VIRY.CZ

Potřebovala bych poradit,jak nebo kde si mám nastavit otvírání nových panelů na Mozille Firefox.Od včerejška mi to přestalo fungovat.Díky moc

Zdravím, jdi ve Firefoxu nahoře přes Nástroje >> Možnosti >> karta Panely a tam zaškrtej co uznáš za vhodné,

nejlépe vše a potvrď.

zaškrtla jsem úplně všechny možnosti a nejde to. Otevřu je jen pomocí ctrl+shift+T .

Jakou máš verzi Firefoxu ?

Mám 3.6.17,a jsem s ní spokojená.Přestalo mi fungovat otevírání nových panelů poté,co jsem udělala na počítači MBAM.Tak nevím,kde bude zakopaný pes
Raději posílám RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Lukas at 2011-09-14 09:53:02
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (56%) free of 60 GB
Total RAM: 512 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:53:14, on 14.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17099)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ontrack\ZipMagic\zm32nt.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Lukas\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Lukas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ZipMagic] C:\Program Files\Ontrack\ZipMagic\zm32nt.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: McAfee ScanAndRepair Svc - McAfee, Inc. - C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

--
End of file - 5194 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013, toolbar@ask.com:3.12.2.100006, wrc@avast.com:6.0.1289, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://websearch.ask.com/redirect?clien ... YYYYYCZ&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mywebsearch.com/Plugin]
"Description"=My Web Search Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
compreg.dat
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
xpti.dat

C:\Program Files\Mozilla Firefox\plugins\
npMcAfeeSRPlgn.dll
npnul32.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\extensions\
toolbar@ask.com

C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\searchplugins\
askcom.xml
mywebsearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-07-11 3821568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ZipMagic"=C:\Program Files\Ontrack\ZipMagic\zm32nt.exe [2011-08-22 90112]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Disabled:Half-Life Launcher"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client"
"C:\Documents and Settings\foxxx\Local Settings\Data aplikací\Skype\Phone\Skype.exe"="C:\Documents and Settings\foxxx\Local Settings\Data aplikací\Skype\Phone\Skype.exe:*:Disabled:Skype "
"C:\Program Files\www.Cstr1k3rs.uCoz.Com\CarbonCS v1.1\cstrike.exe"="C:\Program Files\www.Cstr1k3rs.uCoz.Com\CarbonCS v1.1\cstrike.exe:*:Enabled:CarbonCS v1.1"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\foxxx\Dokumenty\Downloads\bulanci (1).exe"="C:\Documents and Settings\foxxx\Dokumenty\Downloads\bulanci (1).exe:*:Disabled:bulanci (1)"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=ctwdm32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FPS1"=frapsvid.dll

======List of files/folders created in the last 1 month======

2011-09-12 21:18:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-12 11:45:17 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Malwarebytes
2011-09-12 11:43:28 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-09-12 11:43:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-09-12 11:43:24 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-09-12 11:43:23 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-12 11:41:22 ----D---- C:\Program Files\McAfeeScanAndRepair
2011-08-27 13:08:21 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2011-08-25 11:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-23 09:02:18 ----D---- C:\rsit
2011-08-23 00:27:12 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-08-23 00:27:11 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-08-23 00:27:07 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-08-23 00:27:05 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-08-23 00:26:26 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-08-23 00:26:09 ----D---- C:\Program Files\AVAST Software
2011-08-23 00:26:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-08-23 00:11:17 ----D---- C:\Program Files\CCleaner
2011-08-22 23:52:14 ----SD---- C:\Uninstall
2011-08-22 23:31:38 ----SHD---- C:\RECYCLER
2011-08-22 23:11:33 ----D---- C:\WINDOWS\temp
2011-08-22 21:49:48 ----A---- C:\Boot.bak
2011-08-22 21:49:41 ----RASHD---- C:\cmdcons
2011-08-22 19:48:48 ----D---- C:\Program Files\trend micro
2011-08-22 15:09:27 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-08-22 15:08:49 ----A---- C:\WINDOWS\avastSS.scr
2011-08-22 15:01:15 ----D---- C:\SOPHTEMP
2011-08-22 14:47:04 ----A---- C:\WINDOWS\system32\drivers\ZmNTMon.sys
2011-08-22 14:46:39 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Ontrack
2011-08-22 14:46:29 ----D---- C:\Program Files\Ontrack
2011-08-22 13:59:20 ----D---- C:\Program Files\AMD APP
2011-08-22 13:58:52 ----D---- C:\Program Files\ATI
2011-08-22 13:57:44 ----D---- C:\Program Files\ATI Technologies
2011-08-22 13:53:11 ----D---- C:\Fraps
2011-08-22 12:37:42 ----D---- C:\ATI
2011-08-22 12:26:09 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-08-22 12:26:08 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-08-22 12:23:23 ----A---- C:\WINDOWS\iplist.txt
2011-08-22 12:22:40 ----A---- C:\WINDOWS\front_ip_list.txt
2011-08-22 11:59:04 ----A---- C:\WINDOWS\winlog-ids.txt
2011-08-22 11:59:04 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-08-22 11:10:30 ----A---- C:\WINDOWS\system32\f3PSSavr.scr

======List of files/folders modified in the last 1 month======

2011-09-14 09:49:20 ----D---- C:\WINDOWS\Prefetch
2011-09-14 09:12:40 ----D---- C:\WINDOWS\system32
2011-09-14 09:12:40 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-14 09:04:59 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2011-09-13 20:15:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-13 19:39:17 ----D---- C:\WINDOWS
2011-09-13 17:42:53 ----D---- C:\Program Files\Valve
2011-09-12 21:19:00 ----HD---- C:\WINDOWS\inf
2011-09-12 21:18:56 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-12 20:02:20 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-12 20:00:33 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-12 12:21:35 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Skype
2011-09-12 12:21:30 ----D---- C:\WINDOWS\SoftwareDistribution
2011-09-12 12:19:51 ----RD---- C:\Program Files
2011-09-12 12:19:51 ----D---- C:\WINDOWS\system32\drivers
2011-09-12 12:19:51 ----D---- C:\WINDOWS\Registration
2011-09-03 12:17:22 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-08-28 10:01:47 ----D---- C:\WINDOWS\system32\ias
2011-08-23 15:21:12 ----D---- C:\Program Files\Gothic II
2011-08-23 09:20:44 ----D---- C:\Program Files\Mozilla Firefox
2011-08-23 00:26:48 ----SHD---- C:\WINDOWS\Installer
2011-08-23 00:26:47 ----D---- C:\WINDOWS\WinSxS
2011-08-23 00:12:14 ----D---- C:\Documents and Settings\Lukas\Data aplikací\DAEMON Tools Lite
2011-08-22 23:52:48 ----D---- C:\WINDOWS\system32\Restore
2011-08-22 23:31:34 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-22 23:09:46 ----SD---- C:\WINDOWS\Tasks
2011-08-22 23:06:19 ----A---- C:\WINDOWS\system.ini
2011-08-22 22:58:36 ----D---- C:\WINDOWS\system32\config
2011-08-22 22:54:57 ----D---- C:\WINDOWS\AppPatch
2011-08-22 22:54:54 ----D---- C:\Program Files\Common Files
2011-08-22 21:49:48 ----RASH---- C:\boot.ini
2011-08-22 14:56:12 ----D---- C:\WINDOWS\Minidump
2011-08-22 14:56:12 ----D---- C:\WINDOWS\Debug
2011-08-22 13:03:54 ----RD---- C:\Program Files\Skype
2011-08-22 13:03:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-08-22 12:55:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-22 12:55:10 ----D---- C:\WINDOWS\system32\Macromed
2011-08-22 12:55:10 ----D---- C:\WINDOWS\system32\Adobe
2011-08-22 12:55:10 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Macromedia
2011-08-22 12:55:10 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Adobe
2011-08-22 12:32:45 ----SHD---- C:\System Volume Information
2011-08-22 12:19:22 ----D---- C:\Documents and Settings
2011-08-22 09:54:25 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-17 10:57:08 ----D---- C:\Program Files\Metin2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-05-13 111808]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2003-09-06 6944]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\system32\drivers\sfdrv01.sys [2006-05-10 51200]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\system32\drivers\sfhlp02.sys [2006-05-10 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:\WINDOWS\system32\drivers\sfsync04.sys [2006-05-10 52224]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R0 zmNTMon;zmNTMon; C:\WINDOWS\system32\drivers\zmNTMon.sys [2011-08-22 5760]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-26 218688]
R1 InCDPass;Nero InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2008-02-18 36648]
R1 incdrm;Nero InCD MRW Remapper; C:\WINDOWS\system32\drivers\InCDRm.sys [2008-02-18 38312]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 InCDfs;Nero InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2008-02-18 118952]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-17 701440]
S3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
S3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
S3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
S3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
S3 emu10k1;Creative Interface Manager Driver (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 rtl8185;Realtek RTL8185 54M Wireless LAN Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\rtl8185.sys [2007-07-18 306688]
S3 sfman;Creative SoundFont Manager Driver (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-02 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zmNTZip;zmNTZip; \??\C:\Program Files\Ontrack\ZipMagic\zmNTZip.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2008-02-18 1553704]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S1 InCDrec;Nero InCD File System Recognizer; C:\WINDOWS\system32\drivers\InCDRec.sys [2008-02-18 16040]
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:\WINDOWS\system32\sfrem01.exe [2006-05-10 353912]
S3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc; C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

