VIRY.CZ

Dobrý den
Toto forum mi bylo doporučeno kamarádem, že mi tu určitě pomůžete s mým problémem. Od pořízení notebooku cca 1, 1,5 roku jsem ho nečistila a nyní to začíná být poznat. Aplikace se pomalu spouštějí a určitě tam bude za tu dobu i nějaký vir!
Předem děkuji všem za pomoc!
Přikládám tedy log z programu RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Vladěnka at 2012-10-13 12:08:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 97 GB (41%) free of 238 GB
Total RAM: 1791 MB (55% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskeng.exe {39B8A964-6EBB-41D5-92A1-E32A3936F1ED}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-dc19c06d-8354-45a8-9d37-dcb8ef176ecf -SystemEventPortName:HostProcess-3d4d9a7d-9dfe-47ba-9938-ba2cac5b107c -IoCancelEventPortName:HostProcess-e771e1c5-1902-4392-985e-49eafe29446b -NonStateChangingEventPortName:HostProcess-bbf700e0-dcf0-4463-97db-c8ce5482d9a6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8157f07f-49f4-45e5-8339-595a7863b060
"C:\Users\Vladěnka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-06-24 7935520]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-06-24 1833504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Vladěnka\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Vladěnka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-23 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-13 12:08:31 ----D---- C:\rsit
2012-10-13 12:08:31 ----D---- C:\Program Files\trend micro
2012-10-10 18:29:41 ----A---- C:\Windows\system32\crypt32.dll
2012-10-10 18:29:40 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-10-10 18:29:39 ----A---- C:\Windows\system32\cryptsvc.dll
2012-10-10 18:29:38 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-10-10 18:29:38 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-10-10 18:29:38 ----A---- C:\Windows\system32\cryptnet.dll
2012-10-10 18:28:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-10-10 18:28:44 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-10-10 18:28:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-10-10 18:28:23 ----A---- C:\Windows\system32\KernelBase.dll
2012-10-10 18:28:23 ----A---- C:\Windows\system32\kernel32.dll
2012-10-10 18:28:21 ----A---- C:\Windows\system32\winsrv.dll
2012-10-10 18:28:21 ----A---- C:\Windows\system32\conhost.exe
2012-10-10 18:28:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-10-10 18:28:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-10-10 18:28:18 ----A---- C:\Windows\system32\wow64.dll
2012-10-10 18:28:17 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-10-10 18:28:16 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-10-10 18:28:16 ----A---- C:\Windows\system32\ntvdm64.dll
2012-10-10 18:28:15 ----A---- C:\Windows\system32\wow64win.dll
2012-10-10 18:28:15 ----A---- C:\Windows\system32\wow64cpu.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 18:28:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-10 18:28:11 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 18:28:04 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-10 18:27:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 18:27:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-10 18:27:51 ----A---- C:\Windows\SYSWOW64\user.exe
2012-10-10 18:27:17 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-10-10 18:02:45 ----A---- C:\Windows\system32\wintrust.dll
2012-10-10 18:02:44 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-10-10 18:02:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-10-10 18:02:22 ----A---- C:\Windows\system32\tzres.dll
2012-10-10 18:01:56 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-10-10 18:01:56 ----A---- C:\Windows\system32\kerberos.dll
2012-09-27 15:08:05 ----A---- C:\Windows\system32\OxpsConverter.exe
2012-09-23 11:11:17 ----A---- C:\Windows\system32\mshtml.dll
2012-09-23 11:11:13 ----A---- C:\Windows\system32\ieframe.dll
2012-09-23 11:11:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-09-23 11:10:58 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-09-23 11:10:55 ----A---- C:\Windows\system32\msfeeds.dll
2012-09-23 11:10:51 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-09-23 11:10:49 ----A---- C:\Windows\system32\urlmon.dll
2012-09-23 11:10:47 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-09-23 11:10:44 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-09-23 11:10:43 ----A---- C:\Windows\system32\wininet.dll
2012-09-23 11:10:37 ----A---- C:\Windows\system32\iertutil.dll
2012-09-23 11:10:36 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-09-23 11:10:36 ----A---- C:\Windows\system32\ieui.dll
2012-09-23 11:10:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-09-23 11:10:33 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-09-23 11:10:33 ----A---- C:\Windows\system32\mshtmled.dll
2012-09-23 11:10:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-09-23 11:10:30 ----A---- C:\Windows\system32\jsproxy.dll
2012-09-23 11:10:29 ----A---- C:\Windows\system32\url.dll
2012-09-23 11:10:28 ----A---- C:\Windows\SYSWOW64\url.dll

