Jedna položka nejde odstrániť z koša

[antivirus]

Premiestnil som do koša pár starých súborov (žiadne,ktoré by mali byť dôležité či systémové) a i keď je kôš prázdny tak mi tam predsa len jedna položka virtuálne svieti.



OS: XP
---
Ak sa to nebude dať vymazať jednoduchým spôsobom,tak mi to zase až tak vadiť nebude.Ak by sa však našla nejaká utilita tak by bolo fajn.
Díky.

[Márty84]

Zdravim

Zkuste to smazat v nouzovem rezimu.

[antivirus]

Už som na to opakovane myslel,ale až teraz som to vyskúšal.Bohužiaľ to nepomohlo.

[Márty84]

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=130786

[antivirus]

Tu je:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Princezna at 2014-07-26 17:43:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 58 GB (56%) free of 104 GB
Total RAM: 3327 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:44:37, on 26.7.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\Program Files\FeedReader30\feedreader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\ASUS.SYS\config\DVMExportService.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\NETHDD.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cis.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Documents and Settings\Princezna\Desktop\RSIT.exe
C:\Program Files\trend micro\Princezna.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - Default URLSearchHook is missing
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: NetTransport - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [VF0060 STISvc] RunDLL32.exe V0060Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
O4 - HKCU\..\Run: [feedreader.exe] "C:\Program Files\FeedReader30\feedreader.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O8 - Extra context menu item: Stiahni položku cez NetXfer - C:\Program Files\Xi\NetXfer\NXAddLink.html
O8 - Extra context menu item: Stiahni všetky položky cez NetXfer - C:\Program Files\Xi\NetXfer\NXAddList.html
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\Program Files\StreamingStar\HiDownload_Platinum\HiDownloadPlatinum.exe (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7219508484
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM - C:\ASUS.SYS\config\DVMExportService.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NETHDD Service (NETHDD) - UNICON Co., Ltd. - C:\WINDOWS\system32\NETHDD.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 9908 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9}.job - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {0FB77674-7905-4F34-A362-C5A9A26F8CF9}
C:\WINDOWS\tasks\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}.job - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {F140D794-60B6-4F00-9235-D6457AA25B22}
C:\WINDOWS\tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}
C:\WINDOWS\tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {A6D52E4F-569B-4756-B3D8-DF217313DA85}
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-343818398-152049171-1801674531-1003Core.job - C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-343818398-152049171-1801674531-1003UA.job - C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Princezna\Application Data\Mozilla\Firefox\Profiles\pz1hq25x.default-1394996835546

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.google.sk/"
prefs.js - "extensions.enabledItems" - "{FD61379B-066A-4afc-89DE-89FB24D907C2}:0.6.2010043001, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2, elemhidehelper@adblockplus.org:1.0.6, anycolor.pavlos256@gmail.com:0.3.3, {ba243cb0-b824-4a26-9418-73ee795d9b9d}:0.7.5, {fce36c1e-58d8-498a-b2a5-66ad1cedebbb}:0.76, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.2, {4BBDD651-70CF-4821-84F8-2B918CF89CA3}:6.3.3.2, gmailwatcher@sonthakit:1.31, {3112ca9c-de6d-4884-a869-9855de68056c}:7.1.20110512W, {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31, jqs@sun.com:1.0, lcdclock_bloodeye@gmail.com:0.4.2, {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8, {EDA7B1D7-F793-4e03-B074-E6F303317FB0}:1.2.7, {9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC}:6.0.4, {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:4.9, pageinfobutton@wirble.de:0.1.3.5, {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.1, {c151d79e-e61b-4a90-a887-5a46d38fba99}:2.6.1, {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4, yetanothersmoothscrolling@kataho:2.0.25, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.19"

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@photodex.com/PhotodexPresenter]
"Description"=Photodex Presenter Plugin
"Path"=C:\Program Files\Photodex Presenter\npPxPlay.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll


C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Documents and Settings\Princezna\Application Data\Mozilla\Firefox\Profiles\pz1hq25x.default-1394996835546\extensions\
jid0-nRwp7VvCqZcSRTppwWz2npqGEKw@jetpack
jid1-4P0kohSJxU1qGg@jetpack
pageinfobutton@wirble.de
{35106bca-6c78-48c7-ac28-56df30b51d2a}
{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{c151d79e-e61b-4a90-a887-5a46d38fba99}
{EDA7B1D7-F793-4e03-B074-E6F303317FB0}

C:\Documents and Settings\Princezna\Application Data\Mozilla\Firefox\Profiles\pz1hq25x.default-1394996835546\searchplugins\
amazoncouk-search.xml
amazonde-search.xml
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
ebayde-search-suggest.xml
goldboxdeals--amazon-search.xml
goofram-search.xml
google.xml
sfd.xml
slovnik-sk.xml
whois-ip-address.xml
wikipedia-sk.xml
zoznam-sk.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83B80A9C-D91A-4F22-8DCF-EA7204039F79}]
NXIECatcher Class - C:\Program Files\Xi\NetXfer\NXIEHelper.dll [2013-11-15 53248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-29 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2014-03-11 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - NetTransport - C:\Program Files\Xi\NetXfer\NXToolBar.dll [2013-11-14 57344]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-03 98304]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-09-30 16864768]
"VF0060 STISvc"=V0060Pin.dll,RunDLL32EP 513 []
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2014-03-25 1225944]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"feedreader.exe"=C:\Program Files\FeedReader30\feedreader.exe [2009-03-29 2058240]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-02-24 39408]
"Google Update"=C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-04-10 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files\Cyberlink\Shared Files\brs.exe [2008-10-07 75048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2010-01-18 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray]
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative WebCam Tray]
C:\Program Files\Creative\Shared Files\CamTray.exe [2005-10-27 299008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DFX]
C:\Program Files\DFX\DFX.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-04-10 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2010-01-22 2363392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero DriveSpeed]
C:\PROGRA~1\Nero\NERO7~1\NEROTO~1\DRIVES~1.EXE [2007-07-03 1312040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NetXfer]
C:\Program Files\Xi\NetXfer\NetTransport.exe [2014-04-11 1920000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrivDogService]
C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe [2013-11-15 525480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-02-24 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
C:\Program Files\Unlocker\UnlockerAssistant.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Firefox Preloader.lnk]
C:\PROGRA~1\FIREFO~1\FIREFO~1.EXE [2005-02-09 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TotalMedia Server.lnk]
C:\PROGRA~1\ArcSoft\TOTALM~1\TOTALM~1\TMSERV~1.EXE [2010-11-10 519744]

C:\Documents and Settings\Princezna\Start Menu\Programs\Startup
Yahoo! Widgets.lnk - C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\Program Files\e-TRAYz\e-TRAYz.exe"="C:\Program Files\e-TRAYz\e-TRAYz.exe:*:Enabled:e-TRAYz"
"C:\Program Files\StrongDC++\StrongDC.exe"="C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Xi\NetXfer\NetTransport.exe"="C:\Program Files\Xi\NetXfer\NetTransport.exe:*:Enabled:NetTransport"
"C:\Program Files\Xi\NetXfer\FTPTransport.exe"="C:\Program Files\Xi\NetXfer\FTPTransport.exe:*:Enabled:FTPTransport"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=tsccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-07-26 17:43:50 ----D---- C:\rsit
2014-07-26 16:46:01 ----D---- C:\Program Files\Winmail Reader
2014-07-26 14:25:29 ----A---- C:\WINDOWS\ntbtlog.txt
2014-07-26 13:38:16 ----D---- C:\WINDOWS\Downloaded Installations
2014-07-26 00:48:10 ----D---- C:\Program Files\FileASSASSIN
2014-07-25 23:46:50 ----D---- C:\Documents and Settings\Princezna\Application Data\EMCO
2014-07-25 23:46:34 ----D---- C:\Program Files\EMCO
2014-07-23 19:17:59 ----D---- C:\Program Files\YTD
2014-07-23 16:55:49 ----D---- C:\AdwCleaner
2014-07-23 15:48:12 ----D---- C:\Program Files\DesetiPrsty
2014-07-23 14:40:58 ----D---- C:\Program Files\All Ten Fingers
2014-07-20 23:24:59 ----D---- C:\temp
2014-07-20 19:08:09 ----A---- C:\ntservicelogOutlook.txt
2014-07-17 17:25:04 ----D---- C:\Program Files\Free DVD ISO Maker
2014-07-11 12:24:57 ----D---- C:\Documents and Settings\Princezna\Application Data\Search tool
2014-07-06 20:11:27 ----D---- C:\Program Files\Common Files\Skype
2014-06-30 10:43:41 ----D---- C:\Program Files\K-Lite Codec Pack
2014-06-30 10:35:59 ----D---- C:\Documents and Settings\Princezna\Application Data\ElevatedDiagnostics
2014-06-30 10:34:11 ----D---- C:\WINDOWS\system32\windowspowershell
2014-06-30 10:34:04 ----HDC---- C:\WINDOWS\$NtUninstallKB926139-v2$
2014-06-29 19:23:49 ----D---- C:\Documents and Settings\All Users\Application Data\Atelier Web

======List of files/folders modified in the last 1 month======

2014-07-26 17:44:37 ----D---- C:\Program Files\Trend Micro
2014-07-26 17:44:25 ----D---- C:\Documents and Settings\Princezna\Application Data\uTorrent
2014-07-26 17:43:52 ----D---- C:\WINDOWS\Prefetch
2014-07-26 17:17:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-07-26 17:13:33 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2014-07-26 16:46:01 ----RD---- C:\Program Files
2014-07-26 15:30:32 ----SHD---- C:\System Volume Information
2014-07-26 14:34:30 ----D---- C:\WINDOWS\system32
2014-07-26 14:34:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-26 14:30:49 ----D---- C:\WINDOWS\system32\CatRoot2
2014-07-26 14:30:39 ----D---- C:\WINDOWS\Temp
2014-07-26 14:30:20 ----A---- C:\WINDOWS\system32\bscs.ini
2014-07-26 14:25:29 ----D---- C:\WINDOWS
2014-07-26 13:42:09 ----SHD---- C:\WINDOWS\Installer
2014-07-26 11:56:00 ----D---- C:\Documents and Settings\Princezna\Application Data\vlc
2014-07-25 12:41:40 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-23 19:25:11 ----D---- C:\Documents and Settings\Princezna\Application Data\YouTube Downloader
2014-07-23 17:39:16 ----D---- C:\Documents and Settings\Princezna\Application Data\Winamp
2014-07-23 17:39:11 ----D---- C:\WINDOWS\Debug
2014-07-23 14:39:51 ----D---- C:\Program Files\ABBYY FineReader 10
2014-07-22 14:55:27 ----D---- C:\Program Files\Ultra Video Joiner
2014-07-18 01:37:36 ----D---- C:\WINDOWS\system32\Restore
2014-07-17 09:24:29 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-07-15 19:27:10 ----A---- C:\WINDOWS\NeroDigital.ini
2014-07-11 12:54:13 ----D---- C:\Documents and Settings\Princezna\Application Data\Skype
2014-07-10 21:30:19 ----D---- C:\WINDOWS\Help
2014-07-09 23:50:05 ----D---- C:\WINDOWS\system32\MRT
2014-07-09 23:41:51 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-09 23:41:24 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-07-08 18:50:05 ----D---- C:\WINDOWS\system32\config
2014-07-08 18:49:43 ----D---- C:\WINDOWS\system32\wbem
2014-07-08 18:49:42 ----D---- C:\WINDOWS\Registration
2014-07-06 20:11:30 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2014-07-06 20:11:27 ----RD---- C:\Program Files\Skype
2014-07-06 20:11:27 ----D---- C:\Program Files\Common Files
2014-07-06 10:25:22 ----D---- C:\Documents and Settings\Princezna\Application Data\VideoReDo-TVSuite4
2014-06-30 13:13:33 ----RSD---- C:\WINDOWS\assembly
2014-06-30 13:13:15 ----D---- C:\WINDOWS\Microsoft.NET
2014-06-30 12:07:15 ----D---- C:\Documents and Settings\Princezna\Application Data\dvdcss
2014-06-30 10:45:38 ----D---- C:\Documents and Settings\Princezna\Application Data\Ahead
2014-06-30 10:39:51 ----HD---- C:\WINDOWS\inf
2014-06-30 10:37:37 ----D---- C:\WINDOWS\AppPatch
2014-06-30 10:24:13 ----D---- C:\Program Files\Mozilla Firefox
2014-06-30 10:19:05 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-08 20744]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2014-04-16 104920]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-02-27 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 ArcSec;ArcSec; C:\WINDOWS\system32\drivers\ArcSec.sys [2010-09-21 192504]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2014-04-16 15704]
R1 cmdGuard;COMODO Internet Security Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2014-04-16 607448]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2014-04-16 29912]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-02-28 12032]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Program Files\CyberLink\PowerDVD8\000.fcl []
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2013-03-01 36600]
R3 appliandMP;appliandMP; C:\WINDOWS\system32\DRIVERS\appliand.sys [2011-06-26 28256]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-07-30 93696]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-10-02 4878336]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2009-08-05 39424]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NETHDDIM;NETHDD NDIS IM Service; C:\WINDOWS\system32\DRIVERS\nethddim.sys [2010-03-04 18432]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-01 47360]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys [2008-01-09 40960]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
S3 a6itrkz1;a6itrkz1; C:\WINDOWS\system32\drivers\a6itrkz1.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 appliand;Applian Network Service; C:\WINDOWS\system32\DRIVERS\appliand.sys [2011-06-26 28256]
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BVRPMPR5;BVRPMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\drivers\BVRPMPR5.SYS []
S3 catchme;catchme; \??\C:\DOCUME~1\Princezna\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
S3 GenericMount;Generic Mount Driver; C:\WINDOWS\system32\DRIVERS\GenericMount.sys []
S3 GMSIPCI;GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 SamsonLLDriver;Samson LL Driver; C:\WINDOWS\System32\Drivers\SamsonLLDriver.sys [2006-12-12 56832]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 SWWDM_multi;Samson Audio (WDM); C:\WINDOWS\system32\drivers\SWAudWDM.sys [2006-12-12 25088]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 V0060VID;Creative WebCam Live! Ultra; C:\WINDOWS\system32\DRIVERS\V0060Vid.sys [2005-02-02 196409]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2014-04-16 5306504]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\ASUS.SYS\config\DVMExportService.exe [2008-11-26 323584]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [2010-09-17 98304]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-02-24 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2010-01-22 73728]
R2 NETHDD;NETHDD Service; C:\WINDOWS\system32\NETHDD.exe [2010-03-04 249376]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [2010-09-17 3735552]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-24 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-17 262320]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2014-03-25 1663192]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-26 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-24 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 194032]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-07 119408]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 ScsiAccess;ScsiAccess; C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe [2010-03-01 186760]

-----------------EOF-----------------

[Márty84]

Vidite, co konkretne v tom kosi zustalo? Presny nazev i s cestou?


Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Spustte ho.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

[antivirus]

Vidite, co konkretne v tom kosi zustalo? Presny nazev i s cestou?

Nie - nevidím.Len to čo som postol v prvom poste pri mazaní samotného koša.



Tu je ten log:

# AdwCleaner v3.300 - Report created 28/07/2014 at 12:33:06
# Updated 27/07/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Princezna - work-70828aab5d
# Running from : C:\Documents and Settings\Princezna\Desktop\adwcleaner_3.300.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Tâches planifiées ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\Software\DeviceVM

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v28.0 (sk)

[ File : C:\Documents and Settings\Princezna\Application Data\Mozilla\Firefox\Profiles\pz1hq25x.default-1394996835546\prefs.js ]


-\\ Google Chrome v

[ File : C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1405609475&from=smt&uid=ST2000DM001-1CH164_Z340HAVMXXXXZ340HAVM&q={searchTerms}

*************************

AdwCleaner[R4].txt - [1250 octets] - [23/07/2014 16:55:55]
AdwCleaner[R5].txt - [1643 octets] - [28/07/2014 12:31:44]
AdwCleaner[S4].txt - [1317 octets] - [23/07/2014 16:59:03]
AdwCleaner[S5].txt - [1576 octets] - [28/07/2014 12:33:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1636 octets] ##########

[Márty84]

Udelejte !!!kompletni!!! kontrolu s MBAM http://www.bleepingcomputer.com/downloa ... re/dl/241/ (musite stahnout verzi 1.75, odmitnout upgrade a aktualizovat jen virovou databazi) a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce. Navod zde http://forum.viry.cz/viewtopic.php?f=29&t=115222

[antivirus]

Ďakujem - nech sa páči :

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.07.29.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Princezna :: work-70828aab5d [administrátor]

29.7.2014 10:29:05
MBAM-log-2014-07-29 (11-33-40).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 452395
Uplynutý čas: 1 hod, 4 min, 14 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 2
HKCU\Software\hdtotal1.1 (PUP.Optional.HDTotal.A) -> Žiadna úloha nevykonaná.
HKLM\Software\hdtotal1.1 (PUP.Optional.HDTotal.A) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 1
HKCU\Software\Mozilla\Extends|appid (PUP.Optional.FastStart.A) -> Dáta: faststartff@gmail.com -> Žiadna úloha nevykonaná.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 2
C:\WINDOWS\inf\mnctfemvv (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\bitstreams (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.

Detegované súbory: 105
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{05F2EE61-21B5-401C-9550-861D213CC327} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{0E2C7997-7D73-462F-ABB2-9F3C4CAB60A1} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{1277F88D-F37C-48E7-AC58-76BD291D3439} (PUP.Riskware.Patcher) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{84B05B35-E4A6-495B-BD7C-16210743FAD1} (PUP.Optional.InstalleRex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{89E66AC9-F749-4290-870B-FE73F4F9C997} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{8DD0D3DB-FF9F-48EF-AF15-E044EBACD40E} (Backdoor.RBot) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{8E203E53-012E-40AA-90BC-9AE9916D9363} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{8E458C50-19AB-44DD-B3E9-E25713BE72C5} (PUP.Optional.InstalleRex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{9DFF67BE-AAE2-481E-AE18-DC0A05DDE04A} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{A1B94C54-D602-4CB1-BC6C-277A66AB1968} (TheftMarker.Crude) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{D025FEA8-B569-4778-812A-0E910162F843} (PUP.Riskware.Patcher) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{D3BF70D5-ED9E-4563-8C7E-C816BA05BAA8} (PUP.Optional.Installrex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{336975A2-6709-476D-B3E4-7CC1BEC700D6} (PUP.Optional.Installrex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{34B443B0-50A9-48C4-8C31-645A6F311DF9} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{44F8A834-5561-4691-A261-BC29FF6AFF31} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{48528274-59B7-4028-BD41-E9F70A107C47} (PUP.Optional.InstalleRex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{EE130A6E-A01E-4839-B1D3-C88B7189BDAF} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{F2A1B4F7-8328-43F3-A0BA-5A6301FA7763} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{F4A44809-CD58-4987-AFA6-51E8B2B005B1} (PUP.Optional.RelevantKnowledge) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{F51E044D-592A-4788-B734-0A468FBD09AC} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{F6FDF0F4-74D7-48B5-AF24-5EAC03C4E220} (Application.FindKey) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{FBE34CB9-C8EB-4FB3-AA66-C6E1EABE6F8E} (PUP.RemoveWGA) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{FC216EB7-DACD-4536-AF7B-68F51C725719} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{FE1BEA29-5833-4771-BAD3-92E8CB09DA9B} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{1C9F1062-C68D-467B-9DF5-66DBD14F8C9F} (PUP.Riskware.Patcher) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{48E8AD3D-E88C-4B03-84AD-72C7F436A98E} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{C5030DAF-8AA5-44AE-9810-86AA8DB17EE7} (PUP.Optional.Zona) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{DDFD0389-C321-4443-8B08-4DD597EE5E75} (PUP.WirelessKeyView) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{5F24590C-1940-4FA4-B26A-6489F74D48D2} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{64CB51F5-7B18-4E34-B89D-EEE8463A30C5} (CrackTool.Agent) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{6511BBAE-1542-4459-BC0D-CC3B8497685B} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{6AC3C1F7-C070-43F2-80DA-F9EB7E080353} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{7197B51B-65D9-4D39-8DFA-A9F7A9D074A6} (PUP.Optional.InstalleRex) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{7269DB80-BFFE-43C3-9A9E-475DAFED66B6} (Application.FindKey) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{74481950-C471-46DA-A6A3-638D80FBFFCB} (Trojan.Agent.gen) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{A89D7C88-6B4F-41AE-8A8D-138F123B0FC0} (PUP.Optional.Bandoo) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{AAA38EA9-9D85-4ED2-A71C-A877AC1B27DF} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{AB32CA82-D0A7-41C4-8083-8C92576A262D} (PUP.Optional.InstallCore) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{BDF8AFDC-CEB3-4C8E-B902-7E711BF9B5A4} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{C19A714A-9B82-4712-B2D6-32B881FFF801} (PUP.Wpakill) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{C26B73FD-ABE2-42A0-9DC1-246D7286B536} (TheftMarker.Crude) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{DF6F0FD0-F4B9-44E0-8D39-B0969D34E810} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{E1D98B90-F127-4EBD-86A5-DEBD2EED5533} (Trojan.Agent) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{EA8D1FA3-83C4-4B01-B7FE-33986DD10DD8} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{495933B5-5ADB-4DEB-BD93-09815611ABDF} (TheftMarker.Crude) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{27A1E669-97E3-4767-9E56-825E503A6E61} (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{2B4AA54D-9079-4B94-8D69-820F918719CF} (CrackTool.Agent) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{2CA5A72E-9478-4506-AF49-D7A3232BB0D6} (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\All Users\Application Data\Comodo\Cis\Quarantine\data\{31A0AB0C-8BB2-435C-B2A0-13635D2FF4C8} (PUP.Riskware.Patcher) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\Princezna\Desktop\111111\TV Online\stachura.cz-sktv.rar (Backdoor.Bot) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\Princezna\Desktop\111111\TV Online\stachura.cz-sktv\rtmpdump.exe (Backdoor.Bot) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\Princezna\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\002\t\00\00000000 (PUP.Optional.Somoto.A) -> Žiadna úloha nevykonaná.
C:\Documents and Settings\Princezna\Local Settings\Temp\N0+oeqpK.exe.part (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0128601.exe (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0128602.exe (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0128603.exe (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0128604.exe (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0128605.exe (PUP.Optional.OneClickDownloader.A) -> Žiadna úloha nevykonaná.
c:\system volume information\_restore{020cf204-87f4-4a1f-9671-012318ccf772}\rp195\a0131226.exe (Application.FindKey) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}\RP195\A0131229.exe (PUP.Wpakill) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(2)\RP8\A0001610.exe (Trojan.Agent.CK) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000530.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000534.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000535.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000538.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000539.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000542.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(3)\RP7\A0000546.exe (Trojan.Agent.DE) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(6)\RP8\A0005651.exe (PUP.KGBKeylogger) -> Žiadna úloha nevykonaná.
C:\System Volume Information\_restore{020CF204-87F4-4A1F-9671-012318CCF772}(6)\RP8\A0005652.exe (Spyware.KGBSpy) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\mnctfemvv.exe (Trojan.BitMiner) -> Žiadna úloha nevykonaná.
C:\Program Files\Mozilla Firefox\browser\searchplugins\omiga-plus.xml (PUP.Optional.ISearch.A) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\diablo130302.cl (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\diakgcn121016.cl (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\libcurl-4.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\libeay32.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\libidn-11.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\librtmp.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\libssh2.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\phatk121016.cl (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\poclbm130302.cl (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\scrypt130511.cl (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\ssleay32.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\zlib1.dll (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.
C:\WINDOWS\inf\mnctfemvv\bitstreams\fpgaminer_top_fixed7_197MHz.ncd (Trojan.Agent.BCM) -> Žiadna úloha nevykonaná.