Tohle fixni v HJT :

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

HJT najdeš zde :

C:\Program Files\trend micro\Lukas.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Spustit >> napiš - services.msc >> OK. Najdi službu :

InCD Helper (InCDsrv)

McAfee ScanAndRepair Svc

NMIndexingService - Nero AG

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Netuším co jsi přes Mbam smázla, ale máš tam nějaký chaoz v antivirech.

V první řadě přes Start >> Ovládací panely >> Přidat nebo odebrat odinstaluj vše od McAfee

Dále se musíme zbavit pozůstatků po AVG, tak že stáhni AVG Remover,

restartuj do Nouzového režimu a v něm ho použij.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Je možné že budeš muset Firefiox přeinstalovat, ale nedříve se kouknem co se tam kde ještě ukrývá.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Po instalaci AVG Remover jsem chtěla přejít do nouzového režimu,ale po nápovědě jak jen spustit mi to nejde.Dostanu se jen na okno "úsporný režim-vypnout-restartovat" a do nouzového režimu se nedostanu.Poradíte mi jak na něj?Asi jsem úúúplně blbá

Tak jsem si radši stáhla novou verzi Firefoxu, 6.0.2. a starou odinstalovala.Doufám že už to bude v pořádku.
Děkuji moc za pomoc a ochotu,jste super

Do Nouzového režimu se dostaneš tak že při restartu PC mačkáš klávesu F8,

pak z nabídky která na tebe vyskočí vyber Stav nouze.

Dále pokračuj podle návodu.

tak jsem zvědavá,co tam ještě bude za bordýlek

"Running zap for product code {20EAC554-95F9-4926-8D9A-C4FF3EC44C72}:p  16.09.2011 8:29:37,14"

C:\Documents and Settings\Lukas\Dokumenty\Sta§en‚ soubory>C:\DOCUME~1\Lukas\LOCALS~1\Temp\avg-9a00180d-5a53-4e49-b439-965957e7210c.exe TW! {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} /nologo