======List of files/folders modified in the last 1 month======

2012-10-13 12:08:31 ----RD---- C:\Program Files
2012-10-13 12:08:14 ----D---- C:\Windows
2012-10-13 12:02:01 ----D---- C:\Windows\system32\Tasks
2012-10-13 12:02:00 ----D---- C:\Windows\Tasks
2012-10-13 12:01:41 ----D---- C:\Windows\system32\config
2012-10-13 10:35:32 ----D---- C:\Windows\rescache
2012-10-13 10:28:56 ----D---- C:\Windows\Temp
2012-10-13 10:09:13 ----SHD---- C:\System Volume Information
2012-10-13 10:08:38 ----RD---- C:\Program Files (x86)
2012-10-13 10:08:38 ----D---- C:\Windows\system32\drivers
2012-10-13 10:08:38 ----D---- C:\ProgramData\Norton
2012-10-13 10:08:34 ----D---- C:\ProgramData\Symantec
2012-10-13 10:05:42 ----SHD---- C:\Windows\Installer
2012-10-13 10:05:36 ----RSD---- C:\Windows\assembly
2012-10-13 10:05:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-10-13 10:05:33 ----RSD---- C:\Windows\Fonts
2012-10-13 10:05:23 ----D---- C:\Windows\SysWOW64
2012-10-13 10:05:17 ----D---- C:\Program Files (x86)\Common Files
2012-10-13 10:05:10 ----D---- C:\Windows\ShellNew
2012-10-13 10:05:05 ----D---- C:\Windows\inf
2012-10-13 10:00:46 ----HD---- C:\ProgramData
2012-10-13 09:57:06 ----D---- C:\Windows\System32
2012-10-13 09:53:31 ----D---- C:\Windows\Prefetch
2012-10-13 09:35:27 ----D---- C:\Windows\SoftwareDistribution
2012-10-13 09:33:52 ----D---- C:\Users\Vladěnka\AppData\Roaming\DAEMON Tools Lite
2012-10-13 09:33:51 ----D---- C:\Users\Vladěnka\AppData\Roaming\Skype
2012-10-13 09:33:49 ----D---- C:\Windows\Logs
2012-10-13 09:33:49 ----D---- C:\Windows\debug
2012-10-11 17:17:06 ----D---- C:\Windows\winsxs
2012-10-11 17:14:17 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-10-11 17:14:16 ----D---- C:\Windows\system32\cs-CZ
2012-10-11 17:14:16 ----D---- C:\Windows\AppPatch
2012-10-11 13:40:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-10-11 12:50:35 ----A---- C:\Windows\system32\MRT.exe
2012-10-10 18:02:52 ----D---- C:\Windows\system32\catroot2
2012-10-10 18:02:52 ----D---- C:\Windows\system32\catroot
2012-10-05 14:59:02 ----D---- C:\Program Files (x86)\The KMPlayer
2012-09-24 07:53:21 ----D---- C:\Program Files (x86)\Internet Explorer
2012-09-24 07:53:20 ----D---- C:\Windows\SYSWOW64\migration
2012-09-24 07:53:20 ----D---- C:\Windows\system32\migration
2012-09-24 07:53:20 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-29 270912]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6038016]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-06-24 1787168]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2009-06-19 712704]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-06-24 205472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 216064]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-30 203264]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-25 1255736]

-----------------EOF-----------------

Zdravím.

Vydrž minutku, na logu se intenzivně pracuje.

Tak na první pohled v logu nic špatného nevidím. Provedeme nějaké kroky a uvidíme, zda-li to pomůže.


Stáhni tedy AdwCleaner - http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulož jej nejlépe na Plochu.
• Ukonči všechny programy!!
• Spusť AdwCleaner.
• Pokud používáš operační systém Windows Vista či Windows 7, klikni na AdwCleaner pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Klikni na [Search].
• Proběhne scan a pak se objeví log, který bude případně uložen na systémovém disku jako AdwCleaner[R?].txt - ten mi sem vlož.

Děkuji za rychlou odpověď

Zde je výsledek.

