VIRY.CZ

prosim o kontrolu logu mam strasne pomale PC a porad sviti kontrolka HDD a nejde poradne ani spustit normalni rezim, log porizen v nouzovem rezimu

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:22:09, on 29.9.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Documents and Settings\Administrator\Plocha\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [nod32kui] "F:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinampAgent] F:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [BDRegion] F:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RemoteControl] "F:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "F:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OM_Monitor] F:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "F:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "F:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE
O4 - HKCU\..\RunOnce: [NeroHomeFirstStart] F:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4DB9FCF4-BDB7-4B49-B91C-0C125B074A51}: NameServer = 84.16.96.225,84.16.96.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - F:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - F:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - F:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - F:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 4071 bytes

Zdravím, tohle fixni v HJT :

O4 - HKLM\..\Run: [WinampAgent] F:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [BDRegion] F:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RemoteControl] "F:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "F:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "F:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "F:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\RunOnce: [NeroHomeFirstStart] F:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

Fix znamená že spustíš HJT

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Spustit >> napiš - services.msc >> OK. Najdi službu :

Cyberlink RichVideo Service

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !


Pak použij Rsit z mého podpisu a dej mi sem z něj log.txt

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-09-30 08:28:52
Systém Microsoft Windows XP Professional Service Pack 2
System drive F: has 46 GB (61%) free of 76 GB
Total RAM: 768 MB (83% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=F:\Program Files\Eset\nod32kui.exe [2006-01-28 921600]
"OM_Monitor"=F:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2006-05-16 40960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=F:\WINDOWS\system32\CTFMON.EXE [2004-08-17 15360]

F:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"F:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="F:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD"
"F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="F:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"F:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="F:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"F:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="F:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="F:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="F:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"F:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="F:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"F:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="F:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="F:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"F:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="F:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"F:\Program Files\MotoGP2\motogp2.exe"="F:\Program Files\MotoGP2\motogp2.exe:*:Enabled:motogp2"
"F:\Program Files\GameSpy Arcade\Aphex.exe"="F:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"F:\Program Files\ICQ6.5\ICQ.exe"="F:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"F:\Program Files\Skype\Plugin Manager\skypePM.exe"="F:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"F:\Program Files\Skype\Phone\Skype.exe"="F:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-09-29 20:17:58 ----RD---- F:\32788R22FWJFW
2010-09-29 18:35:11 ----D---- F:\Program Files\trend micro
2010-09-29 18:35:02 ----D---- F:\rsit
2010-09-27 15:13:00 ----SHD---- F:\RECYCLER
2010-09-27 15:04:07 ----D---- F:\WINDOWS\temp
2010-09-27 14:49:34 ----A---- F:\WINDOWS\PEV.exe
2010-09-27 14:49:34 ----A---- F:\WINDOWS\MBR.exe
2010-09-27 14:49:33 ----A---- F:\WINDOWS\zip.exe
2010-09-27 14:49:33 ----A---- F:\WINDOWS\SWREG.exe
2010-09-27 14:49:33 ----A---- F:\WINDOWS\sed.exe
2010-09-27 14:49:33 ----A---- F:\WINDOWS\grep.exe
2010-09-27 14:49:32 ----A---- F:\WINDOWS\SWXCACLS.exe
2010-09-27 14:49:32 ----A---- F:\WINDOWS\SWSC.exe
2010-09-27 14:48:57 ----D---- F:\WINDOWS\ERDNT
2010-09-27 14:45:22 ----AD---- F:\Qoobox
2010-09-27 14:38:02 ----ASH---- F:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2010-09-27 14:38:01 ----SD---- F:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-09-19 12:26:43 ----D---- F:\WINDOWS\system32\SoftwareDistribution
2010-09-06 15:43:42 ----D---- F:\Phenomedia AG

======List of files/folders modified in the last 1 months======

2010-09-30 08:28:14 ----D---- F:\WINDOWS\Minidump
2010-09-30 08:28:14 ----D---- F:\WINDOWS
2010-09-30 08:27:03 ----D---- F:\Program Files\CCleaner
2010-09-29 19:50:17 ----D---- F:\WINDOWS\Prefetch
2010-09-29 18:35:11 ----RD---- F:\Program Files
2010-09-27 15:29:10 ----D---- F:\Program Files\Mozilla Firefox
2010-09-27 15:01:34 ----A---- F:\WINDOWS\system.ini
2010-09-27 14:57:37 ----D---- F:\WINDOWS\system32\drivers
2010-09-27 14:57:37 ----D---- F:\WINDOWS\system32
2010-09-27 14:57:37 ----D---- F:\WINDOWS\AppPatch
2010-09-27 14:57:34 ----D---- F:\Program Files\Common Files
2010-09-27 14:53:57 ----D---- F:\Program Files\ESET
2010-09-27 14:52:48 ----D---- F:\WINDOWS\system32\CatRoot2
2010-09-27 14:38:00 ----D---- F:\Documents and Settings
2010-09-19 14:02:28 ----RSHDC---- F:\WINDOWS\system32\dllcache
2010-09-19 12:26:53 ----D---- F:\WINDOWS\SoftwareDistribution
2010-09-19 12:26:50 ----D---- F:\WINDOWS\Help
2010-09-19 12:26:45 ----HD---- F:\WINDOWS\inf
2010-09-18 09:26:46 ----D---- F:\Program Files\Metin2
2010-09-08 18:26:44 ----A---- F:\WINDOWS\NeroDigital.ini
2010-09-06 18:43:38 ----D---- F:\Program Files\EA SPORTS
2010-09-06 15:48:10 ----HD---- F:\Program Files\InstallShield Installation Information
2010-08-31 17:27:01 ----SHD---- F:\WINDOWS\Installer
2010-08-31 17:27:01 ----D---- F:\Config.Msi
2010-08-31 17:27:00 ----A---- F:\WINDOWS\ODBC.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 prohlp02;StarForce Protection Helper Driver v2; F:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 PxHelp20;PxHelp20; F:\WINDOWS\System32\Drivers\PxHelp20.sys [2006-05-16 46080]
R0 sfhlp01;StarForce Protection Helper Driver; F:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 uagp35;Filtr Microsoft AGPv3.5; F:\WINDOWS\system32\DRIVERS\uagp35.sys [2004-08-04 44672]
R1 cdrbsdrv;cdrbsdrv; F:\WINDOWS\system32\drivers\cdrbsdrv.sys [2005-05-11 32256]
R3 hidusb;Ovladač třídy standardu HID; F:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 mouhid;Ovladač myši standardu HID; F:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S1 kbdhid;Ovladač klávesnice standardu HID; F:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S1 prodrv06;StarForce Protection Environment Driver v6; F:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
S1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; F:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
S2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; \??\F:\Program Files\CyberLink\PowerDVD\000.fcl []
S2 AMON;AMON; \??\F:\WINDOWS\system32\drivers\amon.sys []
S3 catchme;catchme; \??\F:\DOCUME~1\x\LOCALS~1\Temp\catchme.sys []
S3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); F:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; F:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; F:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; F:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]
S3 nv;nv; F:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; F:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-04 32768]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; F:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; F:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Ovladač skeneru USB; F:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; F:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S4 sptd;sptd; F:\WINDOWS\System32\Drivers\sptd.sys [2008-12-18 717296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 bgsvcgen;B's Recorder GOLD Library General Service; F:\WINDOWS\system32\bgsvcgen.exe [2005-04-30 86016]
S2 NOD32krn;NOD32 Kernel Service; F:\Program Files\Eset\nod32krn.exe [2006-01-28 495616]
S2 Pml Driver HPZ12;Pml Driver HPZ12; F:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
S2 StarWindServiceAE;StarWind AE Service; F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S3 IDriverT;InstallDriver Table Manager; F:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 ose;Office Source Engine; F:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 ICQ Service;ICQ Service; F:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]
S4 NBService;NBService; F:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-09-12 724992]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); F:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-10-15 243056]

-----------------EOF-----------------

Přes Start >> Ovládací panely >> Přidat nebo odebrat odinstaluj ICQ6Toolbar


Koukám že tam také máš ComboFix, nakopíruj mi sem z něj log.