***** Zapping data for user S-1-5-18 for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} *****
MsiZapInfo: Performing operations for user S-1-5-18
Searching for the product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} cached package. . .
Removed file: C:\WINDOWS\Installer\9122f.msi
Searching for install property data for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72}. . .
Removed \455CAE029F596294D8A94CFFE34CC427\InstallProperties
Searching for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} data in the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall key. . .
Removed \{20EAC554-95F9-4926-8D9A-C4FF3EC44C72}
Searching user's global config location for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} data. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes...
Could not open HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes Searching for patches for product 455CAE029F596294D8A94CFFE34CC427 in Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\455CAE029F596294D8A94CFFE34CC427\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\455CAE029F596294D8A94CFFE34CC427 for product data. . .
Removed \Features
Removed \Patches
Removed \Usage
Removed \Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\455CAE029F596294D8A94CFFE34CC427
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Features\455CAE029F596294D8A94CFFE34CC427 for product feature data. . .
Searching per-machine global config location for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} data. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes...
Could not open HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes Searching for patches for product 455CAE029F596294D8A94CFFE34CC427 in Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\455CAE029F596294D8A94CFFE34CC427\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\455CAE029F596294D8A94CFFE34CC427 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Features\455CAE029F596294D8A94CFFE34CC427 for product feature data. . .
Searching old global config location for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} data. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes...
Removed upgrade code '455CAE029F596294D8A94CFFE34CC427' at HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes
Searching for patches for product 455CAE029F596294D8A94CFFE34CC427 in Software\Microsoft\Windows\CurrentVersion\Installer\Products\455CAE029F596294D8A94CFFE34CC427\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\455CAE029F596294D8A94CFFE34CC427 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\455CAE029F596294D8A94CFFE34CC427 for product feature data. . .
Searching per-machine location for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} data. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 upgrade codes in Software\Classes\Installer\UpgradeCodes...
Removed upgrade code '455CAE029F596294D8A94CFFE34CC427' at HKLM\Software\Classes\Installer\UpgradeCodes
Searching for patches for product 455CAE029F596294D8A94CFFE34CC427 in Software\Classes\Installer\Products\455CAE029F596294D8A94CFFE34CC427\Patches
Searching HKLM\Software\Classes\Installer\Components for published component data for the product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72}. . .
Searching HKLM\Software\Classes\Installer\Win32Assemblies for Win32 assembly data for the product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72}. . .
Searching HKLM\Software\Classes\Installer\Products\455CAE029F596294D8A94CFFE34CC427 for product data. . .
Removed \Media
Removed \Net
Removed \SourceList
Removed \Software\Classes\Installer\Products\455CAE029F596294D8A94CFFE34CC427
Searching HKLM\Software\Classes\Installer\Features\455CAE029F596294D8A94CFFE34CC427 for product feature data. . .
Removed \Software\Classes\Installer\Features\455CAE029F596294D8A94CFFE34CC427
Searching for product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72} in per-user managed location. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\UpgradeCodes...
Searching for patches for product 455CAE029F596294D8A94CFFE34CC427 in Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Products\455CAE029F596294D8A94CFFE34CC427\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Products\455CAE029F596294D8A94CFFE34CC427 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Features\455CAE029F596294D8A94CFFE34CC427 for product feature data. . .
Searching for shared DLL counts for components tied to the product 455CAE029F596294D8A94CFFE34CC427. . .
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Components key is not present.
Searching for shared DLL counts for components tied to the product 455CAE029F596294D8A94CFFE34CC427. . .
Searching for product 455CAE029F596294D8A94CFFE34CC427 client info data. . .
Removed client of component 01FCD203E42248E4DBF7F1291EF7BD69
Removed client of component 02B5D3BBE36CD054192F35D45661E5B6
Removed client of component 03B656C6C2AA2F44EA80221C0B7875A8
Removed client of component 042671E0252CEA84689EA0CB0F2959EE
Removed client of component 044DB212FED836D41A4FE00EE9DC100E
Removed client of component 05FA1762803A8494BBF0B3EBE96D0AAC
Removed client of component 061EEE5D984E24D4E8DD5DF6A0C485F4
Removed client of component 06C31B548D6A8664BB577E4FD9ABF67A
Removed client of component 09D57A7D52A27834ABE806C7B192FE65
Removed client of component 0B4D42C75C0910E4291C96EF80AE4A06
Removed client of component 0B81368A39B8DD644B1B6FF7CE4683B0
Removed client of component 0C8E35977A7CB764FA6C2391AEFB1D5D
Removed client of component 0D70348724D142A4EAA4F638D54A97D6
Removed client of component 119F0421DE6B1564DB33CE0D640F82B9
Removed client of component 146B292F66D388944ACC6D39A7391289
Removed client of component 14D5FFE54E51D30498208A61319F2896
Removed client of component 158ED5515654E8344AF5F0FFC1D4998C
Removed client of component 16C4829923A9EA04A80B9B261B630758
Removed client of component 18D705324F6F6CB46A5ADE791C613605
Removed client of component 190CBB0CBAE51144680AD2FF383DF038
Removed client of component 1972D055C1A5F3D439EF6577BD323176
Removed client of component 199BE8FC07C810947BF29C10ABE02E04
Removed client of component 1ACC957DED687B0429F9306C9BA33B9B
Removed client of component 1BD7AFAD188455B4E88D1407BB3E3422
Removed client of component 1C286DA0094343F42AC2AE881FDF1646
Removed client of component 1CEF753AA513EC14783EBD8CBA5C79BD
Removed client of component 1CF4728E6EAF5C244A7B363616615EE3
Removed client of component 1D6D7A76136EC7F4F94194704B567B76
Removed client of component 1E1E5546DE1021640BC34E872AC8699E
Removed client of component 1F66A49279DC4B64F8D923A910E85304
Removed client of component 1F96050D2B9C8124CB63B995CA303E72
Removed client of component 2041B93C30F5E5549B3EE8DD5C501F29
Removed client of component 208F00E9F61CE7643B5C39B7E2961F72
Removed client of component 20CDE49C59E993742A7DA10843B976AB
Removed client of component 20E617439F0F0874F9796AC716BA2550
Removed client of component 2166F26E1889C4E4D9F9805B063C8B65
Removed client of component 21F8040D4EFB2184C93600D1DAB67824
Removed client of component 236DA740634D3B74D9C750B59F4FBE2C
Removed client of component 254968AEB0C431E40AD8B935986009D4
Removed client of component 25CF3F5C8758BBB4DAF9A8855BBC150B
Removed client of component 275596C0E3F9C044E8052AB4B272A233
Removed client of component 2766A92CF5FB2A845BF223AD88835B11
Removed client of component 28111DB372446E244BE74F909108CA51
Removed client of component 28B35084D6B1978479B038A007905859
Removed client of component 28DE6AAFA7DF76345BE5DECC8017A986
Removed client of component 2A4860A6274B3B44D8A49CD3DE487D5B
Removed client of component 2ABE9BEA9BCC01A40A1CEC350425F7C6
Removed client of component 2BD2962EDE32B4847BE3EFF6F4088D39
Removed client of component 2C3D8BA6EF8F6A642BB5EAD7900807EB
Removed client of component 2D539B57F40242E4CA6CF9C65398CCF8
Removed client of component 2E48EA61FB7BE474BAB37654550180D3
Removed client of component 2E7662BBEEE6A5044929F6A876D30665
Removed client of component 2EBE4911CA052B245A77EF07F5C7FFC8
Removed client of component 2ED3564786D2E8441B256DDB1EE25DDF
Removed client of component 2FAB89FA32B946A459D7C8992E88F76C