# AdwCleaner v2.004 - Logfile created 10/13/2012 at 13:10:36
# Updated 06/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Vladěnka - VLADĚNKA-PC
# Boot Mode : Normal
# Running from : C:\Users\Vladěnka\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-2451135160-2336112935-2307583427-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Vladěnka\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1158 octets] - [13/10/2012 13:10:36]

########## EOF - C:\AdwCleaner[R1].txt - [1218 octets] ##########

Není zač děkovat.


Provedeme opravy AdwCleanerem.

• Spusť AdwCleaner znovu.
• Pokud používáš operační systém Windows Vista či Windows 7, klikni na AdwCleaner pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Klikni na [Delete].
• PC provede opravu, restartuje se a vytvoří log C:\AdwCleaner [S1].txt - jeho obsah mi sem zase vlož.

Potom stáhni RogueKiller - http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

• Ukonči všechny programy!
• Spusť RogueKiller. Pokud používáš operační systém Windows Vista či Windows 7, klikni na jeho ikonu pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Počkej, než program dokončí Prescan.
• Potom klikni na tlačítko [Prohledat] a počkej, až prohlídka proběhne.
• Klikni na tlačítko [Zpráva] - otevře se log, ten mi sem vlož.
• Detailní postup včetně obrázků najdeš zde: http://forum.viry.cz/viewtopic.php?f=24&t=120452

Tady je výsledek ADW

# AdwCleaner v2.004 - Logfile created 10/13/2012 at 14:17:11
# Updated 06/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Vladěnka - VLADĚNKA-PC
# Boot Mode : Normal
# Running from : C:\Users\Vladěnka\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Google Chrome v22.0.1229.94

File : C:\Users\Vladěnka\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1283 octets] - [13/10/2012 13:10:36]
AdwCleaner[S1].txt - [1071 octets] - [13/10/2012 14:17:11]

########## EOF - C:\AdwCleaner[S1].txt - [1131 octets] ##########

A tady Roguekilleru
RogueKiller V8.1.1 [10/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Vladěnka [Práva správce]
Mód : Kontrola -- Datum : 10/13/2012 14:22:29

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 10 ¤¤¤
[TASK][SUSP PATH] CisPostUninstall : C:\Users\VLADNK~1\AppData\Local\Temp\cis6E1D.exe --PostUninstall -> NALEZENO
[TASK][SUSP PATH] {A5448F97-C61B-44B1-A526-620FBFFC9D3F} : C:\Windows\system32\pcalua.exe -a "C:\Users\Vladěnka\Desktop\Zoo-Tycoon-2-+-CZ-+-NoCD-Crack\Zoo Tycoon 2 + CZ + NoCD Crack.exe" -d C:\Users\Vladěnka\Desktop\Zoo-Tycoon-2-+-CZ-+-NoCD-Crack -> NALEZENO
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{FFAD18A8-61C6-4493-AC8A-ED3A156F4674} : NameServer (212.96.161.6,212.96.160.7) -> NALEZENO
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{FFAD18A8-61C6-4493-AC8A-ED3A156F4674} : NameServer (212.96.161.6,212.96.160.7) -> NALEZENO
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ] HKLM\[...]\Wow6432Node\System : EnableLUA (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2565GSX ATA Device +++++
--- User ---
[MBR] e4443ddd0703f57473f9f256cd6fc5d0
[BSP] 1a2f225402f3a823ffe3f61cff741637 : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238472 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1].txt >>
RKreport[1].txt

Takže provedeme opravy.

• Ukonči všechny programy!
• Spusť RogueKiller. Pokud používáš operační systém Windows Vista či Windows 7, klikni na jeho ikonu pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Počkej, než program dokončí Prescan.
• Zvol možnost [Prohledat] a počkej, až prohlídka proběhne.
• V záložce Registry nech všechny nálezy označeny.
• Klikni na tlačítko [Smazat] a následně na [Zpráva] - otevře se log, ten mi sem vlož.

A hoď mi sem nový aktuální log ze RSITu, abych se podíval, co se povedlo a co ne.

