VIRY.CZ

Spusť program C:\Program Files\trend micro\natalka.exe
klik "Do a system scan only"
dej fajfku do čtverečku před řádek:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://127.0.0.1:9881
"Fix checked" -> OK

restart a nový RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by natalka at 2014-02-27 15:35:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 340 GB (71%) free of 477 GB
Total RAM: 4076 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:35:21, on 27.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Users\natalka\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera_crashreporter.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
C:\Program Files\trend micro\natalka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - Startup: Dropbox.lnk = natalka\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8623 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
winlogon.exe
C:\Windows\system32\WLANExt.exe 28052496
\??\C:\Windows\system32\conhost.exe "-1246814332-1047409121699689137217679630-470699426-1173601385-59981948-2016859337
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {5803416F-14BB-4A00-B0EB-2945A4C499C2}
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Users\natalka\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000658
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
{0C2EAA15-0E1A-4331-8E36-5C0CF78F9FE9}
{9076AD5C-E877-47E0-8A25-182A8A165E9F}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --ran-launcher /crash-reporter-parent-id=4624
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --type=gpu-process --channel="4624.0.620029201\1316361705" --crash-reporter-pid=4636 --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,13,23,28 --gpu-vendor-id=0x10de --gpu-device-id=0x1050 --gpu-driver-vendor=NVIDIA --gpu-driver-version=8.17.12.6800 --crash-reporter-pid=4636 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --extension-process --disable-client-side-phishing-detection --crash-reporter-pid=4636 --channel="4624.2.1351490448\1261989919" /prefetch:673131151
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --crash-reporter-pid=4636 --channel="4624.4.1171317854\2024884589" /prefetch:673131151
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --crash-reporter-pid=4636 --channel="4624.5.1284403516\1063927288" /prefetch:673131151
"C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=cs --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --crash-reporter-pid=4636 --channel="4624.6.465544945\1188019211" /prefetch:673131151
"C:\Users\natalka\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-15 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-15 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-15 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-15 194128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2013-04-22 39408]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2014-02-25 689744]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2012-01-19 1106512]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-04-18 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-10-23 152392]

C:\Users\natalka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\natalka\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-02-27 14:22:43 ----A---- C:\Windows\ntbtlog.txt
2014-02-27 08:35:07 ----D---- C:\_OTM
2014-02-26 20:21:03 ----SHD---- C:\$RECYCLE.BIN
2014-02-26 20:21:00 ----A---- C:\ComboFix.txt
2014-02-26 20:13:05 ----A---- C:\Windows\zip.exe
2014-02-26 20:13:05 ----A---- C:\Windows\SWSC.exe
2014-02-26 20:13:05 ----A---- C:\Windows\SWREG.exe
2014-02-26 20:13:05 ----A---- C:\Windows\sed.exe
2014-02-26 20:13:05 ----A---- C:\Windows\PEV.exe
2014-02-26 20:13:05 ----A---- C:\Windows\NIRCMD.exe
2014-02-26 20:13:05 ----A---- C:\Windows\MBR.exe
2014-02-26 20:13:05 ----A---- C:\Windows\grep.exe
2014-02-26 03:02:06 ----D---- C:\Windows\Migration
2014-02-25 22:49:55 ----D---- C:\Qoobox
2014-02-25 22:49:39 ----D---- C:\Windows\erdnt
2014-02-25 06:29:59 ----D---- C:\Users\natalka\AppData\Roaming\Malwarebytes
2014-02-25 06:28:44 ----D---- C:\ProgramData\Malwarebytes
2014-02-24 21:32:12 ----D---- C:\AdwCleaner
2014-02-24 18:58:09 ----D---- C:\Program Files\trend micro
2014-02-24 18:58:07 ----D---- C:\rsit
2014-02-24 07:23:11 ----D---- C:\Users\natalka\AppData\Roaming\Opera Software
2014-02-14 08:00:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-14 08:00:26 ----A---- C:\Windows\system32\vbscript.dll
2014-02-14 07:59:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-14 07:59:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-14 07:59:30 ----A---- C:\Windows\system32\msrating.dll
2014-02-14 07:59:30 ----A---- C:\Windows\system32\ieui.dll
2014-02-14 07:59:29 ----A---- C:\Windows\system32\iernonce.dll
2014-02-14 07:59:29 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-14 07:59:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-14 07:59:28 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-14 07:59:28 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 07:59:27 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-14 07:59:27 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-14 07:59:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-14 07:59:27 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-14 07:59:27 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-14 07:59:26 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-14 07:59:26 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-14 07:59:26 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-14 07:59:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-14 07:59:26 ----A---- C:\Windows\system32\mshtml.dll
2014-02-14 07:59:26 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-14 07:59:26 ----A---- C:\Windows\system32\iesetup.dll
2014-02-14 07:59:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-14 07:59:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-14 07:59:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-14 07:59:25 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-14 07:59:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-14 07:59:25 ----A---- C:\Windows\system32\wininet.dll
2014-02-14 07:59:25 ----A---- C:\Windows\system32\urlmon.dll
2014-02-14 07:59:25 ----A---- C:\Windows\system32\iertutil.dll
2014-02-14 07:59:25 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-14 07:59:24 ----A---- C:\Windows\system32\ieframe.dll
2014-02-14 07:59:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-14 07:59:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-14 07:59:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-14 07:59:21 ----A---- C:\Windows\system32\jscript9.dll
2014-02-13 06:53:28 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-13 06:53:28 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-13 06:53:28 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-13 06:53:28 ----A---- C:\Windows\system32\msxml3.dll
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-13 06:53:03 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-13 06:53:03 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 06:53:03 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-13 06:53:03 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-13 06:53:03 ----A---- C:\Windows\system32\secproc.dll
2014-02-13 06:53:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 06:53:03 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 06:53:03 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-13 06:53:03 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-13 06:53:03 ----A---- C:\Windows\system32\msdrm.dll
2014-02-13 06:52:58 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-13 06:52:58 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-13 06:52:58 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-13 06:52:58 ----A---- C:\Windows\system32\d2d1.dll
2014-02-04 18:55:50 ----D---- C:\Users\natalka\AppData\Roaming\Mozilla
2014-02-04 18:51:09 ----A---- C:\Program Files\Pazera_Free_MP4_to_AVI_Converter.exe

======List of files/folders modified in the last 1 month======

2014-02-27 15:35:19 ----D---- C:\Windows\Temp
2014-02-27 15:33:09 ----D---- C:\Users\natalka\AppData\Roaming\Dropbox
2014-02-27 15:32:01 ----D---- C:\Windows\system32\config
2014-02-27 15:12:29 ----D---- C:\Windows\Prefetch
2014-02-27 14:38:52 ----RD---- C:\Program Files (x86)
2014-02-27 14:37:46 ----SHD---- C:\Windows\Installer
2014-02-27 14:37:16 ----SHD---- C:\System Volume Information
2014-02-27 14:30:03 ----D---- C:\Windows\system32\drivers\etc
2014-02-27 14:22:43 ----D---- C:\Windows
2014-02-27 08:00:45 ----D---- C:\Windows\system32\drivers
2014-02-26 20:19:40 ----A---- C:\Windows\system.ini
2014-02-26 20:16:50 ----D---- C:\Windows\SYSWOW64\drivers
2014-02-26 20:16:50 ----D---- C:\Windows\SysWOW64
2014-02-26 20:16:50 ----D---- C:\Windows\AppPatch
2014-02-26 20:16:50 ----D---- C:\Program Files (x86)\Common Files
2014-02-26 12:32:53 ----D---- C:\Windows\Microsoft.NET
2014-02-26 10:09:58 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-26 10:09:48 ----D---- C:\Windows\inf
2014-02-26 10:09:44 ----D---- C:\Windows\System32
2014-02-26 10:09:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-26 09:44:15 ----D---- C:\Program Files (x86)\DsNET Corp
2014-02-26 03:05:47 ----RSD---- C:\Windows\assembly
2014-02-26 03:02:25 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-26 03:02:25 ----D---- C:\Windows\system32\en-US
2014-02-26 03:02:06 ----SD---- C:\ProgramData\Microsoft
2014-02-25 23:53:38 ----SD---- C:\Users\natalka\AppData\Roaming\Microsoft
2014-02-25 10:30:58 ----RD---- C:\Program Files
2014-02-25 08:17:58 ----D---- C:\Users\natalka\AppData\Roaming\vlc
2014-02-25 06:28:44 ----D---- C:\ProgramData
2014-02-24 07:23:08 ----D---- C:\Program Files (x86)\Opera
2014-02-21 23:03:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-16 08:09:29 ----D---- C:\Windows\system32\MRT
2014-02-16 08:07:34 ----A---- C:\Windows\system32\MRT.exe
2014-02-14 19:53:27 ----D---- C:\Windows\rescache
2014-02-14 16:41:18 ----D---- C:\Windows\winsxs
2014-02-14 16:37:54 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-14 16:37:54 ----D---- C:\Windows\system32\cs-CZ
2014-02-14 16:37:53 ----D---- C:\Program Files\Internet Explorer
2014-02-14 16:37:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-14 08:05:45 ----D---- C:\Windows\system32\catroot
2014-02-14 07:59:59 ----D---- C:\Windows\system32\catroot2
2014-02-13 16:26:21 ----D---- C:\Users\natalka\AppData\Roaming\Skype
2014-02-06 23:54:16 ----D---- C:\Users\natalka\AppData\Roaming\Vso

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-12-18 131576]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-10-01 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-12-18 108440]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-07-16 2350952]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\DRIVERS\b57xdbd.sys [2010-12-11 67112]
R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\DRIVERS\b57xdmp.sys [2010-12-11 19496]
R3 bScsiMSa;bScsiMSa; C:\Windows\system32\DRIVERS\bScsiMSa.sys [2010-12-10 35368]
R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2010-12-11 85544]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-10-31 410152]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-04-19 174184]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-02-25 440400]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-02-25 440400]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-01-19 355920]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-31 993896]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-10-23 641352]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-22 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21 257928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-22 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-04-22 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-19 1255736]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

po restartu už to bylo v pořádku Jak to teda teď vypadá?

Tak ještě jeden script pro OTM a pak už po sobě uklidím

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: natalka
->Temp folder emptied: 1117550 bytes
->Temporary Internet Files folder emptied: 180132 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 492 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1802527 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 3,00 mb

========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Pirrit folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Mozilla\Firefox\Profiles\extensions folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Mozilla\Firefox\Profiles folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Mozilla\Firefox folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming\Mozilla folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData\Roaming folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka\AppData folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users\natalka folder moved successfully.
C:\AdwCleaner\Quarantine\C\Users folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pirrit\IEExtension folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Pirrit folder moved successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86) folder moved successfully.
C:\AdwCleaner\Quarantine\C folder moved successfully.
C:\AdwCleaner\Quarantine folder moved successfully.
C:\AdwCleaner folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\APSDaemon deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
========== SERVICES/DRIVERS ==========
Service catchme stopped successfully!
Service catchme deleted successfully!
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service Bonjour Service stopped successfully!
Service Bonjour Service deleted successfully!

OTM by OldTimer - Version 3.1.21.0 log created on 02272014_155340

A finále

ComboFix odinstalujeme
jdi Start -> Spustit... a zkopíruj ComboFix /Uninstall (pozor, za x je mezera) -> OK

Stáhni a spusť T-cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
- uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš

stáhni program OTC tady: http://oldtimer.geekstogo.com/OTC.exe - spusť ho -> "CleanUp" (smaže dříve použité čističe)

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.filehippo.com/download_ccleaner
Při instalaci vyhodit fajfku u nabízených toolbarů

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

Po vyčištění by se hodila defragmentace
doporučuji http://www.slunecnice.cz/sw/defraggler/ + čeština

Kdyby něco z návodu nefungovalo, pokračuj dalším krokem.

Tak ještě 2 dotazy
1. T-Cleaner se zapne, ale v úvodním okně nereaguje na potvrzení spuštění programu (spustit program klávesou A)
2. V CCleaneru, čištění registrů, hledání a čištění programů spuštěno už po několikáté, zpočátku každé odstranění zahrnovalo velké množství souborů, teď už ale asi po sedmé vyskakuje jen jediný problém: Nepoužívaná koncovka souborů :
{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79} HKCR\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}
ale bohužel ani opakované odstranění nepomohlo, program tento problém vždy znovu najde.

Tím se netrap a jestli ti zůstaly na ploše nějaké zbytky, tak je smaž

Máme ještě nějaký problém v chodu PC?

Tak přece jen, aby to bylo kompletní a pak už slibuju nebudu otravovat )
1. V průběhu těch kontrol se zřejmě změnilo nějaké bezpečnostní nastavení systému a ke každému spuštění programu (např.: Avira), systém hlásí: Chcete, aby následující program provedl změny ve Vašem počítači? Po spuštění program pracuje bez problémů, ale tohle je trochu rušivé.
2. Systém rovněž po vypnutí Aviry (a jejím následném opětovném zapnutí) ji neidentifikuje zřejmě jako antivir. V centru akcí se objevuje upozornění na to, že Windows nenašel v počítači antivirový program a nabízí možnost vyhledat jej online. K tomu se pojí můj další dotaz: Je Avira dostatečnou ochranou počítače?
Děkuji

Jinak ještě dotaz v diskuzi k defraggleru na slunečnici je poslední příspěvek, jež zmiňuje že v programu je vir. Je to možné nebo je to jen něčí strašení?

Avira je námi doporučovaný AV

zkus jeho reinstal za pomoci http://translate.google.cz/translate?hl ... annel%3Dsb

na jejich stránkách najdeš i aktuální verzi

Defraggler - na slunečnici mají zřejmě nežádaný bonus
zkus tady http://www.filehippo.com/download_defraggler

Tak na tu přeinstalaci Aviry se teprve chystám.
Každopádně bych chtěla moc poděkovat za pomoc (tobě i kolegovi), ta pomoc byla vážně perfektní a já se jen omlouvám za občasné zmatky, jak jsem psala jsem vážně naprostý laik a tohle je pro mě skutečně španělská vesnice . Tak ještě jednou moc děkuji a zítra pošlu nějaký příspěvěk a ať forum funguje takhle dobře dál. Díky moc, jste vážně skvělí!

Od chvíle kdy ses přestala bát ti to šlo skvěle

Za případnou podporu fóra děkujeme

Nemáš zač - rádo se stalo a jsme tady i příště

Tak se trochu omlouvám, že znovu aktivuji téma , ale přece jen bych raději radu, abych neudělala nějakou chybu.
Týká se to odinstalace Aviry. Jak jsem psala po vyřešení problému, systém nenachází Aviru jako funkční AV, ale zdálo se, že funguje normálně- real-time protection zdá se běží. Dnes jsem chtěla udělat sken systému, ale objevuje se zpráva o odepření přístupu. reinstall je tedy zřejmě nezbytný, ale nechtěla bych při něm udělat nějakou chybu. Po spuštění removal tool je třeba spustit sken? Jak pak postupovat dál, z návodu si úplně nejsem jistá, jestli se pak musí zadat pokyn k odstranění a nebo to nástroj udělá sám?(já vím možná zcela zbytečný dotaz, ale jelikož potřebuji aviru znovu nainstalovat, nerada bych aby zde zůstalo něco co by její opětovné instalaci bránilo)

V pohodě - měl by to být jejich originál odinstalátor, tak by tam žádné zbytky zůstat neměly (snad stačí na případné dotazy souhlasit - mimo nabízených různých doplňků)
po odinstalaci mi můžeš dát RSIT - kouknu