Mam problém s PC nemůžu nic.

[NeedHelp]

Už se to rozhejbalo a mám ten log

ComboFix 13-01-16.01 - Honza 16.01.2013 23:11:51.1.2 - x86
Spuštěný z: c:\users\Honza\Desktop\ComboFix.exe
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-16 do 2013-01-16 )))))))))))))))))))))))))))))))
.
.
2013-01-16 21:44 . 2013-01-16 22:01 -------- d-----w- c:\program files\trend micro
2013-01-16 21:42 . 2013-01-16 21:42 -------- d-----w- C:\rsit
2013-01-16 21:02 . 2013-01-16 21:02 -------- d-----w- C:\FRST
2013-01-16 20:27 . 2013-01-16 20:30 -------- d-----w- c:\users\blllaaa
2013-01-16 19:05 . 2013-01-16 21:59 -------- d-----w- c:\programdata\AVAST Software
2013-01-16 19:05 . 2013-01-16 19:05 -------- d-----w- c:\program files\AVAST Software
2013-01-15 17:00 . 2013-01-15 17:00 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-01-11 13:10 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DE4BDC7F-2A79-4746-A480-7DF6DEDCC940}\mpengine.dll
2013-01-09 19:40 . 2012-11-23 02:48 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-01-09 19:40 . 2012-11-20 04:51 220160 ----a-w- c:\windows\system32\ncrypt.dll
2012-12-30 15:24 . 2012-12-30 15:24 -------- d-----w- c:\users\Honza\AppData\Local\Macromedia
2012-12-28 21:45 . 2012-12-28 21:45 -------- d-----w- c:\users\Honza\AppData\Roaming\NVIDIA
2012-12-20 22:50 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-20 22:50 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-08 21:37 . 2012-11-18 20:57 74248 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-01-08 21:37 . 2012-11-18 20:57 697864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-18 17:00 . 2012-11-18 17:00 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-11-18 17:00 . 2012-11-18 17:00 161792 ----a-w- c:\windows\system32\msls31.dll
2012-11-18 17:00 . 2012-11-18 17:00 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-11-18 17:00 . 2012-11-18 17:00 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-11-18 17:00 . 2012-11-18 17:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-11-18 17:00 . 2012-11-18 17:00 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-11-18 17:00 . 2012-11-18 17:00 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-11-18 17:00 . 2012-11-18 17:00 367104 ----a-w- c:\windows\system32\html.iec
2012-11-18 17:00 . 2012-11-18 17:00 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-11-18 17:00 . 2012-11-18 17:00 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-11-18 17:00 . 2012-11-18 17:00 152064 ----a-w- c:\windows\system32\wextract.exe
2012-11-18 17:00 . 2012-11-18 17:00 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-11-18 17:00 . 2012-11-18 17:00 11776 ----a-w- c:\windows\system32\mshta.exe
2012-11-18 17:00 . 2012-11-18 17:00 101888 ----a-w- c:\windows\system32\admparse.dll
2012-11-18 17:00 . 2012-11-18 17:00 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-11-18 16:04 . 2012-11-18 16:04 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-11-18 16:04 . 2012-11-18 16:04 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-18 16:03 . 2012-11-18 16:04 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-11-18 16:03 . 2012-11-18 16:04 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-11-14 02:09 . 2012-12-12 21:28 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58 . 2012-12-12 21:28 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57 . 2012-12-12 21:28 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49 . 2012-12-12 21:28 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48 . 2012-12-12 21:28 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44 . 2012-12-12 21:28 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-09 04:42 . 2012-12-12 21:06 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-02 05:11 . 2012-12-12 21:06 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-15 13:51 . 2012-12-15 13:51 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
c:\users\blllaaa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
runctf.lnk - c:\windows\System32\rundll32.exe [2009-7-14 44544]
.
c:\users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
runctf.lnk - c:\windows\System32\rundll32.exe [2009-7-14 44544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^runctf.lnk]
path=c:\users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
backup=c:\windows\pss\runctf.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-03 07:35 946352 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2010-03-13 13:54 91520 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-08-28 13:52 3671904 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
2012-10-23 16:38 5074384 ----a-w- c:\program files\ESET\ESET Smart Security\egui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-11-18 15:52 116648 ----atw- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 08:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 PcaSp60;Rawether NDIS 6.X SPR Protocol Driver;c:\windows\system32\DRIVERS\PcaSp60.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-18 21:37]
.
2013-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000Core.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-18 15:52]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000UA.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-18 15:52]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fotbal.idnes.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.1.2 10.0.1.6
TCP: Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A}: NameServer = 10.0.1.2,10.0.1.6
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\31ld2exw.default\
FF - prefs.js: browser.startup.homepage - hxxps://192.168.1.244/nov/login.php
FF - ExtSQL: 2012-11-18 17:01; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\31ld2exw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\WUDFHost.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2013-01-16 23:23:19 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-16 22:23
.
Před spuštěním: Volných bajtů: 127 273 046 016
Po spuštění: Volných bajtů: 127 352 578 048
.
- - End Of File - - 8921FD91063C8FE235EAFBA2D9180830