Removed client of component 307A0903C850D7F45BDA392A9613C228
Removed client of component 3084C66744E921543BDFB5A6978862F8
Removed client of component 3164ED50FDE7FF442B1C3B8983D6D4EF
Removed client of component 31E8EF8CCB311F84AAEFCB73B0872748
Removed client of component 346AA024609CE524F95C8DF6C0A4499D
Removed client of component 356F0772C31509D4A9063FD112CC8207
Removed client of component 35700D2BEB7C10343A7EF68BC64F1F16
Removed client of component 359ECDCCD3B03434DABDD3C9B108D6EA
Removed client of component 35CE4D8B1CD1852459D5C9814EA25CF0
Removed client of component 3808D1B60A205D44190F8D70BE50C5E5
Removed client of component 3883DE33BC973694293BFDE2F709177B
Removed client of component 38BBD8BC21F93FE44BFFD61ACF65ED33
Removed client of component 38DBC2A97F8FE9244A611D9A63E812CE
Removed client of component 39B9227B667B2B74A8A268A5314E9E9E
Removed client of component 39F70EDEF7568844A90CAB9778624D52
Removed client of component 3C190DB0C53D9E24A9DFAAD00E42651F
Removed client of component 3C38FF15DB37A994F8529B3CF182C98E
Removed client of component 3D6FC2144936CE14DBA9B29C94549556
Removed client of component 3E277BB2FA71CC04C918FD3DC294655E
Removed client of component 3EF15E7441D99DB4EBE3466B86F299CA
Removed client of component 3F2F917D9144FCB4E9724F00FDC381EB
Removed client of component 3F39A00BF86D74C499507439A1C88E17
Removed client of component 3F63B5861A8FCE34FBE7C659601C50B5
Removed client of component 3F9D4A79D1ACB8B4BB67B4FA80AC0C08
Removed client of component 4193A0F7653A52F4983A75C522E6FDAF
Removed client of component 4265D2B4C74BB794A95E5FA6DD597C76
Removed client of component 42E94D4B8B146A14E94A6F076BE32046
Removed client of component 43EB48FA3A1EC114EA86731E7FF79C1F
Removed client of component 4473C77AD9BF5234D81C7A7C1654B135
Removed client of component 44C774D93E6260A48B41F980E916442C
Removed client of component 452C08BAEAD21F64F8D99C2C0CEFA3D2
Removed client of component 456395DE75454274F88FC7FC839F10AA
Removed client of component 466DCA1D98D6DF44CBC7ACF5B395A6D2
Removed client of component 46A19BC1DF607E74998E113E432BC70E
Removed client of component 47689967A1D1F8F4D918D1938F738BAD
Removed client of component 4963F3AC865F18A4691841EC5BADB776
Removed client of component 49F7029E336722449AB0FB53C4AB6D06
Removed client of component 4A161FD4431C4AC4E90BDDCD37A254B0
Removed client of component 4CA04824181946F4192DDBB214DC148A
Removed client of component 4CF6BD130E1D7D34CB34757F14894DAC
Removed client of component 4D01797DD7EAD684CB6C1A82098DADC4
Removed client of component 4D0F8D601AD5CDF46868DEB4DA0A79C1
Removed client of component 5009F1514BC3FC44BB7D5C73BB04C8B1
Removed client of component 50B09B06CDAFC0E40B4D45446583FC84
Removed client of component 50C5D6DEBAE514B48AF73E4023666699
Removed client of component 50D60A9C5EC17BC45B6617EA5F0E2E95
Removed client of component 515897A71A2F9C9418DFA49E7ABA3558
Removed client of component 527EC73B0D01C58488E931A5FF57D2DD
Removed client of component 53325026A7E767841931B2012507CADC
Removed client of component 534E95E66C590274AA00760327627FB6
Removed client of component 536A9DDC92829114785BFCC60397332D
Removed client of component 53B1A220D412D9F4889926613F7D8C84
Removed client of component 55443FFE81F6E8246B3F0DB3451622A3
Removed client of component 557FABB0CFD0F2A489753ABD0DCACED6
Removed client of component 56007132D4EA24249A2D6B13705A3A88
Removed client of component 560BCECF1C1DE9946BC5F9335C1EF6BA
Removed client of component 572EFEB84D7988D41868BC46E63175F9
Removed client of component 5A582AFBFA37ED544B9CE7113A447CDD
Removed client of component 5A7A66CE82D4A15408ED6F0879250245
Removed client of component 5AC7DF09045927342B57E8580F4F3C3C
Removed client of component 5B213F41228A0A241B98F1FAD6599B34
Removed client of component 5CA9956D46E2A784DB1C37FAFBB7534D
Removed client of component 61415C156E48C7B4491D0F25A33AAE9E
Removed client of component 614DB733238EED4419DC809EED87F9DE
Removed client of component 622DA33FAC27DB141BE3764B21D8FDAF
Removed client of component 62349A9365449AD428E05243408CD26F
Removed client of component 624BB461518C0F94CB88FFBA9572EEC0
Removed client of component 628181AD3D4FF8047B991C82551D260F
Removed client of component 65A7EF5FE6132F944B6C73BADE8E2EF9
Removed client of component 65D469FD10D3BAD4BB0E32C5DE4CF813
Removed client of component 662C98456F2926D42A281B1645069046
Removed client of component 670BFED84B2B07A4B8C3D59753AD79D0
Removed client of component 67479F382DAEBDC42887D338758D3ED4
Removed client of component 67D0CFAA01E141648AF4CED9C9674C33
Removed client of component 6950D1E103AF7C8439542687B2DC5038
Removed client of component 69A6F144A153F364499AD9E627047D55
Removed client of component 6A39E9E2F5FA8BA4984AD2DF7E97B145
Removed client of component 6A93A02ADE963AB4EA3963505708CD0D
Removed client of component 6AF166B4AFE6B27479E2C1DD06DDC6CC
Removed client of component 6AF82F4C11D637542B3D081FA12BECF1
Removed client of component 6D8684F49BDB6EA468BE0ECA75BC8247
Removed client of component 6E625B399DD6CB549AE33AEF4E330068
Removed client of component 6E6FF127F8160714980354ACCC5F115B
Removed client of component 710369C53E01E194EB3B1D70D079BECA
Removed client of component 713733403B6623740A0C6726180BC050
Removed client of component 713CFA7102D2DA246B3CCADB11E3EA2C
Removed client of component 718FC86ADC829BD46B95B0C7C067E64D
Removed client of component 7288C79153C97E44288DED7FFE0E1F4E
Removed client of component 72CFEE980CF3D334DBD06404F2BC76AF
Removed client of component 7309A42DE3C6A59419F00AF92729F30D
Removed client of component 7335F3A683DF6414BA53E3BC927A3F90
Removed client of component 760708E15764F424094D1BF56887CEA6
Removed client of component 76AF2CAFD0BA08F4FB87AB77F7A7153C
Removed client of component 774F2D3700943ED45809F2747645B8AE
Removed client of component 7807090397DF2BE4785478B73671B0FB
Removed client of component 78373055C36C6D444AB59C5870C92D4A
Removed client of component 787837FDA36325349AB24F8EB45CA8AB
Removed client of component 787DAE6523949D443ADEAFC0A16422CC
Removed client of component 79E5FBA13B020974F9BA32D8126DC5FA
Removed client of component 7A60F5D829989804884CD98CA40644EC
Removed client of component 7A80C837F8705DB49921A423B399D1EE
Removed client of component 7AE8A4C6FA6F1144EB0A7F8EDC02E54C
Removed client of component 7B37B61E01A6C1F408FBB1F5119ED4E6
Removed client of component 7B6A8D4EA2164C241B3BC6B32E673BB4
Removed client of component 7BB95CCC171D0C84B8C0F71D873E27E0
Removed client of component 7D574CDB7C7209D479BB58E16EAF61D8
Removed client of component 7DC84CC5D61C8044EA493FD043E84ECD
Removed client of component 7DE6AF5528770684F840259B04AE06B2
Removed client of component 7E9E1269558E5D746B4FE30BBC34331A
Removed client of component 7EA7B382A8A2F5641889FFD311F914CB
Removed client of component 8078B1BE59A52AB4FA7AF0C3664B0874
Removed client of component 80A65306D0A511F4495892E514AF46E9
Removed client of component 80B8B4AB423B7E849A69BC1D881AB9FF
Removed client of component 812650AB922197D4F89F278FDB22370F
Removed client of component 83684C77A6998F04B8CBD9287F5106E4
Removed client of component 84CD1ED275C97C243A5B5020DA3B125C
Removed client of component 84D3D3A2F1D879C4FB0C7076A63FACD9
Removed client of component 862DD31D0E166B248863A6721F7A43F2
Removed client of component 86EC69F0D2949FB47A43547EE2007F32
Removed client of component 877E6F3B966216149BA2E9B6088154C8
Removed client of component 88564E146649AFE4384DCDFB6D84DF28
Removed client of component 891782562174A5043B638EF0A6A2AFE6
Removed client of component 8B2DF980D4A2CAA46B1AF361563D6B3F
Removed client of component 8B5BC1C170CABFA4D85081BEEA06E6A9
Removed client of component 8C5CE9B9ADC669F47A747E30C085450D
Removed client of component 8CC393E6BC374634E93F8D4003BC32B3
Removed client of component 8DC0BF22005B2D341B04E44AE4218596
Removed client of component 8EA37F1A5BAA1F04AAEA5E7FA1323667
Removed client of component 9116BDADFB52D1D4B8EAE84F58BFC20F
Removed client of component 915AB6037E7AE204285693BC72E0B7D7
Removed client of component 9179CA36F695F2C4C9B47B1E44F801C2
Removed client of component 925ED1FE1D8204E40AE425737663FE5A
Removed client of component 92A6F697115EA3F4592720A49CE6CC30
Removed client of component 937F46D7D0CE298438C0798B47601D03
Removed client of component 943E3306582E7D8408DF36D24E18459F
Removed client of component 946753B71D253D540B2B0C6782E21EF2
Removed client of component 94B293EE174FBB54FAF4086030861A84
Removed client of component 95083F66D53D68A48B7909032900678B
Removed client of component 964A33E77500CC34B8D3F5DEAD6212A6
Removed client of component 9664BA4F1C76AA44CA18D7B5960806D5
Removed client of component 96BA4215C462672498614B6C03CB4173
Removed client of component 9767C8D0C196D2C4BB1D3E956284039A
Removed client of component 9A9BCA6AA153AB244AC954C7BB242C89
Removed client of component 9C39C80809FAD194C98272242A2A9FA2
Removed client of component 9D0CD3169E713D448A27C5C8EBB374A8
Removed client of component 9E2FC7DED3ABDB843A0DE682A028C61F
Removed client of component 9E8AA7D91434644479E9F017A2A2A750
Removed client of component 9ED8FC6AE0A3E3441AC440382778432E
Removed client of component A0009D2BB34958440B334EDF5894B347
Removed client of component A04E7678D2EEF1244AD921C7B84D181A
Removed client of component A0513AEF7C219284DA9518167EE77082
Removed client of component A1A67CC53DE1C5E44B525ACF76443532
Removed client of component A26CE9BE23710D548B016E3D862A3AD9
Removed client of component A356DB03D439C944BA8E4936AF9FA85C
Removed client of component A5358247F42D82A41BD1D77A98141F8A
Removed client of component A5F74ECDA88BA174E967BDE71E2F0201
Removed client of component A754AE0AE1C52EC498470B0914896271
Removed client of component A831AADB50070434A9A0057491F3F61F
Removed client of component A8C97FE663C197C49861E6DEF176B168
Removed client of component A90B54E7594581E4DABC7DA3D1D3C30D
Removed client of component ABDC99C292EA1A748B17A2F0F6CA990C
Removed client of component AEC4428EA000C324181FE263620DA9F7
Removed client of component AEE191DB8BA62FB44B3602E0FB2F7864
Removed client of component AFD01E888A9F37B4098A9E2D5A89CB6F
Removed client of component B04C49EB8233D034392320185F97E907
Removed client of component B0E297D94344B5E4D95EC487B714918C
Removed client of component B0EBEB8B90FD2A44D817161A42C4F27C
Removed client of component B10FEB9B5910E6B4C997D901DF85049D
Removed client of component B1581F48DCD87E04D964A1BB8D9EF9AF
Removed client of component B23B04DE31DCE024186C6B4803F75148
Removed client of component B25CC2EF41E94EF46B7F45F17BFAE802
Removed client of component B355F2139DAE37F439E3D0491B12FAEF
Removed client of component B52395BCD5BDFEA4DA22A5CDB8F88F8E
Removed client of component B58B590F2EA568E4FAE9E8A4EBBB3A36
Removed client of component B591DB3C13D1EEE42A41720AF676BBEA
Removed client of component B5C062C5B6B0FFC4F96CB01D74389136
Removed client of component B6A42D58B82A0644BBE264F68F856F8A
Removed client of component B6D0804A314D9794CB2DC1CA9447CC87
Removed client of component B7AA62F40BBCFDA499B2FA4C6B01E8D7
Removed client of component B8967D2B8DC3DD4449D3D4B65C20B7D9
Removed client of component B93D21F9D82BF9248A2561779F9160D6
Removed client of component BAFF687AF446F5B46A7FB37B12D2BBB0
Removed client of component BB4FC25E0325B9445BD1E6A2676147C7
Removed client of component BDD0C5613AF897D4197F8F5FEDB45732
Removed client of component BDD67497789E1464C8A70DE4276A22D8
Removed client of component BEEDE10259F196E45A2A98C49E71C0A9
Removed client of component C032E4B2ACEA274499F19275F3DEF9E2
Removed client of component C0DA5C95B68D19542A4BC7C51C6E5FA0
Removed client of component C10712E6A1C041045993C591FC75AE90
Removed client of component C16DD91DD6A92A9498C6531D8485BF6A
Removed client of component C22E7ECE09559B049977F27E8F4517CD
Removed client of component C3D68B4EDEE987446840EFF887474B48
Removed client of component C4074F74B9612E4479EFD8DBDB3FC460
Removed client of component C46532CE7E9F01E4C81CA704C72CB11E
Removed client of component C4CFB718387E9EB45B407A8E4B14264A
Removed client of component C643EA603CC66CB42A0988C1AFB7CAC7
Removed client of component C6DFC883752E2C14CA91A7CD690AF7D6
Removed client of component C70FDFDD1A3694241B265AF70F95753E
Removed client of component C7897ED9687975D42A469351DCF48727
Removed client of component C8D411B293EC5C84EB6AAC10E34FE08B
Removed client of component C8F17408A6868B04EA7005829E3E3B70
Removed client of component C8F5FBEFA4609544990E91C8ABDA1EB8
Removed client of component CA359A336EDC03340B7B442545633E87
Removed client of component CAA4C879396FB664189237238D2761FA
Removed client of component CB1C591D54803FF44AAFF260B0F2FDF8
Removed client of component CCBB7A82FA587804E9E17372C8FEA953
Removed client of component CD493820DBE49A64EB37FF35162D46E1
Removed client of component CE24EB5395D4098408985C1A8EF7FD72
Removed client of component CE79C231997464846920C2A6994F757B
Removed client of component CF46CB5594863994DAEAB1D26BA622FA
Removed client of component CFAFE89D2D474024F9B8041C95B02B1B
Removed client of component D1E982AFA3FA41141BF084AC7002D3AC
Removed client of component D31C167A1DA8B6D4887F815D67940A4A
Removed client of component D37BBEEA71DA17D44A6441D5A27ABAF7
Removed client of component D3A36F44E4E202F45886B8D066E9867B
Removed client of component D45FAF5A8F39D104AB2430EA7B8D9247
Removed client of component D507B0390BA4690488752856FDF0B8DF
Removed client of component D6782606088F3E646A9BE10C752FE64C
Removed client of component D75C4D2E95B9C2047B6E84F16BFDE105
Removed client of component D85FC556BA486264680C6EDF290EEF87
Removed client of component D9D35EAC325B16A4D89C951913E73C3D
Removed client of component DAE4C5F4AF338234BAAF316742642FBD
Removed client of component DB66AFEE3FD2EAA4E9A6F9C1515116D5
Removed client of component DBBF8EF3B7A97794EA27E6077BE19348
Removed client of component DC10F42CD6A97854898E1D65A1467111
Removed client of component DE8D0132E77D8BC41B68F92646B13F0D
Removed client of component DF1484F6E83C36A43960BAE096851914
Removed client of component DF22920DD20934B4C9F7642118A3E348
Removed client of component DFD78421A31C6F64E903259DF249AC9E
Removed client of component DFE2AAF6F42C56141A44151EDD2103D8
Removed client of component E09228E6A4E974D48B82F23BFE74F89E
Removed client of component E174053F35F54E84796121374566A3F6
Removed client of component E1807EEC121E86049A3B21536FFDE8FD
Removed client of component E3B3405267B1A6342A9FF2172BD5E948
Removed client of component E4E566A623D410D41A6ACA249ECAE651
Removed client of component E74FB79A32C918C45BC9C5EDF28CBAAE
Removed client of component E7F4D892700192F48AB4C70F02A0D1CD
Removed client of component E8E2113991FD883468F598115552E136
Removed client of component E92D9782B38B3604F9224BF9490D8B2B
Removed client of component EA955E849BA389C42AF280F65C6712B6
Removed client of component EB9940BABCBF03C4E8BDCDE75AE4C5E6
Removed client of component EC151EFFB5D460A4090BC574BCD03104
Removed client of component EC3D273082FE98740B392E23766278E0
Removed client of component EDC61D5A9F1EEDB4A8F907F92CE5F74A
Removed client of component EEAA7902D0BB32D499F91081D870A7C6
Removed client of component EF71F925C07501C4C87CABF0954E1264
Removed client of component EF76D2C7D5D1FBB48908C9CFB40F6F42
Removed client of component F2B3340058B51CA43ACC4909FB710651
Removed client of component F33E0818678B19248B36A6D1F5CC799D
Removed client of component F4B1A1A7F06183F4398E7355E0258FB8
Removed client of component F51F80D2012C87544B318F1DFBB3F709
Removed client of component F72A2D39AF133F1408555D2169B80C5A
Removed client of component F762B380CA9EA734F9DDC58C6F2F3ACB
Removed client of component F7BEFD5901188644DBF6B01C7F8C6861
Removed client of component F89C76444B0DEFA4780CFAF01216C97F
Removed client of component F91F9D38A6E8BE641A615DE460EC9877
Removed client of component F984E318247A20E4486C8146FA280C07
Removed client of component FD29E8C4A470D0348B4FC53B279114FE
Removed client of component FD52503A76ABF414D8E9CD0410E2F482
Removed client of component FE9B611DDB47CB64BA7DFEF4AA0D9A36
Removed client of component FEAAE1DCD1014914289DADAB25AF586B
Searching for product 455CAE029F596294D8A94CFFE34CC427 client info data. . .
Searching for Installer files and folders associated with the product {20EAC554-95F9-4926-8D9A-C4FF3EC44C72}. . .
Searching for files and folders in the user's profile. . .
Searching for files and folders in the %WINDIR%\Installer folder
FAILED to clear all data.
"Running zap for product code {695B13B2-7919-4EC5-8601-092F0D2DE069}:p  16.09.2011 8:29:37,48"

C:\Documents and Settings\Lukas\Dokumenty\Sta§en‚ soubory>C:\DOCUME~1\Lukas\LOCALS~1\Temp\avg-9a00180d-5a53-4e49-b439-965957e7210c.exe TW! {695B13B2-7919-4EC5-8601-092F0D2DE069} /nologo


***** Zapping data for user S-1-5-18 for product {695B13B2-7919-4EC5-8601-092F0D2DE069} *****
MsiZapInfo: Performing operations for user S-1-5-18
Searching for the product {695B13B2-7919-4EC5-8601-092F0D2DE069} cached package. . .
Removed file: C:\WINDOWS\Installer\1008d3.msi
Searching for install property data for product {695B13B2-7919-4EC5-8601-092F0D2DE069}. . .
Removed \2B31B59691975CE4681090F2D0D20E96\InstallProperties
Searching for product {695B13B2-7919-4EC5-8601-092F0D2DE069} data in the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall key. . .
Removed \{695B13B2-7919-4EC5-8601-092F0D2DE069}
Searching user's global config location for product {695B13B2-7919-4EC5-8601-092F0D2DE069} data. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes...
Could not open HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes Searching for patches for product 2B31B59691975CE4681090F2D0D20E96 in Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B31B59691975CE4681090F2D0D20E96\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B31B59691975CE4681090F2D0D20E96 for product data. . .
Removed \Features
Removed \Patches
Removed \Usage
Removed \Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B31B59691975CE4681090F2D0D20E96
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Features\2B31B59691975CE4681090F2D0D20E96 for product feature data. . .
Searching per-machine global config location for product {695B13B2-7919-4EC5-8601-092F0D2DE069} data. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes...
Could not open HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\\UpgradeCodes Searching for patches for product 2B31B59691975CE4681090F2D0D20E96 in Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B31B59691975CE4681090F2D0D20E96\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B31B59691975CE4681090F2D0D20E96 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Features\2B31B59691975CE4681090F2D0D20E96 for product feature data. . .
Searching old global config location for product {695B13B2-7919-4EC5-8601-092F0D2DE069} data. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes...
Removed upgrade code '2B31B59691975CE4681090F2D0D20E96' at HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes
Searching for patches for product 2B31B59691975CE4681090F2D0D20E96 in Software\Microsoft\Windows\CurrentVersion\Installer\Products\2B31B59691975CE4681090F2D0D20E96\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Products\2B31B59691975CE4681090F2D0D20E96 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Features\2B31B59691975CE4681090F2D0D20E96 for product feature data. . .
Searching per-machine location for product {695B13B2-7919-4EC5-8601-092F0D2DE069} data. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 upgrade codes in Software\Classes\Installer\UpgradeCodes...
Removed upgrade code '2B31B59691975CE4681090F2D0D20E96' at HKLM\Software\Classes\Installer\UpgradeCodes
Searching for patches for product 2B31B59691975CE4681090F2D0D20E96 in Software\Classes\Installer\Products\2B31B59691975CE4681090F2D0D20E96\Patches
Searching HKLM\Software\Classes\Installer\Components for published component data for the product {695B13B2-7919-4EC5-8601-092F0D2DE069}. . .
Searching HKLM\Software\Classes\Installer\Win32Assemblies for Win32 assembly data for the product {695B13B2-7919-4EC5-8601-092F0D2DE069}. . .
Searching HKLM\Software\Classes\Installer\Products\2B31B59691975CE4681090F2D0D20E96 for product data. . .
Removed \Media
Removed \Net
Removed \SourceList
Removed \Software\Classes\Installer\Products\2B31B59691975CE4681090F2D0D20E96
Searching HKLM\Software\Classes\Installer\Features\2B31B59691975CE4681090F2D0D20E96 for product feature data. . .
Removed \Software\Classes\Installer\Features\2B31B59691975CE4681090F2D0D20E96
Searching for product {695B13B2-7919-4EC5-8601-092F0D2DE069} in per-user managed location. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 upgrade codes in Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\UpgradeCodes...
Searching for patches for product 2B31B59691975CE4681090F2D0D20E96 in Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Products\2B31B59691975CE4681090F2D0D20E96\Patches
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Products\2B31B59691975CE4681090F2D0D20E96 for product data. . .
Searching HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-18\Installer\Features\2B31B59691975CE4681090F2D0D20E96 for product feature data. . .
Searching for shared DLL counts for components tied to the product 2B31B59691975CE4681090F2D0D20E96. . .
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Components key is not present.
Searching for shared DLL counts for components tied to the product 2B31B59691975CE4681090F2D0D20E96. . .
Searching for product 2B31B59691975CE4681090F2D0D20E96 client info data. . .
Removed client of component 30EC774F6371B044A932CFA7E5F864A8
Removed client of component 6860D4C172F342148B20044D4C8D338A
Removed client of component 8CCEAF1C1D1864A41B1B312AD7682868
Searching for product 2B31B59691975CE4681090F2D0D20E96 client info data. . .
Searching for Installer files and folders associated with the product {695B13B2-7919-4EC5-8601-092F0D2DE069}. . .
Searching for files and folders in the user's profile. . .
Searching for files and folders in the %WINDIR%\Installer folder
FAILED to clear all data.

Pokračuj CCleanerem a pak ten ComboFix.

ComboFix 11-09-15.05 - Lukas 18.09.2011 14:31:40.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.512.292 [GMT 2:00]
Spuštěný z: c:\documents and settings\Lukas\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MYWEBSEARCHSERVICE
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-18 do 2011-09-18 )))))))))))))))))))))))))))))))
.
.
2011-09-17 08:08 . 2011-09-17 08:08 -------- d-----w- c:\program files\Speccy
2011-09-17 08:02 . 2011-09-17 08:03 -------- d-----w- c:\documents and settings\foxxx\Data aplikací\Media Player Classic
2011-09-17 07:46 . 2011-09-17 07:46 -------- d-----w- c:\program files\Realtek
2011-09-17 07:46 . 2011-08-31 17:12 1698408 ----a-w- c:\windows\RtlExUpd.dll
2011-09-17 07:45 . 2006-02-07 13:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-09-17 07:45 . 2006-02-07 13:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-09-17 07:45 . 2006-02-07 13:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-09-17 07:45 . 2006-02-07 13:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-09-17 07:45 . 2005-11-13 21:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2011-09-17 07:45 . 2011-09-17 07:45 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-09-17 07:45 . 2011-09-17 07:45 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-09-12 09:45 . 2011-09-12 09:45 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Malwarebytes
2011-09-12 09:43 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-12 09:43 . 2011-09-12 09:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-09-12 09:43 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-09-12 09:43 . 2011-09-12 10:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-03 10:17 . 2011-09-09 09:12 602112 -c----w- c:\windows\system32\dllcache\crypt32.dll
2011-08-27 11:08 . 2008-04-13 17:47 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2011-08-27 11:08 . 2008-04-13 17:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2011-08-23 07:33 . 2011-08-23 07:33 -------- d-----w- c:\documents and settings\foxxx\Data aplikací\Ontrack
2011-08-23 07:02 . 2011-08-23 07:02 -------- d-----w- C:\rsit
2011-08-22 22:27 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-08-22 22:27 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-08-22 22:27 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-08-22 22:27 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-08-22 22:27 . 2011-09-06 20:36 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-08-22 22:27 . 2011-09-06 20:36 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-08-22 22:27 . 2011-09-06 20:33 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-08-22 22:26 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-08-22 22:26 . 2011-08-22 22:26 -------- d-----w- c:\program files\AVAST Software
2011-08-22 22:26 . 2011-08-22 22:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-22 22:11 . 2011-08-22 22:11 -------- d-----w- c:\program files\CCleaner
2011-08-22 21:52 . 2011-08-22 21:52 -------- d-----w- C:\Uninstall
2011-08-22 17:48 . 2011-09-15 06:44 -------- d-----w- c:\program files\trend micro
2011-08-22 13:09 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-08-22 13:08 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-08-22 13:01 . 2011-08-22 13:01 -------- d-----w- C:\SOPHTEMP
2011-08-22 12:47 . 2011-08-22 12:46 5760 ----a-w- c:\windows\system32\drivers\ZmNTMon.sys
2011-08-22 12:46 . 2011-08-22 12:46 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Ontrack
2011-08-22 12:46 . 2011-08-22 12:46 49152 ----a-w- c:\windows\system32\ZMProp.cpl
2011-08-22 12:46 . 2011-08-22 12:46 -------- d-----w- c:\program files\Ontrack
2011-08-22 11:59 . 2011-08-22 11:59 -------- d-----w- c:\program files\AMD APP
2011-08-22 11:58 . 2011-08-22 11:58 -------- d-----w- c:\program files\ATI
2011-08-22 11:57 . 2011-08-22 11:57 -------- d-----w- c:\program files\ATI Technologies
2011-08-22 11:53 . 2011-08-23 08:43 -------- d-----w- C:\Fraps
2011-08-22 10:37 . 2011-08-22 10:37 -------- d-----w- C:\ATI
2011-08-22 10:19 . 2011-08-22 10:19 -------- d-----w- c:\documents and settings\Administrator
2011-08-22 09:13 . 2011-08-22 09:14 -------- d-----w- c:\documents and settings\foxxx\Local Settings\Data aplikací\AskToolbar
2011-08-22 09:10 . 2011-08-23 08:55 38320 ----a-w- c:\windows\system32\f3PSSavr.scr
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-09 09:12 . 2004-08-18 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-07-31 07:35 . 2011-07-31 07:35 65536 ----a-w- c:\windows\system32\frapsvid.dll
2011-07-28 15:49 . 2011-07-28 15:49 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-07-28 15:48 . 2011-07-28 15:48 43520 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 15:48 . 2011-07-28 15:48 13555712 ----a-w- c:\windows\system32\amdocl.dll
2011-07-20 08:45 . 2011-07-20 08:45 371272 ----a-r- c:\documents and settings\foxxx\Data aplikací\Microsoft\Installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}\SkypeIcon.exe
2011-07-15 13:29 . 2004-08-18 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2004-08-18 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-28 05:50 . 2011-05-29 08:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-24 14:10 . 2009-11-01 10:46 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2004-08-18 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2004-08-18 12:00 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2004-08-18 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2004-08-18 12:00 17408 ------w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2004-08-18 12:00 389120 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2004-08-18 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-09-03 06:15 . 2011-09-15 12:48 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZipMagic"="c:\program files\Ontrack\ZipMagic\zm32nt.exe" [2011-08-22 90112]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Metin2\\metin2.bin"=
"c:\\Program Files\\Metin2\\metin2client.bin"=
"c:\\Documents and Settings\\foxxx\\Local Settings\\Data aplikací\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\www.Cstr1k3rs.uCoz.Com\\CarbonCS v1.1\\cstrike.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\foxxx\\Dokumenty\\Downloads\\bulanci (1).exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
.
R0 zmNTMon;zmNTMon;c:\windows\system32\drivers\ZmNTMon.sys [22.8.2011 14:47 5760]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.8.2011 15:09 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.8.2011 0:27 320856]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [26.3.2011 18:08 218688]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.8.2011 0:27 20568]
S3 zmNTZip;zmNTZip;c:\program files\Ontrack\ZipMagic\zmNTZip.sys [22.8.2011 14:46 162800]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: DhcpNameServer = 93.185.57.3 192.168.1.5 192.168.1.2
FF - ProfilePath - c:\documents and settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=YLC&o=102408&locale=en_EU&apn_uid=9016F945-A3EC-469F-BB60-029E4A4C0E96&apn_ptnrs=QC&apn_sauid=991D8834-5EA0-4589-8811-F1EDEE4B441F&apn_dtid=YYYYYYYYCZ&q=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-18 14:40
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2412)
c:\program files\Ontrack\ZipMagic\ZMIHook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-09-18 14:43:36
ComboFix-quarantined-files.txt 2011-09-18 12:43
.
Před spuštěním: Volných bajtů: 34 840 002 560
Po spuštění: Volných bajtů: 34 794 237 952
.
- - End Of File - - 918F79C90034061DC6A86B003E2ADE9A

Pokud jsi tak ještě neučinila, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci


V mezičase, pokud si troufneš jít do registrů tak přes Start >> Spustit do okénka nakopíruj :

regedit

a stiskni Enter.

Otevře se ti editor a v něm najdeš :

HKEY_LOCAL_MACHINE >> system >> currentcontrolset >> control >> session manager

při kliknutí na poslední položku bude po pravé straně :

BootExecute

při dvojkliku na tuto položku se ti otevře okno kde mimo jiné bude :

autocheck autochk

a pod ním další řádky kde by měl být řádek obsahující název AVG, ten smaž.

ComboFix 11-09-19.01 - Lukas 19.09.2011 8:50.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.512.247 [GMT 2:00]
Spuštěný z: c:\documents and settings\Lukas\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Lukas\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Downloaded Installers
c:\program files\Downloaded Installers\{67cdd5a0-c572-4d2c-a354-6492b51f4138}\setup.msi
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-19 do 2011-09-19 )))))))))))))))))))))))))))))))
.
.
2011-09-19 06:18 . 2011-09-19 06:18 -------- d-----w- c:\program files\SlimDrivers
2011-09-19 06:12 . 2011-09-19 06:12 -------- d-----w- c:\windows\LastGood
2011-09-19 06:12 . 2011-09-19 06:18 12984 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2011-09-19 06:12 . 2011-09-19 06:12 -------- d-----w- c:\documents and settings\Lukas\Local Settings\Data aplikací\SlimWare Utilities Inc
2011-09-17 08:08 . 2011-09-17 08:08 -------- d-----w- c:\program files\Speccy
2011-09-17 08:02 . 2011-09-17 08:03 -------- d-----w- c:\documents and settings\foxxx\Data aplikací\Media Player Classic
2011-09-17 07:46 . 2011-09-17 07:46 -------- d-----w- c:\program files\Realtek
2011-09-17 07:46 . 2011-08-31 17:12 1698408 ----a-w- c:\windows\RtlExUpd.dll
2011-09-17 07:45 . 2006-02-07 13:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-09-17 07:45 . 2006-02-07 13:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-09-17 07:45 . 2006-02-07 13:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-09-17 07:45 . 2006-02-07 13:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-09-17 07:45 . 2005-11-13 21:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2011-09-17 07:45 . 2011-09-17 07:45 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-09-17 07:45 . 2011-09-17 07:45 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-09-12 09:45 . 2011-09-12 09:45 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Malwarebytes
2011-09-12 09:43 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-12 09:43 . 2011-09-12 09:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-09-12 09:43 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-09-12 09:43 . 2011-09-12 10:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-03 10:17 . 2011-09-09 09:12 602112 -c----w- c:\windows\system32\dllcache\crypt32.dll
2011-08-27 11:08 . 2008-04-13 17:47 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2011-08-27 11:08 . 2008-04-13 17:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2011-08-23 07:33 . 2011-08-23 07:33 -------- d-----w- c:\documents and settings\foxxx\Data aplikací\Ontrack
2011-08-23 07:02 . 2011-08-23 07:02 -------- d-----w- C:\rsit
2011-08-22 22:27 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-08-22 22:27 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-08-22 22:27 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-08-22 22:27 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-08-22 22:27 . 2011-09-06 20:36 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-08-22 22:27 . 2011-09-06 20:36 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-08-22 22:27 . 2011-09-06 20:33 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-08-22 22:26 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-08-22 22:26 . 2011-08-22 22:26 -------- d-----w- c:\program files\AVAST Software
2011-08-22 22:26 . 2011-08-22 22:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-22 22:11 . 2011-08-22 22:11 -------- d-----w- c:\program files\CCleaner
2011-08-22 21:52 . 2011-08-22 21:52 -------- d-----w- C:\Uninstall
2011-08-22 17:48 . 2011-09-15 06:44 -------- d-----w- c:\program files\trend micro
2011-08-22 13:09 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-08-22 13:08 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr
2011-08-22 13:01 . 2011-08-22 13:01 -------- d-----w- C:\SOPHTEMP
2011-08-22 12:47 . 2011-08-22 12:46 5760 ----a-w- c:\windows\system32\drivers\ZmNTMon.sys
2011-08-22 12:46 . 2011-08-22 12:46 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Ontrack
2011-08-22 12:46 . 2011-08-22 12:46 49152 ----a-w- c:\windows\system32\ZMProp.cpl
2011-08-22 12:46 . 2011-08-22 12:46 -------- d-----w- c:\program files\Ontrack
2011-08-22 11:59 . 2011-08-22 11:59 -------- d-----w- c:\program files\AMD APP
2011-08-22 11:58 . 2011-08-22 11:58 -------- d-----w- c:\program files\ATI
2011-08-22 11:57 . 2011-08-22 11:57 -------- d-----w- c:\program files\ATI Technologies
2011-08-22 11:53 . 2011-08-23 08:43 -------- d-----w- C:\Fraps
2011-08-22 10:37 . 2011-08-22 10:37 -------- d-----w- C:\ATI
2011-08-22 10:19 . 2011-08-22 10:19 -------- d-----w- c:\documents and settings\Administrator
2011-08-22 09:13 . 2011-08-22 09:14 -------- d-----w- c:\documents and settings\foxxx\Local Settings\Data aplikací\AskToolbar
2011-08-22 09:10 . 2011-08-23 08:55 38320 ----a-w- c:\windows\system32\f3PSSavr.scr
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-09 09:12 . 2004-08-18 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-07-31 07:35 . 2011-07-31 07:35 65536 ----a-w- c:\windows\system32\frapsvid.dll
2011-07-28 15:49 . 2011-07-28 15:49 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-07-28 15:48 . 2011-07-28 15:48 43520 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 15:48 . 2011-07-28 15:48 13555712 ----a-w- c:\windows\system32\amdocl.dll
2011-07-20 08:45 . 2011-07-20 08:45 371272 ----a-r- c:\documents and settings\foxxx\Data aplikací\Microsoft\Installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}\SkypeIcon.exe
2011-07-15 13:29 . 2004-08-18 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2004-08-18 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-28 05:50 . 2011-05-29 08:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-24 14:10 . 2009-11-01 10:46 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2004-08-18 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2004-08-18 12:00 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2004-08-18 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2004-08-18 12:00 17408 ------w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2004-08-18 12:00 389120 ----a-w- c:\windows\system32\html.iec
2011-09-03 06:15 . 2011-09-15 12:48 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-09-18_12.40.37 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-18 12:00 . 2011-09-18 12:23 39992 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2011-09-19 06:09 39992 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2011-09-18 12:23 46016 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2011-09-19 06:09 46016 c:\windows\system32\perfc005.dat
+ 2011-09-19 06:12 . 2011-09-19 06:12 12984 c:\windows\LastGood\system32\DRIVERS\SWDUMon.sys
+ 2004-08-18 12:00 . 2011-09-19 06:09 311604 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2011-09-18 12:23 311604 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2011-09-18 12:23 309716 c:\windows\system32\perfh005.dat
+ 2004-08-18 12:00 . 2011-09-19 06:09 309716 c:\windows\system32\perfh005.dat
+ 2011-09-19 06:18 . 2011-09-19 06:18 131072 c:\windows\Installer\{67CDD5A0-C572-4D2C-A354-6492B51F4138}\Icon.exe
+ 2011-09-19 06:18 . 2011-09-19 06:18 1075712 c:\windows\Installer\753fc.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SlimDrivers"="c:\program files\SlimDrivers\SlimDrivers.exe" [2011-09-07 27473760]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZipMagic"="c:\program files\Ontrack\ZipMagic\zm32nt.exe" [2011-08-22 90112]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Metin2\\metin2.bin"=
"c:\\Program Files\\Metin2\\metin2client.bin"=
"c:\\Documents and Settings\\foxxx\\Local Settings\\Data aplikací\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\www.Cstr1k3rs.uCoz.Com\\CarbonCS v1.1\\cstrike.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\foxxx\\Dokumenty\\Downloads\\bulanci (1).exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
.
R0 zmNTMon;zmNTMon;c:\windows\system32\drivers\ZmNTMon.sys [22.8.2011 14:47 5760]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.8.2011 15:09 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.8.2011 0:27 320856]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [26.3.2011 18:08 218688]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.8.2011 0:27 20568]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [19.9.2011 8:12 12984]
S3 zmNTZip;zmNTZip;c:\program files\Ontrack\ZipMagic\zmNTZip.sys [22.8.2011 14:46 162800]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: DhcpNameServer = 93.185.57.3 192.168.1.5 192.168.1.2
FF - ProfilePath - c:\documents and settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-19 08:59
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2011-09-19 09:01:49
ComboFix-quarantined-files.txt 2011-09-19 07:01
ComboFix2.txt 2011-09-18 12:43
.
Před spuštěním: Volných bajtů: 34 608 406 528
Po spuštění: Volných bajtů: 34 563 919 872
.
- - End Of File - - FD7BE25008CD199B5FA79CE86606E6AC

regedit

a stiskni Enter.

Otevře se ti editor a v něm najdeš :

HKEY_LOCAL_MACHINE >> system >> currentcontrolset >> control >> session manager

při kliknutí na poslední položku bude po pravé straně :

BootExecute

při dvojkliku na tuto položku se ti otevře okno kde mimo jiné bude :

autocheck autochk

a pod ním další řádky kde by měl být řádek obsahující název AVG, ten smaž.


Byly tam dva řádky obsahující AVG,oba jsou vymazány.