Dobré ráno
Tady je zpráva z RogueKillleru

RogueKiller V8.1.1 [10/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Vladěnka [Práva správce]
Mód : Odebrat -- Datum : 10/14/2012 09:21:05

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[TASK][SUSP PATH] CisPostUninstall : C:\Users\VLADNK~1\AppData\Local\Temp\cis6E1D.exe --PostUninstall -> VYMAZÁNO
[TASK][PREVRUN] {A5448F97-C61B-44B1-A526-620FBFFC9D3F} : C:\Windows\system32\pcalua.exe -a "C:\Users\Vladěnka\Desktop\Zoo-Tycoon-2-+-CZ-+-NoCD-Crack\Zoo Tycoon 2 + CZ + NoCD Crack.exe" -d C:\Users\Vladěnka\Desktop\Zoo-Tycoon-2-+-CZ-+-NoCD-Crack -> VYMAZÁNO
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{FFAD18A8-61C6-4493-AC8A-ED3A156F4674} : NameServer (212.96.161.6,212.96.160.7) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{FFAD18A8-61C6-4493-AC8A-ED3A156F4674} : NameServer (212.96.161.6,212.96.160.7) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2565GSX ATA Device +++++
--- User ---
[MBR] e4443ddd0703f57473f9f256cd6fc5d0
[BSP] 1a2f225402f3a823ffe3f61cff741637 : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238472 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

A zde RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Vladěnka at 2012-10-14 09:22:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 88 GB (37%) free of 238 GB
Total RAM: 1791 MB (67% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Vladěnka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-06-24 7935520]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-06-24 1833504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Vladěnka\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Vladěnka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-23 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-13 14:17:11 ----A---- C:\AdwCleaner[S1].txt
2012-10-13 13:37:32 ----D---- C:\Windows\vbSkinner
2012-10-13 13:30:19 ----A---- C:\Windows\iun6002.exe
2012-10-13 13:16:33 ----D---- C:\Users\Vladěnka\AppData\Roaming\FTWeak
2012-10-13 13:10:36 ----A---- C:\AdwCleaner[R1].txt
2012-10-13 12:08:31 ----D---- C:\rsit
2012-10-13 12:08:31 ----D---- C:\Program Files\trend micro
2012-10-10 18:29:41 ----A---- C:\Windows\system32\crypt32.dll
2012-10-10 18:29:40 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-10-10 18:29:39 ----A---- C:\Windows\system32\cryptsvc.dll
2012-10-10 18:29:38 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-10-10 18:29:38 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2012-10-10 18:29:38 ----A---- C:\Windows\system32\cryptnet.dll
2012-10-10 18:28:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-10-10 18:28:44 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-10-10 18:28:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-10-10 18:28:23 ----A---- C:\Windows\system32\KernelBase.dll
2012-10-10 18:28:23 ----A---- C:\Windows\system32\kernel32.dll
2012-10-10 18:28:21 ----A---- C:\Windows\system32\winsrv.dll
2012-10-10 18:28:21 ----A---- C:\Windows\system32\conhost.exe
2012-10-10 18:28:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-10-10 18:28:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-10-10 18:28:18 ----A---- C:\Windows\system32\wow64.dll
2012-10-10 18:28:17 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-10-10 18:28:16 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-10-10 18:28:16 ----A---- C:\Windows\system32\ntvdm64.dll
2012-10-10 18:28:15 ----A---- C:\Windows\system32\wow64win.dll
2012-10-10 18:28:15 ----A---- C:\Windows\system32\wow64cpu.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 18:28:14 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 18:28:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-10 18:28:13 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-10 18:28:12 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-10 18:28:11 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-10 18:28:11 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-10 18:28:10 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-10 18:28:09 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-10 18:28:08 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 18:28:07 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-10 18:28:06 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-10 18:28:05 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-10 18:28:04 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-10 18:27:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-10 18:27:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-10 18:27:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-10 18:27:53 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-10 18:27:51 ----A---- C:\Windows\SYSWOW64\user.exe
2012-10-10 18:27:17 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-10-10 18:02:45 ----A---- C:\Windows\system32\wintrust.dll
2012-10-10 18:02:44 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-10-10 18:02:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-10-10 18:02:22 ----A---- C:\Windows\system32\tzres.dll
2012-10-10 18:01:56 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-10-10 18:01:56 ----A---- C:\Windows\system32\kerberos.dll
2012-09-27 15:08:05 ----A---- C:\Windows\system32\OxpsConverter.exe
2012-09-23 11:11:17 ----A---- C:\Windows\system32\mshtml.dll
2012-09-23 11:11:13 ----A---- C:\Windows\system32\ieframe.dll
2012-09-23 11:11:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-09-23 11:10:58 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-09-23 11:10:55 ----A---- C:\Windows\system32\msfeeds.dll
2012-09-23 11:10:51 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-09-23 11:10:49 ----A---- C:\Windows\system32\urlmon.dll
2012-09-23 11:10:47 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-09-23 11:10:44 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-09-23 11:10:43 ----A---- C:\Windows\system32\wininet.dll
2012-09-23 11:10:37 ----A---- C:\Windows\system32\iertutil.dll
2012-09-23 11:10:36 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-09-23 11:10:36 ----A---- C:\Windows\system32\ieui.dll
2012-09-23 11:10:34 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-09-23 11:10:33 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-09-23 11:10:33 ----A---- C:\Windows\system32\mshtmled.dll
2012-09-23 11:10:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-09-23 11:10:30 ----A---- C:\Windows\system32\jsproxy.dll
2012-09-23 11:10:29 ----A---- C:\Windows\system32\url.dll
2012-09-23 11:10:28 ----A---- C:\Windows\SYSWOW64\url.dll

