VIRY.CZ

Logfile of random's system information tool 1.06 (written by random/random)
Run by JAJA at 2010-03-30 21:01:32
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 4 GB (28%) free of 14 GB
Total RAM: 1023 MB (37% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl - C:\Program Files\FlashGet\jccatch.dll [2007-06-29 94308]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-03-25 1598744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class - C:\Program Files\FlashGet\getflash.dll [2007-05-16 163840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"=C:\WINDOWS\CTHELPER.EXE [2006-08-11 17920]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2006-08-11 18944]
"PestPatrol Control Center"=C:\PROGRA~1\PESTPA~1\PPControl.exe [2004-11-15 98304]
"PPMemCheck"=C:\PROGRA~1\PESTPA~1\PPMemCheck.exe [2004-04-02 148480]
"CookiePatrol"=C:\PROGRA~1\PESTPA~1\CookiePatrol.exe [2005-01-10 73728]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"pdfFactory Pro Dispatcher v3"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe [2009-03-24 606208]
"Kleptomania"= []
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-03-25 2059544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Kleptomania"=C:\PROGRA~1\KLEPTO~1\k-mania.exe [2007-04-13 294912]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OEXPRESS]
C:\WINDOWS\OETRN.EXE [2007-12-26 26624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OSSelectorReinstall]
C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe [2007-03-15 2225208]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
KYESCAN.lnk - C:\PROGRA~1\ScannerU\KYESCAN.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-05-12 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-03-25 12464]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Elcomsoft\Distributed Password Recovery\esdprs.exe"="C:\Program Files\Elcomsoft\Distributed Password Recovery\esdprs.exe:*:Enabled:ElcomSoft Distributed Password Recovery Server"
"C:\Program Files\Elcomsoft\Distributed Password Recovery\esdpr.exe"="C:\Program Files\Elcomsoft\Distributed Password Recovery\esdpr.exe:*:Enabled:ElcomSoft Distributed Password Recovery Console"
"C:\Program Files\Elcomsoft\Distributed Password Recovery\esda.exe"="C:\Program Files\Elcomsoft\Distributed Password Recovery\esda.exe:*:Enabled:ElcomSoft Distributed Agent"

======File associations======

.scr - open - "C:\WINDOWS\system32\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-03-28 18:13:24 ----SHD---- C:\FOUND.001
2010-03-25 23:17:52 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-03-25 23:03:27 ----D---- C:\Documents and Settings\JAJA\Data aplikací\AVG9
2010-03-25 18:48:51 ----D---- C:\Program Files\trend micro
2010-03-25 18:48:49 ----D---- C:\rsit
2010-03-25 17:13:56 ----D---- C:\~ErdUserProfile.$$$
2010-03-24 15:54:37 ----A---- C:\WINDOWS\ntbtlog.txt
2010-03-24 15:52:44 ----A---- C:\WINDOWS\{00000002-00000000-0000000C-00001102-00000004-20021102}.BAK
2010-03-23 00:24:55 ----RASH---- C:\WINDOWS\winstart.bat
2010-03-23 00:23:51 ----D---- C:\Program Files\UnHackMe
2010-03-23 00:12:08 ----A---- C:\RootRepeal report 03-23-10 (00-12-08).txt
2010-03-22 18:19:01 ----D---- C:\_Virtualní mechanika
2010-03-22 06:33:02 ----SHD---- C:\Recycled
2010-03-21 17:26:52 ----HD---- C:\$AVG
2010-03-21 17:00:34 ----A---- C:\WINDOWS\system32\avgfwdx.dll
2010-03-21 17:00:33 ----D---- C:\Program Files\AVG
2010-03-21 17:00:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-03-21 15:50:58 ----A---- C:\ComboFix.txt
2010-03-21 10:56:32 ----A---- C:\ComboFix2.txt
2010-03-21 10:37:08 ----D---- C:\WINDOWS\temp
2010-03-21 10:16:24 ----D---- C:\Qoobox
2010-03-20 19:24:40 ----D---- C:\AVGTemp
2010-03-19 06:28:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-17 22:53:50 ----D---- C:\FOUND.000
2010-03-16 21:51:07 ----A---- C:\ComboFix1.txt
2010-03-16 21:28:14 ----A---- C:\WINDOWS\zip.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\SWSC.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\SWREG.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\sed.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\PEV.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\NIRCMD.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\MBR.exe
2010-03-16 21:28:14 ----A---- C:\WINDOWS\grep.exe
2010-03-16 21:27:36 ----D---- C:\WINDOWS\ERDNT
2010-03-16 18:19:54 ----A---- C:\WINDOWS\system32\wscsvc.dll
2010-03-06 14:01:57 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-03-01 18:20:01 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-01 18:19:55 ----N---- C:\WINDOWS\system32\imapi2fs.dll
2010-03-01 18:19:55 ----N---- C:\WINDOWS\system32\imapi2.dll

======List of files/folders modified in the last 1 months======

2010-03-30 20:02:28 ----A---- C:\WINDOWS\ODBC.INI
2010-03-30 20:02:08 ----A---- C:\WINDOWS\k-mania.Ini
2010-03-28 08:54:44 ----A---- C:\WINDOWS\wincmd.ini
2010-03-27 16:24:02 ----A---- C:\WINDOWS\NeroDigital.ini
2010-03-22 23:57:34 ----A---- C:\WINDOWS\MAILTRAN.INI
2010-03-21 15:45:38 ----A---- C:\WINDOWS\system.ini
2010-03-21 10:09:22 ----A---- C:\WINDOWS\TRNCOM.INI
2010-03-09 22:34:26 ----A---- C:\WINDOWS\slt.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-03-25 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-03-25 29512]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-03-25 242696]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 FileDisk;FileDisk; C:\WINDOWS\system32\drivers\FileDisk.sys [2005-10-16 12928]
R1 hwinterface;hwinterface; C:\WINDOWS\System32\Drivers\hwinterface.sys [2010-02-02 3026]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 SandBox;Outpost Firewall Sandbox Driver; \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\Sandbox.SYS []
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 VFILT;Outpost Firewall Kernel Driver; \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\FILTNT.SYS []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2009-10-14 44704]
R3 ADBLOCK.DLL;Outpost Firewall PlugIn (ADBLOCK.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\ADBLOCK.DLL []
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2007-11-30 97216]
R3 ARP.DLL;Outpost Firewall PlugIn (ARP.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\ARP.DLL []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-03-21 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys []
R3 AVGIDSFilterxpx;AVG9IDSFilter; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys []
R3 AVGIDSShimxpx;AVG9IDSShim; \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys []
R3 CONTENT.DLL;Outpost Firewall PlugIn (CONTENT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\CONTENT.DLL []
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2006-08-11 502272]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2006-08-11 499584]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2006-08-11 7168]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2006-08-11 143872]
R3 DNSCACHE.DLL;Outpost Firewall PlugIn (DNSCACHE.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\DNSCACHE.DLL []
R3 EL2000;3Com 3C2000x EtherLink XL Adapter; C:\WINDOWS\system32\DRIVERS\EL2K_XP.sys [2003-06-03 147328]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2006-12-26 34760]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2007-02-16 11984]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2006-08-11 78336]
R3 FTPFILT.DLL;Outpost Firewall PlugIn (FTPFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\FTPFILT.DLL []
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2006-08-11 766976]
R3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\system32\drivers\hap16v2k.sys [2006-08-11 154112]
R3 HTMLFILT.DLL;Outpost Firewall PlugIn (HTMLFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\HTMLFILT.DLL []
R3 HTTPFILT.DLL;Outpost Firewall PlugIn (HTTPFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\HTTPFILT.DLL []
R3 IMAPFILT.DLL;Outpost Firewall PlugIn (IMAPFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\IMAPFILT.DLL []
R3 MAILFILT.DLL;Outpost Firewall PlugIn (MAILFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\MAILFILT.DLL []
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 NNTPFILT.DLL;Outpost Firewall PlugIn (NNTPFILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\NNTPFILT.DLL []
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2006-08-11 116224]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2007-12-19 47360]
R3 POP3FILT.DLL;Outpost Firewall PlugIn (POP3FILT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\POP3FILT.DLL []
R3 PROTECT.DLL;Outpost Firewall PlugIn (PROTECT.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\PROTECT.DLL []
R3 SECRET.DLL;Outpost Firewall PlugIn (SECRET.DLL); \??\C:\Program Files\Agnitum\Outpost Firewall\kernel\SECRET.DLL []
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S2 TinaKey;TinaKey; C:\WINDOWS\system32\drivers\TinaKey.sys []
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-03-21 30104]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-11-10 340704]
S3 DarkSpy;DarkSpy; \??\C:\WINDOWS\system32\DarkSpyKernel.sys []
S3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2006-08-11 180224]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 Maplom;Maplom; C:\WINDOWS\system32\drivers\Maplom.sys [2007-11-13 34304]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023k.sys [2002-08-12 11136]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-17 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-03-25 916760]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-03-25 308064]
R2 avgfws9;AVG Firewall; C:\Program Files\AVG\AVG9\avgfws9.exe [2010-03-25 2325816]
R2 AVGIDSAgent;AVG9IDSAgent; C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-03-25 5888008]
R2 OutpostFirewall;Outpost Firewall Service; C:\Program Files\Agnitum\Outpost Firewall\outpost.exe [2007-04-05 94720]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-02-08 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2007-08-13 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 AcrSch2Svc;Acronis Služba Plánovač2; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2009-05-19 619224]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
S4 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------

Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

• Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
• Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

Doinstalujte SP3 http://www.viry.cz/forum/viewtopic.php?f=46&t=86100

Tak provedeno, tedy mimo SP3, to zítra. Ještě se zeptám pro příště, jak správně deaktivovat AVG, stačí vypnout rezidentní štít? Agnitum Outpost Firewall se správně deaktivuje jak? Myšleno před spuštěním ComboFixu.

OK Ano, stačí vypnou štít. Přiznám se, že u firewallu nevím.

Ještě poslední otázku, neustále se mi objevuje virtuální mechanika CD, již nevím s jakým programem se nainstalovala. Už jsem zkoušel vše možné jak to dostat pryč, ale nedaří se. Nedá se to odstřelit někde v registrech.

Odinstalujte všechny emulátory virtuálních mechanik (Alcohol 120%. DAEMON Tools).

Stáhněte SPTD http://www.duplexsecure.com/en/downloads

• Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
• zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe

• Klikněte na "Disable" a restartujte PC.

To jsem již jednou tady dělal, ale udělal jsem to dnes znovu. Mechanika je pořád vidět. Podle návodu na netu jsem dokonce nainstaloval DEAMON a odinstaloval, ale nepomohlo to.

Vložte sem log info.txt (RSIT).

info.txt logfile of random's system information tool 1.06 2010-03-31 21:40:25

======Uninstall list======

-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.57-->"C:\Program Files\7-Zip\Uninstall.exe"
ABBYY FineReader 9.0 Professional Edition-->MsiExec.exe /I{F9000000-0001-0000-0000-074957833700}
ACDSee 10 Photo Manager-->MsiExec.exe /I{F8B98EB6-FC06-45BF-87D4-9784E0408611}
ACPIScope-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\APSoft\ACPIScope\Uninst.isu"
Acronis Disk Director Suite-->MsiExec.exe /X{2300EE96-0A41-4FAB-BD03-989EC44577A0}
Acronis True Image Home-->MsiExec.exe /X{D1E0E859-F46D-4708-A41D-ED90C0C1822A}
Active@ Partition Recovery-->"C:\Program Files\InstallShield Installation Information\{B705AA09-2E48-4095-904C-F6CE8B97DEF6}\setup.exe" -runfromtemp -l0x0009 -removeonly
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}
Adobe Color JA Extra Settings-->MsiExec.exe /I{D92B72E2-C854-4738-8ED6-4C3661CC17AE}
Adobe Color NA Extra Settings-->MsiExec.exe /I{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\4977c84bcdc298c444ccfbdcccb660d\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{5178C1BB-1EB1-4468-894B-7DE964DDCAA2}
Adobe Setup-->MsiExec.exe /I{0901FCE8-5415-4499-BBC8-1AA106DD66E2}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Advanced Office Password Recovery (remove only)-->C:\Program Files\Elcomsoft\AOPR\uninstall.exe
AeroFly Professional Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}\setup.exe" -l0x9
Agnitum Outpost Firewall Pro-->C:\Program Files\Agnitum\Outpost Firewall\uninst.exe
AnyDVD-->"C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
Ap PDF Split/Merge-->"C:\Program Files\AdultPDF\Ap PDF Split-Merge\unins000.exe"
ArCon 9 Profesionál-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{26E20136-E332-4BC6-903F-ADDCAEE53263}
ArCon PDF-Export-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\bgssetup.exe -uninstall -printer="ArCon PDF-Export" -port="PDFPORT1:"
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}
AutoCAD Architecture 2008 - Český-->E:\AutoCAD Architecture 2008\Setup\Setup.exe /P {5783F2D7-6004-0405-0002-0060B0CE6BBA} /M ACAD
Autodesk DWF Viewer 7-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
AVG 9.0-->C:\Program Files\AVG\AVG9\setup.exe /UNINSTALL
Bentley Architecture US Ncs Dataset V8 XM Edition (V 08.09.03.15) - 1-->"C:\Program Files\InstallShield Installation Information\GUID.exe" -uninstall -guid"{23198B53-3B87-472F-A79F-3164E3A05E4B}_0"
Bentley Architecture V8 XM Edition (V 08.09.03.37) - 1-->"C:\Program Files\InstallShield Installation Information\GUID.exe" -uninstall -guid"{861195D7-17D5-4970-ABEE-0358C0BF3390}_0"
Bentley MicroStation (V 08.05.00.64) - 1-->"C:\Program Files\InstallShield Installation Information\GUID.exe" -uninstall -guid"{D9496760-FEA9-4477-ADDE-43C025E6556B}_0"
Bentley MicroStation V8 XM Edition 08.09.03.65-->MsiExec.exe /I{6C902450-3EEB-4A9D-9B34-A42248B8C30F}
Bentley TriForma V8 XM Edition (V 08.09.03.50) - 1-->"C:\Program Files\InstallShield Installation Information\GUID.exe" -uninstall -guid"{1F50B7B0-7F50-4D57-B169-BA30EBD0F556}_0"
BS.Player FREE powered by AdVantage-->"C:\Program Files\BSplayer\uninstall.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Citrix Presentation Server Client-->MsiExec.exe /I{B2AE44CB-2AAB-4C08-A54B-D264BD604DA8}
CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
CloneDVDmobile-->"C:\Program Files\SlySoft\CloneDVDmobile\CloneDVDmobile-uninst.exe" /D="C:\Program Files\SlySoft\CloneDVDmobile"
Combined Community Codec Pack 2007-07-22-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
ConvertXtoDVD 2.2.3.258-->"C:\Program Files\VSO\ConvertXtoDVD\unins000.exe"
ConvertXtoDVD 3.3.4.107-->"C:\Program Files\VSO\ConvertX\3_\unins000.exe"
Cool Edit Pro 2.1-->C:\Program Files\coolpro2\cep2unin.exe
DiskExplorer for FAT-->"C:\Program Files\Runtime Software\DiskExplorer\Uninstall.exe" "C:\Program Files\Runtime Software\DiskExplorer\install.log" -u
Dll knihovna Haspvb32-->C:\WINDOWS\system32\SXUNINST.EXE
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVDFab 6.0.2.2 by TEAM AHCU(June 26, 2009)-->"C:\Program Files\DVDFab 6\unins000.exe"
File Scavenger 3.2 (English)-->"C:\Program Files\File Scavenger 3.2\unins000.exe"
FinePrint-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpinst6.exe /uninstall
FlashGet 1.9.0.1012-->C:\Program Files\FlashGet\uninst.exe
FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
FMS-->C:\Program Files\FMS\Uninstall.exe
Foxit PDF Editor-->C:\Program Files\Foxit Software\PDF Editor\uninstall.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Game-Cloner V1.15.1.1-->"C:\Program Files\Game-Cloner\unins000.exe"
Genius Scanner-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CCEB2144-5F5D-49E8-AADC-05CA48AE9AA5}\setup.exe"
Hard Disk Low Level Format Tool 2.36 build 1181-->"C:\Program Files\HDDGURU LLF Tool\unins000.exe"
Hex Workshop v6-->MsiExec.exe /X{48FE73F3-4C3A-4871-BCD0-A7726A08BD64}
HyperSnap 6-->C:\Program Files\HyperSnap 6\HprUnInst.exe
ICC Profile Inspector 2.4.0-->"C:\Program Files\ICC Profile Inspector\unins000.exe"
Image To PDF v3.3.0-->"C:\Program Files\AdultPDF\Image To PDF\unins000.exe"
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
Kleptomania 2.6-->C:\Program Files\Kleptomania\k-mania.exe /u
mb Software ArCon 6 Czech-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{528270B1-D447-4818-AA2B-06326A6B5985}\Setup.exe"
Microsoft .NET Framework 2.0 Language Pack - CSY-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110405-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero 7 Premium-->MsiExec.exe /I{4908C75E-E5E2-43F7-B1DF-023CBA831029}
PC Translator-->C:\WINDOWS\UN32.EXE -UP
PDF Settings-->MsiExec.exe /I{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}
pdfFactory Pro-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppinst3.exe /uninstall
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
ProfiCAD-->"C:\Program Files\ProfiCAD\unins000.exe"
QT Lite 2.2.0-->"C:\Program Files\QT Lite\unins000.exe"
Restorator 2007 3.70.1747-->"C:\Program Files\Restorator 2007\unins001.exe"
Restorator 2007 Update 1-->"C:\Program Files\Restorator 2007\UninsHs.exe" /u=Restorator2007
Sada Compatibility Pack pro systém Office 2007-->MsiExec.exe /X{90120000-0020-0405-0000-0000000FF1CE}
SetEditFDU (remove only)-->"C:\Program Files\SetEditFDU\uninstall.exe"
SetEditFDU-HD (remove only)-->"C:\Program Files\SetEditFDU-HD\uninstall.exe"
Softarová utilita ATI - Odinstalovat-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
Spell Checker (Czech)-->MsiExec.exe /X{DED7B9D4-F754-4C58-9341-98E9ED625A24}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy v1.6\unins000.exe"
Subtitles modifier 2.91-->"C:\Program Files\Subtitles modifier\unins000.exe"
Syncrosoft's License Control-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
TC PowerPack 1.7-->C:\Program Files\TC PowerPack\uninstall.exe
Teleport Pro-->C:\Program Files\Teleport Pro\Uninstall.exe
Tina Pro for Windows-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\DesignSoft\Tina Pro\uninst.isu"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
UltraISO Premium V9.35-->"C:\Program Files\UltraISO\unins000.exe"
Undelete Plus 2.94-->"C:\Program Files\UndeletePlus\unins000.exe"
UnderCoverXP 1.20-->"C:\Program Files\UnderCoverXP\unins000.exe"
URL Helper-->"C:\Program Files\StreamingStar\URLHelper\unins000.exe"
VueScan-->C:\VueScan\vuescan.exe /remove
WinDjView 1.0.1-->C:\Program Files\WinDjView\uninstall.exe
Windows 7 USB/DVD Download Tool-->MsiExec.exe /X{CCF298AF-9CE1-4B26-B251-486E98A34789}
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
WinXP Manager-->MsiExec.exe /I{784CFD4D-1BA5-4DB5-9377-84DAF0D19EF1}
WM Converter 2.0-->C:\Program Files\WM Converter\Uninstal.exe
XnView 1.96-->"C:\Program Files\XnView\XnView\unins000.exe"
ZyXEL USB ADSL Modem/Router -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5BE3BF62-D432-4D47-A712-CD4DF91CABFB}\Setup.exe" -l0x9

======Security center information======

AV: AVG Internet Security
FW: Outpost Firewall Pro
FW: AVG Firewall

======System event log======

Computer Name: DOMA-DOMA
Event Code: 7036
Message: Stav služby Služba modelu COM pro zápis na disk CD (IMAPI) byl změněn na: Spuštěno

Record Number: 26790
Source Name: Service Control Manager
Time Written: 20100226173721.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 7036
Message: Stav služby Sledování umístění v síti (NLA) byl změněn na: Spuštěno

Record Number: 26789
Source Name: Service Control Manager
Time Written: 20100226173721.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Sledování umístění v síti (NLA) úspěšně odeslán.

Record Number: 26788
Source Name: Service Control Manager
Time Written: 20100226173721.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: DOMA-DOMA
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Služba modelu COM pro zápis na disk CD (IMAPI) úspěšně odeslán.

Record Number: 26787
Source Name: Service Control Manager
Time Written: 20100226173721.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: DOMA-DOMA
Event Code: 7023
Message: Služba wscsvc byla ukončena s následující chybou:
Uvedený modul nebyl nalezen.


Record Number: 26786
Source Name: Service Control Manager
Time Written: 20100226173721.000000+060
Event Type: Chyba
User:

=====Application event log=====

Computer Name: DOMA-DOMA
Event Code: 100
Message: wuauclt (776) Databázový stroj 5.01.2600.2180 byl spuštěn.

Record Number: 6521
Source Name: ESENT
Time Written: 20091121093318.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 105
Message: The service was started.

Record Number: 6520
Source Name: ATI Smart
Time Written: 20091121093208.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 101
Message: wuauclt (3864) Databázový stroj byl zastaven.

Record Number: 6519
Source Name: ESENT
Time Written: 20091121092736.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 103
Message: wuaueng.dll (3864) SUS20ClientDataStore: Databázový stroj zastavil instanci (0).

Record Number: 6518
Source Name: ESENT
Time Written: 20091121092736.000000+060
Event Type: Informace
User:

Computer Name: DOMA-DOMA
Event Code: 102
Message: wuaueng.dll (3864) SUS20ClientDataStore: Databázový stroj spustil novou instanci (0).

Record Number: 6517
Source Name: ESENT
Time Written: 20091121092235.000000+060
Event Type: Informace
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Devmgr_show_nonpresent_devices"=1
"FP_NO_HOST_CHECK"=NO
"NUMBER_OF_PROCESSORS"=2
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\IsoBuster;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Common Files\Acronis\SnapAPI
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_LEVEL"=15
"PROCESSOR_REVISION"=0209
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"windir"=%SystemRoot%

-----------------EOF-----------------

Zkuste odinstalovat:

CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
CloneDVDmobile-->"C:\Program Files\SlySoft\CloneDVDmobile\CloneDVDmobile-uninst.exe" /D="C:\Program Files\SlySoft\CloneDVDmobile"

Odinstalováno, PC jsem restartovál, virtualní mechanika je tam pořád, co dál?

Zkuste odinstalovat všechny programy, co by s tím mohly mít něco společného (vypalovací software).

Tak to byl UltraISO. Děkuji za všechno a končím.

Nemáte zač