snad všechen software na planetě.
Namasíruj si prsty a klávesnici, bude toho opravdu hodně!

Jako první v nabídce Přidat nebo odebrat programy odinstaluj všechny nepotřebné toolbary!
Máš jich tam opravdu nechutnou sbírku: Babylon Toolbar, BrotherSoft Extreme Toolbar, Conduit Engine, facemoods Toolbar, SweetIM Toolbar for Internet Explorer.
Všechno to jsou neskutečné zpomalovače a v případě takového Ask.com Toolbaru či Conduit Engine se jedná už i o virus. Pryč se vším, co jde a obsahuje slovo toolbar, zbytek smažu já.
Jako druhý krok aktualizuj MS Internet Explorer na verzi 8. I když používáš prohlížeč Mozilla Firefox, aktualizace řeší spoustu problémů v systému samotném.
Odeber Skype ze spouštění po startu systému - další zdržovačka.
Vidím, že používáš klienta µTorrent. Uvědom si nebezpečí stahování z P2P sítí, které jsou potenciálním bezpečnostním rizikem a prakticky neustále jsou zdrojem virů.
Zbytečně se tím vystavuješ riziku a o tom, co se z torrentů stahuje především, nebudeme polemizovat, že?!

Až to všechno provedeš, fixni v HJT tyto položky:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=bf2&s={searchTerms}&f=4
R3 - URLSearchHook: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - (no file)
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing)
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro0.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (file missing)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing)
O4 - HKLM\..\Run: [BabylonToolbar] "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Registration .LNK = D:\Program Files\Ubisoft\Peter Jackson's King Kong - The Official Game of the Movie\RegistrationReminder.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: Visit in &3D using ExitReality - http://3d.exitreality.com/TransmogrifyPage.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

"Fixnout" znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
HJT najdeš zde: C:\Program Files\trend micro\Main.exe

Některé řádky tam možná po provedení odinstalací nebudou - pokud se tak stane, přeskoč je a fixni vše, co jsem zde uvedl a co tam ještě bude!

Dále stáhni utilitu OTM z jednoho z těchto odkazů:

• http://oldtimer.geekstogo.com/OTM.exe
  http://oldtimer.geekstogo.com/OTM.com
  http://oldtimer.geekstogo.com/OTM.scr

Ulož ji na Plochu a dvojklikem spusť.

Do levého okna Paste Instructions for Items to be Moved zkopíruj tento script:

Kód: Vybrat vše

:Services
gupdate
gupdatem
JavaQuickStarterService
nvUpdatusService

:Reg

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@Facemoods.com
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\searchplugins\conduit.xml
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\searchplugins\sweetim.xml
C:\Program Files\BabylonToolbar
C:\Program Files\ConduitEngine
C:\Program Files\SweetIM
C:\Program Files\BrotherSoft_Extreme
C:\Program Files\facemoods.com
C:\Documents and Settings\All Users\Data aplikací\SweetIM

:Commands
[Purity]
[ResetHosts]
[EmptyTemp]
[EmptyFlash]
[ClearAllRestorePoints]

Nyní klikni na tlačítko [MoveIt!], čímž vše spustíš.
Po restartu mi sem hoď log, který najdeš v C:\_OTM\MovedFiles\

Následující soubory otestuj na stránkách VirusTotal.

• C:\WINDOWS\system32\trltmpct.dll
• Klikni na Procházet.
• Soubor nehledej, jen vlož cestu souboru, který chci otestovat.
• Klikni na Send File.
• Pokud na Tebe vyskočí obrazovka jako je níže, klikni na Reanalyse.
  
• Výsledek analýzy mi sem vlož (jako odkaz).

Takže makej, makej a udělej vše, co jsem Ti psal. Já čekám na ty logy a pak budeme pokračovat.

[Mr.Reyals]

Toolboardy jsou pryč, explorer aktualizován, skype... HJT fixnuto, OTM dole, virustotal http://www.virustotal.com/file-scan/rep ... 1319210384

RD 4ever


All processes killed
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service nvUpdatusService stopped successfully!
Service nvUpdatusService deleted successfully!
========== REGISTRY ==========
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\DUMP63da.tmp moved successfully.
C:\WINDOWS\DUMP63ea.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP135A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP601.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAA3.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI10BA.tmp moved successfully.
C:\WINDOWS\Installer\MSI10F8.tmp moved successfully.
C:\WINDOWS\Installer\MSI10F9.tmp moved successfully.
C:\WINDOWS\Installer\MSI10FA.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A6E.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A6F.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A70.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A71.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A72.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A73.tmp moved successfully.
C:\WINDOWS\Installer\MSI4A74.tmp moved successfully.
C:\WINDOWS\Installer\MSI5D02.tmp moved successfully.
C:\WINDOWS\Installer\MSI5D04.tmp moved successfully.
C:\WINDOWS\Installer\MSI5D05.tmp moved successfully.
C:\WINDOWS\Installer\MSI5D06.tmp moved successfully.
C:\WINDOWS\Installer\MSI5D07.tmp moved successfully.
C:\WINDOWS\Installer\MSIB70.tmp moved successfully.
C:\WINDOWS\system32\ConduitEngine.tmp moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\content folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\components folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\tmp\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\tmp\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\tmp\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\tmp folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\text-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\props folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn\prop-base folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com\.svn folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@babylon.com folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@Facemoods.com\defaults folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@Facemoods.com\components folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\ffxtlbr@Facemoods.com folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\searchplugin folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\modules folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\META-INF folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\defaults folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\components folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}\chrome folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13} folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\skin folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\nl-NL folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\it-IT folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\fr-FR folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\es-ES folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\en-US folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\de-DE folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\content folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\searchplugins\conduit.xml moved successfully.
C:\Documents and Settings\Main\Data aplikací\Mozilla\Firefox\Profiles\87mzwclp.default\searchplugins\sweetim.xml moved successfully.
File/Folder C:\Program Files\BabylonToolbar not found.
File/Folder C:\Program Files\ConduitEngine not found.
File/Folder C:\Program Files\SweetIM not found.
File/Folder C:\Program Files\BrotherSoft_Extreme not found.
File/Folder C:\Program Files\facemoods.com not found.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\packages\FailDialog folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\packages folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\contentdb folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\Bars\Default\400 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\Bars\Default\200 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\Bars\Default\100 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\Bars\Default folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data\Bars folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\data folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\conf\users folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\conf folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\SweetIM folder moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Main
->Temp folder emptied: 214844542 bytes
->Temporary Internet Files folder emptied: 2730837 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 98452061 bytes
->Flash cache emptied: 1047 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 180224 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 20121520 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 321840 bytes

Total Files Cleaned = 321,00 mb


[EMPTYFLASH]

User: All Users

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: Main
->Flash cache emptied: 0 bytes

User: NetworkService

User: UpdatusUser
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


Restore points cleared and new OTM Restore Point set!

OTM by OldTimer - Version 3.1.19.0 log created on 10212011_174354

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\Perflib_Perfdata_a8.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[Mc_Murphy]

Odkaz z VT mi nejde otevřít. Možná nějaká chybka u nich na serveru, zkusím to později.
RD je můj skalní seriál, jsem s ním skoro až úchylný. ... ...
Provedeme ještě scan s MBAM, pro jistotu.

Stáhni a nainstaluj Malwarebytes' Anti-Malware (zkráceně MBAM) podle návodu z tohoto topicu.

• Proveď aktualizaci virové databáze.
• V záložce Kontrolor zvol Úplná kontrola a zaškrtni všechny pevné disky, které máš na počítači.
• Předem nic nemaž!!
• MBAM mívá občas falešné detekce, proto vlož jeho log do příspěvku a počkej na posouzení!

Jak je na tom počítač?