======List of files/folders modified in the last 1 month======

2012-10-14 09:22:15 ----D---- C:\Windows\Prefetch
2012-10-14 09:21:03 ----D---- C:\Windows\system32\Tasks
2012-10-14 09:11:44 ----D---- C:\Windows\Temp
2012-10-13 15:59:35 ----D---- C:\Windows\system32\config
2012-10-13 15:16:30 ----D---- C:\Windows\rescache
2012-10-13 14:08:28 ----D---- C:\Windows\Microsoft.NET
2012-10-13 14:08:27 ----RSD---- C:\Windows\assembly
2012-10-13 14:00:53 ----RD---- C:\Program Files (x86)
2012-10-13 14:00:53 ----D---- C:\Windows\SysWOW64
2012-10-13 14:00:53 ----D---- C:\Windows
2012-10-13 13:20:30 ----SHD---- C:\System Volume Information
2012-10-13 13:19:04 ----HD---- C:\ProgramData
2012-10-13 13:10:24 ----D---- C:\Windows\System32
2012-10-13 13:10:24 ----D---- C:\Windows\inf
2012-10-13 13:10:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-10-13 13:03:55 ----D---- C:\Windows\SoftwareDistribution
2012-10-13 13:01:24 ----D---- C:\Windows\winsxs
2012-10-13 12:58:42 ----RD---- C:\Program Files
2012-10-13 12:58:42 ----D---- C:\Program Files (x86)\Internet Explorer
2012-10-13 12:58:41 ----D---- C:\Program Files\Internet Explorer
2012-10-13 12:58:39 ----D---- C:\Program Files\Windows Media Player
2012-10-13 12:58:39 ----D---- C:\Program Files\DVD Maker
2012-10-13 12:58:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-10-13 12:58:36 ----D---- C:\Windows\system32\wbem
2012-10-13 12:58:36 ----D---- C:\Windows\system32\cs-CZ
2012-10-13 12:58:36 ----D---- C:\Windows\PolicyDefinitions
2012-10-13 12:02:00 ----D---- C:\Windows\Tasks
2012-10-13 10:08:38 ----D---- C:\Windows\system32\drivers
2012-10-13 10:08:38 ----D---- C:\ProgramData\Norton
2012-10-13 10:08:34 ----D---- C:\ProgramData\Symantec
2012-10-13 10:05:42 ----SHD---- C:\Windows\Installer
2012-10-13 10:05:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-10-13 10:05:33 ----RSD---- C:\Windows\Fonts
2012-10-13 10:05:17 ----D---- C:\Program Files (x86)\Common Files
2012-10-13 09:33:52 ----D---- C:\Users\Vladěnka\AppData\Roaming\DAEMON Tools Lite
2012-10-13 09:33:51 ----D---- C:\Users\Vladěnka\AppData\Roaming\Skype
2012-10-13 09:33:49 ----D---- C:\Windows\Logs
2012-10-13 09:33:49 ----D---- C:\Windows\debug
2012-10-11 17:14:16 ----D---- C:\Windows\AppPatch
2012-10-11 12:50:35 ----A---- C:\Windows\system32\MRT.exe
2012-10-10 18:02:52 ----D---- C:\Windows\system32\catroot2
2012-10-10 18:02:52 ----D---- C:\Windows\system32\catroot
2012-10-05 14:59:02 ----D---- C:\Program Files (x86)\The KMPlayer
2012-09-24 07:53:20 ----D---- C:\Windows\SYSWOW64\migration
2012-09-24 07:53:20 ----D---- C:\Windows\system32\migration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-08-29 270912]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6038016]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-06-24 1787168]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2009-06-19 712704]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-06-24 205472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 Dot4Scan;Scan Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Scan.sys [2009-07-14 13824]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 216064]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-30 203264]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-25 1255736]

