Prosím o kontrolu

Zpráva

Hucanek · #1 Příspěvek od **Hucanek** » 27 říj 2010 13:28

Dobrý den,
poslední dobou mi sem tam vypadává net a nejsem si jist, jestli to je na straně poskytovatele, prosím o kontrolu. Děkuji a přeji hezký den.

Logfile of HijackThis v1.99.1
Scan saved at 14:24:45, on 27.10.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\Softwares\AdobeReader\Reader\reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
D:\Softwares\DAEMON Tools Lite\DTLite.exe
D:\Softwares\Samsung\Samsung New PC Studio\NPSAgent.exe
D:\Softwares\PStrip\PStrip.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Opera\opera.exe
C:\Users\Hůča\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Softwares\BitComet\tools\BitCometBHO_1.3.7.16.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "D:\Softwares\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Softwares\AdobeReader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Softwares\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AutoStartNPSAgent] D:\Softwares\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - Startup: PowerStrip.lnk = D:\Softwares\PStrip\PStrip.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\Softwares\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - Unknown owner - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe" -s (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

#2 Příspěvek od **vyosek** » 27 říj 2010 14:52

Zdravim a pekny den preji

Prectete si pravidla fora

Dejte logy z RSIT - je podrobnejsi nez HJT - a poprosim o oba log z rsit (log.txt i info.txt), budou ulozeny v c:\rsit

Hucanek · #3 Příspěvek od **Hucanek** » 27 říj 2010 19:38

Omlouvám se za svoji neznalost, je to už nějaký pátek, co jsem zde byl naposled. Přikládám tedy logy, o které jste mě žádal. Děkuji a přeji hezký večer

Logfile of random's system information tool 1.08 (written by random/random)
Run by Hůča at 2010-10-27 20:27:57
Microsoft Windows 7 Professional
System drive C: has 11 GB (13%) free of 85 GB
Total RAM: 2047 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:28:04, on 27.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
D:\Softwares\DAEMON Tools Lite\DTLite.exe
D:\Softwares\Samsung\Samsung New PC Studio\NPSAgent.exe
D:\Softwares\PStrip\PStrip.exe
C:\Program Files\Opera\opera.exe
D:\Softwares\QIP\qip.exe
D:\Softwares\BitComet\BitComet.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Hůča\Desktop\RSIT.exe
C:\Program Files\trend micro\Hůča.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Softwares\BitComet\tools\BitCometBHO_1.3.7.16.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "D:\Softwares\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Softwares\AdobeReader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Softwares\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AutoStartNPSAgent] D:\Softwares\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: PowerStrip.lnk = D:\Softwares\PStrip\PStrip.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://D:\Softwares\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\Softwares\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 6560 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - D:\Softwares\BitComet\tools\BitCometBHO_1.3.7.16.dll [2009-07-16 664888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-11-24 953800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"QuickTime Task"=D:\Softwares\QuickTime\QTTask.exe [2009-11-11 417792]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Adobe Reader Speed Launcher"=D:\Softwares\AdobeReader\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"NPSStartup"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\Softwares\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"AutoStartNPSAgent"=D:\Softwares\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-07-15 102400]

C:\Users\Hůča\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PowerStrip.lnk - D:\Softwares\PStrip\PStrip.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-27 20:27:57 ----D---- C:\rsit
2010-10-27 20:27:57 ----D---- C:\Program Files\trend micro
2010-10-27 07:40:46 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 07:40:46 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 07:40:41 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-13 16:00:35 ----A---- C:\Windows\system32\schannel.dll
2010-10-13 16:00:35 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-13 16:00:35 ----A---- C:\Windows\system32\mfc40.dll
2010-10-13 16:00:32 ----A---- C:\Windows\system32\ole32.dll
2010-10-13 16:00:25 ----A---- C:\Windows\system32\iertutil.dll
2010-10-13 16:00:23 ----A---- C:\Windows\system32\mshtml.dll
2010-10-13 16:00:20 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-13 16:00:20 ----A---- C:\Windows\system32\ieframe.dll
2010-10-13 16:00:19 ----A---- C:\Windows\system32\wininet.dll
2010-10-13 16:00:19 ----A---- C:\Windows\system32\urlmon.dll
2010-10-13 16:00:19 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\mstime.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-13 16:00:18 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\ieui.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\iepeers.dll
2010-10-13 16:00:18 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-13 16:00:11 ----A---- C:\Windows\system32\wmp.dll
2010-10-13 16:00:10 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-13 16:00:09 ----A---- C:\Windows\system32\t2embed.dll
2010-10-13 16:00:08 ----A---- C:\Windows\system32\comctl32.dll
2010-10-13 16:00:06 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-13 15:59:46 ----A---- C:\Windows\system32\win32k.sys
2010-10-13 15:59:25 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-13 15:59:25 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-13 15:59:25 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-13 15:59:25 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-13 15:59:18 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-13 15:29:36 ----D---- C:\Users\Hůča\AppData\Roaming\Opera
2010-10-13 15:29:30 ----D---- C:\Program Files\Opera
2010-09-29 16:06:10 ----A---- C:\Windows\system32\drivers\ks.sys
2010-09-29 15:36:21 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 months======

2010-10-27 20:28:00 ----D---- C:\Windows\Temp
2010-10-27 20:27:57 ----RD---- C:\Program Files
2010-10-27 19:19:27 ----SHD---- C:\System Volume Information
2010-10-27 15:23:55 ----D---- C:\Windows\system32\config
2010-10-27 15:18:29 ----D---- C:\Windows\Microsoft.NET
2010-10-27 15:17:56 ----RSD---- C:\Windows\assembly
2010-10-27 14:29:48 ----D---- C:\Windows\Prefetch
2010-10-27 14:26:28 ----D---- C:\Windows\System32
2010-10-27 14:26:28 ----D---- C:\Windows\inf
2010-10-27 14:26:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-27 14:22:31 ----A---- C:\Users\Hůča\AppData\Roaming\PStrip.ini
2010-10-27 14:22:29 ----A---- C:\Users\Hůča\AppData\Roaming\PStrip.bak
2010-10-27 14:22:17 ----D---- C:\ProgramData\NVIDIA
2010-10-27 14:20:58 ----D---- C:\Windows\system32\drivers
2010-10-27 14:20:57 ----D---- C:\Windows\winsxs
2010-10-27 12:13:14 ----D---- C:\Windows\ehome
2010-10-27 12:13:03 ----D---- C:\Windows\AppPatch
2010-10-27 12:11:36 ----D---- C:\Windows\system32\NDF
2010-10-27 10:17:24 ----D---- C:\Users\Hůča\AppData\Roaming\vlc
2010-10-27 10:16:06 ----D---- C:\Downloads
2010-10-27 07:40:32 ----D---- C:\Windows\system32\catroot
2010-10-27 07:40:21 ----D---- C:\Windows\system32\catroot2
2010-10-26 00:24:25 ----D---- C:\Users\Hůča\AppData\Roaming\Skype
2010-10-26 00:09:12 ----D---- C:\Users\Hůča\AppData\Roaming\skypePM
2010-10-25 17:54:29 ----D---- C:\Users\Hůča\AppData\Roaming\dvdcss
2010-10-20 19:30:03 ----SHD---- C:\Windows\Installer
2010-10-19 11:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 19:51:00 ----D---- C:\Windows\system32\Tasks
2010-10-13 20:12:38 ----RSD---- C:\Windows\Fonts
2010-10-13 17:56:20 ----D---- C:\Windows
2010-10-13 16:06:35 ----D---- C:\Program Files\Internet Explorer
2010-10-13 16:06:34 ----D---- C:\Windows\system32\migration
2010-10-13 16:06:33 ----D---- C:\Program Files\Windows Media Player
2010-10-13 16:04:17 ----D---- C:\ProgramData\Microsoft Help
2010-10-13 16:01:06 ----D---- C:\Windows\debug
2010-10-13 16:01:04 ----A---- C:\Windows\system32\MRT.exe
2010-10-13 15:30:36 ----D---- C:\Program Files\Mozilla Firefox
2010-10-03 18:55:00 ----D---- C:\Windows\rescache
2010-09-29 20:16:20 ----D---- C:\Windows\system32\cs-CZ
2010-09-29 20:16:19 ----D---- C:\Windows\system32\DriverStore
2010-09-29 17:40:33 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-29 16:06:47 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-14 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 PStrip;PStrip; C:\Windows\system32\drivers\pstrip.sys [2007-07-15 27992]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-12-18 95896]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet - adaptér; C:\Windows\system32\DRIVERS\l160x86.sys [2009-07-14 47104]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-07-15 36608]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
S3 a3qx1up0;a3qx1up0; C:\Windows\system32\drivers\a3qx1up0.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-07-15 233472]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-11 129640]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-01-11 240232]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-08 1343400]

-----------------EOF-----------------

Zde info!

info.txt logfile of random's system information tool 1.08 2010-10-27 20:28:06

======Uninstall list======

-->MsiExec /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{24762012-C6C8-4AAD-A02D-71A009FA1683}
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.3.1 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A93000000001}
Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe"
Adobe® Flash® Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil10e_ActiveX.exe -maintain activex
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {0A1FAC46-B899-421D-B1A2-470896DC45DB}
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {E68DD413-B834-4923-8181-0A03B7555187}
Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Balíček ovladače systému Windows - MobileTop (sshpmdm) Modem (01/26/2008 2.6.0.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\DPInst.exe /u C:\Windows\system32\DRVSTORE\mbtmdm_B08520DA75F32B2F150F141FB0198C4ACABCC886\mbtmdm.inf
Balíček ovladače systému Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\Windows\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
Battlefield: Bad Company™ 2-->MsiExec.exe /X{3AC8457C-0385-4BEA-A959-E095F05D6D67}
BitComet 1.17-->D:\Softwares\BitComet\uninst.exe
CCleaner-->"D:\Softwares\CCleaner\uninst.exe"
Counter Strike 1.6 V34-->"D:\Games\Valve\cstrike\Counter-strike\uninstall.exe"
Counter-Strike 1.6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13B792AA-C078-43A4-8A3A-8B12D629940D}\Setup.exe" -l0x19
Counter-Strike: Source-->D:\Games\Counter-Strike Source\Uninst.exe
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Dostihy 3000 deluxe 1.1-->"D:\Games\Dostihy 3000 Deluxe\uninstall.exe"
Full Tilt Poker.Net-->D:\Games\Full Tilt Poker.Net\uninstall.exe
Icy Tower v1.3.1-->"D:\Games\icytower1.3\unins000.exe"
Icy Tower v1.4-->"d:\games\icytower1.4\unins000.exe"
LogMeIn Hamachi-->C:\Windows\system32\\msiexec.exe /i {8A74DEFD-A224-49CC-AB80-4E88BC730125} REMOVE=ALL
LogMeIn Hamachi-->MsiExec.exe /I{8A74DEFD-A224-49CC-AB80-4E88BC730125}
Mafia II-->"D:\Games\2K Games\Mafia II\unins000.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {E12F9D31-4025-4BC6-B1B2-AB262C5580B0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0405-0000-0000000FF1CE} /uninstall {1FC5BC34-0301-40D2-9432-05BA220277B8}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {294B4278-CF7B-40B9-86A1-2D3FF0C2C524}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {10EC59E5-9BCE-4884-BB1A-E28627220232}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
NVIDIA Display Control Panel-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe DisplayControlPanel
NVIDIA Drivers-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
Opera 10.63-->MsiExec.exe /X{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}
PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
ProgSense-->"D:\Softwares\ProgSense\unins000.exe"
PVSonyDll-->MsiExec.exe /I{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
SAMSUNG Mobile Composite Device Software-->C:\Windows\system32\Samsung_USB_Drivers\6_old\SSBCUninstall.exe
Samsung Mobile Modem Device Software-->C:\Windows\system32\Samsung_USB_Drivers\7\SSECUninstall.exe
SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Modem V2 Software-->C:\Windows\system32\Samsung_USB_Drivers\3_6810\SSCEUninstall.exe
Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung New PC Studio-->"C:\Program Files\InstallShield Installation Information\{F193FC0E-9E18-40FC-A974-509A1BDD240A}\setup.exe" -runfromtemp -l0x0405 -removeonly
Samsung New PC Studio-->MsiExec.exe /X{F193FC0E-9E18-40FC-A974-509A1BDD240A}
SAMSUNG SYMBIAN USB Download Driver-->C:\Program Files\SAMSUNG\SYMBIAN USB Download Driver\Uninstall.exe
SAMSUNG USB Mobile Device Software-->C:\Windows\system32\Samsung_USB_Drivers\6\SS_BUninstall.exe
SamsungConnectivityCableDriver-->MsiExec.exe /X{7E84FAC8-C518-40F9-9807-7455301D6D25}
Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for 2007 Microsoft Office System (KB982312)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}
Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
Security Update for Microsoft Office Access 2007 (KB979440)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5A4E43D5-858F-49BD-BA72-8F30E1793060}
Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1}
Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
Security Update for Microsoft Office Outlook 2007 (KB2288953)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8B772E1C-7C05-42D2-839D-3EC2D39EFF22}
Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
Security Update for Microsoft Office Publisher 2007 (KB982124)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {289FA8BC-6A8E-4341-B194-EB26B49E9F5D}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
Skype Toolbars-->MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Šípková Růženka-->D:\Games\EDDICA\RuzenkaCZ\uninst.exe
Texas Hold'em Poker 3D - Deluxe Edition 1.0-->"D:\Games\Play+Smile\Texas Hold'em Poker 3D - Deluxe Edition\unins000.exe"
TmNationsForever Update 2010-03-15-->"D:\Games\TmNationsForever\unins000.exe"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Update for Outlook 2007 Junk Email Filter (kb2410711)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {BB5A2EB0-4515-4C6B-A618-A6F6B0AB7BAA}
VLC media player 1.0.3-->D:\Softwares\VLC\uninstall.exe
WinRAR-->D:\Softwares\WinRAR\uninstall.exe
Worms Reloaded-->"D:\Games\Team17\Worms Reloaded\unins000.exe"

======System event log======

Computer Name: Hůča-PC
Event Code: 7036
Message: Stav služby Stínová kopie svazku byl změněn na: Spuštěno
Record Number: 68563
Source Name: Service Control Manager
Time Written: 20100626123159.332355-000
Event Type: Informace
User:

Computer Name: Hůča-PC
Event Code: 7036
Message: Stav služby Podpora ovládacího panelu Oznámení a řešení problémů byl změněn na: Zastaveno
Record Number: 68562
Source Name: Service Control Manager
Time Written: 20100626122038.718759-000
Event Type: Informace
User:

Computer Name: Hůča-PC
Event Code: 7036
Message: Stav služby Podpora ovládacího panelu Oznámení a řešení problémů byl změněn na: Spuštěno
Record Number: 68561
Source Name: Service Control Manager
Time Written: 20100626122018.813124-000
Event Type: Informace
User:

Computer Name: Hůča-PC
Event Code: 7036
Message: Stav služby Instalační služba modulů systému Windows byl změněn na: Zastaveno
Record Number: 68560
Source Name: Service Control Manager
Time Written: 20100626121756.213274-000
Event Type: Informace
User:

Computer Name: Hůča-PC
Event Code: 7040
Message: Režim spuštění služby Instalační služba modulů systému Windows byl změněn z automatické spouštění na spouštění na vyžádání.
Record Number: 68559
Source Name: Service Control Manager
Time Written: 20100626121755.838873-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: 37L4247D28-05
Event Code: 1001
Message: Chybný blok , typ 0
Název události: PnPDriverNotFound
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1: x86
P2: ACPI\ATK0110
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\Temp\DMIE30D.tmp.log.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x86_93856eefc23cb6f60c4f9525ca72dec1a9d7155_cab_06dde35b

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: c8b69184-08de-11df-95e2-d1b7e020685f
Stav hlášení: 6
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20100124115119.000000-000
Event Type: Informace
User:

Computer Name: 37L4247D28-05
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20100124115021.000000-000
Event Type: Informace
User:

Computer Name: 37L4247D28-05
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20100124115018.000000-000
Event Type: Informace
User:

Computer Name: 37L4247D28-05
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.

Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20100124115015.968902-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247D28-05
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20100124115016.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: Hůča-PC
Event Code: 4648
Message: Došlo k pokusu o přihlášení pomocí explicitního pověření.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: HŮČA-PC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Účet, jehož pověření bylo použito:
Název účtu: Hůča
Doména účtu: Hůča-PC
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Cílový server:
Název cílového serveru: localhost
Další informace: localhost

Informace o procesu:
ID procesu: 0x248
Název procesu: C:\Windows\System32\winlogon.exe

Informace o síti:
Síťová adresa: 127.0.0.1
Port: 0

Tato událost je generována, pokud se proces pokusí přihlásit k účtu explicitním zadáním pověření tohoto účtu. K tomu nejčastěji dochází v dávkových konfiguracích, například naplánovaných úlohách, nebo při použití příkazu RUNAS.
Record Number: 12519
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100425101633.519629-000
Event Type: Úspěšný audit
User:

Computer Name: Hůča-PC
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 12518
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100425101632.412027-000
Event Type: Úspěšný audit
User:

Computer Name: Hůča-PC
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: HŮČA-PC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1f8
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 12517
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100425101632.412027-000
Event Type: Úspěšný audit
User:

Computer Name: Hůča-PC
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 12516
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100425101632.302827-000
Event Type: Úspěšný audit
User:

Computer Name: Hůča-PC
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: HŮČA-PC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1f8
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 12515
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100425101632.302827-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;D:\Softwares\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=0f02
"CLASSPATH"=.;D:\Softwares\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=D:\Softwares\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

#4 Příspěvek od **vyosek** » 27 říj 2010 19:44

Predpokladam ze NOD32 mate zakoupeny a nelegalni SW se v PC nevyskytuje

Tohle D:\Softwares\PStrip znate

Jsou s PC nejake problemy

Hucanek · #5 Příspěvek od **Hucanek** » 27 říj 2010 19:57

Software v PC je legalní, NOD 32 zakoupený. Poslední dobou jsem zaznamenal občasné výpadky internetu a zamrzání internetového prohlížeče. Jinak vše funguje bez problému. PStrip znám, software na práci s obrazem, používám dlouho.

#6 Příspěvek od **vyosek** » 27 říj 2010 20:07

Spustte HJT a provedeme fixnuti polozek

HJT najdete zde C:\Program Files\trend micro\Hůča.exe
Otevre se Vam okno, kliknete na Do a system scan only
V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
Kliknete na Fix checked (vlevo dole)
HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{32099AAC-C132-4136-9E9A-4E364A424E17}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"LogMeIn Hamachi Ui"=-
"NPSStartup"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
"AutoStartNPSAgent"=-

:files
C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
C:\Program Files\DAEMON Tools Toolbar
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

Kliknete na cervene tlacitko MoveIt!
Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

Hucanek · #7 Příspěvek od **Hucanek** » 27 říj 2010 20:22

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AutoStartNPSAgent deleted successfully.
========== FILES ==========
C:\Users\Hůča\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll moved successfully.
C:\Program Files\DAEMON Tools Toolbar\Resources folder moved successfully.
C:\Program Files\DAEMON Tools Toolbar folder moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8EF5.tmp folder moved successfully.
C:\Windows\Temp\HTT1190.tmp moved successfully.
C:\Windows\Temp\HTT11B5.tmp moved successfully.
C:\Windows\Temp\HTT136D.tmp moved successfully.
C:\Windows\Temp\HTT1936.tmp moved successfully.
C:\Windows\Temp\HTT1B0D.tmp moved successfully.
C:\Windows\Temp\HTT1C4C.tmp moved successfully.
C:\Windows\Temp\HTT1CB1.tmp moved successfully.
C:\Windows\Temp\HTT2068.tmp moved successfully.
C:\Windows\Temp\HTT2146.tmp moved successfully.
C:\Windows\Temp\HTT2157.tmp moved successfully.
C:\Windows\Temp\HTT218D.tmp moved successfully.
C:\Windows\Temp\HTT2506.tmp moved successfully.
C:\Windows\Temp\HTT27E5.tmp moved successfully.
C:\Windows\Temp\HTT2817.tmp moved successfully.
C:\Windows\Temp\HTT28C2.tmp moved successfully.
C:\Windows\Temp\HTT291F.tmp moved successfully.
C:\Windows\Temp\HTT2B6D.tmp moved successfully.
C:\Windows\Temp\HTT2BAB.tmp moved successfully.
C:\Windows\Temp\HTT2C83.tmp moved successfully.
C:\Windows\Temp\HTT2CCD.tmp moved successfully.
C:\Windows\Temp\HTT2DA4.tmp moved successfully.
C:\Windows\Temp\HTT2DAC.tmp moved successfully.
C:\Windows\Temp\HTT2E8A.tmp moved successfully.
C:\Windows\Temp\HTT2F55.tmp moved successfully.
C:\Windows\Temp\HTT3062.tmp moved successfully.
C:\Windows\Temp\HTT3129.tmp moved successfully.
C:\Windows\Temp\HTT31BC.tmp moved successfully.
C:\Windows\Temp\HTT31C1.tmp moved successfully.
C:\Windows\Temp\HTT32B6.tmp moved successfully.
C:\Windows\Temp\HTT334C.tmp moved successfully.
C:\Windows\Temp\HTT337.tmp moved successfully.
C:\Windows\Temp\HTT339A.tmp moved successfully.
C:\Windows\Temp\HTT35DE.tmp moved successfully.
C:\Windows\Temp\HTT371C.tmp moved successfully.
C:\Windows\Temp\HTT372A.tmp moved successfully.
C:\Windows\Temp\HTT3782.tmp moved successfully.
C:\Windows\Temp\HTT37D2.tmp moved successfully.
C:\Windows\Temp\HTT395A.tmp moved successfully.
C:\Windows\Temp\HTT3C63.tmp moved successfully.
C:\Windows\Temp\HTT3D25.tmp moved successfully.
C:\Windows\Temp\HTT3D31.tmp moved successfully.
C:\Windows\Temp\HTT3DE3.tmp moved successfully.
C:\Windows\Temp\HTT3E3A.tmp moved successfully.
C:\Windows\Temp\HTT3E63.tmp moved successfully.
C:\Windows\Temp\HTT3F0D.tmp moved successfully.
C:\Windows\Temp\HTT3F35.tmp moved successfully.
C:\Windows\Temp\HTT3FB5.tmp moved successfully.
C:\Windows\Temp\HTT4003.tmp moved successfully.
C:\Windows\Temp\HTT4042.tmp moved successfully.
C:\Windows\Temp\HTT40F0.tmp moved successfully.
C:\Windows\Temp\HTT42AB.tmp moved successfully.
C:\Windows\Temp\HTT4319.tmp moved successfully.
C:\Windows\Temp\HTT434A.tmp moved successfully.
C:\Windows\Temp\HTT43D3.tmp moved successfully.
C:\Windows\Temp\HTT445B.tmp moved successfully.
C:\Windows\Temp\HTT4614.tmp moved successfully.
C:\Windows\Temp\HTT47B.tmp moved successfully.
C:\Windows\Temp\HTT47F5.tmp moved successfully.
C:\Windows\Temp\HTT4885.tmp moved successfully.
C:\Windows\Temp\HTT488D.tmp moved successfully.
C:\Windows\Temp\HTT48BB.tmp moved successfully.
C:\Windows\Temp\HTT4A58.tmp moved successfully.
C:\Windows\Temp\HTT4A68.tmp moved successfully.
C:\Windows\Temp\HTT4AFA.tmp moved successfully.
C:\Windows\Temp\HTT4B3.tmp moved successfully.
C:\Windows\Temp\HTT4B69.tmp moved successfully.
C:\Windows\Temp\HTT4B80.tmp moved successfully.
C:\Windows\Temp\HTT4BBF.tmp moved successfully.
C:\Windows\Temp\HTT4BF4.tmp moved successfully.
C:\Windows\Temp\HTT4C46.tmp moved successfully.
C:\Windows\Temp\HTT4CE2.tmp moved successfully.
C:\Windows\Temp\HTT4E01.tmp moved successfully.
C:\Windows\Temp\HTT4E48.tmp moved successfully.
C:\Windows\Temp\HTT51F2.tmp moved successfully.
C:\Windows\Temp\HTT52AC.tmp moved successfully.
C:\Windows\Temp\HTT5422.tmp moved successfully.
C:\Windows\Temp\HTT54CA.tmp moved successfully.
C:\Windows\Temp\HTT564F.tmp moved successfully.
C:\Windows\Temp\HTT5655.tmp moved successfully.
C:\Windows\Temp\HTT57D3.tmp moved successfully.
C:\Windows\Temp\HTT5888.tmp moved successfully.
C:\Windows\Temp\HTT58A.tmp moved successfully.
C:\Windows\Temp\HTT58FD.tmp moved successfully.
C:\Windows\Temp\HTT5A7A.tmp moved successfully.
C:\Windows\Temp\HTT5DC9.tmp moved successfully.
C:\Windows\Temp\HTT5DFA.tmp moved successfully.
C:\Windows\Temp\HTT5F72.tmp moved successfully.
C:\Windows\Temp\HTT5FD5.tmp moved successfully.
C:\Windows\Temp\HTT60FA.tmp moved successfully.
C:\Windows\Temp\HTT61F6.tmp moved successfully.
C:\Windows\Temp\HTT6349.tmp moved successfully.
C:\Windows\Temp\HTT63F3.tmp moved successfully.
C:\Windows\Temp\HTT6435.tmp moved successfully.
C:\Windows\Temp\HTT643D.tmp moved successfully.
C:\Windows\Temp\HTT64CA.tmp moved successfully.
C:\Windows\Temp\HTT655A.tmp moved successfully.
C:\Windows\Temp\HTT655F.tmp moved successfully.
C:\Windows\Temp\HTT659D.tmp moved successfully.
C:\Windows\Temp\HTT66D6.tmp moved successfully.
C:\Windows\Temp\HTT66F6.tmp moved successfully.
C:\Windows\Temp\HTT66F7.tmp moved successfully.
C:\Windows\Temp\HTT672C.tmp moved successfully.
C:\Windows\Temp\HTT6AE6.tmp moved successfully.
C:\Windows\Temp\HTT6AED.tmp moved successfully.
C:\Windows\Temp\HTT6B50.tmp moved successfully.
C:\Windows\Temp\HTT6B53.tmp moved successfully.
C:\Windows\Temp\HTT6B88.tmp moved successfully.
C:\Windows\Temp\HTT6C35.tmp moved successfully.
C:\Windows\Temp\HTT6DCB.tmp moved successfully.
C:\Windows\Temp\HTT6E40.tmp moved successfully.
C:\Windows\Temp\HTT6ED2.tmp moved successfully.
C:\Windows\Temp\HTT6F57.tmp moved successfully.
C:\Windows\Temp\HTT6F80.tmp moved successfully.
C:\Windows\Temp\HTT6FD9.tmp moved successfully.
C:\Windows\Temp\HTT707E.tmp moved successfully.
C:\Windows\Temp\HTT70E7.tmp moved successfully.
C:\Windows\Temp\HTT714F.tmp moved successfully.
C:\Windows\Temp\HTT7252.tmp moved successfully.
C:\Windows\Temp\HTT7315.tmp moved successfully.
C:\Windows\Temp\HTT731E.tmp moved successfully.
C:\Windows\Temp\HTT7475.tmp moved successfully.
C:\Windows\Temp\HTT7570.tmp moved successfully.
C:\Windows\Temp\HTT762A.tmp moved successfully.
C:\Windows\Temp\HTT7696.tmp moved successfully.
C:\Windows\Temp\HTT76C.tmp moved successfully.
C:\Windows\Temp\HTT773.tmp moved successfully.
C:\Windows\Temp\HTT7898.tmp moved successfully.
C:\Windows\Temp\HTT78B0.tmp moved successfully.
C:\Windows\Temp\HTT7995.tmp moved successfully.
C:\Windows\Temp\HTT79D5.tmp moved successfully.
C:\Windows\Temp\HTT7A5F.tmp moved successfully.
C:\Windows\Temp\HTT7A6B.tmp moved successfully.
C:\Windows\Temp\HTT7AEB.tmp moved successfully.
C:\Windows\Temp\HTT80EF.tmp moved successfully.
C:\Windows\Temp\HTT8110.tmp moved successfully.
C:\Windows\Temp\HTT81B3.tmp moved successfully.
C:\Windows\Temp\HTT81FD.tmp moved successfully.
C:\Windows\Temp\HTT83BF.tmp moved successfully.
C:\Windows\Temp\HTT83F8.tmp moved successfully.
C:\Windows\Temp\HTT847E.tmp moved successfully.
C:\Windows\Temp\HTT84B7.tmp moved successfully.
C:\Windows\Temp\HTT862C.tmp moved successfully.
C:\Windows\Temp\HTT8738.tmp moved successfully.
C:\Windows\Temp\HTT890C.tmp moved successfully.
C:\Windows\Temp\HTT8967.tmp moved successfully.
C:\Windows\Temp\HTT8A49.tmp moved successfully.
C:\Windows\Temp\HTT8B7E.tmp moved successfully.
C:\Windows\Temp\HTT8BA0.tmp moved successfully.
C:\Windows\Temp\HTT8BE4.tmp moved successfully.
C:\Windows\Temp\HTT8C1E.tmp moved successfully.
C:\Windows\Temp\HTT8CB9.tmp moved successfully.
C:\Windows\Temp\HTT8D97.tmp moved successfully.
C:\Windows\Temp\HTT8E2A.tmp moved successfully.
C:\Windows\Temp\HTT8E54.tmp moved successfully.
C:\Windows\Temp\HTT8E99.tmp moved successfully.
C:\Windows\Temp\HTT8F53.tmp moved successfully.
C:\Windows\Temp\HTT8FFE.tmp moved successfully.
C:\Windows\Temp\HTT9007.tmp moved successfully.
C:\Windows\Temp\HTT9063.tmp moved successfully.
C:\Windows\Temp\HTT924A.tmp moved successfully.
C:\Windows\Temp\HTT92A.tmp moved successfully.
C:\Windows\Temp\HTT92B8.tmp moved successfully.
C:\Windows\Temp\HTT949B.tmp moved successfully.
C:\Windows\Temp\HTT9509.tmp moved successfully.
C:\Windows\Temp\HTT950E.tmp moved successfully.
C:\Windows\Temp\HTT9559.tmp moved successfully.
C:\Windows\Temp\HTT96F3.tmp moved successfully.
C:\Windows\Temp\HTT971B.tmp moved successfully.
C:\Windows\Temp\HTT9720.tmp moved successfully.
C:\Windows\Temp\HTT97BA.tmp moved successfully.
C:\Windows\Temp\HTT989F.tmp moved successfully.
C:\Windows\Temp\HTT98CA.tmp moved successfully.
C:\Windows\Temp\HTT98F8.tmp moved successfully.
C:\Windows\Temp\HTT9AE3.tmp moved successfully.
C:\Windows\Temp\HTT9DDC.tmp moved successfully.
C:\Windows\Temp\HTT9E75.tmp moved successfully.
C:\Windows\Temp\HTT9FEA.tmp moved successfully.
C:\Windows\Temp\HTTA077.tmp moved successfully.
C:\Windows\Temp\HTTA0CB.tmp moved successfully.
C:\Windows\Temp\HTTA221.tmp moved successfully.
C:\Windows\Temp\HTTA5FC.tmp moved successfully.
C:\Windows\Temp\HTTA6C9.tmp moved successfully.
C:\Windows\Temp\HTTA75B.tmp moved successfully.
C:\Windows\Temp\HTTA993.tmp moved successfully.
C:\Windows\Temp\HTTAA4.tmp moved successfully.
C:\Windows\Temp\HTTAA52.tmp moved successfully.
C:\Windows\Temp\HTTAAA5.tmp moved successfully.
C:\Windows\Temp\HTTABF5.tmp moved successfully.
C:\Windows\Temp\HTTAC55.tmp moved successfully.
C:\Windows\Temp\HTTACBC.tmp moved successfully.
C:\Windows\Temp\HTTACDC.tmp moved successfully.
C:\Windows\Temp\HTTAD75.tmp moved successfully.
C:\Windows\Temp\HTTAEA6.tmp moved successfully.
C:\Windows\Temp\HTTAEDD.tmp moved successfully.
C:\Windows\Temp\HTTAF6D.tmp moved successfully.
C:\Windows\Temp\HTTB123.tmp moved successfully.
C:\Windows\Temp\HTTB14.tmp moved successfully.
C:\Windows\Temp\HTTB174.tmp moved successfully.
C:\Windows\Temp\HTTB1A0.tmp moved successfully.
C:\Windows\Temp\HTTB1EA.tmp moved successfully.
C:\Windows\Temp\HTTB260.tmp moved successfully.
C:\Windows\Temp\HTTB427.tmp moved successfully.
C:\Windows\Temp\HTTB43.tmp moved successfully.
C:\Windows\Temp\HTTB432.tmp moved successfully.
C:\Windows\Temp\HTTB5BA.tmp moved successfully.
C:\Windows\Temp\HTTB838.tmp moved successfully.
C:\Windows\Temp\HTTB905.tmp moved successfully.
C:\Windows\Temp\HTTB97C.tmp moved successfully.
C:\Windows\Temp\HTTBB66.tmp moved successfully.
C:\Windows\Temp\HTTBBED.tmp moved successfully.
C:\Windows\Temp\HTTBC4E.tmp moved successfully.
C:\Windows\Temp\HTTBE3E.tmp moved successfully.
C:\Windows\Temp\HTTBF0C.tmp moved successfully.
C:\Windows\Temp\HTTC018.tmp moved successfully.
C:\Windows\Temp\HTTC16E.tmp moved successfully.
C:\Windows\Temp\HTTC3FC.tmp moved successfully.
C:\Windows\Temp\HTTC54.tmp moved successfully.
C:\Windows\Temp\HTTC575.tmp moved successfully.
C:\Windows\Temp\HTTC5D3.tmp moved successfully.
C:\Windows\Temp\HTTC69E.tmp moved successfully.
C:\Windows\Temp\HTTC6D.tmp moved successfully.
C:\Windows\Temp\HTTC760.tmp moved successfully.
C:\Windows\Temp\HTTC767.tmp moved successfully.
C:\Windows\Temp\HTTC97A.tmp moved successfully.
C:\Windows\Temp\HTTC9D3.tmp moved successfully.
C:\Windows\Temp\HTTCCF0.tmp moved successfully.
C:\Windows\Temp\HTTCD95.tmp moved successfully.
C:\Windows\Temp\HTTCDE0.tmp moved successfully.
C:\Windows\Temp\HTTCE5D.tmp moved successfully.
C:\Windows\Temp\HTTCEA8.tmp moved successfully.
C:\Windows\Temp\HTTCF45.tmp moved successfully.
C:\Windows\Temp\HTTCFEC.tmp moved successfully.
C:\Windows\Temp\HTTD06D.tmp moved successfully.
C:\Windows\Temp\HTTD0AA.tmp moved successfully.
C:\Windows\Temp\HTTD194.tmp moved successfully.
C:\Windows\Temp\HTTD1A1.tmp moved successfully.
C:\Windows\Temp\HTTD308.tmp moved successfully.
C:\Windows\Temp\HTTD3A8.tmp moved successfully.
C:\Windows\Temp\HTTD45E.tmp moved successfully.
C:\Windows\Temp\HTTD878.tmp moved successfully.
C:\Windows\Temp\HTTD9AD.tmp moved successfully.
C:\Windows\Temp\HTTDB70.tmp moved successfully.
C:\Windows\Temp\HTTDB90.tmp moved successfully.
C:\Windows\Temp\HTTDD44.tmp moved successfully.
C:\Windows\Temp\HTTDDDE.tmp moved successfully.
C:\Windows\Temp\HTTDF50.tmp moved successfully.
C:\Windows\Temp\HTTDF5B.tmp moved successfully.
C:\Windows\Temp\HTTDFE8.tmp moved successfully.
C:\Windows\Temp\HTTE03F.tmp moved successfully.
C:\Windows\Temp\HTTE20A.tmp moved successfully.
C:\Windows\Temp\HTTE374.tmp moved successfully.
C:\Windows\Temp\HTTE392.tmp moved successfully.
C:\Windows\Temp\HTTE3BD.tmp moved successfully.
C:\Windows\Temp\HTTE3F3.tmp moved successfully.
C:\Windows\Temp\HTTE4E0.tmp moved successfully.
C:\Windows\Temp\HTTE557.tmp moved successfully.
C:\Windows\Temp\HTTE719.tmp moved successfully.
C:\Windows\Temp\HTTE78A.tmp moved successfully.
C:\Windows\Temp\HTTE89F.tmp moved successfully.
C:\Windows\Temp\HTTE8F5.tmp moved successfully.
C:\Windows\Temp\HTTE9B6.tmp moved successfully.
C:\Windows\Temp\HTTE9DF.tmp moved successfully.
C:\Windows\Temp\HTTEA54.tmp moved successfully.
C:\Windows\Temp\HTTEA64.tmp moved successfully.
C:\Windows\Temp\HTTEBF6.tmp moved successfully.
C:\Windows\Temp\HTTEC0A.tmp moved successfully.
C:\Windows\Temp\HTTEC0E.tmp moved successfully.
C:\Windows\Temp\HTTEC15.tmp moved successfully.
C:\Windows\Temp\HTTEC2.tmp moved successfully.
C:\Windows\Temp\HTTEDA1.tmp moved successfully.
C:\Windows\Temp\HTTEDD3.tmp moved successfully.
C:\Windows\Temp\HTTEED5.tmp moved successfully.
C:\Windows\Temp\HTTF01C.tmp moved successfully.
C:\Windows\Temp\HTTF05.tmp moved successfully.
C:\Windows\Temp\HTTF06D.tmp moved successfully.
C:\Windows\Temp\HTTF32E.tmp moved successfully.
C:\Windows\Temp\HTTF3F5.tmp moved successfully.
C:\Windows\Temp\HTTF4C1.tmp moved successfully.
C:\Windows\Temp\HTTF593.tmp moved successfully.
C:\Windows\Temp\HTTF695.tmp moved successfully.
C:\Windows\Temp\HTTF73F.tmp moved successfully.
C:\Windows\Temp\HTTF7A5.tmp moved successfully.
C:\Windows\Temp\HTTF7DF.tmp moved successfully.
C:\Windows\Temp\HTTF810.tmp moved successfully.
C:\Windows\Temp\HTTF828.tmp moved successfully.
C:\Windows\Temp\HTTF8BF.tmp moved successfully.
C:\Windows\Temp\HTTFA6C.tmp moved successfully.
C:\Windows\Temp\HTTFB68.tmp moved successfully.
C:\Windows\Temp\HTTFC32.tmp moved successfully.
C:\Windows\Temp\HTTFC35.tmp moved successfully.
C:\Windows\Temp\HTTFCF.tmp moved successfully.
C:\Windows\Temp\HTTFE7B.tmp moved successfully.
C:\Windows\Temp\HTTFE93.tmp moved successfully.
C:\Windows\Temp\HTTFF3B.tmp moved successfully.
C:\Windows\Temp\HTTFF5.tmp moved successfully.
C:\Windows\Temp\HTTFF6D.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Hůča
->Temp folder emptied: 1375675 bytes
->Temporary Internet Files folder emptied: 8991915 bytes
->Opera cache emptied: 17691834 bytes
->Flash cache emptied: 43301 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 31054 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 27,00 mb

OTM by OldTimer - Version 3.1.17.1 log created on 10272010_211814

#8 Příspěvek od **vyosek** » 27 říj 2010 20:24

Jdeme dale

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Doporucuji provest defragmentaci disku

Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace

Napiste jak se chova PC

Hucanek · #9 Příspěvek od **Hucanek** » 27 říj 2010 20:36

Děkuji Vám za pomoc, v průběhu zítřka napíšu, zda problémy odezněly. Přeji hezký večer a ještě jednou děkuji.

#10 Příspěvek od **vyosek** » 27 říj 2010 20:37

Prozatim nemate zac, budu ocekavat vysledky a ohlasy...Pekny vecer i Vam...

Hucanek · #11 Příspěvek od **Hucanek** » 30 říj 2010 21:33

Dobrý večer, jste asi kouzelník, vše funguje více než skvěle, moc děkuji za pomoc

#12 Příspěvek od **vyosek** » 31 říj 2010 08:52

Odstranovani haveti nejsou kouzla, jsou to presne cilene utoky

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

A pokud nejsou problemy a ani dotazy, je to z me strany vse

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu