Prosím o kontrolu logu po "léčení" PC děkuji.

Zpráva

kolizek · #1 Příspěvek od **kolizek** » 09 lis 2013 15:16

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jaryn at 2013-11-09 15:13:18
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 279 GB (91%) free of 305 GB
Total RAM: 2047 MB (68% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-31 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-31 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5110672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX]
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2008-03-24 884736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-03-17 1040384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-10-12 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~1\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"gupdatem"=3
"gupdate"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-10-12 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-02-14 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe"="C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe:*:Enabled:Samsung AllShare Service"
"C:\Program Files\Samsung\AllShare\AllShare.exe"="C:\Program Files\Samsung\AllShare\AllShare.exe:*:Enabled:Samsung AllShare Player"
"C:\Program Files\Samsung\AllShare\AllShareAgent.exe"="C:\Program Files\Samsung\AllShare\AllShareAgent.exe:*:Enabled:Samsung AllShare Agent"
"C:\Program Files\MyPhoneExplorer\MyPhoneExplorer.exe"="C:\Program Files\MyPhoneExplorer\MyPhoneExplorer.exe:*:Enabled:MyPhoneExplorer"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{51cebf3e-4997-11e1-9183-00221545e029}]
shell\AutoRun\command - I:\LaunchU3.exe -a

======List of files/folders created in the last 1 months======

2013-11-09 15:13:18 ----D---- C:\rsit
2013-11-09 15:13:18 ----D---- C:\Program Files\trend micro
2013-10-31 16:46:10 ----D---- C:\Program Files\ESET
2013-10-31 16:46:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2013-10-31 16:00:21 ----D---- C:\Program Files\HitmanPro
2013-10-31 15:56:35 ----A---- C:\WINDOWS\system32\bootdelete.exe
2013-10-31 15:49:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\HitmanPro
2013-10-31 15:16:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2013-10-31 14:30:01 ----A---- C:\WINDOWS\UPGRADE.TXT
2013-10-31 14:27:36 ----D---- C:\WINDOWS\setup.pss
2013-10-31 12:43:56 ----D---- C:\Program Files\Common Files\Java
2013-10-31 12:43:52 ----A---- C:\WINDOWS\system32\javaws.exe
2013-10-31 12:43:48 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-10-31 12:43:48 ----A---- C:\WINDOWS\system32\javaw.exe
2013-10-31 12:43:48 ----A---- C:\WINDOWS\system32\java.exe
2013-10-31 12:43:32 ----D---- C:\Program Files\Java
2013-10-31 12:35:44 ----A---- C:\pmtimer.exe
2013-10-31 12:35:44 ----A---- C:\mute.exe
2013-10-31 12:35:44 ----A---- C:\makePNF.exe
2013-10-31 12:35:44 ----A---- C:\DSPdsblr.exe
2013-10-31 12:35:44 ----A---- C:\DPsFnshr.ini
2013-10-31 12:35:44 ----A---- C:\DPsFnshr.exe
2013-10-31 12:35:44 ----A---- C:\devcon.exe
2013-10-31 12:35:12 ----A---- C:\DriverPack_MassStorage_wnt5_x86-32.ini
2013-10-31 12:35:00 ----A---- C:\DriverPack_LAN_wnt5_x86-32.ini
2013-10-31 12:34:59 ----A---- C:\DriverPack_CPU_wnt5_x86-32.ini
2013-10-31 12:34:58 ----D---- C:\D
2013-10-31 12:34:58 ----A---- C:\DriverPack_Chipset_wnt5_x86-32.ini
2013-10-31 11:46:03 ----D---- C:\Program Files\MSN Gaming Zone
2013-10-31 11:03:47 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\ESET
2013-10-31 10:54:18 ----D---- C:\Program Files\CCleaner
2013-10-31 10:44:16 ----D---- C:\WINDOWS\system32\appmgmt
2013-10-10 07:02:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2013-10-10 07:02:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2013-10-10 06:57:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2013-10-10 06:56:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2883150$
2013-10-10 06:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$

======List of files/folders modified in the last 1 months======

2013-11-09 15:13:18 ----RD---- C:\Program Files
2013-11-09 15:12:52 ----A---- C:\WINDOWS\WINCMD.INI
2013-11-09 14:58:00 ----D---- C:\WINDOWS\Temp
2013-11-09 14:55:03 ----D---- C:\WINDOWS\Prefetch
2013-11-09 14:54:55 ----D---- C:\Program Files\Opera
2013-11-09 14:29:59 ----D---- C:\WINDOWS
2013-11-09 14:28:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-11-09 14:26:53 ----ASH---- C:\boot.ini
2013-11-09 13:48:25 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\gtk-2.0
2013-11-04 12:18:45 ----HD---- C:\WINDOWS\inf
2013-11-03 09:45:16 ----D---- C:\WINDOWS\system32
2013-10-31 17:14:10 ----A---- C:\WINDOWS\win.ini
2013-10-31 17:14:10 ----A---- C:\WINDOWS\system.ini
2013-10-31 16:47:06 ----SHD---- C:\WINDOWS\Installer
2013-10-31 16:47:04 ----HD---- C:\Config.Msi
2013-10-31 16:46:54 ----D---- C:\WINDOWS\system32\drivers
2013-10-31 16:46:54 ----D---- C:\WINDOWS\system32\CatRoot
2013-10-31 16:46:41 ----D---- C:\WINDOWS\system32\CatRoot2
2013-10-31 15:39:26 ----D---- C:\WINDOWS\pss
2013-10-31 14:36:59 ----D---- C:\WINDOWS\system32\NtmsData
2013-10-31 12:43:56 ----D---- C:\Program Files\Common Files
2013-10-31 12:33:47 ----D---- C:\Program Files\Outlook Express
2013-10-31 12:33:45 ----D---- C:\Program Files\Movie Maker
2013-10-31 12:00:11 ----D---- C:\Documents and Settings
2013-10-31 11:59:18 ----SHD---- C:\System Volume Information
2013-10-31 11:48:25 ----D---- C:\Program Files\Windows Media Player
2013-10-31 11:48:25 ----D---- C:\Program Files\NetMeeting
2013-10-31 11:48:23 ----D---- C:\Program Files\Common Files\Services
2013-10-31 11:48:19 ----D---- C:\Program Files\Internet Explorer
2013-10-31 11:47:53 ----D---- C:\Program Files\Common Files\System
2013-10-31 11:46:16 ----D---- C:\Program Files\Windows Media Connect 2
2013-10-31 11:46:11 ----D---- C:\Program Files\Messenger
2013-10-31 11:45:57 ----D---- C:\Program Files\Windows NT
2013-10-31 10:47:16 ----D---- C:\WINDOWS\system32\config
2013-10-31 10:43:46 ----SD---- C:\WINDOWS\Tasks
2013-10-31 10:43:45 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Systweak
2013-10-31 10:15:12 ----D---- C:\Program Files\MyPhoneExplorer
2013-10-30 22:24:38 ----D---- C:\WINDOWS\Registration
2013-10-30 22:24:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-15 17:22:48 ----D---- C:\WINDOWS\Microsoft.NET
2013-10-10 17:25:45 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-10 17:11:49 ----D---- C:\WINDOWS\Debug
2013-10-10 13:51:53 ----RSD---- C:\WINDOWS\assembly
2013-10-10 07:04:07 ----D---- C:\WINDOWS\WinSxS
2013-10-10 07:02:33 ----D---- C:\WINDOWS\system32\dllcache
2013-10-10 06:59:09 ----D---- C:\WINDOWS\system32\MRT
2013-10-10 06:57:30 ----A---- C:\WINDOWS\system32\MRT.exe
2013-10-10 06:56:44 ----D---- C:\WINDOWS\ie8updates

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2013-09-17 184664]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2013-09-17 61600]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2013-09-17 174400]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-03-24 331264]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-10-12 7206400]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2013-09-17 38952]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2009-02-14 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2006-02-26 5810]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-12-09 296448]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 akuyi1ns;akuyi1ns; C:\WINDOWS\system32\drivers\akuyi1ns.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2009-02-14 60800]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2012-09-20 83168]
S3 dgderdrv;dgderdrv; C:\WINDOWS\system32\drivers\dgderdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2004-07-09 52096]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2009-02-14 61824]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2012-09-20 181344]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-02-12 12928]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w800bus;Sony Ericsson W800 driver (WDM); C:\WINDOWS\system32\DRIVERS\w800bus.sys [2005-05-24 52384]
S3 w800mdfl;Sony Ericsson W800 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w800mdfl.sys [2005-05-24 6096]
S3 w800mdm;Sony Ericsson W800 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\w800mdm.sys [2005-05-24 87424]
S3 w800mgmt;Sony Ericsson W800 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\w800mgmt.sys [2005-05-24 79216]
S3 w800obex;Sony Ericsson W800 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\w800obex.sys [2005-05-24 77040]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WinUSB;SAMSUNG Android USB Driver; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-02-14 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-02-14 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-10-12 643072]
R2 CDMA Device Service;CDMA Device Service; C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe [2011-08-02 63488]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2010-07-29 238952]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-31 182696]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 756392]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-19 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-19 136176]
S4 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 09 lis 2013 16:02

Zdravim

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam, ze ten ESET jak ma byt = zakoupena licence

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

kolizek · #3 Příspěvek od **kolizek** » 09 lis 2013 16:15

2. log:
info.txt logfile of random's system information tool 1.06 2013-11-09 15:13:23

