Vyskakující reklamy

[cernohous13]

Vyzval jsem tě k odinstalování cracklého Esetu

viz naše pravidla http://forum.viry.cz/viewtopic.php?f=12&t=115512
co s tím uděláme

[tuffgong]

Ten jsem odinstaloval a nainstaloval jsem trial verzi.

[cernohous13]

Což je porušení licenčních podmínek - jednou a dost, nebo ho budeš kupovat?

[tuffgong]

No kupovat ho nemám v plánu, ale chtěl jsem si sehnat dočasně antivir, než bych sehnal nějaký co se dá stáhnout zadara.

[cernohous13]

Odinstaluj Eset a smaž ty cracky

Řešení zde http://www.avast.com/cs-cz/index#upgrade
ten Základní - je free a přesto velmi dobrý

pak mi dej nový RSIT

[tuffgong]

Eset odinstalován, ale cracky nemůžu žádné najít.

Logfile of random's system information tool 1.09 (written by random/random)
Run by uzivatel at 2014-03-22 13:30:54
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 31 GB (13%) free of 238 GB
Total RAM: 3070 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:31:05, on 22.3.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPWDNT.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPSP.EXE
C:\Program Files\Dell Printers\Additional Color Laser Software\Updater\DLUPDR.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\avastUi.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\uzivatel\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\uzivatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [Nvtmru] "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DLPSP] "C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPSP.EXE"
O4 - HKLM\..\Run: [DLUPDR] "C:\Program Files\Dell Printers\Additional Color Laser Software\Updater\DLUPDR.EXE"
O4 - HKLM\..\Run: [DLQLU] "C:\Program Files\Dell Printers\Additional Color Laser Software\Launcher\DLQLU.EXE" /S
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1614895754-1292428093-1417001333-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dell Printer Status Watcher (DLPWD) - Dell Inc. - C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPWDNT.EXE
O23 - Service: Dell Printer Status Database (DLSDB) - Dell Inc. - C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

--
End of file - 7222 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\rs20enka.default

prefs.js - "browser.startup.homepage" - "http://szn.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@t.garena.com/garenatalk]
"Description"=Garena Talk Plugin
"Path"=C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\rs20enka.default\extensions\
39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com
9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-11-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-03-22 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-11-10 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2013-09-12 15693600]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-09-12 2586912]
"Nvtmru"=C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"DLPSP"=C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPSP.EXE [2010-06-01 886152]
"DLUPDR"=C:\Program Files\Dell Printers\Additional Color Laser Software\Updater\DLUPDR.EXE [2010-06-01 566680]
"DLQLU"=C:\Program Files\Dell Printers\Additional Color Laser Software\Launcher\DLQLU.EXE [2010-06-01 1127744]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-03-22 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2013-11-06 4287536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
C:\WINDOWS\ALCWZRD.EXE [2006-05-04 2808832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2006-05-18 16207872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2006-05-04 86016]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:rundll32"
"C:\Program Files\Garena Plus\Room\garena_room.exe"="C:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:garena_room"
"C:\Documents and Settings\uzivatel\Plocha\Wow Cata\US World of Warcraft\Launcher.patch.exe"="C:\Documents and Settings\uzivatel\Plocha\Wow Cata\US World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\AVG\AVG2014\avgmfapx.exe"="C:\Program Files\AVG\AVG2014\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\utorrent.exe"="C:\Program Files\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\uzivatel\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"vidc.ffds"=ff_vfw.dll
"vidc.xvid"=xvidvfw.dll
"vidc.lags"=lagarith.dll
"msacm.ac3filter"=ac3filter.acm
"msacm.divxa32"=DivXa32.acm
"msacm.lameacm"=LameACM.acm
"VIDC.FPS1"=frapsvid.dll

======List of files/folders created in the last 1 month======

2014-03-22 12:44:58 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\DropboxMaster
2014-03-22 12:44:46 ----D---- C:\Program Files\Dropbox
2014-03-22 12:42:52 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Dropbox
2014-03-22 12:42:39 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\AVAST Software
2014-03-22 12:38:15 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2014-03-22 12:38:14 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-03-22 12:38:14 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-03-22 12:38:14 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-03-22 12:38:14 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-03-22 12:38:13 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2014-03-22 12:38:13 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-03-22 12:38:11 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-03-22 12:38:08 ----A---- C:\WINDOWS\avastSS.scr
2014-03-22 12:32:51 ----D---- C:\Program Files\AVAST Software
2014-03-22 12:32:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-03-22 12:24:15 ----D---- C:\WINDOWS\LastGood
2014-03-20 23:35:30 ----SHD---- C:\RECYCLER
2014-03-20 22:38:55 ----D---- C:\WINDOWS\Temp
2014-03-20 22:38:55 ----A---- C:\WINDOWS\zoek-delete.exe
2014-03-20 22:30:49 ----D---- C:\zoek_backup
2014-03-18 15:35:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2014-03-17 18:08:24 ----D---- C:\AdwCleaner
2014-03-17 18:01:29 ----D---- C:\WINDOWS\ERUNT
2014-03-17 17:55:42 ----A---- C:\WINDOWS\ntbtlog.txt
2014-03-16 22:58:53 ----D---- C:\Program Files\trend micro
2014-03-16 22:58:51 ----D---- C:\rsit
2014-03-16 16:51:54 ----D---- C:\WINDOWS\system32\XPSViewer
2014-03-16 16:51:50 ----D---- C:\Program Files\MSBuild
2014-03-16 16:51:41 ----D---- C:\Program Files\Reference Assemblies
2014-03-16 16:51:10 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2014-03-16 16:51:10 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2014-03-16 16:51:10 ----N---- C:\WINDOWS\system32\prntvpt.dll
2014-03-16 16:51:10 ----D---- C:\0eb1dd17347ebd7101260164ffb837
2014-03-16 14:29:58 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Malwarebytes
2014-03-16 14:29:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-03-16 13:20:40 ----D---- C:\WINDOWS\SxsCaPendDel
2014-03-16 13:18:17 ----D---- C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP
2014-03-16 13:18:13 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2014-03-16 11:21:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2014-03-16 10:04:18 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-03-16 09:50:15 ----D---- C:\Program Files\Seznam.cz
2014-03-16 09:49:53 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\Seznam.cz
2014-03-14 09:51:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-14 09:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-03-10 14:13:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-09 03:43:29 ----N---- C:\WINDOWS\system32\xp_eos.exe

======List of files/folders modified in the last 1 month======

2014-03-22 13:31:05 ----D---- C:\WINDOWS\Prefetch
2014-03-22 13:16:32 ----SD---- C:\WINDOWS\Tasks
2014-03-22 13:16:32 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-22 12:44:46 ----RD---- C:\Program Files
2014-03-22 12:38:15 ----D---- C:\WINDOWS\system32\drivers
2014-03-22 12:38:11 ----D---- C:\WINDOWS\WinSxS
2014-03-22 12:38:11 ----D---- C:\WINDOWS\system32
2014-03-22 12:38:11 ----D---- C:\WINDOWS
2014-03-22 12:24:40 ----SHD---- C:\WINDOWS\Installer
2014-03-22 12:24:17 ----HD---- C:\WINDOWS\inf
2014-03-22 12:17:35 ----D---- C:\Program Files\Counter-Strike 1.6 Non-Steam
2014-03-22 12:17:13 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\.minecraft
2014-03-21 15:40:03 ----D---- C:\WINDOWS\system32\CatRoot2
2014-03-21 12:02:42 ----D---- C:\Documents and Settings\uzivatel\Data aplikací\vlc
2014-03-20 22:39:11 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-03-20 22:33:23 ----D---- C:\WINDOWS\system32\drivers\etc
2014-03-19 16:18:39 ----D---- C:\WINDOWS\Microsoft.NET
2014-03-19 16:18:01 ----RSD---- C:\WINDOWS\assembly
2014-03-18 19:08:06 ----D---- C:\WINDOWS\system32\MRT
2014-03-18 19:06:03 ----A---- C:\WINDOWS\system32\MRT.exe
2014-03-18 15:37:09 ----D---- C:\WINDOWS\system32\CatRoot
2014-03-18 15:35:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-03-17 17:56:03 ----D---- C:\Documents and Settings
2014-03-17 15:33:41 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-16 16:51:51 ----D---- C:\WINDOWS\system32\en-US
2014-03-16 16:51:47 ----RSD---- C:\WINDOWS\Fonts
2014-03-16 16:51:24 ----D---- C:\WINDOWS\system32\spool
2014-03-16 14:44:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2014-03-16 13:55:10 ----SD---- C:\Documents and Settings\uzivatel\Data aplikací\Microsoft
2014-03-16 13:20:27 ----D---- C:\Program Files\Common Files
2014-03-16 11:26:31 ----D---- C:\Program Files\FreeTime
2014-03-16 10:30:11 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-03-16 10:10:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-03-16 10:10:37 ----D---- C:\Program Files\Internet Explorer
2014-03-16 10:10:33 ----D---- C:\WINDOWS\pchealth
2014-03-16 09:13:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG2014
2014-03-16 09:13:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2014-03-14 09:52:31 ----A---- C:\WINDOWS\imsins.BAK
2014-03-14 09:51:43 ----D---- C:\WINDOWS\ie8updates
2014-03-06 15:16:14 ----D---- C:\WINDOWS\system32\cache
2014-02-26 20:14:38 ----D---- C:\Program Files\Google
2014-02-24 17:05:38 ----A---- C:\WINDOWS\system32\wininet.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\url.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\occache.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\mstime.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-02-24 12:35:36 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-02-24 12:35:35 ----A---- C:\WINDOWS\system32\corpol.dll
2014-02-24 11:54:22 ----A---- C:\WINDOWS\system32\ie4uinit.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-03-22 180760]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-03-22 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-03-22 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-03-22 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-03-22 57672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-03-22 67824]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-16 4275712]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-09-12 11059872]
R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2009-03-04 709248]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2011-12-08 327400]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R4 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys []
R4 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys []
R4 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys []
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-03-22 49944]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 RT73;RT73 USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2009-12-10 476544]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-03-22 50344]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 DLPWD;Dell Printer Status Watcher; C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPWDNT.EXE [2009-10-16 116016]
R2 DLSDB;Dell Printer Status Database; C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE [2010-06-01 226696]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-11-10 182696]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2013-09-12 156960]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-26 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-22 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-26 116648]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-17 118896]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[cernohous13]

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM

Kód: Vybrat vše

:Commands
[resethosts]
[emptytemp]
[emptyflash]
[emptyjava]
[clearallrestorepoints]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\Program Files\ESET Antivirus License Finder (MiNODLogin) 4.0.1.63
C:\Program Files\ESET
C:\Documents and Settings\All Users\Data aplikací\ESET
C:\Documents and Settings\All Users\Data aplikací\AVG2014
C:\Program Files\Pando Networks
C:\WINDOWS\zoek-delete.exe
C:\zoek_backup
C:\AdwCleaner

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"=-
"Adobe ARM"=-
"SunJavaUpdateSched"=-
"seznam-listicka-distribuce"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"=-
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"=-
"C:\Program Files\AVG\AVG2014\avgmfapx.exe"=-
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"=-

:Services
eamon
ehdrv
epfwtdir
JavaQuickStarterService
nvUpdatusService

[tuffgong]

All processes killed
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: uzivatel
->Temp folder emptied: 2355013 bytes
->Temporary Internet Files folder emptied: 403558 bytes
->FireFox cache emptied: 19491357 bytes
->Google Chrome cache emptied: 338453282 bytes
->Flash cache emptied: 17979998 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1461099 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 35174181 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 216179966 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 67 bytes
RecycleBin emptied: 1277145495 bytes

Total Files Cleaned = 1 820,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: UpdatusUser

User: uzivatel
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: UpdatusUser

User: uzivatel

Total Java Files Cleaned = 0,00 mb


Restore point Set: OTM Restore Point
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP14F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP150.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP180.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP19E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP22B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP24C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP73B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP80A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP941.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA9.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD2.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF4.tmp folder moved successfully.
C:\WINDOWS\Installer\MSID2.tmp moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
File/Folder C:\Program Files\ESET Antivirus License Finder (MiNODLogin) 4.0.1.63 not found.
File/Folder C:\Program Files\ESET not found.
File/Folder C:\Documents and Settings\All Users\Data aplikací\ESET not found.
C:\Documents and Settings\All Users\Data aplikací\AVG2014\$AVG\$VAULT folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\AVG2014\$AVG folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\AVG2014 folder moved successfully.
C:\Program Files\Pando Networks\Media Booster\Microsoft.VC90.CRT folder moved successfully.
C:\Program Files\Pando Networks\Media Booster folder moved successfully.
C:\Program Files\Pando Networks folder moved successfully.
C:\WINDOWS\zoek-delete.exe moved successfully.
C:\zoek_backup\C_DOCUME~1_uzivatel_NABDKA~1_Programy_SmartTweak Software folder moved successfully.
C:\zoek_backup\C_Documents and Settings_uzivatel_.android folder moved successfully.
C:\zoek_backup folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\LOCALS~1\Temp\apn folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\LOCALS~1\Temp folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\LOCALS~1 folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\rs20enka.default\searchplugins folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\rs20enka.default folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací\Mozilla folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel\Data aplikací folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\uzivatel folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AVG Secure Search\Logger folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací\AVG Secure Search folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Data aplikací folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users folder moved successfully.
C:\AdwCleaner\Quarantine\C\Documents and Settings folder moved successfully.
C:\AdwCleaner\Quarantine\C folder moved successfully.
C:\AdwCleaner\Quarantine folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles\rs20enka.default folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox\Profiles folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel\Data aplikací\Mozilla\Firefox folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel\Data aplikací\Mozilla folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel\Data aplikací folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings\uzivatel folder moved successfully.
C:\AdwCleaner\Backup\C\Documents and Settings folder moved successfully.
C:\AdwCleaner\Backup\C folder moved successfully.
C:\AdwCleaner\Backup folder moved successfully.
C:\AdwCleaner folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Nvtmru deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Program Files\Pando Networks\Media Booster\PMB.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Program Files\AVG\AVG2014\avgmfapx.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list\\C:\Program Files\Pando Networks\Media Booster\PMB.exe deleted successfully.
========== SERVICES/DRIVERS ==========
Error: Unable to stop service eamon!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eamon deleted successfully.
Error: Unable to stop service ehdrv!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehdrv deleted successfully.
Error: Unable to stop service epfwtdir!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\epfwtdir deleted successfully.
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service nvUpdatusService stopped successfully!
Service nvUpdatusService deleted successfully!

OTM by OldTimer - Version 3.1.21.0 log created on 03222014_164558

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[cernohous13]

Máš tam ještě MBAM (Malwarebytes)

proveď Aktualizaci a pak Kompletní kontrolu - log rád uvidím

[tuffgong]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2014.03.22.10

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
uzivatel :: MAJER-66D659C10 [administrátor]

Ochrana: Zakázána

22.3.2014 23:33:43
mbam-log-2014-03-22 (23-33-43).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 338499
Uplynulý čas: 53 minut, 51 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 21
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP100\A0049039.exe (PUP.Optional.Hao123.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP103\A0049434.exe (Riskware.KG) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP103\A0049444.exe (PUP.Optional.AppsHat.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP105\A0049477.exe (PUP.Optional.AppsHat.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP105\A0049478.dll (PUP.Optional.Crossrider) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP118\A0052592.exe (Riskware.KG) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP86\A0048765.exe (PUP.Optional.Maucampo.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP86\A0048769.exe (PUP.Optional.Sambreel.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP90\A0048887.exe (PUP.Optional.Somoto.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP91\A0048890.exe (PUP.Optional.Somoto) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049002.exe (PUP.Optional.Amonetize.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049006.exe (PUP.Optional.Somoto) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049023.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049024.dll (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049025.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049026.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049027.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049028.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049029.exe (PUP.Optional.HDTotal.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049032.exe (PUP.Optional.CrossRider.A) -> Přesun do karantény a smazání se zdařilo.
C:\System Volume Information\_restore{66ECB861-3D4E-4345-8527-0FD661C2D525}\RP99\A0049034.dll (PUP.Optional.AppsHat.A) -> Přesun do karantény a smazání se zdařilo.

(konec)

[cernohous13]

Máme ještě nějaký problém nebo budeme zametat?

[tuffgong]

No popravdě jsem si nevšiml žádné změny , kromě toho youtube

[tuffgong]

Jo a na tom YT jsem si ještě všiml, že když si pouštím video a chci se vrátit o stránku zpět, tak se ta stránka jen jakoby aktualizuje a nic víc. Vrátí se zpět jen když klikám hodněkrát za sebou ( na šipku zpět).
A tady na ukázku reklamy co mi vyskakují :
https://imageshack.com/i/n1olfcp
https://imageshack.com/i/jmbs3lp
https://imageshack.com/i/eufbbmp
Někdy když vyskočí ta reklama, tak se úplně sekne mozilla a musím vypnout přes správce úloh.

[cernohous13]

Mozilla Firefox -> Nápověda -> Restartovat se zakázanými doplňky...
jak se to chová v tomto režim?

v IE je problém stejný?

[tuffgong]

Zdá se, že v tom nouzovém režimu a IE se chová normálně.