-----------------EOF-----------------

Stáhni utilitu OTM z jednoho z těchto odkazů:

• http://oldtimer.geekstogo.com/OTM.exe
• http://oldtimer.geekstogo.com/OTM.com
• http://oldtimer.geekstogo.com/OTM.scr

Ulož ji na Plochu a dvojklikem spusť.

Bude-li Avast křičet, že to chce otevřít v Sandboxu, nedovol to! Vyber možnost Otevřít normálně!

Do levého okna Paste Instructions for Items to be Moved zkopíruj tento script (pouze zelená písmenka v bílém poli, včetně té dvojtečky před Commands!): Nyní klikni na tlačítko [MoveIt!], čímž vše spustíš.
Po restartu mi sem hoď log, který najdeš v C:\_OTM\MovedFiles\

Provedeno
Zde je log
All processes killed
========== COMMANDS ==========

Restore point Set: OTM Restore Point
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Vladěnka
->Temp folder emptied: 2068688 bytes
->Temporary Internet Files folder emptied: 72410 bytes
->Google Chrome cache emptied: 20849429 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 608 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50641 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 22,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Vladěnka
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

========== SERVICES/DRIVERS ==========
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP157.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1FB0.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3477.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8D08.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8E0E.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9A1D.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC590.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP165F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1A53.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1ED1.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2B80.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2D06.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP316C.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3930.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3A35.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3A7F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP49AA.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4E43.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP51CE.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP618A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP62EE.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6420.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP7EE3.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP93E7.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP9D98.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPA69F.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPAB5B.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPAD03.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPAFC9.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPBA98.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPC572.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPC7E.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPCC87.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF24E.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF484.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF626.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF7F8.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFB7C.tmp folder moved successfully.
C:\Windows\Installer\MSI2DC9.tmp moved successfully.
C:\Windows\Installer\MSI3B32.tmp moved successfully.
C:\Windows\Installer\MSI4279.tmp moved successfully.
C:\Windows\Installer\MSI4283.tmp moved successfully.
C:\Windows\Installer\MSI5C60.tmp moved successfully.
C:\Windows\Installer\MSI5D6A.tmp moved successfully.
C:\Windows\Installer\MSI5DBB.tmp moved successfully.
C:\Windows\Installer\MSI5FFA.tmp moved successfully.
C:\Windows\Installer\MSI6B34.tmp moved successfully.
C:\Windows\Installer\MSI7FFC.tmp moved successfully.
C:\Windows\Installer\MSIA0AB.tmp moved successfully.
C:\Windows\Installer\MSICABF.tmp moved successfully.
C:\Windows\Installer\MSIF688.tmp moved successfully.
C:\Windows\Installer\MSIF89C.tmp moved successfully.
C:\Windows\Installer\MSIFEB5.tmp moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2451135160-2336112935-2307583427-1000UA.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\StartCCC deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLs"|"" /E : value set successfully!

OTM by OldTimer - Version 3.1.21.0 log created on 10142012_142159

Files moved on Reboot...
C:\Users\Vladěnka\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Omlouvám se za prodlevu, ale měl jsem důležitá neodkladná osobní jednání.

Super, OTM provedlo, co mělo.

Jak se chová počítač teď, můžeme dočistit a hotovo?

Zdravím
Vůbec nic se nedějě, netřeba se omlouvat.

Notebook už je na tom podstatně lepší. Můžeme to tedy dodělat.

OK, tak uklidím po sobě.


OTC http://oldtimer.geekstogo.com/OTC.exe

• Stáhni a spusť.
• Klikni na CleanUp a potvrď YES.
• Program uklidí a může (nemusí) restartovat PC.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a může (nemusí) restartovat PC.
• Po použití utilitu smaž ručně.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.

Vše hotovo!

Moc děkuju! Dotazy nemám.