[NeedHelp]

Rogue Killer :

RogueKiller V8.4.3 [Jan 10 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Kontrola -- Datum : 01/16/2013 23:27:07

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 14 ¤¤¤
[STARTUP][Rans.Gendarm] runctf.lnk @blllaaa : C:\Windows\System32\rundll32.exe|c:\users\honza\wgsdgsdgdsgsd.exe,H1N1 -> NALEZENO
[STARTUP][Rans.Gendarm] runctf.lnk @Honza : C:\Windows\System32\rundll32.exe|c:\users\honza\wgsdgsdgdsgsd.exe,H1N1 -> NALEZENO
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A} : NameServer (10.0.1.2,10.0.1.6) -> NALEZENO
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A} : NameServer (10.0.1.2,10.0.1.6) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowHelp (0) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤
-> D:\windows\system32\config\SOFTWARE
-> D:\windows\system32\config\SYSTEM
-> D:\Documents and Settings\Administrator\NTUSER.DAT
-> D:\Documents and Settings\Default User\NTUSER.DAT
-> D:\Documents and Settings\Guest\NTUSER.DAT
-> D:\Documents and Settings\LocalService\NTUSER.DAT
-> D:\Documents and Settings\NetworkService\NTUSER.DAT

¤¤¤ Nákaza : Rans.Gendarm ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD3200AAJB-00TYA0 ATA Device +++++
--- User ---
[MBR] c57dc4f193d55d65914f6cf01fdad9ee
[BSP] adb420f2420fb39ee186930c27293d59 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 305143 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD3200AAJS-00VWA0 ATA Device +++++
--- User ---
[MBR] d50c192bbcf07fe82a524864c689bb5f
[BSP] 77e04c1cdda89f3215a9dfd590b85879 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive2: SMI USB DISK USB Device +++++
--- User ---
[MBR] c8f5fee9a9e375663d0050d000a97d3d
[BSP] 33a07a59d299ab4ea9f4ab0156f9d86f : Windows XP MBR Code
Partition table:
0 - [ACTIVE] FAT32 (0x0b) [VISIBLE] Offset (sectors): 10200 | Size: 7662 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[1]_S_01162013_02d2327.txt >>
RKreport[1]_S_01162013_02d2327.txt

[vyosek]

Spustte znovu RogueKiller

• Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
• Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
• Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte

[NeedHelp]

Zprava 1 :
RogueKiller V8.4.3 [Jan 10 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Odebrat -- Datum : 01/16/2013 23:38:48

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 14 ¤¤¤
[STARTUP][Rans.Gendarm] runctf.lnk @blllaaa : C:\Windows\System32\rundll32.exe|c:\users\honza\wgsdgsdgdsgsd.exe,H1N1 -> VYMAZÁNO
[STARTUP][Rans.Gendarm] runctf.lnk @Honza : C:\Windows\System32\rundll32.exe|c:\users\honza\wgsdgsdgdsgsd.exe,H1N1 -> VYMAZÁNO
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A} : NameServer (10.0.1.2,10.0.1.6) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A} : NameServer (10.0.1.2,10.0.1.6) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowHelp (0) -> NAHRAZENO (1)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤
-> D:\windows\system32\config\SOFTWARE
-> D:\windows\system32\config\SYSTEM
-> D:\Documents and Settings\Administrator\NTUSER.DAT
-> D:\Documents and Settings\Default User\NTUSER.DAT
-> D:\Documents and Settings\Guest\NTUSER.DAT
-> D:\Documents and Settings\LocalService\NTUSER.DAT
-> D:\Documents and Settings\NetworkService\NTUSER.DAT