(koniec)

[Márty84]

Smankote


Postupujte presne v tomto poradi.
1) MBAM nezavirejte, jen minimalizujte.
2) Vymazte/Vypnete vytvareni bodu obnovy http://forum.viry.cz/viewtopic.php?f=46&t=47040 , ale nerestartujte pc.
3) Ted nechte nalezy MBAM odstranit a restartujte pc.
4) Zopakujte test s MBAM a napiste jeho vysledek

[antivirus]

Zdravím.Už je to aj podľa MBAM čisté,ale tá neviditeľná položka v koši je stále.Kôš signalizuje že je plný,ale pritom tam nie je nič.
Pri jeho vyprázdnení nabieha stále to okno z prvého postu.



Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2014.07.29.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Princezna :: work-70828aab5d [administrátor]

30.7.2014 9:55:01
MBAM-log-2014-07-30 (10-57-13).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 455322
Uplynutý čas: 56 min, 18 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 1
C:\Documents and Settings\Princezna\Desktop\22\MediaInfo - jul 2014\MediaInfo_GUI_0.7.69_Windows.exe (PUP.Optional.OpenCandy) -> Žiadna úloha nevykonaná.

(koniec)

[Márty84]

MBAM odinstalujte


Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte ComboFix.
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

[antivirus]

MBAM odinštalovaný,ale s tým Combofixom.
Nemôže mi niečo zničiť aj na druhých partíciách či diskoch ako je systémová? Mám okrem systémovej ešte ďalšie,kde mám archívne veci o ktoré nemôžem prísť v žiadnom prípade.A 1TB nemám ako odzálohovať.
Za ten risk mi ten kôš nestojí.
Systémovú (C:\) odzálohovať môžem.
Ďakujem za odp.

[Márty84]

Nemôže mi niečo zničiť aj na druhých partíciách či diskoch ako je systémová? Mám okrem systémovej ešte ďalšie,kde mám archívne veci o ktoré nemôžem prísť v žiadnom prípade.A 1TB nemám ako odzálohovať.

Je to nepravdepodobne, ale stat se muze cokoliv. Pokud mate data, o ktere nesmite v zadnem pripade prijit, mate je mit zalohovane v kazdem pripade. Nikdy nevite, kdy odejde treba disk samotny. Je to tedy vase volba, zalezi na vas



1.9. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975