======Uninstall list======

-->C:\DOCUME~1\ALLUSE~1\DATAAP~1\INSTAL~1\{366E8~1\Setup.exe /remove /q0
-->C:\DOCUME~1\ALLUSE~1\DATAAP~1\INSTAL~1\{5D692~1\Setup.exe /remove /q0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ACDSee Pro 3 Build 355 - Český překlad-->C:\Program Files\ACD Systems\ACDSee Pro\3.0\odinstalovat_cz.exe
ACDSee Pro 3-->MsiExec.exe /I{1B280FAF-AE10-4E31-A41A-DB3917D651DC}
Adobe Flash Player 11 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -maintain plugin
Adobe Reader X (10.1.8) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA1000000001}
Aktualizace systému Windows Internet Explorer 8 (KB2598845)-->"C:\WINDOWS\ie8updates\KB2598845-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2416400)-->"C:\WINDOWS\ie7updates\KB2416400-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2482017)-->"C:\WINDOWS\ie7updates\KB2482017-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2497640)-->"C:\WINDOWS\ie7updates\KB2497640-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2530548)-->"C:\WINDOWS\ie7updates\KB2530548-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2544521)-->"C:\WINDOWS\ie7updates\KB2544521-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2559049)-->"C:\WINDOWS\ie7updates\KB2559049-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2586448)-->"C:\WINDOWS\ie7updates\KB2586448-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2618444)-->"C:\WINDOWS\ie7updates\KB2618444-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2647516)-->"C:\WINDOWS\ie7updates\KB2647516-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)-->"C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2544521)-->"C:\WINDOWS\ie8updates\KB2544521-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2618444)-->"C:\WINDOWS\ie8updates\KB2618444-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2647516)-->"C:\WINDOWS\ie8updates\KB2647516-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2675157)-->"C:\WINDOWS\ie8updates\KB2675157-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2699988)-->"C:\WINDOWS\ie8updates\KB2699988-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2722913)-->"C:\WINDOWS\ie8updates\KB2722913-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2744842)-->"C:\WINDOWS\ie8updates\KB2744842-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2761465)-->"C:\WINDOWS\ie8updates\KB2761465-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2792100)-->"C:\WINDOWS\ie8updates\KB2792100-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2797052)-->"C:\WINDOWS\ie8updates\KB2797052-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2799329)-->"C:\WINDOWS\ie8updates\KB2799329-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2809289)-->"C:\WINDOWS\ie8updates\KB2809289-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2817183)-->"C:\WINDOWS\ie8updates\KB2817183-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2829530)-->"C:\WINDOWS\ie8updates\KB2829530-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2838727)-->"C:\WINDOWS\ie8updates\KB2838727-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2846071)-->"C:\WINDOWS\ie8updates\KB2846071-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2847204)-->"C:\WINDOWS\ie8updates\KB2847204-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2862772)-->"C:\WINDOWS\ie8updates\KB2862772-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2870699)-->"C:\WINDOWS\ie8updates\KB2870699-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2879017)-->"C:\WINDOWS\ie8updates\KB2879017-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB982381)-->"C:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2847311)-->"C:\WINDOWS\$NtUninstallKB2847311$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2862330)-->"C:\WINDOWS\$NtUninstallKB2862330$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2862335)-->"C:\WINDOWS\$NtUninstallKB2862335$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2868038)-->"C:\WINDOWS\$NtUninstallKB2868038$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2883150)-->"C:\WINDOWS\$NtUninstallKB2883150$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
AMD APP SDK Runtime-->MsiExec.exe /I{A25FF1C0-80B6-4B8B-A551-DC525697A408}
Catalyst Control Center - Branding-->MsiExec.exe /I{19A492A0-888F-44A0-9B21-D91700763F62}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Dynamic-Photo HDR 5-->"C:\Program Files\DynamicPhotoHDR5\unins000.exe"
Fallout New Vegas-->"D:\Games\Fallout New Vegas\unins000.exe"
GIMP 2.6.11-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Google Earth-->MsiExec.exe /X{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {99A120B0-F930-3427-A833-FAD753B85527} /parameterfolder Client
HP PSC & OfficeJet 6.1.A-->"C:\Program Files\HP\Digital Imaging\{27555031-A116-4EC6-9991-7B400142A936}\setup\hpzscr01.exe" -datfile hposcr08.dat
ImgBurn-->"C:\Program Files\ImgBurn\uninstall.exe"
Jalbum-->MsiExec.exe /I{9D4491FE-DBA0-4B08-80D9-C6A9F9A63E18}
Java 7 Update 45-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217045FF}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{A2C9CD1B-2551-3AED-B244-6698FB929FA6}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{546C143E-68DC-314D-97BC-1E454E3BA429}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - csy-->MsiExec.exe /I{DD73CA82-EA82-38AA-863D-9A24A018DC96}
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\setup.exe
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}
Microsoft .NET Framework 4 Client Profile-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft .NET Framework 4 Extended CSY Language Pack-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\ExtendedLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ExtendedLP
Microsoft .NET Framework 4 Extended CSY Language Pack-->MsiExec.exe /X{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}
Microsoft .NET Framework 4 Extended-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{0A0CADCF-78DA-33C4-A350-CD51849B9702}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft Office XP Professional s aplikací FrontPage-->MsiExec.exe /I{90280405-6000-11D3-8CFE-0050048383C9}
Microsoft PowerPoint Viewer-->MsiExec.exe /X{95140000-00AF-0409-0000-0000000FF1CE}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft WinUsb 1.0-->"C:\WINDOWS\$NtUninstallwinusb0100$\spuninst\spuninst.exe"
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MyPhoneExplorer-->C:\Program Files\MyPhoneExplorer\uninstall.exe
ODF Add-in for Microsoft Office-->MsiExec.exe /I{2BC21CD2-8053-406A-80F6-9AB61717B49D}
Opera 12.16-->"C:\Program Files\Opera\Opera.exe" /uninstall
Rage-->"D:\Games\Rage\unins000.exe"
Sada Compatibility Pack pro systém Office 2007-->MsiExec.exe /X{90120000-0020-0405-0000-0000000FF1CE}
SAMSUNG CDMA Modem Driver Set-->C:\Program Files\SAMSUNG\SAMSUNG CDMA Modem\SSCDUninstall.exe
SAMSUNG USB Driver for Mobile Phones-->C:\Program Files\Samsung\USB Drivers\Uninstall.exe
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {939AF4BC-EC42-38D1-AE82-91D4A7ED8911} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8433C01-319F-3370-850E-87C35496299A} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {48B0C142-A0F4-3263-90E1-1984CBB8DD18} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {67A5F99B-5EBA-3812-8D2E-BC251490DD3F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {86BB5A25-8CC3-33CE-A393-CF28901682B2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {16EEC04A-B924-37E0-97CF-422DCEFC1B63} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C4D978AA-2668-3404-96DE-96E2AFC62FD7} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CD6D9B8A-BBC4-3FA7-B24D-D74CE90630CF} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FCBF8C05-F031-381A-8B7F-45403B55ADF5} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {ECBEE23D-AB7E-3DAA-B66B-CD52003198F1} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {788818B1-B191-3217-A210-7ACFDE19CE4A} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B7C20E16-9A3A-3F05-A6B5-E15AA09200E0} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CF581973-77E0-3093-A1AC-A03130DE990F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {80774950-A707-386B-9C9B-D052D20BD54B} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {576C07F8-777C-3981-B8BF-063A6B57254E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {90EA7C4E-7F03-31FD-BE27-B1A9B4AE56BD} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {1E88AFAE-CEF7-3540-8FF6-6D00877B2767} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8BA4E34D-95C5-3907-87E4-62FBB31A2190} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {21AEAFE4-6F0E-3169-A09C-9FB37C77E555} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {42A3562E-8B4E-39A4-B82D-CC12F82889E3} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {FCBF8C05-F031-381A-8B7F-45403B55ADF5} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {788818B1-B191-3217-A210-7ACFDE19CE4A} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {8BA4E34D-95C5-3907-87E4-62FBB31A2190} /parameterfolder Extended
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002)-->MsiExec.exe /X{09959E11-AD5D-408E-96AF-E3346954D6B8}
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002)-->MsiExec.exe /X{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}
SoundMAX-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x5 -removeonly
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Trine 2-->"D:\Games\Trine 2\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
WinRAR 4.00 beta 4 (32-bit)-->C:\Program Files\WinRAR\uninstall.exe
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 acdid.acdsystems.com

======Security center information======

AV: ESET Smart Security 7.0
FW: ESET Personální firewall

======System event log======

Computer Name: JARYN
Event Code: 10005
Message: Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby IISADMIN s argumenty
za účelem spuštění serveru:
{A9E69610-B80D-11D0-B9B9-00A0C922E750}

Record Number: 1291
Source Name: DCOM
Time Written: 20131008072148.000000+120
Event Type: error
User: NT AUTHORITY\SYSTEM

Computer Name: JARYN
Event Code: 4226
Message: Došlo k překročení limitu možného počtu souběžných připojení protokolem TCP.

Record Number: 1278
Source Name: Tcpip
Time Written: 20131007144527.000000+120
Event Type: warning
User:

Computer Name: JARYN
Event Code: 18
Message:
Record Number: 1233
Source Name: avgntflt
Time Written: 20131007143526.000000+120
Event Type: warning
User:

Computer Name: JARYN
Event Code: 10005
Message: Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby IISADMIN s argumenty
za účelem spuštění serveru:
{A9E69610-B80D-11D0-B9B9-00A0C922E750}

Record Number: 1228
Source Name: DCOM
Time Written: 20131007143528.000000+120
Event Type: error
User: NT AUTHORITY\SYSTEM

Computer Name: JARYN
Event Code: 10005
Message: Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby IISADMIN s argumenty
za účelem spuštění serveru:
{A9E69610-B80D-11D0-B9B9-00A0C922E750}

Record Number: 1201
Source Name: DCOM
Time Written: 20131005043441.000000+120
Event Type: error
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: JARYN
Event Code: 1026
Message: Aplikace: SygicDownloader_1.9.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.NotSupportedException
Zásobník:
na System.Net.WebClient.ClearWebClientState()
na System.Net.WebClient.DownloadFileAsync(System.Uri, System.String, System.Object)
na System.Net.WebClient.DownloadFileAsync(System.Uri, System.String)
na WpfApplication1.MainWindow.DownloadOneFile()
na WpfApplication1.MainWindow.DownloadFiles()
na WpfApplication1.MainWindow.Button_Click(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs)
na System.Windows.Controls.Primitives.ButtonBase.OnClick()
na System.Windows.Controls.Button.OnClick()
na System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs)
na System.Windows.UIElement.OnMouseLeftButtonUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
na System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent)
na System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
na System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs, Boolean)
na System.Windows.Input.InputManager.ProcessStagingArea()
na System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
na System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
na System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
na System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.InvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na WpfApplication1.App.Main()

Record Number: 9
Source Name: .NET Runtime
Time Written: 20130912184533.000000+120
Event Type: error
User:

Computer Name: JARYN
Event Code: 5000
Message: EventType clr20r3, P1 sygicdownloader_1.9.exe, P2 1.6.0.6, P3 4f4bdf27, P4 system, P5 4.0.0.0, P6 5073c3b8, P7 24df, P8 28, P9 system.notsupportedexception, P10 NIL.

Record Number: 8
Source Name: .NET Runtime 4.0 Error Reporting
Time Written: 20130912184531.000000+120
Event Type: error
User:

Computer Name: JARYN
Event Code: 1026
Message: Aplikace: SygicDownloader_1.9.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.NotSupportedException
Zásobník:
na System.Net.WebClient.ClearWebClientState()
na System.Net.WebClient.DownloadFileAsync(System.Uri, System.String, System.Object)
na System.Net.WebClient.DownloadFileAsync(System.Uri, System.String)
na WpfApplication1.MainWindow.DownloadOneFile()
na WpfApplication1.MainWindow.DownloadFiles()
na WpfApplication1.MainWindow.Button_Click(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs)
na System.Windows.Controls.Primitives.ButtonBase.OnClick()
na System.Windows.Controls.Button.OnClick()
na System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs)
na System.Windows.UIElement.OnMouseLeftButtonUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
na System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent)
na System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
na System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs, Boolean)
na System.Windows.Input.InputManager.ProcessStagingArea()
na System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
na System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
na System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
na System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.InvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na WpfApplication1.App.Main()

Record Number: 7
Source Name: .NET Runtime
Time Written: 20130912165519.000000+120
Event Type: error
User:

Computer Name: JARYN
Event Code: 5000
Message: EventType clr20r3, P1 sygicdownloader_1.9.exe, P2 1.6.0.6, P3 4f4bdf27, P4 system, P5 4.0.0.0, P6 5073c3b8, P7 24df, P8 28, P9 system.notsupportedexception, P10 NIL.

Record Number: 6
Source Name: .NET Runtime 4.0 Error Reporting
Time Written: 20130912165509.000000+120
Event Type: error
User:

Computer Name: JARYN
Event Code: 1517
Message: Systém Windows uložil registr uživatele JARYN\Jaryn, ale některá z aplikací nebo služeb během odhlášení registr nadále používala. Paměť používaná registrem uživatele nebyla uvolněna. Registr bude uvolněn, jakmile již nebude používán.

To je často způsobeno tím, že jsou služby spuštěny pomocí uživatelského účtu. Zkuste služby konfigurovat pro spuštění pomocí účtu místní nebo síťové služby.

Record Number: 1
Source Name: Userenv
Time Written: 20130912163833.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\AMD APP\bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=1706
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"AMDAPPSDKROOT"=C:\Program Files\AMD APP\

-----------------EOF-----------------

kolizek · #4 Příspěvek od **kolizek** » 09 lis 2013 16:27

Log JRT:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Jaryn on so 09.11.2013 at 16:16:22,50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{3E288F79-03E4-4983-A48E-0D879B51FF19}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dttoolbar.toolbandobj
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dttoolbar.toolbandobj.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3ff69ef8-f637-4551-a2d9-af775f56c5b8}

~~~ Files

Successfully deleted: [File] "C:\WINDOWS\system32\roboot.exe"

~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Jaryn\Data aplikacˇ\systweak"
Successfully deleted: [Folder] "C:\Program Files\daemon tools toolbar"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 09.11.2013 at 16:18:44,07
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

kolizek · #5 Příspěvek od **kolizek** » 09 lis 2013 16:28

Eset je zatim trial. Používal jsem aviru, ale zklamala ...

#6 Příspěvek od **vyosek** » 09 lis 2013 16:29

Poprosim tedy jeste o AdwCleaner

kolizek · #7 Příspěvek od **kolizek** » 09 lis 2013 16:33

Tu je ADW:

# AdwCleaner v3.011 - Report created 09/11/2013 at 16:30:19
# Updated 03/11/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jaryn - JARYN
# Running from : C:\Program Files\Opera\profile\temporary_downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\StarApp

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{090ACFA1-1580-11D1-8AC0-00C0F00910F9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B4E90801-B83C-11D0-8B40-00C0F00AE35A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\daemon tools toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v7.0.6000.16791

*************************

AdwCleaner[R0].txt - [1672 octets] - [09/11/2013 16:29:27]
AdwCleaner[S0].txt - [1617 octets] - [09/11/2013 16:30:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1677 octets] ##########

#8 Příspěvek od **vyosek** » 09 lis 2013 16:34

Poprosim o log z FRSTLauncheru http://forum.viry.cz/viewtopic.php?f=30&t=133101

kolizek · #9 Příspěvek od **kolizek** » 09 lis 2013 16:46

farbar:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Jaryn (administrator) on JARYN on 09-11-2013 16:45:10
Running from C:\Program Files\Opera\profile\temporary_downloads
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Teruten) C:\WINDOWS\system32\FsUsbExService.Exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(HP) C:\WINDOWS\system32\HPZipm12.exe
(Opera Software) C:\Program Files\Opera\opera.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\Default User\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User.WINDOWS.0\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\LocalService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\NetworkService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\x\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\ctfmon.exe
AlternateShell:

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {8473bbf3-c362-4e14-8ff3-752139cbdf64} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... rceid=IE_5
SearchScopes: HKCU - {e310e08a-ef9e-4934-b2c1-6996e545599f} URL = http://www.firmy.cz/phr/{searchTerms}?sourceid=IE_5
SearchScopes: HKCU - {f14a674b-6a1c-4cce-a72f-74196a63e0ba} URL = http://www.mapy.cz/?query={searchTerms}&sourceid=IE_5
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

========================== Services (Whitelisted) =================

R2 CDMA Device Service; C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe [63488 2011-08-02] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
S4 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
S4 W3SVC; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [16384 2004-07-09] (Microsoft Corporation)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [184664 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [38952 2013-09-17] (ESET)
R1 epfwtdi; C:\Windows\System32\DRIVERS\epfwtdi.sys [61600 2013-09-17] (ESET)
R3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49664 2005-10-28] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2005-10-28] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2005-10-28] (HP)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2006-02-26] ()
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [151592 2008-08-28] (Marvell Semiconductor, Inc.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10112 2004-07-09] (Microsoft Corporation)
R3 SenFiltService; C:\Windows\System32\drivers\Senfilt.sys [392960 2006-03-17] (Sensaura)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2011-10-24] ()
S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [52384 2005-05-24] (MCCI)
S3 w800mdfl; C:\Windows\System32\DRIVERS\w800mdfl.sys [6096 2005-05-24] (MCCI)
S3 w800mdm; C:\Windows\System32\DRIVERS\w800mdm.sys [87424 2005-05-24] (MCCI)
S3 w800mgmt; C:\Windows\System32\DRIVERS\w800mgmt.sys [79216 2005-05-24] (MCCI)
S3 w800obex; C:\Windows\System32\DRIVERS\w800obex.sys [77040 2005-05-24] (MCCI)
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [296448 2008-12-09] (Marvell)
U3 af1dimmd; C:\Windows\System32\Drivers\af1dimmd.sys [0 ] (Microsoft Corporation)
S3 dgderdrv; No ImagePath
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-09 16:45 - 2013-11-09 16:45 - 00000000 ____D C:\FRST
2013-11-09 16:40 - 2013-11-09 16:41 - 00029696 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\MSGBOX.EXE
2013-11-09 16:29 - 2013-11-09 16:30 - 00000000 ____D C:\AdwCleaner
2013-11-09 16:16 - 2013-11-09 16:16 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\system.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\software.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\default.rctemp.LOG
2013-11-09 15:56 - 2013-11-09 15:56 - 98372722 _____ C:\Documents and Settings\Jaryn\Dokumenty\BackupRegistry(20131109).reg
2013-11-09 15:31 - 2013-11-09 15:31 - 00001930 _____ C:\Documents and Settings\Jaryn\Plocha\1-Click Cleaner.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00001927 _____ C:\Documents and Settings\Jaryn\Plocha\WinXP Manager.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Program Files\Yamicsoft
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Documents and Settings\Jaryn\Nabídka Start\Programy\WinXP Manager
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\rsit
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\Program Files\trend micro
2013-11-09 14:19 - 2013-11-09 14:19 - 00004024 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131109_141947.reg
2013-11-09 13:48 - 2013-11-09 13:48 - 00002100 _____ C:\Documents and Settings\Jaryn\.recently-used.xbel
2013-11-06 15:56 - 2013-11-06 15:56 - 00029618 _____ C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh.zip
2013-11-06 15:56 - 2013-11-06 15:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh
2013-11-04 12:21 - 2013-11-04 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ImgBurn
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Program Files\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-10-31 15:56 - 2013-10-31 15:56 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-10-31 15:49 - 2013-10-31 15:56 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\HitmanPro
2013-10-31 15:16 - 2013-10-31 16:13 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\NPE
2013-10-31 15:16 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Norton
2013-10-31 14:30 - 2013-10-31 14:30 - 00000596 _____ C:\WINDOWS\UPGRADE.TXT
2013-10-31 14:27 - 2013-10-31 14:30 - 00000000 ____D C:\WINDOWS\setup.pss
2013-10-31 12:44 - 2013-10-31 12:44 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\Sun
2013-10-31 12:43 - 2013-10-31 12:43 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-10-31 12:43 - 2013-10-31 12:43 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2013-10-31 12:40 - 2013-10-31 12:40 - 00000732 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_124000.reg
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\Default User.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\All Users.WINDOWS.0\Šablony
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 11:51 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy
2013-10-31 12:36 - 2013-10-31 11:49 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Local Settings\Data aplikací
2013-10-31 12:36 - 2013-10-31 11:48 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy
2013-10-31 12:36 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 11:45 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Šablony
2013-10-31 12:35 - 2009-02-14 20:09 - 00000630 _____ C:\DPsFnshr.ini
2013-10-31 12:35 - 2009-01-30 13:44 - 00279577 _____ C:\DSPdsblr.exe
2013-10-31 12:35 - 2009-01-30 13:44 - 00269947 _____ C:\pmtimer.exe
2013-10-31 12:35 - 2009-01-30 13:43 - 00323169 _____ C:\DPsFnshr.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00137728 _____ () C:\mute.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00055808 _____ (Microsoft Corporation) C:\devcon.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00020992 _____ C:\makePNF.exe
2013-10-31 12:35 - 2009-01-07 22:44 - 00112242 _____ C:\DriverPack_MassStorage_wnt5_x86-32.ini
2013-10-31 12:35 - 2008-12-28 19:46 - 00000776 _____ C:\DriverPack_LAN_wnt5_x86-32.ini
2013-10-31 12:34 - 2013-10-31 11:50 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0
2013-10-31 12:34 - 2013-10-31 11:49 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0
2013-10-31 12:34 - 2009-02-06 04:05 - 00001350 _____ C:\DriverPack_Chipset_wnt5_x86-32.ini
2013-10-31 12:34 - 2008-03-30 03:11 - 00000000 ____D C:\D
2013-10-31 12:34 - 2007-04-07 19:52 - 00000420 _____ C:\DriverPack_CPU_wnt5_x86-32.ini
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Po spuštění
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\x\Okolní tiskárny
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\x\Okolní síť
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\x\Plocha
2013-10-31 12:00 - 2013-10-31 12:06 - 00000178 ___SH C:\Documents and Settings\x\ntuser.ini
2013-10-31 12:00 - 2013-10-31 12:00 - 00000803 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Internet Explorer.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000792 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000738 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Outlook Express.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 __RHD C:\Documents and Settings\x\Data aplikací
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Oblíbené položky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Příslušenství
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Obrázky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Hudba
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x
2013-10-31 12:00 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 12:00 - 2013-10-31 11:49 - 00000000 ___HD C:\Documents and Settings\x\Local Settings\Data aplikací
2013-10-31 12:00 - 2013-10-31 11:45 - 00000000 ___HD C:\Documents and Settings\x\Šablony
2013-10-31 11:59 - 2013-10-31 11:59 - 00000020 ___SH C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.ini
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 __SHD C:\Documents and Settings\LocalService.NT AUTHORITY
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ___HD C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Documents and Settings\LocalService.NT AUTHORITY\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000020 ___SH C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.ini
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 __SHD C:\Documents and Settings\NetworkService.NT AUTHORITY
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ___HD C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ____D C:\Documents and Settings\NetworkService.NT AUTHORITY\Data aplikací
2013-10-31 11:50 - 2013-10-31 11:50 - 00001619 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Přístup a výchozí nastavení programů.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001519 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Windows Update.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00000680 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Katalog systému Windows.lnk
2013-10-31 11:49 - 2013-10-31 11:49 - 00000000 __SHD C:\Documents and Settings\All Users.WINDOWS.0\DRM
2013-10-31 11:48 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:48 - 2013-10-31 11:48 - 00000786 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Movie Maker.lnk
2013-10-31 11:47 - 2013-11-09 15:44 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Hry
2013-10-31 11:47 - 2013-10-31 11:47 - 00000615 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Messenger.lnk
2013-10-31 11:46 - 2013-10-31 11:50 - 00000792 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 11:46 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Nástroje pro správu
2013-10-31 11:46 - 2013-10-31 11:46 - 00000000 ____D C:\Program Files\MSN Gaming Zone
2013-10-31 11:44 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\ESET
2013-10-31 11:03 - 2013-09-17 15:17 - 00038952 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwndis.sys
2013-10-31 10:55 - 2013-10-31 10:55 - 00001624 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_105510.reg
2013-10-31 10:54 - 2013-10-31 10:54 - 00000715 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\system.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\software.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SAM.sav.LOG
2013-10-31 10:44 - 2013-10-31 10:44 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2013-10-31 10:43 - 2013-10-31 10:47 - 00002382 _____ C:\WINDOWS\system32\ASOROSet.bin
2013-10-31 10:43 - 2013-10-31 10:43 - 00000000 ____D C:\WINDOWS\system32\config\RCCBakup
2013-10-31 10:24 - 2013-10-31 10:24 - 00011154 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_102433.reg
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\Jaryn\.android
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\MyPhoneExplorer
2013-10-10 17:12 - 2013-10-10 17:12 - 00006944 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131010_181237.reg
2013-10-10 07:02 - 2013-10-10 07:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-10 07:02 - 2013-10-10 07:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-10 06:57 - 2013-10-10 06:57 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-10 06:56 - 2013-10-10 06:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-10 06:56 - 2013-10-10 06:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-10 05:33 - 2013-07-03 03:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-10-10 05:33 - 2013-07-03 02:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-10-10 05:32 - 2013-08-09 01:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-10-10 05:32 - 2013-08-09 01:55 - 00032384 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-10-10 05:32 - 2013-08-09 01:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-10-10 05:32 - 2013-07-17 01:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-10-10 05:32 - 2013-07-17 01:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-10-10 05:32 - 2013-07-17 01:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2013-10-10 05:32 - 2009-03-18 12:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys

==================== One Month Modified Files and Folders =======

2013-11-09 16:45 - 2013-11-09 16:45 - 00000000 ____D C:\FRST
2013-11-09 16:41 - 2013-11-09 16:40 - 00029696 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\MSGBOX.EXE
2013-11-09 16:41 - 2011-01-18 22:22 - 00000000 ____D C:\Program Files\Opera
2013-11-09 16:41 - 2011-01-18 21:54 - 00000000 ___HD C:\Documents and Settings\Jaryn\Local Settings\Data aplikací
2013-11-09 16:33 - 2011-01-18 21:50 - 01124926 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-09 16:32 - 2011-01-19 07:12 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-11-09 16:32 - 2011-01-19 07:12 - 00000051 _____ C:\WINDOWS\wiaservc.log
2013-11-09 16:32 - 2011-01-18 21:53 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-09 16:32 - 2001-10-25 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-09 16:30 - 2013-11-09 16:29 - 00000000 ____D C:\AdwCleaner
2013-11-09 16:30 - 2011-01-18 22:39 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-11-09 16:30 - 2011-01-18 21:54 - 00000178 ___SH C:\Documents and Settings\Jaryn\ntuser.ini
2013-11-09 16:30 - 2011-01-18 21:53 - 00032412 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-09 16:29 - 2011-01-18 22:19 - 00002240 _____ C:\WINDOWS\WINCMD.INI
2013-11-09 16:25 - 2012-03-29 09:50 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-09 16:16 - 2013-11-09 16:16 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-09 16:16 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Data aplikací
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\system.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\software.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\default.rctemp.LOG
2013-11-09 15:58 - 2011-01-18 22:38 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.rcbak
2013-11-09 15:58 - 2011-01-18 22:38 - 00028672 _____ C:\WINDOWS\system32\config\SAM.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 27000832 _____ C:\WINDOWS\system32\config\software.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 10747904 _____ C:\WINDOWS\system32\config\system.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 00524288 _____ C:\WINDOWS\system32\config\default.rcbak
2013-11-09 15:58 - 2011-01-18 21:54 - 00000000 ____D C:\Documents and Settings\Jaryn
2013-11-09 15:58 - 2011-01-18 21:53 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-11-09 15:58 - 2011-01-18 21:53 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-11-09 15:56 - 2013-11-09 15:56 - 98372722 _____ C:\Documents and Settings\Jaryn\Dokumenty\BackupRegistry(20131109).reg
2013-11-09 15:56 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Dokumenty
2013-11-09 15:52 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Nabídka Start\Programy
2013-11-09 15:45 - 2011-01-18 23:28 - 00000000 ____D C:\Program Files\WinRAR
2013-11-09 15:45 - 2011-01-18 22:35 - 00000000 ____D C:\WINDOWS\twain_32
2013-11-09 15:44 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Hry
2013-11-09 15:44 - 2011-12-20 17:13 - 00000000 ____D C:\Documents and Settings\Jaryn\Plocha\[originální]
2013-11-09 15:44 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Dokumenty\Obrázky
2013-11-09 15:44 - 2011-01-18 21:54 - 00000000 ____D C:\Documents and Settings\Jaryn\Plocha
2013-11-09 15:32 - 2011-02-04 12:36 - 00307197 ____H C:\TREEINFO.WC
2013-11-09 15:31 - 2013-11-09 15:31 - 00001930 _____ C:\Documents and Settings\Jaryn\Plocha\1-Click Cleaner.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00001927 _____ C:\Documents and Settings\Jaryn\Plocha\WinXP Manager.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Program Files\Yamicsoft
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Documents and Settings\Jaryn\Nabídka Start\Programy\WinXP Manager
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\rsit
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\Program Files\trend micro
2013-11-09 14:26 - 2011-01-18 22:37 - 00000210 ___SH C:\boot.ini
2013-11-09 14:19 - 2013-11-09 14:19 - 00004024 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131109_141947.reg
2013-11-09 13:48 - 2013-11-09 13:48 - 00002100 _____ C:\Documents and Settings\Jaryn\.recently-used.xbel
2013-11-09 13:48 - 2011-01-22 10:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\gtk-2.0
2013-11-09 13:48 - 2011-01-22 10:54 - 00000000 ____D C:\Documents and Settings\Jaryn\.gimp-2.6
2013-11-06 15:56 - 2013-11-06 15:56 - 00029618 _____ C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh.zip
2013-11-06 15:56 - 2013-11-06 15:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh
2013-11-04 12:21 - 2013-11-04 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ImgBurn
2013-11-04 12:21 - 2013-04-20 19:12 - 00001561 _____ C:\Documents and Settings\All Users\Plocha\ImgBurn.lnk
2013-11-04 12:21 - 2011-01-18 22:41 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-11-04 12:21 - 2011-01-18 22:41 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-11-01 15:13 - 2011-01-18 22:06 - 00034816 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-31 17:14 - 2001-10-25 13:00 - 00000810 _____ C:\WINDOWS\win.ini
2013-10-31 17:14 - 2001-10-25 13:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Program Files\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-10-31 16:13 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\NPE
2013-10-31 15:56 - 2013-10-31 15:56 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-10-31 15:56 - 2013-10-31 15:49 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\HitmanPro
2013-10-31 15:39 - 2011-01-19 00:38 - 00000000 ____D C:\WINDOWS\pss
2013-10-31 15:16 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Norton
2013-10-31 14:36 - 2012-03-08 15:02 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-10-31 14:30 - 2013-10-31 14:30 - 00000596 _____ C:\WINDOWS\UPGRADE.TXT
2013-10-31 14:30 - 2013-10-31 14:27 - 00000000 ____D C:\WINDOWS\setup.pss
2013-10-31 12:44 - 2013-10-31 12:44 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\Sun
2013-10-31 12:43 - 2013-10-31 12:43 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-10-31 12:43 - 2013-10-31 12:43 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2013-10-31 12:40 - 2013-10-31 12:40 - 00000732 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_124000.reg
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\Default User.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\All Users.WINDOWS.0\Šablony
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x\Plocha
2013-10-31 12:33 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Outlook Express
2013-10-31 12:33 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Movie Maker
2013-10-31 12:06 - 2013-10-31 12:00 - 00000178 ___SH C:\Documents and Settings\x\ntuser.ini
2013-10-31 12:00 - 2013-10-31 12:00 - 00000803 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Internet Explorer.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000792 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000738 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Outlook Express.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 __RHD C:\Documents and Settings\x\Data aplikací
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Oblíbené položky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Příslušenství
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Obrázky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Hudba
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x
2013-10-31 11:59 - 2013-10-31 11:59 - 00000020 ___SH C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.ini
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 __SHD C:\Documents and Settings\LocalService.NT AUTHORITY
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ___HD C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Documents and Settings\LocalService.NT AUTHORITY\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000020 ___SH C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.ini
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 __SHD C:\Documents and Settings\NetworkService.NT AUTHORITY
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ___HD C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ____D C:\Documents and Settings\NetworkService.NT AUTHORITY\Data aplikací
2013-10-31 11:51 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start
2013-10-31 11:50 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy
2013-10-31 11:50 - 2013-10-31 12:34 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0
2013-10-31 11:50 - 2013-10-31 12:00 - 00001611 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001619 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Přístup a výchozí nastavení programů.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001519 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Windows Update.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00000680 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Katalog systému Windows.lnk
2013-10-31 11:50 - 2013-10-31 11:48 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:50 - 2013-10-31 11:46 - 00000792 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 11:50 - 2013-10-31 11:46 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Nástroje pro správu
2013-10-31 11:49 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Local Settings\Data aplikací
2013-10-31 11:49 - 2013-10-31 12:34 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0
2013-10-31 11:49 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Local Settings\Data aplikací
2013-10-31 11:49 - 2013-10-31 11:49 - 00000000 __SHD C:\Documents and Settings\All Users.WINDOWS.0\DRM
2013-10-31 11:48 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy
2013-10-31 11:48 - 2013-10-31 11:48 - 00000786 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Movie Maker.lnk
2013-10-31 11:48 - 2011-01-18 21:50 - 00000000 ____D C:\Program Files\Common Files\Services
2013-10-31 11:48 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\NetMeeting
2013-10-31 11:47 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Dokumenty
2013-10-31 11:47 - 2013-10-31 11:47 - 00000615 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Messenger.lnk
2013-10-31 11:47 - 2013-10-31 11:44 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:47 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Common Files\System
2013-10-31 11:46 - 2013-10-31 11:46 - 00000000 ____D C:\Program Files\MSN Gaming Zone
2013-10-31 11:46 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Windows Media Connect 2
2013-10-31 11:46 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Messenger
2013-10-31 11:45 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Šablony
2013-10-31 11:45 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Šablony
2013-10-31 11:45 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Windows NT
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\ESET
2013-10-31 10:56 - 2011-01-19 08:20 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-31 10:56 - 2011-01-19 08:20 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-31 10:55 - 2013-10-31 10:55 - 00001624 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_105510.reg
2013-10-31 10:54 - 2013-10-31 10:54 - 00000715 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\system.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\software.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:43 - 00002382 _____ C:\WINDOWS\system32\ASOROSet.bin
2013-10-31 10:47 - 2011-01-18 22:38 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-31 10:47 - 2011-01-18 22:37 - 28835840 _____ C:\WINDOWS\system32\config\software.bak
2013-10-31 10:47 - 2011-01-18 22:37 - 10485760 _____ C:\WINDOWS\system32\config\system.bak
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SAM.sav.LOG
2013-10-31 10:45 - 2011-01-18 22:38 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-31 10:44 - 2013-10-31 10:44 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2013-10-31 10:43 - 2013-10-31 10:43 - 00000000 ____D C:\WINDOWS\system32\config\RCCBakup
2013-10-31 10:24 - 2013-10-31 10:24 - 00011154 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_102433.reg
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\Jaryn\.android
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\MyPhoneExplorer
2013-10-31 10:15 - 2011-09-05 15:38 - 00001777 _____ C:\Documents and Settings\All Users\Plocha\MyPhoneExplorer.lnk
2013-10-31 10:15 - 2011-09-05 15:38 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-10-31 10:13 - 2011-01-18 23:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ACD Systems
2013-10-30 22:24 - 2011-01-18 22:42 - 01272088 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-30 22:24 - 2011-01-18 21:48 - 00000000 ____D C:\WINDOWS\Registration
2013-10-15 17:22 - 2011-01-18 23:06 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-10-10 17:25 - 2012-03-29 09:50 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-10 17:25 - 2011-05-16 08:33 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-10 17:12 - 2013-10-10 17:12 - 00006944 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131010_181237.reg
2013-10-10 13:36 - 2011-01-18 22:38 - 00140440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-10 07:02 - 2013-10-10 07:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-10 07:02 - 2013-10-10 07:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-10 06:59 - 2013-08-14 08:07 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-10 06:57 - 2013-10-10 06:57 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-10 06:57 - 2011-01-19 14:21 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-10 06:56 - 2013-10-10 06:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-10 06:56 - 2013-10-10 06:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-10 06:56 - 2012-03-08 15:49 - 00000000 ____D C:\WINDOWS\ie8updates

Files to move or delete:
====================
C:\Documents and Settings\Jaryn\Data aplikací\AltShell.ini

Some content of TEMP:
====================
C:\Documents and Settings\Jaryn\Local Settings\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-04-14 07:52] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-04-14 07:52] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 06:42] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1

==================== End Of Log ============================

#10 Příspěvek od **vyosek** » 09 lis 2013 23:22

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
KU\Default User\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User.WINDOWS.0\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\LocalService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\NetworkService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
AlternateShell: 

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {8473bbf3-c362-4e14-8ff3-752139cbdf64} URL = http://www.zbozi.cz/?q={searchTerms}&r=campmoz&sourceid=IE_5
SearchScopes: HKCU - {e310e08a-ef9e-4934-b2c1-6996e545599f} URL = http://www.firmy.cz/phr/{searchTerms}?sourceid=IE_5
SearchScopes: HKCU - {f14a674b-6a1c-4cce-a72f-74196a63e0ba} URL = http://www.mapy.cz/?query={searchTerms}&sourceid=IE_5

DisableService: JavaQuickStarterService

S3 dgderdrv; No ImagePath
U1 WS2IFSL; 

2013-10-31 15:56 - 2013-10-31 15:56 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-10-31 15:49 - 2013-10-31 15:56 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\HitmanPro
C:\Documents and Settings\Jaryn\Data aplikací\AltShell.ini
C:\Documents and Settings\Jaryn\Local Settings\Temp\Quarantine.exe

REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

Hosts:

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

kolizek · #11 Příspěvek od **kolizek** » 10 lis 2013 10:25

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Jaryn (administrator) on JARYN on 10-11-2013 10:21:42
Running from C:\Documents and Settings\Jaryn\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Teruten) C:\WINDOWS\system32\FsUsbExService.Exe
(HP) C:\WINDOWS\system32\HPZipm12.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Opera Software) C:\Program Files\Opera\opera.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\Default User\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\x\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\ctfmon.exe

==================== Internet (Whitelisted) ====================

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

========================== Services (Whitelisted) =================

R2 CDMA Device Service; C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe [63488 2011-08-02] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
S4 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
S4 W3SVC; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
S4 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [16384 2004-07-09] (Microsoft Corporation)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [184664 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [38952 2013-09-17] (ESET)
R1 epfwtdi; C:\Windows\System32\DRIVERS\epfwtdi.sys [61600 2013-09-17] (ESET)
R3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49664 2005-10-28] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2005-10-28] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2005-10-28] (HP)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2006-02-26] ()
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [151592 2008-08-28] (Marvell Semiconductor, Inc.)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10112 2004-07-09] (Microsoft Corporation)
R3 SenFiltService; C:\Windows\System32\drivers\Senfilt.sys [392960 2006-03-17] (Sensaura)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2011-10-24] ()
S3 w800bus; C:\Windows\System32\DRIVERS\w800bus.sys [52384 2005-05-24] (MCCI)
S3 w800mdfl; C:\Windows\System32\DRIVERS\w800mdfl.sys [6096 2005-05-24] (MCCI)
S3 w800mdm; C:\Windows\System32\DRIVERS\w800mdm.sys [87424 2005-05-24] (MCCI)
S3 w800mgmt; C:\Windows\System32\DRIVERS\w800mgmt.sys [79216 2005-05-24] (MCCI)
S3 w800obex; C:\Windows\System32\DRIVERS\w800obex.sys [77040 2005-05-24] (MCCI)
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [296448 2008-12-09] (Marvell)
U3 a4xe9iju; C:\Windows\System32\Drivers\a4xe9iju.sys [0 ] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-10 10:17 - 2013-11-10 10:17 - 01089445 _____ (Farbar) C:\Documents and Settings\Jaryn\Plocha\FRST.exe
2013-11-09 16:45 - 2013-11-09 16:45 - 00000000 ____D C:\FRST
2013-11-09 16:40 - 2013-11-09 16:41 - 00029696 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\MSGBOX.EXE
2013-11-09 16:29 - 2013-11-09 16:30 - 00000000 ____D C:\AdwCleaner
2013-11-09 16:16 - 2013-11-09 16:16 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\system.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\software.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\default.rctemp.LOG
2013-11-09 15:56 - 2013-11-09 15:56 - 98372722 _____ C:\Documents and Settings\Jaryn\Dokumenty\BackupRegistry(20131109).reg
2013-11-09 15:31 - 2013-11-09 15:31 - 00001930 _____ C:\Documents and Settings\Jaryn\Plocha\1-Click Cleaner.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00001927 _____ C:\Documents and Settings\Jaryn\Plocha\WinXP Manager.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Program Files\Yamicsoft
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Documents and Settings\Jaryn\Nabídka Start\Programy\WinXP Manager
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\rsit
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\Program Files\trend micro
2013-11-09 14:19 - 2013-11-09 14:19 - 00004024 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131109_141947.reg
2013-11-09 13:48 - 2013-11-09 13:48 - 00002100 _____ C:\Documents and Settings\Jaryn\.recently-used.xbel
2013-11-06 15:56 - 2013-11-06 15:56 - 00029618 _____ C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh.zip
2013-11-06 15:56 - 2013-11-06 15:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh
2013-11-04 12:21 - 2013-11-04 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ImgBurn
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Program Files\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-10-31 15:16 - 2013-10-31 16:13 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\NPE
2013-10-31 15:16 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Norton
2013-10-31 14:30 - 2013-10-31 14:30 - 00000596 _____ C:\WINDOWS\UPGRADE.TXT
2013-10-31 14:27 - 2013-10-31 14:30 - 00000000 ____D C:\WINDOWS\setup.pss
2013-10-31 12:44 - 2013-10-31 12:44 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\Sun
2013-10-31 12:43 - 2013-10-31 12:43 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-10-31 12:43 - 2013-10-31 12:43 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2013-10-31 12:40 - 2013-10-31 12:40 - 00000732 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_124000.reg
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\Default User.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\All Users.WINDOWS.0\Šablony
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 11:51 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy
2013-10-31 12:36 - 2013-10-31 11:49 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Local Settings\Data aplikací
2013-10-31 12:36 - 2013-10-31 11:48 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy
2013-10-31 12:36 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 11:45 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Šablony
2013-10-31 12:35 - 2009-02-14 20:09 - 00000630 _____ C:\DPsFnshr.ini
2013-10-31 12:35 - 2009-01-30 13:44 - 00279577 _____ C:\DSPdsblr.exe
2013-10-31 12:35 - 2009-01-30 13:44 - 00269947 _____ C:\pmtimer.exe
2013-10-31 12:35 - 2009-01-30 13:43 - 00323169 _____ C:\DPsFnshr.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00137728 _____ () C:\mute.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00055808 _____ (Microsoft Corporation) C:\devcon.exe
2013-10-31 12:35 - 2009-01-27 09:17 - 00020992 _____ C:\makePNF.exe
2013-10-31 12:35 - 2009-01-07 22:44 - 00112242 _____ C:\DriverPack_MassStorage_wnt5_x86-32.ini
2013-10-31 12:35 - 2008-12-28 19:46 - 00000776 _____ C:\DriverPack_LAN_wnt5_x86-32.ini
2013-10-31 12:34 - 2013-10-31 11:50 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0
2013-10-31 12:34 - 2013-10-31 11:49 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0
2013-10-31 12:34 - 2009-02-06 04:05 - 00001350 _____ C:\DriverPack_Chipset_wnt5_x86-32.ini
2013-10-31 12:34 - 2008-03-30 03:11 - 00000000 ____D C:\D
2013-10-31 12:34 - 2007-04-07 19:52 - 00000420 _____ C:\DriverPack_CPU_wnt5_x86-32.ini
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Po spuštění
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\x\Okolní tiskárny
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\x\Okolní síť
2013-10-31 12:00 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\x\Plocha
2013-10-31 12:00 - 2013-10-31 12:06 - 00000178 ___SH C:\Documents and Settings\x\ntuser.ini
2013-10-31 12:00 - 2013-10-31 12:00 - 00000803 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Internet Explorer.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000792 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000738 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Outlook Express.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 __RHD C:\Documents and Settings\x\Data aplikací
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Oblíbené položky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Příslušenství
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Obrázky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Hudba
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x
2013-10-31 12:00 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 12:00 - 2013-10-31 11:49 - 00000000 ___HD C:\Documents and Settings\x\Local Settings\Data aplikací
2013-10-31 12:00 - 2013-10-31 11:45 - 00000000 ___HD C:\Documents and Settings\x\Šablony
2013-10-31 11:59 - 2013-10-31 11:59 - 00000020 ___SH C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.ini
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 __SHD C:\Documents and Settings\LocalService.NT AUTHORITY
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ___HD C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Documents and Settings\LocalService.NT AUTHORITY\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000020 ___SH C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.ini
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 __SHD C:\Documents and Settings\NetworkService.NT AUTHORITY
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ___HD C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ____D C:\Documents and Settings\NetworkService.NT AUTHORITY\Data aplikací
2013-10-31 11:50 - 2013-10-31 11:50 - 00001619 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Přístup a výchozí nastavení programů.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001519 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Windows Update.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00000680 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Katalog systému Windows.lnk
2013-10-31 11:49 - 2013-10-31 11:49 - 00000000 __SHD C:\Documents and Settings\All Users.WINDOWS.0\DRM
2013-10-31 11:48 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:48 - 2013-10-31 11:48 - 00000786 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Movie Maker.lnk
2013-10-31 11:47 - 2013-11-09 15:44 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Hry
2013-10-31 11:47 - 2013-10-31 11:47 - 00000615 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Messenger.lnk
2013-10-31 11:46 - 2013-10-31 11:50 - 00000792 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 11:46 - 2013-10-31 11:50 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Nástroje pro správu
2013-10-31 11:46 - 2013-10-31 11:46 - 00000000 ____D C:\Program Files\MSN Gaming Zone
2013-10-31 11:44 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\ESET
2013-10-31 11:03 - 2013-09-17 15:17 - 00038952 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwndis.sys
2013-10-31 10:55 - 2013-10-31 10:55 - 00001624 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_105510.reg
2013-10-31 10:54 - 2013-10-31 10:54 - 00000715 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\system.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\software.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SAM.sav.LOG
2013-10-31 10:44 - 2013-10-31 10:44 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2013-10-31 10:43 - 2013-10-31 10:47 - 00002382 _____ C:\WINDOWS\system32\ASOROSet.bin
2013-10-31 10:43 - 2013-10-31 10:43 - 00000000 ____D C:\WINDOWS\system32\config\RCCBakup
2013-10-31 10:24 - 2013-10-31 10:24 - 00011154 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_102433.reg
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\Jaryn\.android
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\MyPhoneExplorer

==================== One Month Modified Files and Folders =======

2013-11-10 10:21 - 2011-01-18 21:50 - 01153689 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-10 10:20 - 2011-01-19 07:12 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-11-10 10:20 - 2011-01-19 07:12 - 00000052 _____ C:\WINDOWS\wiaservc.log
2013-11-10 10:20 - 2011-01-18 21:53 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-10 10:20 - 2001-10-25 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-10 10:19 - 2011-01-18 21:54 - 00000178 ___SH C:\Documents and Settings\Jaryn\ntuser.ini
2013-11-10 10:19 - 2011-01-18 21:53 - 00032412 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-10 10:18 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Data aplikací
2013-11-10 10:18 - 2011-01-18 21:54 - 00000000 ____D C:\Documents and Settings\Jaryn\Plocha
2013-11-10 10:17 - 2013-11-10 10:17 - 01089445 _____ (Farbar) C:\Documents and Settings\Jaryn\Plocha\FRST.exe
2013-11-10 10:17 - 2011-01-18 22:19 - 00002237 _____ C:\WINDOWS\WINCMD.INI
2013-11-09 18:00 - 2011-01-18 21:54 - 00000000 ____D C:\Documents and Settings\Jaryn
2013-11-09 16:45 - 2013-11-09 16:45 - 00000000 ____D C:\FRST
2013-11-09 16:41 - 2013-11-09 16:40 - 00029696 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\MSGBOX.EXE
2013-11-09 16:41 - 2011-01-18 22:22 - 00000000 ____D C:\Program Files\Opera
2013-11-09 16:41 - 2011-01-18 21:54 - 00000000 ___HD C:\Documents and Settings\Jaryn\Local Settings\Data aplikací
2013-11-09 16:30 - 2013-11-09 16:29 - 00000000 ____D C:\AdwCleaner
2013-11-09 16:30 - 2011-01-18 22:39 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-11-09 16:16 - 2013-11-09 16:16 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\system.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\software.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\SAM.rctemp.LOG
2013-11-09 15:58 - 2013-11-09 15:58 - 00000000 ____H C:\WINDOWS\system32\config\default.rctemp.LOG
2013-11-09 15:58 - 2011-01-18 22:38 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.rcbak
2013-11-09 15:58 - 2011-01-18 22:38 - 00028672 _____ C:\WINDOWS\system32\config\SAM.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 27000832 _____ C:\WINDOWS\system32\config\software.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 10747904 _____ C:\WINDOWS\system32\config\system.rcbak
2013-11-09 15:58 - 2011-01-18 22:37 - 00524288 _____ C:\WINDOWS\system32\config\default.rcbak
2013-11-09 15:58 - 2011-01-18 21:53 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-11-09 15:58 - 2011-01-18 21:53 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-11-09 15:56 - 2013-11-09 15:56 - 98372722 _____ C:\Documents and Settings\Jaryn\Dokumenty\BackupRegistry(20131109).reg
2013-11-09 15:56 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Dokumenty
2013-11-09 15:52 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Nabídka Start\Programy
2013-11-09 15:45 - 2011-01-18 23:28 - 00000000 ____D C:\Program Files\WinRAR
2013-11-09 15:45 - 2011-01-18 22:35 - 00000000 ____D C:\WINDOWS\twain_32
2013-11-09 15:44 - 2013-10-31 11:47 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Hry
2013-11-09 15:44 - 2011-12-20 17:13 - 00000000 ____D C:\Documents and Settings\Jaryn\Plocha\[originální]
2013-11-09 15:44 - 2011-01-18 21:54 - 00000000 ___RD C:\Documents and Settings\Jaryn\Dokumenty\Obrázky
2013-11-09 15:32 - 2011-02-04 12:36 - 00307197 ____H C:\TREEINFO.WC
2013-11-09 15:31 - 2013-11-09 15:31 - 00001930 _____ C:\Documents and Settings\Jaryn\Plocha\1-Click Cleaner.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00001927 _____ C:\Documents and Settings\Jaryn\Plocha\WinXP Manager.lnk
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Program Files\Yamicsoft
2013-11-09 15:31 - 2013-11-09 15:31 - 00000000 ____D C:\Documents and Settings\Jaryn\Nabídka Start\Programy\WinXP Manager
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\rsit
2013-11-09 15:13 - 2013-11-09 15:13 - 00000000 ____D C:\Program Files\trend micro
2013-11-09 14:26 - 2011-01-18 22:37 - 00000210 ___SH C:\boot.ini
2013-11-09 14:19 - 2013-11-09 14:19 - 00004024 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131109_141947.reg
2013-11-09 13:48 - 2013-11-09 13:48 - 00002100 _____ C:\Documents and Settings\Jaryn\.recently-used.xbel
2013-11-09 13:48 - 2011-01-22 10:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\gtk-2.0
2013-11-09 13:48 - 2011-01-22 10:54 - 00000000 ____D C:\Documents and Settings\Jaryn\.gimp-2.6
2013-11-06 15:56 - 2013-11-06 15:56 - 00029618 _____ C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh.zip
2013-11-06 15:56 - 2013-11-06 15:56 - 00000000 ____D C:\Documents and Settings\Jaryn\Dokumenty\res_trojuh
2013-11-04 12:21 - 2013-11-04 12:21 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ImgBurn
2013-11-04 12:21 - 2013-04-20 19:12 - 00001561 _____ C:\Documents and Settings\All Users\Plocha\ImgBurn.lnk
2013-11-04 12:21 - 2011-01-18 22:41 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-11-04 12:21 - 2011-01-18 22:41 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-11-01 15:13 - 2011-01-18 22:06 - 00034816 _____ C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-31 17:14 - 2001-10-25 13:00 - 00000810 _____ C:\WINDOWS\win.ini
2013-10-31 17:14 - 2001-10-25 13:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Program Files\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2013-10-31 16:46 - 2013-10-31 16:46 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-10-31 16:13 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\NPE
2013-10-31 15:39 - 2011-01-19 00:38 - 00000000 ____D C:\WINDOWS\pss
2013-10-31 15:16 - 2013-10-31 15:16 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Norton
2013-10-31 14:36 - 2012-03-08 15:02 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-10-31 14:30 - 2013-10-31 14:30 - 00000596 _____ C:\WINDOWS\UPGRADE.TXT
2013-10-31 14:30 - 2013-10-31 14:27 - 00000000 ____D C:\WINDOWS\setup.pss
2013-10-31 12:44 - 2013-10-31 12:44 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\Sun
2013-10-31 12:43 - 2013-10-31 12:43 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-10-31 12:43 - 2013-10-31 12:43 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2013-10-31 12:40 - 2013-10-31 12:40 - 00000732 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_124000.reg
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\Default User.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 __RHD C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\All Users.WINDOWS.0\Šablony
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\Default User.WINDOWS.0\Dokumenty
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Plocha
2013-10-31 12:36 - 2013-10-31 12:36 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0\Oblíbené položky
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Po spuštění
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Okolní tiskárny
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Okolní síť
2013-10-31 12:36 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x\Plocha
2013-10-31 12:33 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Outlook Express
2013-10-31 12:33 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Movie Maker
2013-10-31 12:06 - 2013-10-31 12:00 - 00000178 ___SH C:\Documents and Settings\x\ntuser.ini
2013-10-31 12:00 - 2013-10-31 12:00 - 00000803 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Internet Explorer.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000792 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000738 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Outlook Express.lnk
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 __RHD C:\Documents and Settings\x\Data aplikací
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Oblíbené položky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy\Příslušenství
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Nabídka Start\Programy
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Obrázky
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty\Hudba
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ___RD C:\Documents and Settings\x\Dokumenty
2013-10-31 12:00 - 2013-10-31 12:00 - 00000000 ____D C:\Documents and Settings\x
2013-10-31 11:59 - 2013-10-31 11:59 - 00000020 ___SH C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.ini
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 __SHD C:\Documents and Settings\LocalService.NT AUTHORITY
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ___HD C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:59 - 2013-10-31 11:59 - 00000000 ____D C:\Documents and Settings\LocalService.NT AUTHORITY\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000020 ___SH C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.ini
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 __SHD C:\Documents and Settings\NetworkService.NT AUTHORITY
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ___HD C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Data aplikací
2013-10-31 11:58 - 2013-10-31 11:58 - 00000000 ____D C:\Documents and Settings\NetworkService.NT AUTHORITY\Data aplikací
2013-10-31 11:51 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start
2013-10-31 11:50 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy
2013-10-31 11:50 - 2013-10-31 12:34 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0
2013-10-31 11:50 - 2013-10-31 12:00 - 00001611 _____ C:\Documents and Settings\x\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001619 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Přístup a výchozí nastavení programů.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001611 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Vzdálená pomoc.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00001519 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Windows Update.lnk
2013-10-31 11:50 - 2013-10-31 11:50 - 00000680 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Katalog systému Windows.lnk
2013-10-31 11:50 - 2013-10-31 11:48 - 00000000 ___RD C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:50 - 2013-10-31 11:46 - 00000792 _____ C:\Documents and Settings\Default User.WINDOWS.0\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-31 11:50 - 2013-10-31 11:46 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Nástroje pro správu
2013-10-31 11:49 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Local Settings\Data aplikací
2013-10-31 11:49 - 2013-10-31 12:34 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS.0
2013-10-31 11:49 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Local Settings\Data aplikací
2013-10-31 11:49 - 2013-10-31 11:49 - 00000000 __SHD C:\Documents and Settings\All Users.WINDOWS.0\DRM
2013-10-31 11:48 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy
2013-10-31 11:48 - 2013-10-31 11:48 - 00000786 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Movie Maker.lnk
2013-10-31 11:48 - 2011-01-18 21:50 - 00000000 ____D C:\Program Files\Common Files\Services
2013-10-31 11:48 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\NetMeeting
2013-10-31 11:47 - 2013-10-31 12:36 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Dokumenty
2013-10-31 11:47 - 2013-10-31 11:47 - 00000615 _____ C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Windows Messenger.lnk
2013-10-31 11:47 - 2013-10-31 11:44 - 00000000 ___RD C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Příslušenství
2013-10-31 11:47 - 2011-01-18 21:49 - 00000000 ____D C:\Program Files\Common Files\System
2013-10-31 11:46 - 2013-10-31 11:46 - 00000000 ____D C:\Program Files\MSN Gaming Zone
2013-10-31 11:46 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Windows Media Connect 2
2013-10-31 11:46 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Messenger
2013-10-31 11:45 - 2013-10-31 12:36 - 00000000 ___HD C:\Documents and Settings\Default User.WINDOWS.0\Šablony
2013-10-31 11:45 - 2013-10-31 12:00 - 00000000 ___HD C:\Documents and Settings\x\Šablony
2013-10-31 11:45 - 2011-01-18 21:48 - 00000000 ____D C:\Program Files\Windows NT
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Local Settings\Data aplikací\ESET
2013-10-31 11:03 - 2013-10-31 11:03 - 00000000 ____D C:\Documents and Settings\Jaryn\Data aplikací\ESET
2013-10-31 10:55 - 2013-10-31 10:55 - 00001624 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_105510.reg
2013-10-31 10:54 - 2013-10-31 10:54 - 00000715 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Program Files\CCleaner
2013-10-31 10:54 - 2013-10-31 10:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\system.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:47 - 00000000 ____H C:\WINDOWS\system32\config\software.sav.LOG
2013-10-31 10:47 - 2013-10-31 10:43 - 00002382 _____ C:\WINDOWS\system32\ASOROSet.bin
2013-10-31 10:47 - 2011-01-18 22:38 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-31 10:47 - 2011-01-18 22:37 - 28835840 _____ C:\WINDOWS\system32\config\software.bak
2013-10-31 10:47 - 2011-01-18 22:37 - 10485760 _____ C:\WINDOWS\system32\config\system.bak
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SECURITY.sav.LOG
2013-10-31 10:46 - 2013-10-31 10:46 - 00000000 ____H C:\WINDOWS\system32\config\SAM.sav.LOG
2013-10-31 10:45 - 2011-01-18 22:38 - 00262144 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-31 10:44 - 2013-10-31 10:44 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2013-10-31 10:43 - 2013-10-31 10:43 - 00000000 ____D C:\WINDOWS\system32\config\RCCBakup
2013-10-31 10:24 - 2013-10-31 10:24 - 00011154 _____ C:\Documents and Settings\Jaryn\Dokumenty\cc_20131031_102433.reg
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\Jaryn\.android
2013-10-31 10:15 - 2013-10-31 10:15 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\MyPhoneExplorer
2013-10-31 10:15 - 2011-09-05 15:38 - 00001777 _____ C:\Documents and Settings\All Users\Plocha\MyPhoneExplorer.lnk
2013-10-31 10:15 - 2011-09-05 15:38 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-10-31 10:13 - 2011-01-18 23:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ACD Systems
2013-10-30 22:24 - 2011-01-18 22:42 - 01272088 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-30 22:24 - 2011-01-18 21:48 - 00000000 ____D C:\WINDOWS\Registration
2013-10-15 17:22 - 2011-01-18 23:06 - 00000000 ____D C:\WINDOWS\Microsoft.NET

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-04-14 07:52] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-04-14 07:52] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 06:42] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1

==================== End Of Log ============================

kolizek · #12 Příspěvek od **kolizek** » 10 lis 2013 10:29

Nevím, zda to spolu souvisí, či nikoli, ale při startu WinXP se počítač asi na 30s zastaví. Děje se tak při obrazovce s logem, pod nímž přejíždějí ty 3 modré kostičky. Ty se na 30 s zastaví a nic se neděje. Pak se rozjedou, a během pár sekund Windows najedou. Jako by počítač během té doby něco hledal...

#13 Příspěvek od **vyosek** » 10 lis 2013 16:41

Vy jste ale ve FRST nedal Fix, ale znovu jste to skenoval...Ctete prosim dukladneji navody a zopakujte tedy opravu pomoci fixlistu

kolizek · #14 Příspěvek od **kolizek** » 10 lis 2013 17:17

Dal, ale bohužel jsem odeslal jiný log

, tak teď už je to snad ok. Omlouvám se. Mám příspěvek se špatným logem odstranit?

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 10-11-2013
Ran by Jaryn at 2013-11-10 17:14:17 Run:2
Running from C:\Documents and Settings\Jaryn\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
KU\Default User\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User.WINDOWS.0\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\Default User.WINDOWS.0\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\LocalService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\NetworkService.NT AUTHORITY\...\Run: [CTFMON.EXE] - C:\WINDOWS.0\system32\CTFMON.EXE
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
AlternateShell:

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {8473bbf3-c362-4e14-8ff3-752139cbdf64} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... rceid=IE_5
SearchScopes: HKCU - {e310e08a-ef9e-4934-b2c1-6996e545599f} URL = http://www.firmy.cz/phr/{searchTerms}?sourceid=IE_5
SearchScopes: HKCU - {f14a674b-6a1c-4cce-a72f-74196a63e0ba} URL = http://www.mapy.cz/?query={searchTerms}&sourceid=IE_5

DisableService: JavaQuickStarterService

S3 dgderdrv; No ImagePath
U1 WS2IFSL;

2013-10-31 15:56 - 2013-10-31 15:56 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-10-31 15:49 - 2013-10-31 15:56 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\HitmanPro
C:\Documents and Settings\Jaryn\Data aplikací\AltShell.ini
C:\Documents and Settings\Jaryn\Local Settings\Temp\Quarantine.exe

REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader" /f
REG: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

Hosts:

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value not found.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value not found.
HKU\Default User.WINDOWS.0\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON.EXE => Value not found.
HKU\Default User.WINDOWS.0\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_2 => Value not found.
HKU\Default User.WINDOWS.0\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value not found.
HKU\LocalService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON.EXE => Value not found.
HKU\LocalService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_2 => Value not found.
HKU\LocalService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value not found.
HKU\NetworkService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON.EXE => Value not found.
HKU\NetworkService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_2 => Value not found.
HKU\NetworkService.NT AUTHORITY\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value not found.
hklm\System\CurrentControlSet\Control\SafeBoot\\AlternateShell => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8473bbf3-c362-4e14-8ff3-752139cbdf64} => Key not found.
HKCR\Wow6432Node\CLSID\{8473bbf3-c362-4e14-8ff3-752139cbdf64} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{e310e08a-ef9e-4934-b2c1-6996e545599f} => Key not found.
HKCR\Wow6432Node\CLSID\{e310e08a-ef9e-4934-b2c1-6996e545599f} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{f14a674b-6a1c-4cce-a72f-74196a63e0ba} => Key not found.
HKCR\Wow6432Node\CLSID\{f14a674b-6a1c-4cce-a72f-74196a63e0ba} => Key not found.
JavaQuickStarterService service was disabled
dgderdrv => Service not found.
WS2IFSL => Service not found.
"C:\WINDOWS\system32\bootdelete.exe" => File/Directory not found.
"C:\Documents and Settings\All Users\Data aplikací\HitmanPro" => File/Directory not found.
"C:\Documents and Settings\Jaryn\Data aplikací\AltShell.ini" => File/Directory not found.
"C:\Documents and Settings\Jaryn\Local Settings\Temp\Quarantine.exe" => File/Directory not found.

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f =========

Chyba: Systém nenalezl zadaný klíč registru nebo požadovanou hodnotu.

========= End of Reg: =========

"C:\WINDOWS\tasks\Adobe Flash Player Updater.job" => File/Directory not found.
"C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job" => File/Directory not found.
"C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====

#15 Příspěvek od **vyosek** » 10 lis 2013 18:46

Nic neodstraujte

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

Prosím o kontrolu logu po "léčení" PC děkuji.

Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.

Re: Prosím o kontrolu logu po "léčení" PC děkuji.