Zpomalení PC + avast po scanu našel nějaké škodlivé soubory

[matesak]

Zdravím, prosil bych o kontrolu logu. Poslední dobou se nějak zpomalil počítač a po projetí antivirem jsem objevil pár škodlivých souborů. Pc už není nejmladší, ale slouží pouze pro procházení internetu. Díky

Logfile of random's system information tool 1.06 (written by random/random)
Run by xxx at 2014-07-19 04:09:41
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 40 GB (10%) free of 400 GB
Total RAM: 2279 MB (17% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Sense-codedownloader.job
C:\WINDOWS\tasks\Sense-firefoxinstaller.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F7C552A4-8726-497A-AE44-0C2BAF545410}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-07-05 453544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-17 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-07-05 157616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
10

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-11 61440]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-17 4086432]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-08-15 57344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
TL-WN321G Wireless Utility.lnk - C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2012-05-22 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\xxx\Data aplikací\BitTorrent\BitTorrent.exe"="C:\Documents and Settings\xxx\Data aplikací\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\3DO\Heroes of Might and Magic IV\heroes4c.exe"="C:\Program Files\3DO\Heroes of Might and Magic IV\heroes4c.exe:*:Enabled:Heroes of Might and Magic® IV: Winds of War™"
"C:\Program Files\KaM - The Peasants Rebellion\KM_TPR.exe"="C:\Program Files\KaM - The Peasants Rebellion\KM_TPR.exe:*:Enabled:KM_TPR"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Microsoft Games\Age of Empires\Empires.exe"="C:\Program Files\Microsoft Games\Age of Empires\Empires.exe:*:Enabled:Age of Empires"
"C:\Documents and Settings\xxx\Plocha\Zbyšek\Age of Empires 1\GAME\Empires.exe"="C:\Documents and Settings\xxx\Plocha\Zbyšek\Age of Empires 1\GAME\Empires.exe:*:Enabled:Age of Empires"
"C:\Program Files\Tomabo\MP4 Player\YouTubeVideoDownloader.exe"="C:\Program Files\Tomabo\MP4 Player\YouTubeVideoDownloader.exe:*:Enabled:YouTube Video Downloader"
"C:\Program Files\Czechcrowncoin\czechcrowncoin-qt.exe"="C:\Program Files\Czechcrowncoin\czechcrowncoin-qt.exe:*:Enabled:Czechcrowncoin-Qt (OSS GUI client for Czechcrowncoin)"
"C:\Program Files\PANDORA.TV\PanService\KMPProcess.exe"="C:\Program Files\PANDORA.TV\PanService\KMPProcess.exe:*:Enabled:KMPProcess"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2014-07-19 04:09:42 ----D---- C:\Program Files\trend micro
2014-07-19 04:09:41 ----D---- C:\rsit
2014-07-17 06:17:33 ----D---- C:\WINDOWS\jumpshot.com
2014-07-17 03:21:11 ----D---- C:\Documents and Settings\xxx\Data aplikací\Czechcrowncoin
2014-07-17 03:18:15 ----D---- C:\Program Files\Czechcrowncoin
2014-07-15 17:38:49 ----D---- C:\Documents and Settings\xxx\Data aplikací\Gify
2014-07-14 15:06:15 ----D---- C:\Documents and Settings\xxx\Data aplikací\vlc
2014-07-14 15:04:57 ----D---- C:\Program Files\VideoLAN
2014-07-14 14:34:04 ----D---- C:\Documents and Settings\xxx\Data aplikací\Tomabo
2014-07-14 14:33:57 ----D---- C:\Program Files\Tomabo
2014-07-13 22:44:06 ----D---- C:\Documents and Settings\xxx\Data aplikací\PSpad
2014-07-13 22:43:43 ----D---- C:\Program Files\PSPad editor
2014-07-13 22:43:12 ----D---- C:\Program Files\Microsoft SQL Server
2014-07-13 22:42:52 ----D---- C:\Program Files\Microsoft Synchronization Services
2014-07-13 22:42:51 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2014-07-13 22:36:17 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2014-07-13 22:36:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2014-07-13 22:35:14 ----D---- C:\Program Files\Microsoft SDKs
2014-07-12 07:34:12 ----N---- C:\WINDOWS\system32\spmsg.dll
2014-07-08 16:02:01 ----D---- C:\Documents and Settings\xxx\Data aplikací\Settings Manager
2014-07-08 16:01:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\systemk
2014-07-07 09:30:18 ----D---- C:\Program Files\Battle for Wesnoth 1.11.8
2014-06-30 23:31:42 ----D---- C:\Documents and Settings\xxx\Data aplikací\avidemux
2014-06-30 23:31:10 ----D---- C:\Program Files\Avidemux 2.6
2014-06-26 14:45:56 ----D---- C:\Documents and Settings\xxx\Data aplikací\AVG
2014-06-26 14:41:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG
2014-06-26 14:41:37 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-26 14:41:33 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2014-06-26 14:40:06 ----D---- C:\Documents and Settings\xxx\Data aplikací\OpenCandy
2014-06-26 14:39:38 ----D---- C:\Documents and Settings\xxx\Data aplikací\rmi
2014-06-26 14:16:00 ----D---- C:\Program Files\Micro Application
2014-06-26 14:15:27 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2014-06-26 14:10:33 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2014-06-26 14:10:27 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2014-06-26 14:10:27 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2014-06-26 14:10:22 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2014-06-26 14:10:19 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2014-06-26 14:10:14 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2014-06-26 14:10:14 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2014-06-26 14:10:03 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2014-06-26 14:09:57 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2014-06-26 14:09:56 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2014-06-26 14:09:54 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2014-06-26 14:09:53 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2014-06-26 14:09:53 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2014-06-26 14:09:51 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2014-06-26 14:09:48 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2014-06-26 14:09:47 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2014-06-26 14:09:47 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2014-06-26 14:09:41 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2014-06-26 14:09:34 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2014-06-26 14:09:30 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2014-06-26 14:09:30 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2014-06-26 14:09:21 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2014-06-26 14:09:07 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2014-06-26 14:09:07 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2014-06-26 14:09:04 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2014-06-26 14:09:04 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2014-06-26 14:08:52 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2014-06-26 14:08:44 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2014-06-26 14:08:40 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2014-06-26 14:08:37 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2014-06-26 14:08:36 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2014-06-26 14:08:32 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2014-06-26 14:08:30 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2014-06-26 14:08:28 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2014-06-26 14:08:27 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2014-06-26 14:08:24 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2014-06-26 14:08:24 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2014-06-26 14:08:23 ----A---- C:\WINDOWS\system32\d3dx9_31.dll

======List of files/folders modified in the last 1 months======

2014-07-19 04:09:42 ----D---- C:\Program Files
2014-07-19 02:48:37 ----D---- C:\Program Files\The KMPlayer
2014-07-19 01:20:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-07-19 00:00:20 ----D---- C:\WINDOWS\Prefetch
2014-07-18 23:59:48 ----D---- C:\WINDOWS\system32
2014-07-18 23:59:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-18 23:59:08 ----D---- C:\WINDOWS\Temp
2014-07-18 23:55:54 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2014-07-17 22:36:03 ----HD---- C:\WINDOWS\inf
2014-07-17 08:14:45 ----D---- C:\Documents and Settings\xxx\Data aplikací\newnext.me
2014-07-17 08:14:39 ----SD---- C:\WINDOWS\Tasks
2014-07-17 08:14:39 ----D---- C:\Program Files\YouTube Accelerator
2014-07-17 06:17:33 ----D---- C:\WINDOWS
2014-07-17 06:14:59 ----D---- C:\WINDOWS\system32\drivers
2014-07-17 03:54:45 ----D---- C:\WINDOWS\system32\CatRoot2
2014-07-17 03:45:50 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-07-15 19:55:30 ----D---- C:\Documents and Settings\xxx\Data aplikací\Media Player Classic
2014-07-15 19:55:30 ----D---- C:\Documents and Settings\xxx\Data aplikací\BitTorrent
2014-07-15 19:54:35 ----D---- C:\WINDOWS\Debug
2014-07-15 17:32:16 ----D---- C:\Users
2014-07-14 08:54:14 ----D---- C:\WINDOWS\Microsoft.NET
2014-07-14 08:54:13 ----RSD---- C:\WINDOWS\assembly
2014-07-13 22:43:36 ----SHD---- C:\WINDOWS\Installer
2014-07-13 22:43:00 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-07-13 22:40:51 ----SD---- C:\Documents and Settings\xxx\Data aplikací\Microsoft
2014-07-13 22:36:38 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-07-13 22:36:17 ----D---- C:\Program Files\Microsoft.NET
2014-07-12 07:34:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-07-08 15:24:50 ----D---- C:\WINDOWS\system32\MRT
2014-07-08 15:22:11 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-08 11:56:22 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-07-04 19:08:18 ----D---- C:\Documents and Settings\xxx\Data aplikací\DAEMON Tools Lite
2014-07-01 16:29:12 ----D---- C:\Program Files\Counter-Strike 1.6 Non-Steam
2014-06-29 15:37:13 ----D---- C:\Program Files\Universal Extractor
2014-06-26 20:56:46 ----D---- C:\WINDOWS\Logs
2014-06-26 14:46:35 ----D---- C:\WINDOWS\system32\config
2014-06-26 14:16:21 ----RSD---- C:\WINDOWS\Fonts
2014-06-26 14:16:00 ----D---- C:\WINDOWS\WinSxS
2014-06-26 14:14:12 ----D---- C:\WINDOWS\system32\DirectX
2014-06-26 11:09:01 ----SHD---- C:\WINDOWS\system32\AI_RecycleBin
2014-06-20 12:30:45 ----D---- C:\Program Files\VNT
2014-06-20 12:30:19 ----D---- C:\Program Files\AskPartnerNetwork

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2012-05-22 41600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-07-17 55112]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-17 779536]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-17 414520]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-07-17 57800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2014-01-02 243128]
R1 F06DEFF2-5B9C-490D-910F-35D3A91196222;F06DEFF2-5B9C-490D-910F-35D3A91196222; \??\C:\Program Files\Settings Manager\systemk\systemkmgrc2.cfg []
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2013-11-27 21361]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-17 24184]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-17 67824]
R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2013-08-25 13120]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-08-14 404736]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-08-15 462684]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2012-05-22 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2009-02-04 170496]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2012-05-22 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2012-05-22 61824]
R3 rtl8139;Realtek RTL8139/810X Family PCI Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2001-08-23 25434]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 MPE;BDA MPE Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-07-09 15104]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2012-05-22 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2012-05-22 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-06-14 165784]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-17 50344]
R2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe [2013-12-18 59392]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-07-05 161704]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 YouTubeAcceleratorService;YouTubeAcceleratorService; C:\PROGRA~1\YOUTUB~1\YouTubeAcceleratorService.exe [2013-12-27 1502056]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-07 119408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]

-----------------EOF-----------------

[cernohous13]

Zdravím,

prvotní čistka

Stáhni Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Ulož jej na plochu a spusť - zobrazí se licenční podminky -> start libovolnou klávesou.
Bude vytvořena záloha a proběhne skenování.
Vyskočí log (nebo je uložen zde c:\JRT jako JRT.txt) - zkopíruj jej sem

Stáhni AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Ulož nejlépe na plochu -> ukonči všechny programy -> spusť AdwCleaner -> klikni na Scan po dokončení na Clean
bude provedena oprava, restartuje se - (případně restartuj) a vypadne log C:\AdwCleaner\AdwCleaner[S?].txt , jeho obsah vložíš sem

pravděpodobně budeš nucen vypnout na tu chvíli antivir - je to čisté, prověřeno

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Po spuštění do okna vlozte skript nize

  Kód: Vybrat vše

  srinfo;
  autoclean;
  emptyclsid;
  iedefaults;
  process;
  hijackthis;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Log bude zde C:\zoek-results.log

[matesak]

Tady je LOG z JRT - po prvním spuštění jsem log nenašel - hledal jsem v C. tak jsem ho spustil teda znova a pozdě jsem zjistil, že je uložený jinde. Snad to nevadí.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Microsoft Windows XP x86
Ran by xxx on so 19.07.2014 at 5:34:54,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 19.07.2014 at 5:43:14,76
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


tady z AdwC

# AdwCleaner v3.216 - Report created 19/07/2014 at 04:53:50
# Updated 17/07/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : xxx - DOMA
# Running from : C:\Documents and Settings\xxx\Plocha\adwcleaner_3.216.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\apn
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\systemk
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\wincert
Folder Deleted : C:\Program Files\DCE
Folder Deleted : C:\Program Files\Linkey
Folder Deleted : C:\Program Files\Settings Manager
Folder Deleted : C:\Program Files\VNT
Folder Deleted : C:\Program Files\YouTube Accelerator
Folder Deleted : C:\Documents and Settings\All Users\Dokumenty\ShopperPro
Folder Deleted : C:\Documents and Settings\xxx\Local Settings\Data aplikací\AskPartnerNetwork
Folder Deleted : C:\Documents and Settings\xxx\Local Settings\Data aplikací\genienext
Folder Deleted : C:\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie
Folder Deleted : C:\Documents and Settings\xxx\Local Settings\Data aplikací\VNT
Folder Deleted : C:\Documents and Settings\xxx\Data aplikací\Settings Manager
Folder Deleted : C:\Documents and Settings\xxx\Nabídka Start\Programy\Mobogenie
Folder Deleted : C:\Documents and Settings\xxx\Dokumenty\Mobogenie
File Deleted : C:\Documents and Settings\xxx\daemonprocess.txt
File Deleted : C:\DOCUME~1\xxx\LOCALS~1\Temp\Uninstall.exe
File Deleted : C:\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\5kkuivhy.default\searchplugins\default-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\WINDOWS\Tasks\Sense-codedownloader.job

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\Sense
Key Deleted : HKCU\Software\SystemK
Key Deleted : HKLM\Software\Goobzo
Key Deleted : HKLM\Software\Linkey
Key Deleted : HKLM\Software\Sense
Key Deleted : HKLM\Software\SystemK
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sense
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v29.0.1 (cs)

[ File : C:\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\5kkuivhy.default\prefs.js ]


-\\ Google Chrome v34.0.1847.137

[ File : C:\Documents and Settings\xxx\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.default-search.net/search?sid=476&a ... earchTerms}
Deleted [Startup_urls] : hxxp://www.default-search.net?sid=476&aid=113& ... 68&src=hmp
Deleted [Homepage] : hxxp://www.default-search.net?sid=476&aid=113& ... 68&src=hmp

*************************

AdwCleaner[R0].txt - [8524 octets] - [19/07/2014 04:51:53]
AdwCleaner[S0].txt - [8006 octets] - [19/07/2014 04:53:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8066 octets] ##########

tady z Zoek


Zoek.exe v5.0.0.0 Updated 16-07-2014
Tool run by xxx on so 19.07.2014 at 5:04:57,21.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\xxx\Plocha\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

19.7.2014 5:08:05 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-343818398-1563985344-1177238915-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully

==== Running Processes ======================

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\wudfhost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\PANDORA.TV\PanService\KMPService.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\PANDORA.TV\PanService\KMPProcess.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\YouTubeAcceleratorService deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\YouTubeAcceleratorService deleted successfully

==== Deleting Files \ Folders ======================

C:\Documents and Settings\xxx\.android deleted
C:\Program Files\ComPlus Applications deleted
C:\WINDOWS\System32\SET7F.tmp deleted
"C:\WINDOWS\Installer\7e73ef.msi" deleted

======== System Restore Points ========

RP116: 19.4.2014 18:31:02 - Installed Age of Empires III
RP117: 19.4.2014 18:52:05 - Removed Age of Empires III
RP118: 20.4.2014 17:00:17 - Software Distribution Service 3.0
RP119: 21.4.2014 8:57:37 - Software Distribution Service 3.0
RP120: 22.4.2014 9:49:02 - Kontrolní bod systému
RP121: 23.4.2014 18:08:39 - Kontrolní bod systému
RP122: 24.4.2014 18:15:40 - Kontrolní bod systému
RP123: 25.4.2014 18:21:55 - Kontrolní bod systému
RP124: 27.4.2014 10:28:49 - Kontrolní bod systému
RP125: 28.4.2014 16:19:48 - Kontrolní bod systému
RP126: 29.4.2014 16:44:25 - Kontrolní bod systému
RP127: 30.4.2014 18:11:43 - Kontrolní bod systému
RP128: 1.5.2014 21:50:12 - Kontrolní bod systému
RP129: 3.5.2014 17:00:22 - Software Distribution Service 3.0
RP130: 4.5.2014 16:55:27 - Instalace nepodepsaného ovladače
RP131: 5.5.2014 23:02:11 - Kontrolní bod systému
RP132: 7.5.2014 16:01:30 - Kontrolní bod systému
RP133: 9.5.2014 15:01:39 - Kontrolní bod systému
RP134: 10.5.2014 15:33:08 - Kontrolní bod systému
RP135: 10.5.2014 21:23:03 - Instalace nepodepsaného ovladače
RP136: 12.5.2014 20:47:30 - Kontrolní bod systému
RP137: 13.5.2014 22:57:16 - Kontrolní bod systému
RP138: 14.5.2014 15:45:48 - Software Distribution Service 3.0
RP139: 15.5.2014 20:54:13 - Kontrolní bod systému
RP140: 16.5.2014 22:07:48 - Kontrolní bod systému
RP141: 18.5.2014 6:53:57 - Kontrolní bod systému
RP142: 19.5.2014 14:47:20 - Kontrolní bod systému
RP143: 20.5.2014 15:59:49 - Kontrolní bod systému
RP144: 28.5.2014 17:45:23 - Kontrolní bod systému
RP145: 30.5.2014 13:21:03 - Kontrolní bod systému
RP146: 31.5.2014 19:47:05 - Kontrolní bod systému
RP147: 3.6.2014 15:02:56 - Kontrolní bod systému
RP148: 4.6.2014 14:09:44 - Aktualizovat na nepodepsaný ovladač
RP149: 4.6.2014 14:17:15 - Aktualizovat na nepodepsaný ovladač
RP150: 4.6.2014 14:19:24 - Aktualizovat na nepodepsaný ovladač
RP151: 5.6.2014 21:58:14 - Software Distribution Service 3.0
RP152: 7.6.2014 19:56:22 - Kontrolní bod systému
RP153: 8.6.2014 7:20:37 - Software Distribution Service 3.0
RP154: 9.6.2014 18:47:41 - Kontrolní bod systému
RP155: 11.6.2014 14:35:11 - Kontrolní bod systému
RP156: 12.6.2014 16:33:05 - Kontrolní bod systému
RP157: 13.6.2014 17:43:07 - Kontrolní bod systému
RP158: 14.6.2014 20:24:36 - Kontrolní bod systému
RP159: 16.6.2014 19:14:49 - Kontrolní bod systému
RP160: 18.6.2014 6:40:03 - Kontrolní bod systému
RP161: 19.6.2014 17:01:35 - Kontrolní bod systému
RP162: 21.6.2014 18:26:18 - Kontrolní bod systému
RP163: 23.6.2014 19:40:11 - Kontrolní bod systému
RP164: 25.6.2014 19:59:32 - Kontrolní bod systému
RP165: 26.6.2014 11:08:41 - Nainstalován program League of Legends
RP166: 26.6.2014 11:09:06 - Nainstalováno rozhraní DirectX
RP167: 26.6.2014 14:05:10 - Odebráno: Microsoft Visual C++ 2005 Redistributable
RP168: 26.6.2014 14:05:41 - Nainstalováno: Microsoft Visual C++ 2005 Redistributable
RP169: 26.6.2014 14:06:55 - Nainstalováno rozhraní DirectX
RP170: 26.6.2014 14:14:12 - Nainstalováno rozhraní DirectX
RP171: 27.6.2014 10:39:24 - Removed Age of Empires III
RP172: 30.6.2014 12:14:35 - Kontrolní bod systému
RP173: 29.6.2014 20:17:22 - Kontrolní bod systému
RP174: 30.6.2014 21:31:34 - Kontrolní bod systému
RP175: 2.7.2014 13:39:00 - Kontrolní bod systému
RP176: 3.7.2014 10:40:22 - Odebráno: AVG PC TuneUp 2014
RP177: 3.7.2014 10:41:21 - Odebráno: AVG PC TuneUp 2014 (cs-CZ)
RP178: 4.7.2014 13:12:14 - Kontrolní bod systému
RP179: 6.7.2014 10:18:14 - Kontrolní bod systému
RP180: 7.7.2014 12:28:23 - Kontrolní bod systému
RP181: 8.7.2014 12:47:42 - Kontrolní bod systému
RP182: 8.7.2014 15:21:55 - Software Distribution Service 3.0
RP183: 9.7.2014 15:54:27 - Kontrolní bod systému
RP184: 10.7.2014 16:29:45 - Kontrolní bod systému
RP185: 12.7.2014 7:34:12 - Nainstalováno Windows XP WgaNotify.
RP186: 13.7.2014 18:30:40 - Kontrolní bod systému
RP187: 14.7.2014 19:37:03 - Kontrolní bod systému
RP188: 16.7.2014 2:15:10 - Kontrolní bod systému
RP189: 17.7.2014 3:42:12 - avast! antivirus system restore point
RP190: 18.7.2014 16:03:05 - Kontrolní bod systému
RP191: 19.7.2014 5:08:05 - zoek.exe restore point

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{55A8EC97-6AF6-442c-877F-11C51DBD162D}"="C:\Program Files\Tomabo\MP4 Player\YTVD_FF.xpi" [13.05.2013 12:09]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[17.07.2014 03:45]
igljnkmljjbhcellpnjppojkfdfmkjmp - C:\Program Files\Tomabo\MP4 Player\YTVD_GC.crx[13.05.2013 11:56]
pkbfpjcjiaepaefidojjphdcmhmdmepf - C:\Documents and Settings\All Users\Data aplikacˇ\AskPartnerNetwork\Toolbar\KMPV7c\CRX\ToolbarCR.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com/search?q={searchT ... d=ie7&rlz="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com/search?q={searchT ... d=ie7&rlz="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?FORM=U223DF& ... -SearchBox"
{E64DA9A4-4133-4359-B2FA-A436CFCD0C1C} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_13415"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pkbfpjcjiaepaefidojjphdcmhmdmepf deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully

==== HijackThis Entries ======================

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
O8 - Extra context menu item: Download video on this page - res://C:\Program Files\Tomabo\MP4 Player\YTVD_IE.dll/300
O8 - Extra context menu item: Download video this links to - res://C:\Program Files\Tomabo\MP4 Player\YTVD_IE.dll/301
O9 - Extra button: Download Video - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\MP4 Player\YTVD_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video on this page - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\MP4 Player\YTVD_IE.dll/300 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\KMPService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O24 - Desktop Component 0: (no name) - http://www.mamincinyrecepty.cz/photos/587_0.jpg

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\xxx\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\xxx\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=5 folders=2 233146 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\xxx\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\xxx\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

==== EOF on so 19.07.2014 at 5:25:21,15 ======================

[cernohous13]

výborně

Stáhni a nainstaluj MBAM zde http://www.bleepingcomputer.com/downloa ... i-malware/ verzi 1.75
Spustit -> na 3.záložce "Aktualizace" -> Kontrola aktualizací (možná bude provedeno automaticky)
následně na 1.záložce "Kontrolor" -> Úplná kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení a program jen minimalizuj

[matesak]

Tady
Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.04.04.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
xxx :: DOMA [administrátor]

Ochrana: Povolena

19.7.2014 16:22:13
MBAM-log-2014-07-19 (18-36-13).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 298836
Uplynulý čas: 2 hodin, 12 minut, 6 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\WINDOWS\expIorer.exe (Trojan.Rundis) -> Nebyla provedena žádná instrukce.

(konec)

[cernohous13]

Klikni na https://www.virustotal.com
po kliknutí na "Choose File" jen zkopíruj do řádku "Název souboru":

C:\WINDOWS\explorer.exe

"Scan It" (pokud byl již testován, nech testovat znovu - Reanalyse)
Trpělivě vyčkej dokončení scanu dokud se neobjeví konečný výsledek např.0/41
Do fóra zkopíruj výsledný log. nebo odkaz z adresního řádku na stránku.
Pokud nebude nález stačí jen oznámit

[matesak]

Scan byl negativní. Výsledek je 0/52

[cernohous13]

MBAM odinstaluj - pokud jsi dal na VT "Reanalyse" tak to byla falešná detekce.

dej mi aktuální RSIT

[matesak]

Logfile of random's system information tool 1.06 (written by random/random)
Run by xxx at 2014-07-19 20:03:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 40 GB (10%) free of 400 GB
Total RAM: 2279 MB (10% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Sense-firefoxinstaller.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F7C552A4-8726-497A-AE44-0C2BAF545410}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-07-05 453544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-17 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-07-05 157616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
10

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-11 61440]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-17 4086432]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-08-15 57344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
TL-WN321G Wireless Utility.lnk - C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2012-05-22 133632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\xxx\Data aplikací\BitTorrent\BitTorrent.exe"="C:\Documents and Settings\xxx\Data aplikací\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\3DO\Heroes of Might and Magic IV\heroes4c.exe"="C:\Program Files\3DO\Heroes of Might and Magic IV\heroes4c.exe:*:Enabled:Heroes of Might and Magic® IV: Winds of War™"
"C:\Program Files\KaM - The Peasants Rebellion\KM_TPR.exe"="C:\Program Files\KaM - The Peasants Rebellion\KM_TPR.exe:*:Enabled:KM_TPR"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Microsoft Games\Age of Empires\Empires.exe"="C:\Program Files\Microsoft Games\Age of Empires\Empires.exe:*:Enabled:Age of Empires"
"C:\Documents and Settings\xxx\Plocha\Zbyšek\Age of Empires 1\GAME\Empires.exe"="C:\Documents and Settings\xxx\Plocha\Zbyšek\Age of Empires 1\GAME\Empires.exe:*:Enabled:Age of Empires"
"C:\Program Files\Tomabo\MP4 Player\YouTubeVideoDownloader.exe"="C:\Program Files\Tomabo\MP4 Player\YouTubeVideoDownloader.exe:*:Enabled:YouTube Video Downloader"
"C:\Program Files\Czechcrowncoin\czechcrowncoin-qt.exe"="C:\Program Files\Czechcrowncoin\czechcrowncoin-qt.exe:*:Enabled:Czechcrowncoin-Qt (OSS GUI client for Czechcrowncoin)"
"C:\Program Files\SmartFTP Client\SmartFTP.exe"="C:\Program Files\SmartFTP Client\SmartFTP.exe:*:Enabled:SmartFTP Client"
"C:\Program Files\PANDORA.TV\PanService\KMPProcess.exe"="C:\Program Files\PANDORA.TV\PanService\KMPProcess.exe:*:Enabled:KMPProcess"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2014-07-19 18:53:50 ----D---- C:\totalcmd
2014-07-19 18:53:50 ----D---- C:\Documents and Settings\xxx\Data aplikací\GHISLER
2014-07-19 18:44:25 ----D---- C:\Program Files\SmartFTP Client
2014-07-19 15:25:24 ----D---- C:\Documents and Settings\xxx\Data aplikací\Malwarebytes
2014-07-19 15:25:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-07-19 15:24:55 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-07-19 05:31:59 ----SHD---- C:\RECYCLER
2014-07-19 05:20:16 ----D---- C:\WINDOWS\Temp
2014-07-19 05:20:16 ----A---- C:\WINDOWS\zoek-delete.exe
2014-07-19 05:01:52 ----D---- C:\zoek_backup
2014-07-19 04:52:28 ----A---- C:\WINDOWS\system32\sqlite3.dll
2014-07-19 04:51:41 ----D---- C:\AdwCleaner
2014-07-19 04:39:52 ----D---- C:\WINDOWS\ERUNT
2014-07-19 04:09:42 ----D---- C:\Program Files\trend micro
2014-07-19 04:09:41 ----D---- C:\rsit
2014-07-17 06:17:33 ----D---- C:\WINDOWS\jumpshot.com
2014-07-17 03:21:11 ----D---- C:\Documents and Settings\xxx\Data aplikací\Czechcrowncoin
2014-07-17 03:18:15 ----D---- C:\Program Files\Czechcrowncoin
2014-07-15 17:38:49 ----D---- C:\Documents and Settings\xxx\Data aplikací\Gify
2014-07-14 15:06:15 ----D---- C:\Documents and Settings\xxx\Data aplikací\vlc
2014-07-14 15:04:57 ----D---- C:\Program Files\VideoLAN
2014-07-14 14:34:04 ----D---- C:\Documents and Settings\xxx\Data aplikací\Tomabo
2014-07-14 14:33:57 ----D---- C:\Program Files\Tomabo
2014-07-13 22:44:06 ----D---- C:\Documents and Settings\xxx\Data aplikací\PSpad
2014-07-13 22:43:43 ----D---- C:\Program Files\PSPad editor
2014-07-13 22:43:12 ----D---- C:\Program Files\Microsoft SQL Server
2014-07-13 22:42:52 ----D---- C:\Program Files\Microsoft Synchronization Services
2014-07-13 22:42:51 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2014-07-13 22:36:17 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2014-07-13 22:36:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2014-07-13 22:35:14 ----D---- C:\Program Files\Microsoft SDKs
2014-07-12 07:34:12 ----N---- C:\WINDOWS\system32\spmsg.dll
2014-07-07 09:30:18 ----D---- C:\Program Files\Battle for Wesnoth 1.11.8
2014-06-30 23:31:42 ----D---- C:\Documents and Settings\xxx\Data aplikací\avidemux
2014-06-30 23:31:10 ----D---- C:\Program Files\Avidemux 2.6
2014-06-26 14:45:56 ----D---- C:\Documents and Settings\xxx\Data aplikací\AVG
2014-06-26 14:41:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG
2014-06-26 14:41:37 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-26 14:41:33 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2014-06-26 14:39:38 ----D---- C:\Documents and Settings\xxx\Data aplikací\rmi
2014-06-26 14:16:00 ----D---- C:\Program Files\Micro Application
2014-06-26 14:15:27 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2014-06-26 14:10:33 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2014-06-26 14:10:27 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2014-06-26 14:10:27 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2014-06-26 14:10:22 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2014-06-26 14:10:19 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2014-06-26 14:10:14 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2014-06-26 14:10:14 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2014-06-26 14:10:03 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2014-06-26 14:09:57 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2014-06-26 14:09:56 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2014-06-26 14:09:54 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2014-06-26 14:09:53 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2014-06-26 14:09:53 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2014-06-26 14:09:51 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2014-06-26 14:09:48 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2014-06-26 14:09:47 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2014-06-26 14:09:47 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2014-06-26 14:09:41 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2014-06-26 14:09:34 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2014-06-26 14:09:30 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2014-06-26 14:09:30 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2014-06-26 14:09:21 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2014-06-26 14:09:07 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2014-06-26 14:09:07 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2014-06-26 14:09:04 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2014-06-26 14:09:04 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2014-06-26 14:08:52 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2014-06-26 14:08:44 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2014-06-26 14:08:40 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2014-06-26 14:08:37 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2014-06-26 14:08:36 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2014-06-26 14:08:32 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2014-06-26 14:08:30 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2014-06-26 14:08:28 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2014-06-26 14:08:27 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2014-06-26 14:08:24 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2014-06-26 14:08:24 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2014-06-26 14:08:23 ----A---- C:\WINDOWS\system32\d3dx9_31.dll

======List of files/folders modified in the last 1 months======

2014-07-19 19:56:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-07-19 19:27:03 ----D---- C:\WINDOWS\system32\drivers
2014-07-19 18:53:50 ----D---- C:\WINDOWS
2014-07-19 18:45:16 ----SHD---- C:\WINDOWS\Installer
2014-07-19 18:44:43 ----D---- C:\WINDOWS\system32\en-US
2014-07-19 18:44:42 ----D---- C:\WINDOWS\system32
2014-07-19 18:44:25 ----D---- C:\Program Files
2014-07-19 16:11:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-19 16:03:41 ----D---- C:\WINDOWS\Prefetch
2014-07-19 05:29:58 ----D---- C:\WINDOWS\system32\config
2014-07-19 04:54:31 ----SD---- C:\WINDOWS\Tasks
2014-07-19 02:48:37 ----D---- C:\Program Files\The KMPlayer
2014-07-18 23:55:54 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2014-07-17 22:36:03 ----HD---- C:\WINDOWS\inf
2014-07-17 03:54:45 ----D---- C:\WINDOWS\system32\CatRoot2
2014-07-17 03:45:50 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-07-15 19:55:30 ----D---- C:\Documents and Settings\xxx\Data aplikací\Media Player Classic
2014-07-15 19:55:30 ----D---- C:\Documents and Settings\xxx\Data aplikací\BitTorrent
2014-07-15 19:54:35 ----D---- C:\WINDOWS\Debug
2014-07-15 17:32:16 ----D---- C:\Users
2014-07-14 08:54:14 ----D---- C:\WINDOWS\Microsoft.NET
2014-07-14 08:54:13 ----RSD---- C:\WINDOWS\assembly
2014-07-13 22:43:00 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-07-13 22:40:51 ----SD---- C:\Documents and Settings\xxx\Data aplikací\Microsoft
2014-07-13 22:36:38 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-07-13 22:36:17 ----D---- C:\Program Files\Microsoft.NET
2014-07-12 07:34:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-07-08 15:24:50 ----D---- C:\WINDOWS\system32\MRT
2014-07-08 15:22:11 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-08 11:56:22 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-07-04 19:08:18 ----D---- C:\Documents and Settings\xxx\Data aplikací\DAEMON Tools Lite
2014-07-01 16:29:12 ----D---- C:\Program Files\Counter-Strike 1.6 Non-Steam
2014-06-29 15:37:13 ----D---- C:\Program Files\Universal Extractor
2014-06-26 20:56:46 ----D---- C:\WINDOWS\Logs
2014-06-26 14:16:21 ----RSD---- C:\WINDOWS\Fonts
2014-06-26 14:16:00 ----D---- C:\WINDOWS\WinSxS
2014-06-26 14:14:12 ----D---- C:\WINDOWS\system32\DirectX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2012-05-22 41600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-07-17 55112]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-17 779536]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-17 414520]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-07-17 57800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2014-01-02 243128]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2013-11-27 21361]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-17 24184]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-17 67824]
R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2013-08-25 13120]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-08-14 404736]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-08-15 462684]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2012-05-22 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2009-02-04 170496]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2012-05-22 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2012-05-22 61824]
R3 rtl8139;Realtek RTL8139/810X Family PCI Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2001-08-23 25434]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 MPE;BDA MPE Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-07-09 15104]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2012-05-22 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2012-05-22 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-17 50344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-07-05 161704]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-27 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-07 119408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]

-----------------EOF-----------------

[cernohous13]

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM

Kód: Vybrat vše

:Commands
[resethosts]
[emptytemp]
[emptyflash]
[emptyjava]
[clearallrestorepoints]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Sense-fire
C:\WINDOWS\zoek-delete.exe
C:\zoek_backup
C:\WINDOWS\system32\sqlite3.dll
C:\AdwCleaner

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-

:Services
JavaQuickStarterService
gupdate

[matesak]

All processes killed
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 32913 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: xxx
->Temp folder emptied: 8869034 bytes
->Temporary Internet Files folder emptied: 5461667 bytes
->FireFox cache emptied: 2087200 bytes
->Google Chrome cache emptied: 253446924 bytes
->Flash cache emptied: 857 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 360498 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 334518183 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 67 bytes
RecycleBin emptied: 588366923 bytes

Total Files Cleaned = 1 138,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: xxx
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: xxx

Total Java Files Cleaned = 0,00 mb


Restore point Set: OTM Restore Point
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1016.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1251.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18A0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1914.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B1.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C8.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP40.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4DC.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7BD.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7E5.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP94D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA80.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF18.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFB5.tmp folder moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
File/Folder C:\WINDOWS\tasks\Sense-fire not found.
C:\WINDOWS\zoek-delete.exe moved successfully.
C:\zoek_backup\C_Program Files_ComPlus Applications folder moved successfully.
C:\zoek_backup\C_Documents and Settings_xxx_.android folder moved successfully.
C:\zoek_backup folder moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\sqlite3.dll
C:\WINDOWS\system32\sqlite3.dll moved successfully.
C:\AdwCleaner\Quarantine\C\WINDOWS\Tasks folder moved successfully.
C:\AdwCleaner\Quarantine\C\WINDOWS folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\YouTube Accelerator\res folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\YouTube Accelerator folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\VNT folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Settings Manager\systemk folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Settings Manager folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Mozilla Firefox\browser\searchplugins folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Mozilla Firefox\browser folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Mozilla Firefox folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Linkey\IEExtension folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Linkey\ChromeExtension folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\Linkey folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files\DCE folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Nabídka Start\Programy\Mobogenie folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Nabídka Start\Programy folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Nabídka Start folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Temp folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\VNT\js folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\VNT\images folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\VNT\css folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\VNT folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\info\notice folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\info\download folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\info\connect folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\info folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\iframe\tab_switch folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\iframe folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static\dialog folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_static folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\welcome folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\util folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\tpls folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\skin folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\pb folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\moduletemp folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\vedio folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\ui folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\subject folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\message folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\image folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\driver folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\download folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\contact folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module\app folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\module folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\lib folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\interface folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\vietna folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\thai folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\spanish folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\russian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\portuguese folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\poland folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\korean folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\italian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\indonesian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\france folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\farsi folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\english folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\chinese folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n\arabic folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_\i18n folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\js_ folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\light_square folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\light_rounded folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\facebook folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\default folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\dark_square folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\dark_rounded folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\photo folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\debug folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\iframe folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\htmlTemp folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\vietna folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\thai folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\spanish folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\russian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\portuguese folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\poland folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\korean folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\italian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\indonesian folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\france folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\farsi folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\english folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\chinese folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n\arabic folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_\i18n folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\js_ folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog\images folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\dialog folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web\css folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\web folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\skin\skin2 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\skin\skin1 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\skin\default folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\skin folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\libraries folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\test folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\examples\views folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\examples folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\bin folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\benchmarks\templating folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master\benchmarks folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript\doT-master folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\javascript folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates\css folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\templates folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\sqldrivers folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\phonon_backend folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie\imageformats folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion\Mobogenie folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\OldVersion folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version\CacheVersion folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Version folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files\mobiledrv_google\i386 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files\mobiledrv_google\amd64 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files\mobiledrv_google folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files\001_41ee49370\i386 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files\001_41ee49370 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver\Unzip_Files folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\driver folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Download\Picture folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Download\Apk folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Download folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie\Data folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\Mobogenie folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\AskPartnerNetwork\Toolbar\Updater\IDC folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\AskPartnerNetwork\Toolbar\Updater folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\AskPartnerNetwork\Toolbar folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací\AskPartnerNetwork folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings\Data aplikací folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Local Settings folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Settings Manager\systemk\content folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Settings Manager\systemk\components folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Settings Manager\systemk folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Settings Manager folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\5kkuivhy.default\searchplugins folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\5kkuivhy.default folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací\Mozilla folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx\Data aplikací folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\xxx folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Dokumenty\ShopperPro\JsDriver folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Dokumenty\ShopperPro folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Dokumenty folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\wincert folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\systemk folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\KMPV7c\Updater\Response folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\KMPV7c\Updater\Config folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\KMPV7c\Updater folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\KMPV7c\CRX folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\KMPV7c folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings folder moved successfully.
C:\AdwCleaner\Quarantine\C folder moved successfully.
C:\AdwCleaner\Quarantine folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\5kkuivhy.default folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox\Profiles folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx\Data aplikací\Mozilla\Firefox folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx\Data aplikací\Mozilla folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx\Data aplikací folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\xxx folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings folder moved successfully.
C:\AdwCleaner\Backup\C folder moved successfully.
C:\AdwCleaner\Backup folder moved successfully.
C:\AdwCleaner folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\\DisableTaskMgr deleted successfully.
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!

OTM by OldTimer - Version 3.1.21.0 log created on 07192014_202729

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[cernohous13]

Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.filehippo.com/download_ccleaner
Při instalaci vyhodit fajfku u nabízených toolbarů
Můžeš nastavit potřebný jazyk
zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.
spustit "Nástroje" > "Start" - tady můžeš zkusit deaktivovat procesy, které při spuštění nepotřebuješ (pokud by ti potom něco nechodilo, stejným způsobem je povolíš)

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

Po vyčištění by se hodila defragmentace
http://www.filehippo.com/download_defraggler

pak mi napiš jak je na tom PC

[matesak]

Pc je oproti předchozímu stavu jako blesk. Defragmentce sice trvala 6 hodin, ale už je to ok. Mockrát diůky za pomoc

[cernohous13]

Nemáš zač - rádo se stalo a jsme tady i příště