¤¤¤ Nákaza : Rans.Gendarm ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD3200AAJB-00TYA0 ATA Device +++++
--- User ---
[MBR] c57dc4f193d55d65914f6cf01fdad9ee
[BSP] adb420f2420fb39ee186930c27293d59 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 305143 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD3200AAJS-00VWA0 ATA Device +++++
--- User ---
[MBR] d50c192bbcf07fe82a524864c689bb5f
[BSP] 77e04c1cdda89f3215a9dfd590b85879 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[3]_D_01162013_02d2338.txt >>
RKreport[1]_S_01162013_02d2327.txt ; RKreport[2]_S_01162013_02d2338.txt ; RKreport[3]_D_01162013_02d2338.txt

Zpráva 2 :

RogueKiller V8.4.3 [Jan 10 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spuštěno v : Normální režim
Uživatel : Honza [Práva správce]
Mód : Oprava HOSTS -- Datum : 01/16/2013 23:39:27

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤
-> D:\windows\system32\config\SOFTWARE
-> D:\windows\system32\config\SYSTEM
-> D:\Documents and Settings\Administrator\NTUSER.DAT
-> D:\Documents and Settings\Default User\NTUSER.DAT
-> D:\Documents and Settings\Guest\NTUSER.DAT
-> D:\Documents and Settings\LocalService\NTUSER.DAT
-> D:\Documents and Settings\NetworkService\NTUSER.DAT

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[4]_H_01162013_02d2339.txt >>
RKreport[1]_S_01162013_02d2327.txt ; RKreport[2]_S_01162013_02d2338.txt ; RKreport[3]_D_01162013_02d2338.txt ; RKreport[4]_H_01162013_02d2339.txt

[vyosek]

OK, spustte nyni ComboFix

[NeedHelp]

Log s combofixu je zde , tentokrát to celé proběhlo bez toho aniž by se PC uprostřed toho restartovalo :

ComboFix 13-01-16.01 - Honza 17.01.2013 0:02.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.2046.1191 [GMT 1:00]
Spuštěný z: c:\users\Honza\Desktop\ComboFix.exe
AV: ESET Smart Security 6.0 *Disabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-16 do 2013-01-16 )))))))))))))))))))))))))))))))
.
.
2013-01-16 23:07 . 2013-01-16 23:07 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-01-16 23:07 . 2013-01-16 23:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-16 21:44 . 2013-01-16 22:01 -------- d-----w- c:\program files\trend micro
2013-01-16 21:42 . 2013-01-16 21:42 -------- d-----w- C:\rsit
2013-01-16 21:02 . 2013-01-16 21:02 -------- d-----w- C:\FRST
2013-01-16 20:27 . 2013-01-16 20:30 -------- d-----w- c:\users\blllaaa
2013-01-16 19:05 . 2013-01-16 21:59 -------- d-----w- c:\programdata\AVAST Software
2013-01-16 19:05 . 2013-01-16 19:05 -------- d-----w- c:\program files\AVAST Software
2013-01-15 17:00 . 2013-01-15 17:00 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-01-09 19:40 . 2012-11-23 02:48 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-01-09 19:40 . 2012-11-20 04:51 220160 ----a-w- c:\windows\system32\ncrypt.dll
2012-12-30 15:24 . 2012-12-30 15:24 -------- d-----w- c:\users\Honza\AppData\Local\Macromedia
2012-12-28 21:45 . 2012-12-28 21:45 -------- d-----w- c:\users\Honza\AppData\Roaming\NVIDIA
2012-12-20 22:50 . 2012-12-16 14:13 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-20 22:50 . 2012-12-16 14:13 34304 ----a-w- c:\windows\system32\atmlib.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-08 21:37 . 2012-11-18 20:57 74248 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-01-08 21:37 . 2012-11-18 20:57 697864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-18 17:00 . 2012-11-18 17:00 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-11-18 17:00 . 2012-11-18 17:00 161792 ----a-w- c:\windows\system32\msls31.dll
2012-11-18 17:00 . 2012-11-18 17:00 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-11-18 17:00 . 2012-11-18 17:00 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-11-18 17:00 . 2012-11-18 17:00 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-11-18 17:00 . 2012-11-18 17:00 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-11-18 17:00 . 2012-11-18 17:00 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-11-18 17:00 . 2012-11-18 17:00 367104 ----a-w- c:\windows\system32\html.iec
2012-11-18 17:00 . 2012-11-18 17:00 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-11-18 17:00 . 2012-11-18 17:00 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-11-18 17:00 . 2012-11-18 17:00 152064 ----a-w- c:\windows\system32\wextract.exe
2012-11-18 17:00 . 2012-11-18 17:00 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-11-18 17:00 . 2012-11-18 17:00 11776 ----a-w- c:\windows\system32\mshta.exe
2012-11-18 17:00 . 2012-11-18 17:00 101888 ----a-w- c:\windows\system32\admparse.dll
2012-11-18 17:00 . 2012-11-18 17:00 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-11-18 16:04 . 2012-11-18 16:04 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-11-18 16:04 . 2012-11-18 16:04 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-18 16:03 . 2012-11-18 16:04 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-11-18 16:03 . 2012-11-18 16:04 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-11-14 02:09 . 2012-12-12 21:28 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58 . 2012-12-12 21:28 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57 . 2012-12-12 21:28 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49 . 2012-12-12 21:28 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48 . 2012-12-12 21:28 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44 . 2012-12-12 21:28 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-09 04:42 . 2012-12-12 21:06 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-02 05:11 . 2012-12-12 21:06 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-15 13:51 . 2012-12-15 13:51 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^runctf.lnk]
path=c:\users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk
backup=c:\windows\pss\runctf.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-03 07:35 946352 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2010-03-13 13:54 91520 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-08-28 13:52 3671904 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
2012-10-23 16:38 5074384 ----a-w- c:\program files\ESET\ESET Smart Security\egui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-11-18 15:52 116648 ----atw- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 08:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 PcaSp60;Rawether NDIS 6.X SPR Protocol Driver;c:\windows\system32\DRIVERS\PcaSp60.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - TRUESIGHT
*NewlyCreated* - WS2IFSL
*Deregistered* - TrueSight
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-18 21:37]
.
2013-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000Core.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-18 15:52]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000UA.job
- c:\users\Honza\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-18 15:52]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://fotbal.idnes.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.1.2 10.0.1.6
TCP: Interfaces\{7CE8765F-A30D-4D4C-91B6-B62232631E8A}: NameServer = 10.0.1.2,10.0.1.6
FF - ProfilePath - c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\31ld2exw.default\
FF - prefs.js: browser.startup.homepage - hxxps://192.168.1.244/nov/login.php
FF - ExtSQL: 2012-11-18 17:01; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\31ld2exw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-17 00:09:14
ComboFix-quarantined-files.txt 2013-01-16 23:09
ComboFix2.txt 2013-01-16 22:23
.
Před spuštěním: Volných bajtů: 127 199 461 376
Po spuštění: Volných bajtů: 126 792 200 192
.
- - End Of File - - BEA770921E2EC793B7BE459861F7E2E5

[NeedHelp]

Jaký bude další krok ? Nebo je to vše ?

[vyosek]

Trochu trpelivosti prosim, my jsme tu zdarma a ve svem volnem case, pokud jste chtel urgentni reseni, mel jste se obratit na placeny servis, kde jste se mohl dozadovat okamziteho reseni

Na ten ESET asi nemate zakoupenou licenci ze?? A co ta nejvyssi verze windows

[NeedHelp]

Eset je s licencí i windows 7 je s licencí Pardon omlouvám se, já myslel že už je to vyřešené, tak jsem se chtěl jen ujistit, omlouvám se

[vyosek]

Antivir vypada zastarale

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :reg
  [-HKLM\~\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^runctf.lnk]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
  
  :files
  c:\windows\Tasks\*job
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[NeedHelp]

Omlouvám se za zpoždění byl jsem mimo. Zde je ten lgo.

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\~\startupfolder\C:^Users^Honza^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^runctf.lnk\ not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
========== FILES ==========
c:\windows\Tasks\Adobe Flash Player Updater.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000Core.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2119101845-1436983725-514995877-1000UA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\msdownld.tmp folder moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: blllaaa
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Honza
->Temp folder emptied: 351724 bytes
->Temporary Internet Files folder emptied: 26924271 bytes
->Java cache emptied: 196523 bytes
->FireFox cache emptied: 72074196 bytes
->Google Chrome cache emptied: 70310572 bytes
->Flash cache emptied: 678 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 38723779 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 199,00 mb


[EMPTYFLASH]

User: All Users

User: blllaaa

User: Default

User: Default User

User: Honza
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: blllaaa

User: Default

User: Default User

User: Honza
->Java cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 01272013_164408

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[vyosek]

Tak jeste uklidime

Odinstalujte Combofix

• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel èistiè

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse