Pomale PC, Sekani zvuku a videa

Zpráva

milwocii · #16 Příspěvek od **milwocii** » 15 Črv 2011 21:33

ak to promiň, ale ty jsi mi radil, ať to dám do víc příspěvků

http://leteckaposta.cz/185467297

#17 Příspěvek od **stell** » 15 Črv 2011 21:40

Vies co,najdi na C:\ComboFix3.txt
a nahraj to na tu letecku postu, nakolko ty davas, dajaky log.txt, a aj to je len polovica logu,combofix.txt.. ,

milwocii · #18 Příspěvek od **milwocii** » 15 Črv 2011 21:47

http://leteckaposta.cz/938883097
to je log z minulýho roku ne? A co ještě chceš nějak jsem to nepochopila....

#19 Příspěvek od **stell** » 15 Črv 2011 21:53

No ano toto je stary log, najdi najnovsi log , a nahraj to na letecku postu.
Co nechapes???Vsak prvy log co si davala ,je len polovica logu combofixu,
Ale vies co spravime to inak, nakolko mas tam stary combofix.

Stiahni na plochu
http://tharifas.sweb.cz/T-Cleaner.exe
Spust<,stale stlac A-enter,,,,,,,
Toto odstrani combofix.

Stiahnes novu verziu combofixu na plochu
PROSIM CITAJTE POZORNE NAVOD!!!,

Použij ComboFix podle tohoto návodu: http://www.bleepingcomputer.com/combofi ... t-combofix
Log znej vloz sem.

Zajtra pokracujeme,

Dnes koncim.

milwocii · #20 Příspěvek od **milwocii** » 15 Črv 2011 21:59

ok, log z toho novýho dám na leteckou poštu a link vložim sem jo ...díky ti za tvůj čas, pomohl jsi mi

#21 Příspěvek od **stell** » 16 Črv 2011 07:54

ok, vloz log kde ti bude lepsie vyhovovat.

milwocii · #22 Příspěvek od **milwocii** » 16 Črv 2011 10:01

http://leteckaposta.cz/436964298 toto je nový log, ale ta druhá polovina nevim kde je, nesedí mi datumy i časy s ostatníma, ukázalo mi to jen tohle ( nejnovější)

#23 Příspěvek od **stell** » 16 Črv 2011 10:09

toto je Ok, je to komplet log, este spravis jeden log,a potom precistime pc,
Stahni na plochu OTListIt2>> OTL
Označ položku Pro všechny uživatele.
Označ položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Klikn na tlačítko Prohledat
Po dokončení, sem vlož logy OTL.Txt

milwocii · #24 Příspěvek od **milwocii** » 16 Črv 2011 10:16

OTL logfile created on: 16.6.2011 11:12:32 - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\Uživatel\Dokumenty\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,17 Mb Total Physical Memory | 436,07 Mb Available Physical Memory | 42,96% Memory free
1,65 Gb Paging File | 1,19 Gb Available in Paging File | 72,04% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111,79 Gb Total Space | 46,46 Gb Free Space | 41,56% Space Free | Partition Type: NTFS

Computer Name: VP3 | User Name: Uživatel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.06.16 11:11:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Dokumenty\Downloads\OTL.exe
PRC - [2011.06.14 01:52:23 | 001,011,768 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2011.03.30 21:27:41 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2008.12.09 20:28:09 | 000,570,880 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\sp_rsser.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

========== Modules (SafeList) ==========

MOD - [2011.06.16 11:11:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Dokumenty\Downloads\OTL.exe
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2008.04.14 05:21:45 | 000,586,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mlang.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2010.03.25 11:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2008.12.09 20:28:09 | 000,570,880 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)

========== Driver Services (SafeList) ==========

DRV - [2011.02.03 23:37:47 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2011.02.03 00:46:28 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2009.06.15 14:05:18 | 000,023,524 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\GVTDrv.sys -- (GVTDrv)
DRV - [2008.12.09 20:28:09 | 000,141,312 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2008.10.31 11:38:08 | 004,942,336 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008.04.13 20:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2007.10.17 20:12:00 | 000,030,720 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l251x86.sys -- (AtcL002)
DRV - [2005.08.22 17:07:00 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2005.08.22 17:06:16 | 000,244,480 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [2005.08.22 17:06:10 | 000,718,464 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2005.05.04 04:28:34 | 001,133,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005.04.13 13:34:02 | 000,414,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA(R) nForce(TM)
DRV - [2005.04.13 13:32:42 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA(R) nForce(TM)
DRV - [2005.04.06 04:22:30 | 000,012,928 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005.04.06 04:22:28 | 000,033,536 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005.02.11 18:11:32 | 000,016,640 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvcchflt.sys -- (nvcchflt)
DRV - [2005.02.11 18:11:02 | 000,089,856 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus)
DRV - [2005.01.06 17:55:38 | 000,009,446 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\WinFast\WFTVFM\WFIOCTL.sys -- (WFIOCTL)
DRV - [2004.08.18 14:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2004.08.18 14:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.05.02 10:47:08 | 000,023,040 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\GVCplDrv.sys -- (GVCplDrv)
DRV - [2004.02.06 00:00:00 | 000,075,829 | R--- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\wf2kvcap.sys -- (BT848)
DRV - [2004.02.06 00:00:00 | 000,033,959 | R--- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\wf2ktunr.sys -- (tv2ktunr)
DRV - [2004.02.06 00:00:00 | 000,010,005 | R--- | M] (Leadtek Research Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\wf2kXbar.sys -- (Tv2kXbar)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch3/{ ... 194765D838}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found

IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startskins.com/startpage/8070319454/
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: " "
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {ea614400-e918-4741-9a97-7a972ff7c30b}:2.0.10
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.4.0024
FF - prefs.js..extensions.enabledItems: fbp@fbpurity.com:4.5.1
FF - prefs.js..keyword.URL: "http://search.seznam.cz/?sourceid=FF_5&q="

FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.05.07 10:57:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.07 10:57:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009.09.21 23:59:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Extensions
[2011.06.15 20:35:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions
[2011.02.01 17:06:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.05.08 00:28:23 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.05.08 00:28:27 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011.05.08 00:28:12 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\engine@conduit.com
[2011.05.08 19:15:29 | 000,000,000 | ---D | M] ("FB Layouts & Extras") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\fblayouts@hotlayouts2u.com
[2011.05.03 21:41:18 | 000,000,000 | ---D | M] (F.B. Purity - Cleans Up Facebook) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\extensions\fbp@fbpurity.com
[2010.11.01 12:50:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\mhm7225m.default\extensions
[2009.09.28 18:22:52 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\mhm7225m.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.11.01 13:14:55 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\mhm7225m.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.01 12:50:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\vwta8s0u.default\extensions
[2010.11.01 13:15:01 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\vwta8s0u.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.27 17:55:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions
[2010.08.07 15:15:00 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.10.20 19:04:01 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2010.10.27 09:09:24 | 000,000,000 | ---D | M] (Boost for Facebook) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{47624dda-b77e-4feb-820a-e4f077d5d4ca}
[2010.10.21 15:52:02 | 000,000,000 | ---D | M] ("Usage Stat") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}
[2010.10.20 19:05:26 | 000,000,000 | ---D | M] (FBFan) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99}
[2010.06.28 16:35:56 | 000,000,000 | ---D | M] (QAssistant) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{63414328-3ab4-2c84-6c41-5a473c4b2ff7}
[2010.11.01 13:15:06 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.10.22 10:07:29 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010.10.15 19:45:51 | 000,000,000 | ---D | M] (Facicons) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{DDABDBA1-2377-4A30-A027-25697B99E254}
[2010.06.02 17:46:21 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2010.06.18 16:50:36 | 000,000,000 | ---D | M] (Illimitux) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\illimitux@illimitux.net
[2010.12.17 21:31:16 | 000,000,863 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\conduit.xml
[2011.02.03 00:45:41 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\daemon-search.xml
[2011.02.01 17:07:01 | 000,002,342 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icq-search.xml
[2011.03.05 16:26:11 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin-1.xml
[2011.03.24 08:22:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin-2.xml
[2011.04.30 09:46:09 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin-3.xml
[2011.05.07 11:04:14 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin-4.xml
[2011.05.08 00:29:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin-5.xml
[2011.02.20 12:21:20 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin.gif
[2011.02.20 12:21:20 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin.src
[2011.02.03 00:53:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\a4cxun1x.default\searchplugins\icqplugin.xml
[2011.05.13 21:56:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009.07.10 19:01:26 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.06.05 11:04:40 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010.11.29 01:22:06 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Program Files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File not found (No name found) --
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\{A0D7CCB3-214D-498B-B4AA-0E8FDA9A7BF7}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\ENGINE@CONDUIT.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\FBLAYOUTS@HOTLAYOUTS2U.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\A4CXUN1X.DEFAULT\EXTENSIONS\FBP@FBPURITY.COM
[2011.05.07 10:56:38 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2009.09.21 12:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
[2010.04.13 21:24:08 | 000,002,046 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\firmycz.xml
[2011.05.07 10:56:50 | 000,002,208 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\heureka-cz.xml
[2011.05.07 10:56:50 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.04.13 21:24:30 | 000,002,041 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mapycz.xml
[2011.05.07 10:56:50 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2011.05.07 10:56:50 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2011.05.07 10:56:51 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
[2010.04.13 21:24:54 | 000,002,207 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zbocz.xml

O1 HOSTS File: ([2011.06.15 22:01:47 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - No CLSID value found.
O2 - BHO: (FB Layouts & Extras) - {FF4E1D1D-705B-4379-AB33-22D98C1ABF55} - C:\Program Files\FBLayouts\fblayouts.dll (FBSkins.com)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTo0.dll (Conduit Ltd.)
O4 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006..\Run: [uTorrent] C:\Program Files\uTorrent\utorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\auto-bit.lnk = File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Easy-WebPrint Add To Print List - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint High Speed Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Preview - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Od&eslat do aplikace OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 1009588782 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftup ... 1010486546 (MUWebControl Class)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/C ... 0795138889 (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Reg Error: Key error.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 () - http://www.hbo.cz/hbo/tudors/images/1_henry.gif
O24 - Desktop Components:1 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011.06.15 23:16:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011.06.15 23:03:06 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011.06.15 23:03:06 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011.06.15 23:03:06 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011.06.15 23:03:06 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011.06.15 23:02:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011.06.15 21:51:16 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mup.sys
[2011.06.15 20:42:26 | 000,581,120 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Uživatel\Plocha\aswMBR.exe
[2011.06.15 17:25:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Uživatel\Data aplikací\Malwarebytes
[2011.06.15 17:25:18 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011.06.15 17:25:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2011.06.15 17:25:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2011.06.15 17:25:05 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011.06.15 17:25:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.06.15 16:57:08 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Uživatel\Recent
[2011.06.15 11:54:44 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011.06.15 11:54:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2011.06.12 18:46:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Uživatel\Plocha\CR Zájezd
[2011.05.28 12:27:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Uživatel\Data aplikací\go
[2011.05.28 12:27:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Easybits GO
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp files -> C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.06.16 11:07:09 | 000,000,472 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{A1A97911-778F-443D-8245-2B21FAB18BE9}.job
[2011.06.16 11:02:00 | 000,000,944 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.06.16 10:37:02 | 000,441,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.06.16 10:37:02 | 000,071,632 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.06.16 10:34:18 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.06.16 10:33:19 | 000,000,940 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.06.16 10:33:14 | 000,001,374 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.06.16 10:32:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.06.16 01:19:39 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011.06.15 22:01:47 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011.06.15 21:34:05 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011.06.15 20:42:31 | 000,581,120 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Uživatel\Plocha\aswMBR.exe
[2011.06.15 19:14:12 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Uživatel\Plocha\HiJackThis.lnk
[2011.06.15 17:25:23 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2011.06.15 17:01:46 | 000,035,840 | ---- | M] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.06.15 01:04:46 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2011.06.14 09:14:34 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2011.06.13 17:02:50 | 000,002,547 | ---- | M] () -- C:\Documents and Settings\Uživatel\Plocha\Microsoft Word 2010.lnk
[2011.05.31 00:12:53 | 005,964,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011.05.28 12:27:39 | 000,001,822 | ---- | M] () -- C:\Documents and Settings\Uživatel\Plocha\Hrát hry (EasyBits GO).lnk
[2011.05.27 15:53:33 | 020,533,281 | ---- | M] () -- C:\Documents and Settings\Uživatel\Dokumenty\vlc-1.1.9-win32.exe
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp files -> C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.06.16 01:12:06 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011.06.15 23:03:06 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011.06.15 23:03:06 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011.06.15 23:03:06 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011.06.15 23:03:06 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011.06.15 23:03:06 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011.06.15 17:25:23 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2011.05.28 12:27:39 | 000,001,828 | ---- | C] () -- C:\Documents and Settings\Uživatel\Nabídka Start\Programy\Hrát hry (EasyBits GO).lnk
[2011.05.28 12:27:39 | 000,001,822 | ---- | C] () -- C:\Documents and Settings\Uživatel\Plocha\Hrát hry (EasyBits GO).lnk
[2011.01.25 02:11:58 | 001,177,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2010.08.13 16:14:56 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009.12.20 12:40:57 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009.11.29 19:59:46 | 000,000,085 | -HS- | C] () -- C:\Documents and Settings\All Users\Data aplikací\.zreglib
[2009.11.29 19:40:45 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.08.01 12:59:07 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2009.07.31 19:18:39 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2009.07.31 19:18:22 | 000,162,816 | ---- | C] () -- C:\WINDOWS\System32\ccmpeg.dll
[2009.07.31 19:18:21 | 000,100,512 | ---- | C] () -- C:\WINDOWS\System32\m1ati16.dll
[2009.07.31 19:18:20 | 000,034,304 | ---- | C] () -- C:\WINDOWS\System32\Cinemres.dll
[2009.07.31 19:18:16 | 000,015,427 | ---- | C] () -- C:\WINDOWS\System32\Cinemsup.sys
[2009.07.31 19:18:16 | 000,004,704 | ---- | C] () -- C:\WINDOWS\System32\Cinemast.dll
[2009.07.31 19:18:15 | 000,009,136 | ---- | C] () -- C:\WINDOWS\System32\INETWH16.DLL
[2009.07.31 19:18:15 | 000,004,528 | ---- | C] () -- C:\WINDOWS\System32\SETBROWS.EXE
[2009.07.31 19:18:07 | 000,000,032 | ---- | C] () -- C:\WINDOWS\edlog.dat
[2009.06.15 22:07:58 | 000,000,268 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2009.03.18 21:29:45 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009.01.04 18:02:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009.01.04 16:47:58 | 000,000,041 | ---- | C] () -- C:\WINDOWS\winampa.ini
[2008.12.20 16:03:34 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008.12.09 20:28:09 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
[2007.11.16 17:37:15 | 000,023,524 | ---- | C] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2007.11.16 17:24:23 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2007.11.16 17:24:12 | 000,087,540 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2007.11.16 17:18:11 | 000,023,040 | R--- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys
[2006.01.30 11:48:07 | 000,000,624 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2005.12.24 20:28:08 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2005.12.21 22:03:20 | 000,000,084 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2005.12.10 23:07:25 | 000,007,207 | R--- | C] () -- C:\WINDOWS\Disktool.INI
[2005.12.10 23:07:25 | 000,003,677 | R--- | C] () -- C:\WINDOWS\PlaySnd.INI
[2005.12.10 23:07:24 | 000,006,399 | R--- | C] () -- C:\WINDOWS\fwupgrade.ini
[2005.12.08 19:47:11 | 000,000,029 | ---- | C] () -- C:\WINDOWS\encore_launcher.ini
[2005.12.07 22:32:06 | 000,000,219 | ---- | C] () -- C:\WINDOWS\level.ini
[2005.12.06 20:47:13 | 000,000,632 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2005.12.06 17:36:04 | 000,000,597 | ---- | C] () -- C:\WINDOWS\Sof2.INI
[2005.12.06 16:16:17 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2005.12.04 21:29:43 | 000,000,632 | ---- | C] () -- C:\WINDOWS\CoD.INI
[2005.12.03 00:20:30 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS78.DLL
[2005.12.02 23:44:43 | 000,035,840 | ---- | C] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005.11.23 11:44:27 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\fusioncache.dat
[2005.11.08 16:37:13 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005.11.03 15:42:31 | 000,000,906 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2005.11.02 20:33:15 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005.11.02 20:32:28 | 001,577,136 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005.11.02 20:25:59 | 000,001,150 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005.11.02 20:25:48 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2005.11.02 20:25:48 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2005.11.02 20:25:34 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2005.11.02 20:25:32 | 000,441,696 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005.11.02 20:25:32 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2005.11.02 20:25:32 | 000,071,632 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005.11.02 20:25:32 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2005.11.02 20:25:32 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2005.11.02 20:25:30 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005.11.02 20:25:30 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005.11.02 20:25:26 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2005.11.02 20:25:26 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2005.11.02 20:25:21 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2005.11.02 20:25:14 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2005.11.02 19:41:50 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005.11.02 19:37:56 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005.08.02 17:35:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2005.08.02 17:35:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2005.08.02 17:35:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2005.08.02 17:35:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2005.08.02 17:35:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2005.08.02 17:35:00 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2005.08.02 17:35:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2005.08.02 17:35:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2005.08.02 17:35:00 | 000,393,216 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2005.08.02 17:35:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[1999.01.27 14:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997.06.13 08:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll

========== LOP Check ==========

[2010.03.10 15:31:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2011.06.15 21:34:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2005.12.02 22:30:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg7
[2009.11.24 19:49:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Canneverbe Limited
[2011.02.03 00:45:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2009.09.14 23:48:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Downloaded Installations
[2011.06.16 11:06:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Easybits GO
[2009.09.15 12:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2010.07.18 18:35:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\FileCure
[2009.01.30 00:53:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Fugazo
[2010.11.01 13:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2008.12.08 23:11:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LangSoft
[2008.12.08 15:43:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2010.11.07 11:28:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
[2009.01.30 18:26:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2005.11.03 09:53:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ulead Systems
[2010.12.15 18:38:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Virtualized Applications
[2010.10.29 09:24:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VirtualizedApplications
[2010.08.16 14:53:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WinZip
[2009.04.02 15:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2007.11.16 17:11:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\AVG7
[2008.12.09 21:41:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Canneverbe_Limited
[2008.12.19 23:22:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\CatmoonGames
[2008.12.08 16:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Datalayer
[2011.02.01 07:23:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\DNA
[2010.02.15 23:25:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\GetRightToGo
[2010.06.14 15:42:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\ICQ
[2008.12.08 23:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\LangSoft
[2008.12.09 18:00:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Nokia
[2008.12.04 18:55:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Opera
[2008.12.08 15:44:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\PC Suite
[2008.12.10 00:38:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Search Settings
[2011.01.31 22:44:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Spyware Terminator
[2009.01.04 17:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\streamripper
[2009.12.01 01:25:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\Uniblue
[2010.08.16 20:36:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\uTorrent
[2005.12.02 22:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG7
[2009.01.07 01:12:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Spyware Terminator
[2008.09.11 04:47:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\AVG7
[2010.10.13 20:51:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\avidemux
[2011.05.15 22:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\BitTorrent
[2008.12.09 23:36:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Canneverbe_Limited
[2005.12.06 21:25:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\CD-LabelPrint
[2011.02.03 23:37:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\DAEMON Tools
[2011.02.03 00:52:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\DAEMON Tools Lite
[2011.06.16 10:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\go
[2010.11.06 10:36:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\ICQ
[2005.12.20 19:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\MobileAction
[2011.01.25 21:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\OpenCandy
[2008.12.06 12:53:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Opera
[2008.12.09 09:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\PC Suite
[2008.12.20 22:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Search Settings
[2011.02.14 20:12:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\SoftGrid Client
[2011.02.02 01:00:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Spyware Terminator
[2009.04.26 22:06:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\streamripper
[2011.01.25 21:37:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Toolbar4
[2011.02.14 21:56:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\TP
[2011.06.16 11:14:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\uTorrent
[2011.06.16 11:07:09 | 000,000,472 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{A1A97911-778F-443D-8245-2B21FAB18BE9}.job

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9857FAE3
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:F44D3C53
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8944C195
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2

< End of report >

#25 Příspěvek od **stell** » 16 Črv 2011 10:36

Ok, Citaj pozorne co pisem,

Spust Este raz OTL.
Dole do okna skopiruj,>>vloz tento zeleny text,co tu dam, ale bez textu Kód:
A klikni na tlacitko OPRAVIT
log po restarte vloz sem.

Kód: Vybrat vše

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch3/{B8BC3D40-4FE1-456D-B909-3E194765D838}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startskins.com/startpage/8070319454/
IE - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\URLSearchHook: - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.4.0024
[2010.10.20 19:04:01 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - No CLSID value found.
O3 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O4 - Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\auto-bit.lnk = File not found
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp files -> C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\*.tmp -> ]
[2010.03.10 15:31:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2011.06.15 21:34:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2005.12.02 22:30:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg7
[2009.09.15 12:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2007.11.16 17:11:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kubator\Data aplikací\AVG7
[2005.12.02 22:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG7
[2008.09.11 04:47:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\AVG7
[2008.12.20 22:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Search Settings
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9857FAE3
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:F44D3C53
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8944C195
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2
:Services
NMIndexingService
:Files 
ipconfig /flushdns /c 
:Commands 
[purity] 
[resethosts] 
[CreateRestorePoint] 
[emptytemp] 
[emptyflash] 
[startexplorer]
[Reboot]

milwocii · #26 Příspěvek od **milwocii** » 16 Črv 2011 11:13

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-21-3427850019-3997369180-2527231859-1006\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: DTToolbar@toolbarnet.com:1.1.4.0024 removed from extensions.enabledItems
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\skin folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\zh-TW folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\zh-CN folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\vi folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\uk folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\sv-SE folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\ru-RU folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\pt-BR folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\pl-PL folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\nl-NL folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\ko-KR folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\ja folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\it-IT folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\hu-HU folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\he-IL folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\fr folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\et-EE folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\es-ES folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\es-AR folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\en-US folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\en-GB folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\de-DE folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\da-DK folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale\cs folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\locale folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\idl folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\defaults folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\content folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\components folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\zspuvoli.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ not found.
Registry value HKEY_USERS\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_USERS\S-1-5-21-3427850019-3997369180-2527231859-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\auto-bit.lnk moved successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
C:\WINDOWS\System32\PerfStringBackup.TMP deleted successfully.
C:\WINDOWS\System32\SET43F6.tmp deleted successfully.
C:\WINDOWS\System32\SET43FB.tmp deleted successfully.
C:\WINDOWS\002621_.tmp deleted successfully.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\d3d9caps.tmp deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\sounds folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\report folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\moved folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\log folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\journal folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\integ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\HtmlData folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\fw folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\chest folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\backup folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\arpot\TEMP folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\arpot folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\AVAST Software folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\avg7\QUEUE\OUT folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\avg7\QUEUE\ACTIVE folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\avg7\QUEUE folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\avg7\Log folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\avg7 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus\SysInspector folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus\Stats folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus\Charon folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\ESET folder moved successfully.
C:\Documents and Settings\kubator\Data aplikací\AVG7 folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\AVG7 folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\AVG7 folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Search Settings\kb127\temp folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Search Settings\kb127\res folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Search Settings\kb127 folder moved successfully.
C:\Documents and Settings\Uživatel\Data aplikací\Search Settings folder moved successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:9857FAE3 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:F44D3C53 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:8944C195 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2 deleted successfully.
========== SERVICES/DRIVERS ==========
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
========== FILES ==========
< ipconfig /flushdns /c >
Konfigurace protokolu IP systému Windows
Mezipaměť překládání DNS byla úspěšně vyprázdněna.
C:\Documents and Settings\Uživatel\Dokumenty\Downloads\cmd.bat deleted successfully.
C:\Documents and Settings\Uživatel\Dokumenty\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point (0)

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 770182 bytes

User: kubator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 88493056 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 5986 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Uživatel
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 5970302 bytes
->FireFox cache emptied: 108522157 bytes
->Google Chrome cache emptied: 353833155 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 17781 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 655859 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 25837590 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 66011 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 557,00 mb

[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: kubator
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Uživatel
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

Error: Unable to interpret <[startexplorer]> in the current context!

OTL by OldTimer - Version 3.2.24.0 log created on 06162011_120728

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

milwocii · #27 Příspěvek od **milwocii** » 16 Črv 2011 11:14

poradis mi nějakej ten antivirak dobrej

#28 Příspěvek od **stell** » 16 Črv 2011 11:27

jasne,
Teraz spravis bod za bodom toto:
0:Pouzijes CCleaner
http://www.piriform.com/ccleaner/download/standard/
b)Všetky spustené programy,prehliadač zatvoríme.
c)Spustíme CCleaner,nastavenie necháme tak ako je. stlačte gombík Analyzovať a po analýze stlačte Gombík Spustiť Cleaner.
d)Kliknite na záložku Aplikácie a stlačte gombík Analyzovať a po analýze stlačte Gombík Spustiť Cleaner.
e)Kliknite na Register,stlačte Hľadaj problémy, po dokončení skenování kliknite na Opraviť vybrané problémy, zvoľte ANO pre vytvorenie zálohy, uložte súbor a kliknite na Opraviť všetky problémy.

1:Spust este raz T-CLEANER>mala by si mat na ploche,uz si pouzila na odstranenie combofixu.

2:Klik start>.klik>.spustit>do okna napis prikaz cmd
klik>>ok

3:Do cierneho okna napis alebo vloz tento prikaz chkdsk /f/r
stlac enter>.na informaciu>> ze zvazok pouziva iny proces......stlac Y_Ano>>enter>>restartujes pocitac. a nechas tak aby chkdsk skontroloval pevny disk.

4:Defragmentujme pevný disk:
doporučujem program defraggrer.
http://www.piriform.com/defraggler

5:Nainstaluj FREE AVIRU
http://www.avira.com/en/avira-free-antivirus

6: nainstaluj Firewall PCTOOLS
http://www.viry.cz/forum/viewtopic.php? ... 36#p868836

Ak to vsetko budes mat napis ako sa chova pc.

milwocii · #29 Příspěvek od **milwocii** » 16 Črv 2011 13:41

CCleaner jsem použila, ale T-CLEANER a příkaz "cmd, ani chkdsk/f/r" nejde ...

#30 Příspěvek od **stell** » 16 Črv 2011 14:21

Restartni pocitac.

Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe
-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir

klikni na start>>klikni na spustit
do okna nepis prikaz cmd
ale
do okna napises cmd
kliknes na ok.

a pokracujes tak ako som napisal.

VIRY.CZ

Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa

Re: Pomale PC, Sekani zvuku a videa