Viry v počítači

[polaanek]

Počítač znmé, která měla dle vlastních slov před měsícem vir, avast nezachytil, odstraněno ažzpětně nodem (zkušební verze), která je doteď.
Počítač je občas pomalejší. V Internet Exploreru jakési banery pro vyhladávání (odstranil jsem), nicméně nejde změnit poskytovatel vyhledávání (po obnovenbí do výchozího nastaveni pouze bing) při snaze o změnu přes stránku microsoftu nevyskočí okno por možnost přidání. Proto nainstalován FF a Google chrom, nicméně pro určité stránky potřebuje míti IE funkční.

Přídávám log z RSIT:
některé věci jsem odinstaloval, ale některé zřejmě ne, nevím, jestli je uživatel potřebuje:

Prosím o kontrolu
Díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by Andy at 2014-08-09 21:39:02
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 4 GB (13%) free of 30 GB
Total RAM: 1918 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:39:07, on 9.8.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\ssins.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Andy\Plocha\RSIT.exe
C:\Program Files\trend micro\Andy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www2.inbox.com/search/dispatcher ... &%language
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7721825796
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\System32\ssins.exe

--
End of file - 7406 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{E0170831-417A-43EA-9745-88491EABEB2C}.job - C:\WINDOWS\system32\msfeedssync.exe sync

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Andy\Data aplikací\Mozilla\Firefox\Profiles\lfvvdfe7.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-08-09 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-08-09 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-29 18671104]
"Family Tree Builder Update"=C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2013-11-12 2532864]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-02-24 5075104]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
""= []
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-02-03 110592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2010-03-15 190976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-08-08 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\XBMC\XBMC.exe"="C:\Program Files\XBMC\XBMC.exe:*:Enabled:XBMC"
"C:\Documents and Settings\Andy\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Andy\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2014-08-09 21:39:02 ----D---- C:\rsit
2014-08-09 21:39:02 ----D---- C:\Program Files\trend micro
2014-08-09 21:12:36 ----D---- C:\Program Files\Common Files\Java
2014-08-09 21:11:53 ----A---- C:\WINDOWS\system32\javaws.exe
2014-08-09 21:11:44 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-08-09 21:11:44 ----A---- C:\WINDOWS\system32\javaw.exe
2014-08-09 21:11:44 ----A---- C:\WINDOWS\system32\java.exe
2014-08-09 21:11:23 ----D---- C:\Program Files\Java
2014-07-22 17:25:12 ----D---- C:\Program Files\Mozilla Firefox
2014-07-16 20:08:32 ----D---- C:\Program Files\ESET
2014-07-16 20:08:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET

======List of files/folders modified in the last 1 month======

2014-08-09 21:39:02 ----D---- C:\Program Files
2014-08-09 21:38:41 ----D---- C:\WINDOWS\Prefetch
2014-08-09 21:25:51 ----D---- C:\WINDOWS\system32\CatRoot2
2014-08-09 21:24:32 ----D---- C:\WINDOWS\Temp
2014-08-09 21:21:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-08-09 21:15:37 ----SD---- C:\WINDOWS\Tasks
2014-08-09 21:12:37 ----SHD---- C:\WINDOWS\Installer
2014-08-09 21:12:36 ----D---- C:\Program Files\Common Files
2014-08-09 21:11:53 ----D---- C:\WINDOWS\system32
2014-08-09 20:51:57 ----D---- C:\Program Files\CCleaner
2014-08-09 20:43:34 ----HD---- C:\WINDOWS\inf
2014-08-09 20:05:02 ----D---- C:\Documents and Settings\Andy\Data aplikací\Seznam.cz
2014-08-07 21:51:52 ----D---- C:\Downloads
2014-08-04 22:28:41 ----D---- C:\Documents and Settings\Andy\Data aplikací\Skype
2014-07-24 15:46:40 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-07-17 09:44:01 ----D---- C:\WINDOWS
2014-07-16 22:24:09 ----D---- C:\WINDOWS\system32\drivers
2014-07-16 20:11:12 ----D---- C:\WINDOWS\system32\CatRoot
2014-07-16 19:59:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-07-16 19:56:04 ----SD---- C:\WINDOWS\system32\Microsoft
2014-07-15 21:33:42 ----D---- C:\Documents and Settings\Andy\Data aplikací\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-08-08 77568]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2013-09-17 184664]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2013-09-17 118768]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-02-03 1975296]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-29 5870080]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-07-06 234392]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-06 1684736]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-05 1389056]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-08-08 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-08-08 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-02-03 446464]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-02-24 1343408]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2014-08-09 182696]
R2 ssinstall;SInstalátor; C:\WINDOWS\System32\ssins.exe [2013-10-01 2324216]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-18 116648]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-22 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[vyosek]

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[polaanek]

Jsem si všiml, že mi vypadl pozdrav:

Zdravím!

Provedeno,
JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Microsoft Windows XP x86
Ran by Andy on so 09.08.2014 at 22:22:39,07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 09.08.2014 at 22:28:05,43
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


AdwCleaner:

# AdwCleaner v3.304 - Report created 09/08/2014 at 22:33:40
# Updated 08/08/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Andy - HOME-COMPIK
# Running from : C:\Documents and Settings\Andy\Plocha\adwcleaner_3.304.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Alawar Stargaze
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
Folder Deleted : C:\Documents and Settings\All Users\Dokumenty\AlawarWrapper

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}_is1

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Documents and Settings\Andy\Data aplikací\Mozilla\Firefox\Profiles\lfvvdfe7.default\prefs.js ]


-\\ Google Chrome v36.0.1985.125

[ File : C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2495 octets] - [09/08/2014 22:32:32]
AdwCleaner[S0].txt - [2448 octets] - [09/08/2014 22:33:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2508 octets] ##########

[vyosek]

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[polaanek]

Dobré dopoledne.

Provedeno, Zoek:


Zoek.exe v5.0.0.0 Updated 09-August-2014
Tool run by Andy on ne 10.08.2014 at 9:17:45,89.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Andy\Plocha\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

10.8.2014 9:24:56 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-725345543-1563985344-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-725345543-1563985344-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-725345543-1563985344-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Program Files\Alawarhry.cz deleted
C:\Program Files\ComPlus Applications deleted
C:\setup95.exe deleted
C:\WINDOWS\wininit.ini deleted
C:\Documents and Settings\All Users\Plocha\MP3 Downloader.lnk deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [27.02.2012 18:15]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Search Bar"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

Nothing found to reset

==== Empty IE Cache ======================

C:\Documents and Settings\Andy\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=426 folders=62 30897552 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Andy\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

[vyosek]

Pekne nedelni poledne

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

[polaanek]

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:9-08-2014 01
Ran by Andy (administrator) on HOME-COMPIK on 10-08-2014 13:53:02
Running from C:\Documents and Settings\Andy\Plocha
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(MyHeritage) C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Nokia) C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Documents and Settings\Andy\Plocha\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
Winlogon\Notify\WgaLogon: C:\WINDOWS\system32\WgaLogon.dll ()
HKU\.DEFAULT\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-19\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-20\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-21-725345543-1563985344-1417001333-1003\...\Run: [] => [X]
HKU\S-1-5-21-725345543-1563985344-1417001333-1003\...\Run: [NokiaSuite.exe] => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Andy\Data aplikací\Mozilla\Firefox\Profiles\lfvvdfe7.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-02-24]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-07-16]

Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/
CHR StartupUrls: "hxxp://www.google.com/"
CHR NewTab: "chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/core/chrome/content/speedDial/speedDial.html"
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-18]
CHR Extension: (Disk Google) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-18]
CHR Extension: (Seznam Lištička - Email) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2013-12-30]
CHR Extension: (Seznam Lištička - Slovník) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2013-12-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-18]
CHR Extension: (Vyhledávání Google) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-18]
CHR Extension: (Peněženka Google) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-18]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2013-12-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Andy\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-18]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1343408 2014-02-24] (ESET)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-08-09] (Oracle Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736 2008-08-06] (Creative)
R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R1 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [184664 2013-09-17] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [118768 2013-09-17] (ESET)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1389056 2006-01-05] (Creative Technology Ltd.)
S4 IntelIde; No ImagePath
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-10 13:53 - 2014-08-10 13:53 - 00010454 _____ () C:\Documents and Settings\Andy\Plocha\FRST.txt
2014-08-10 13:52 - 2014-08-10 13:53 - 00000000 ____D () C:\FRST
2014-08-10 13:51 - 2014-08-10 13:51 - 01084928 _____ (Farbar) C:\Documents and Settings\Andy\Plocha\FRST.exe
2014-08-10 13:51 - 2014-08-10 13:51 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Andy\Plocha\FRSTLauncher.exe
2014-08-10 11:05 - 2014-08-10 11:07 - 00013580 _____ () C:\WINDOWS\FaxSetup.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00013274 _____ () C:\WINDOWS\iis6.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00012768 _____ () C:\WINDOWS\ocgen.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00009182 _____ () C:\WINDOWS\tsoc.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00005006 _____ () C:\WINDOWS\comsetup.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00003806 _____ () C:\WINDOWS\msmqinst.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00003618 _____ () C:\WINDOWS\ntdtcsetup.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00003184 _____ () C:\WINDOWS\netfxocm.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00001917 _____ () C:\WINDOWS\imsins.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00001438 _____ () C:\WINDOWS\MedCtrOC.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00000938 _____ () C:\WINDOWS\ocmsn.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00000860 _____ () C:\WINDOWS\msgsocm.log
2014-08-10 11:05 - 2014-08-10 11:07 - 00000622 _____ () C:\WINDOWS\tabletoc.log
2014-08-10 11:05 - 2014-08-10 11:06 - 00001917 _____ () C:\WINDOWS\imsins.BAK
2014-08-10 11:05 - 2014-08-10 11:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-10 11:05 - 2014-08-10 11:05 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-08-10 10:48 - 2014-08-10 10:48 - 00270192 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-10 09:57 - 2014-08-10 09:57 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-08-10 09:52 - 2014-08-10 09:52 - 00000046 _____ () C:\Documents and Settings\Andy\Plocha\nod32.txt
2014-08-10 09:33 - 2014-08-10 13:53 - 00000000 ____D () C:\Documents and Settings\Andy\Local Settings\Temp
2014-08-10 09:33 - 2014-08-10 09:33 - 00000200 _____ () C:\files.log
2014-08-10 09:33 - 2014-08-10 09:17 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-08-10 09:29 - 2014-08-10 09:33 - 00000000 ____D () C:\zoek
2014-08-10 09:24 - 2014-08-10 09:36 - 00005110 _____ () C:\zoek-results.log
2014-08-10 09:04 - 2014-08-10 09:30 - 00000000 ____D () C:\zoek_backup
2014-08-10 09:04 - 2014-08-10 09:13 - 01288704 _____ () C:\Documents and Settings\Andy\Plocha\zoek.exe
2014-08-09 22:35 - 2014-08-09 22:35 - 00002588 _____ () C:\Documents and Settings\Andy\Plocha\AdwCleaner[S0].txt
2014-08-09 22:32 - 2014-08-09 22:34 - 00000000 ____D () C:\AdwCleaner
2014-08-09 22:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll
2014-08-09 22:29 - 2014-08-09 22:29 - 00000688 _____ () C:\Documents and Settings\Andy\Plocha\JRT.txt
2014-08-09 22:18 - 2014-08-09 22:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-09 22:16 - 2014-08-09 22:16 - 01366203 _____ () C:\Documents and Settings\Andy\Plocha\adwcleaner_3.304.exe
2014-08-09 22:15 - 2014-08-09 22:15 - 01016261 _____ (Thisisu) C:\Documents and Settings\Andy\Plocha\JRT.exe
2014-08-09 21:39 - 2014-08-09 21:39 - 00000000 ____D () C:\rsit
2014-08-09 21:39 - 2014-08-09 21:39 - 00000000 ____D () C:\Program Files\trend micro
2014-08-09 21:38 - 2014-08-09 21:38 - 01107968 _____ () C:\Documents and Settings\Andy\Plocha\RSIT.exe
2014-08-09 21:15 - 2014-08-10 12:27 - 00000464 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{E0170831-417A-43EA-9745-88491EABEB2C}.job
2014-08-09 21:12 - 2014-08-09 21:12 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-08-09 21:11 - 2014-08-09 21:11 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-08-09 21:11 - 2014-08-09 21:11 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-08-09 21:11 - 2014-08-09 21:11 - 00000000 ____D () C:\Program Files\Java
2014-08-09 21:11 - 2014-08-09 21:11 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-08-09 20:52 - 2014-08-09 20:52 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2014-07-22 17:25 - 2014-07-22 17:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-07-16 21:31 - 2014-07-16 21:31 - 00000000 ____D () C:\Documents and Settings\Andy\Local Settings\Data aplikací\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Program Files\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ESET
2014-07-14 10:32 - 2014-08-10 06:35 - 00000000 ____D () C:\Documents and Settings\Andy\Plocha\fotky a obrázky

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-10 13:53 - 2014-08-10 13:53 - 00010454 _____ () C:\Documents and Settings\Andy\Plocha\FRST.txt
2014-08-10 13:53 - 2014-08-10 13:52 - 00000000 ____D () C:\FRST
2014-08-10 13:53 - 2014-08-10 09:33 - 00000000 ____D () C:\Documents and Settings\Andy\Local Settings\Temp
2014-08-10 13:53 - 2012-02-21 16:06 - 00000000 ____D () C:\Documents and Settings\Andy\Plocha
2014-08-10 13:52 - 2012-02-21 16:06 - 00000000 ___HD () C:\Documents and Settings\Andy\Local Settings\Data aplikací
2014-08-10 13:51 - 2014-08-10 13:51 - 01084928 _____ (Farbar) C:\Documents and Settings\Andy\Plocha\FRST.exe
2014-08-10 13:51 - 2014-08-10 13:51 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Andy\Plocha\FRSTLauncher.exe
2014-08-10 13:22 - 2012-02-21 15:48 - 01792891 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-10 13:20 - 2012-02-21 16:26 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-10 13:20 - 2012-02-21 16:26 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-08-10 13:20 - 2012-02-21 15:59 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-10 13:19 - 2012-02-22 08:40 - 00065536 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2014-08-10 13:19 - 2012-02-21 16:06 - 00000178 ___SH () C:\Documents and Settings\Andy\ntuser.ini
2014-08-10 13:19 - 2012-02-21 15:59 - 00032448 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-10 12:47 - 2012-02-21 16:06 - 00000000 ____D () C:\Documents and Settings\Andy
2014-08-10 12:27 - 2014-08-09 21:15 - 00000464 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{E0170831-417A-43EA-9745-88491EABEB2C}.job
2014-08-10 11:07 - 2014-08-10 11:05 - 00013580 _____ () C:\WINDOWS\FaxSetup.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00013274 _____ () C:\WINDOWS\iis6.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00012768 _____ () C:\WINDOWS\ocgen.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00009182 _____ () C:\WINDOWS\tsoc.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00005006 _____ () C:\WINDOWS\comsetup.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00003806 _____ () C:\WINDOWS\msmqinst.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00003618 _____ () C:\WINDOWS\ntdtcsetup.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00003184 _____ () C:\WINDOWS\netfxocm.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00001917 _____ () C:\WINDOWS\imsins.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00001438 _____ () C:\WINDOWS\MedCtrOC.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00000938 _____ () C:\WINDOWS\ocmsn.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00000860 _____ () C:\WINDOWS\msgsocm.log
2014-08-10 11:07 - 2014-08-10 11:05 - 00000622 _____ () C:\WINDOWS\tabletoc.log
2014-08-10 11:06 - 2014-08-10 11:05 - 00001917 _____ () C:\WINDOWS\imsins.BAK
2014-08-10 11:05 - 2014-08-10 11:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-10 11:05 - 2014-08-10 11:05 - 00000000 _____ () C:\WINDOWS\setupact.log
2014-08-10 10:48 - 2014-08-10 10:48 - 00270192 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-10 10:48 - 2012-02-24 15:16 - 00065536 _____ () C:\WINDOWS\system32\config\ODiag.evt
2014-08-10 10:48 - 2012-02-21 15:46 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt
2014-08-10 10:45 - 2001-10-25 14:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-08-10 10:14 - 2012-02-21 16:06 - 00000000 ___HD () C:\Documents and Settings\Andy\Data aplikací
2014-08-10 10:10 - 2013-07-11 13:38 - 00000000 ____D () C:\Documents and Settings\Andy\Data aplikací\XBMC
2014-08-10 10:10 - 2012-02-21 16:22 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-08-10 10:08 - 2012-02-21 16:06 - 00000000 ___RD () C:\Documents and Settings\Andy\Nabídka Start\Programy\Po spuštění
2014-08-10 10:08 - 2012-02-21 16:06 - 00000000 ___RD () C:\Documents and Settings\Andy\Nabídka Start\Programy
2014-08-10 09:57 - 2014-08-10 09:57 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-08-10 09:57 - 2012-02-27 22:13 - 00000000 ____D () C:\Documents and Settings\Andy\Data aplikací\Skype
2014-08-10 09:57 - 2012-02-27 22:13 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Skype
2014-08-10 09:56 - 2014-06-15 21:23 - 00002283 _____ () C:\Documents and Settings\All Users\Plocha\Skype.lnk
2014-08-10 09:52 - 2014-08-10 09:52 - 00000046 _____ () C:\Documents and Settings\Andy\Plocha\nod32.txt
2014-08-10 09:36 - 2014-08-10 09:24 - 00005110 _____ () C:\zoek-results.log
2014-08-10 09:33 - 2014-08-10 09:33 - 00000200 _____ () C:\files.log
2014-08-10 09:33 - 2014-08-10 09:29 - 00000000 ____D () C:\zoek
2014-08-10 09:30 - 2014-08-10 09:04 - 00000000 ____D () C:\zoek_backup
2014-08-10 09:28 - 2013-07-09 11:57 - 00000000 ____D () C:\Documents and Settings\Andy\Data aplikací\Seznam.cz
2014-08-10 09:27 - 2013-07-09 11:56 - 00000000 _____ () C:\WINDOWS\system32\sinstall.log
2014-08-10 09:17 - 2014-08-10 09:33 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-08-10 09:13 - 2014-08-10 09:04 - 01288704 _____ () C:\Documents and Settings\Andy\Plocha\zoek.exe
2014-08-10 09:09 - 2012-06-21 17:14 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\PC Suite
2014-08-10 06:35 - 2014-07-14 10:32 - 00000000 ____D () C:\Documents and Settings\Andy\Plocha\fotky a obrázky
2014-08-09 23:19 - 2012-03-05 20:04 - 00049664 _____ () C:\Documents and Settings\Andy\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-09 23:05 - 2012-03-04 16:22 - 00000000 ____D () C:\Documents and Settings\Andy\Data aplikací\vlc
2014-08-09 22:35 - 2014-08-09 22:35 - 00002588 _____ () C:\Documents and Settings\Andy\Plocha\AdwCleaner[S0].txt
2014-08-09 22:34 - 2014-08-09 22:32 - 00000000 ____D () C:\AdwCleaner
2014-08-09 22:33 - 2012-02-21 16:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2014-08-09 22:33 - 2012-02-21 16:22 - 00000000 ___HD () C:\Documents and Settings\All Users\Data aplikací
2014-08-09 22:29 - 2014-08-09 22:29 - 00000688 _____ () C:\Documents and Settings\Andy\Plocha\JRT.txt
2014-08-09 22:18 - 2014-08-09 22:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-09 22:16 - 2014-08-09 22:16 - 01366203 _____ () C:\Documents and Settings\Andy\Plocha\adwcleaner_3.304.exe
2014-08-09 22:15 - 2014-08-09 22:15 - 01016261 _____ (Thisisu) C:\Documents and Settings\Andy\Plocha\JRT.exe
2014-08-09 21:39 - 2014-08-09 21:39 - 00000000 ____D () C:\rsit
2014-08-09 21:39 - 2014-08-09 21:39 - 00000000 ____D () C:\Program Files\trend micro
2014-08-09 21:38 - 2014-08-09 21:38 - 01107968 _____ () C:\Documents and Settings\Andy\Plocha\RSIT.exe
2014-08-09 21:12 - 2014-08-09 21:12 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-08-09 21:11 - 2014-08-09 21:11 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-08-09 21:11 - 2014-08-09 21:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-08-09 21:11 - 2014-08-09 21:11 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-08-09 21:11 - 2014-08-09 21:11 - 00000000 ____D () C:\Program Files\Java
2014-08-09 21:11 - 2014-08-09 21:11 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-08-09 21:11 - 2012-02-21 16:22 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-08-09 20:52 - 2014-08-09 20:52 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2014-08-09 20:52 - 2013-04-08 21:53 - 00000682 _____ () C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2014-08-09 20:51 - 2013-04-08 21:53 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-24 15:46 - 2013-07-09 11:56 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-07-22 17:25 - 2014-07-22 17:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-07-20 22:04 - 2013-12-18 22:26 - 00001813 _____ () C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-07-16 21:31 - 2014-07-16 21:31 - 00000000 ____D () C:\Documents and Settings\Andy\Local Settings\Data aplikací\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Program Files\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-07-16 20:08 - 2014-07-16 20:08 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ESET
2014-07-16 19:59 - 2012-02-27 22:00 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\AVAST Software

Some content of TEMP:
====================
C:\Documents and Settings\Andy\Local Settings\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdzsxf9.dll
C:\Documents and Settings\Andy\Local Settings\Temp\NEventMessages.dll
C:\Documents and Settings\Andy\Local Settings\Temp\NOSEventMessages.dll
C:\Documents and Settings\Andy\Local Settings\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:29.29 GB) (Free:8.7 GB) NTFS
Drive d: () (Fixed) (Total:203.58 GB) (Free:3.6 GB) NTFS ==>[Drive with boot components (Windows XP)]

Available physical RAM: 1227.54 MB
Total physical RAM: 1918.42 MB
Percentage of memory in use: 36%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 233 GB) (Disk ID: 436C436B)
Partition 1: (Not Active) - (Size=29 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=204 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{E0170831-417A-43EA-9745-88491EABEB2C}.job => C:\WINDOWS\system32\msfeedssync.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Documents and Settings\Andy\Plocha\zoek.exe:SummaryInformation
AlternateDataStreams: C:\Documents and Settings\Andy\Plocha\zoek.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Security Center ==================

AV: ESET NOD32 Antivirus 7.0 (Disabled - Up to date) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\Andy\Plocha" je 591 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\XBMC\\XBMC.exe"="C:\\Program Files\\XBMC\\XBMC.exe:*:Enabled:XBMC"
"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"="C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe:*:Enabled:Google Chrome"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000


==================== End Of Log ==============================

[polaanek]

Prosím o zamknutí. Již odjiždím, byl jsem tu pouze na návštěvě. To něco málo pomohlo, dále se již řešit nemůže.
I tak díky.

[vyosek]

Dobra tedy