VIRY.CZ

Dobrý den.
Mám noťas, k němu připojenou klávesnici, myš atd - prostřednictvím rozbočovacího nástavce.
Tento nástavec má kontrolku, která svítí, když je noťas zapnutý. Noťas jsem vypla, kontrolka zhasla. Po cca 3 h jsem se vrátila a všimla jsem si, že kontrolka na rozbočovacím nástavci svítí, ostatní kontrolky na noťasu ne a "tvářil" se, že je vypnutý. Po zapnutí se choval úplně stejně, jako obvykle.
Dala jsem čištění a všimla jsem si, že tam byly věci, kde jsem se určitě nijak nepřihlašovala.

etaily souborů k vymazání (Poznámka: Zatím nebyly vymazány žádné soubory)
------------------------------------------------------------------------------------------
IE dočasné soubory (18 files) 0,68MB
C:\Documents and Settings\x\Cookies\x@hit.gemius[2].txt 146 bytes
C:\Documents and Settings\x\Cookies\x@imedia[2].txt 161 bytes
C:\Documents and Settings\x\Cookies\x@seznam[2].txt 151 bytes
Určrno k vymazání: C:\Documents and Settings\x\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Určrno k vymazání: C:\Documents and Settings\x\Cookies\index.dat
C:\WINDOWS\TEMP\ASPNETSetup_00000.log 5,17KB
C:\WINDOWS\TEMP\ASPNETSetup_00001.log 5,04KB
C:\WINDOWS\TEMP\dd_depcheck_NETFX_EXP_35.txt 0,39MB
C:\WINDOWS\TEMP\dd_dotnetfx35install.txt 0,38MB
C:\WINDOWS\TEMP\dd_NET_Framework20_Setup149A.txt 7,92MB
C:\WINDOWS\TEMP\dd_NET_Framework20_Setup22D8.txt 4,23MB
C:\WINDOWS\TEMP\dd_NET_Framework30_Setup1A54.txt 3,07MB
C:\WINDOWS\TEMP\dd_NET_Framework35_MSI1CB4.txt 1,38MB
C:\WINDOWS\TEMP\dd_RGB9RAST_x86.msi22C8.txt 0,13MB
C:\WINDOWS\TEMP\dd_wcf_retCA4280.txt 4,13KB
C:\WINDOWS\TEMP\dd_wcf_retCA6B80.txt 4,26KB
C:\WINDOWS\TEMP\dd_XPS.txt 8,78KB
C:\WINDOWS\TEMP\MSI1bbc9.LOG 500 bytes
C:\WINDOWS\TEMP\uxeventlog.txt 14,17KB
C:\Documents and Settings\x\Local Settings\Temp\Arabic.bin 20,50KB
C:\Documents and Settings\x\Local Settings\Temp\Danish.bin 22,26KB
C:\Documents and Settings\x\Local Settings\Temp\Dutch.bin 25,15KB
C:\Documents and Settings\x\Local Settings\Temp\English.bin 21,43KB
C:\Documents and Settings\x\Local Settings\Temp\Finnish.bin 22,33KB
C:\Documents and Settings\x\Local Settings\Temp\French.bin 26,61KB
C:\Documents and Settings\x\Local Settings\Temp\German.bin 25,16KB
C:\Documents and Settings\x\Local Settings\Temp\Hebrew.bin 19,11KB
C:\Documents and Settings\x\Local Settings\Temp\Hungarian.bin 25,48KB
C:\Documents and Settings\x\Local Settings\Temp\IMT10.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT12.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT1E.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT20.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT25.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT27.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT37.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT39.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT3B.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT3D.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT3F.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT49.xml 1,93KB
C:\Documents and Settings\x\Local Settings\Temp\IMT4A.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT4C.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT5C.xml 881 bytes
C:\Documents and Settings\x\Local Settings\Temp\IMT74.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT76.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMT83.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\IMT85.xml 0,77MB
C:\Documents and Settings\x\Local Settings\Temp\IMTF.xml 1,96KB
C:\Documents and Settings\x\Local Settings\Temp\Italian.bin 26,78KB
C:\Documents and Settings\x\Local Settings\Temp\Japanese.bin 23,74KB
C:\Documents and Settings\x\Local Settings\Temp\Korean.bin 19,67KB
C:\Documents and Settings\x\Local Settings\Temp\MSIe846e.LOG 348 bytes
C:\Documents and Settings\x\Local Settings\Temp\Norwegian.bin 21,46KB
C:\Documents and Settings\x\Local Settings\Temp\Polish.bin 23,66KB
C:\Documents and Settings\x\Local Settings\Temp\Portuguese(Brazil).bin 24,49KB
C:\Documents and Settings\x\Local Settings\Temp\Portuguese.bin 25,66KB
C:\Documents and Settings\x\Local Settings\Temp\r2hBA.tmp 3,08KB
C:\Documents and Settings\x\Local Settings\Temp\Russian.bin 25,52KB
C:\Documents and Settings\x\Local Settings\Temp\SimChin.bin 16,04KB
C:\Documents and Settings\x\Local Settings\Temp\Spanish.bin 27,11KB
C:\Documents and Settings\x\Local Settings\Temp\TradChin.bin 16,56KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 1,41KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 198 bytes
C:\WINDOWS\0.log 0 bytes
------------------------------------------------------------------------------------------
(Korean, Japanese a podobně)

O co se jedná, může mi někdo, moc prosím, poradit? PC jinak nerozumím, ale tohle mi přišlo divné, nemůže se jednat o vir, resp. o cizí napojení nebo nějaké přesměrovávání a tak?

Moc děkuji za názor, odpověď.

Vítám tě u nás

Všechno můžeš nechat smazat.
Jsou to dočasné soubory po jakési instalaci a neškodné cookies, nic škodlivého tam nevidím.

Kontrola pro jistotu
Stáhni a nainstaluj MBAM zde http://www.malwarebytes.org/products/malwarebytes_free/
Spustit -> na 3.záložce "Aktualizace" -> Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

Ahoj.
Stáhla jsem, instalovala, no - rozjelo se to samo, našlo to nějakých 300 a více erorů, nešlo mi nic sem nakopírovat, na 3 záloýce jsem "aktualizace" nenašla a na první také ne.

Navíc mám s tím další problém.
V rámci instalace se tam stahl nějaký program My PC Backup a nejde mi odinstalovat.
najedu na odebrání programů, dám odebrat, objeví se tabulka s "create an account to get started, žluté pozadí s nápisem 1GB a nejde mi to prostě odinstalovat. Přehodilo mi to domovskou stránku na jakési sys tjjeak a nevím, co s tím. Poraďíte mi, jak alespoň tohle odinstalovat? Děkuji.

Ještě dodávám, že na to odinstalovaání mi to ukíže políčka na vyplnění hesla, mailu a snad jména. Nevím, co s tím, chci to odinstalovat.

Tak se mi to snad podařilo odinstalovat-v programech to už není...

Vrátím se o kousek zpět: ohledně "zbytků" po nějaké instalaci.
To je právě ono, několikrát denně čistím a nic jsem neinstalovala. Jen ta kontrolka (viz) dotaz svítila, když byl pc vypnutý a vrátila jsem se k němu. po cca 3 h, Původně po vypnutí zhasla. To je zcela neobvyklé chování, když noťas vypnu, kontrolka na rozbočovači zhasne a svítí jen tehdy, když je zapnut. To ale svítí i další kontrolky na noťasu, ale v tomto popisovaném případu nesvítily. P

Neměly by to být zbytky po nějaké instalaci, tu jsem neprováděla ani včera, ani dnes a jak říkám, několikrát denně čistím, před tím jsem si nevšimla, že by tam byly takové záznamy k vyčištění.

Prý jde provést kontrolu i nějakým logem, ale to vůbec nevím jak a ani kde se to hledá...V tomto jsem totálně mimo a jak to není v ČJ, tak to je už vůbec problém...

Dobrý den.
Pokoušela jsem se na noťasu "obnovit systém", prostě vrátit možné změny. Nějakým záhadným způsobem se mi přepnulo povolení aktualizací pc na automatiku a jelikož jsem ho v noci nevypnula, do rána se mi tam natahalo tolik, že jsem akorát naštvaná.

Zadám obnovit systém, objeví se tabulka atd.
Dole vlevo je malá ikonka a C: vypnuto.
Obnovit systém se mi nedaří, pokaždé se objeví: Nástroj obnovení systému zjistil chybu při pokusu o zapnutí nebo vypnutí jedné či více jednotek. Restartujte PC a akci opakujte.Restartuji a nic a nic...

Jde to nějak "obejít" nebo co s tím konkrétně udělat, PC nerozumím a nevím, co s tím...
Děkuji za radu.

Dobrý den,
může se mi někdo, prosím, podívat na toto:



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:45:35, on 22.10.2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SearchProtect\bin\CltMngSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Asus\EeePC ACPI\AsTray.exe
C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\x\Data aplikací\SearchProtect\bin\cltmng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Documents and Settings\x\Plocha\RSIT.exe
C:\Program Files\trend micro\x.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://eeepc.asus.com/global
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Systweak Toolbar - {424e2f9c-eb5b-4b51-87e5-5831781bc515} - C:\Program Files\Systweak\prxtbSyst.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Systweak - {424e2f9c-eb5b-4b51-87e5-5831781bc515} - C:\Program Files\Systweak\prxtbSyst.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: Systweak Toolbar - {424e2f9c-eb5b-4b51-87e5-5831781bc515} - C:\Program Files\Systweak\prxtbSyst.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\Asus\EeePC ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKLM\..\Run: [SearchProtectAll] C:\Program Files\SearchProtect\bin\cltmng.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Jcqcql] C:\Documents and Settings\x\Data aplikací\Jcqcql.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SystweakASP] "C:\Program Files\RegClean Pro\SystweakASP.exe" /verysilent
O4 - HKCU\..\Run: [SearchProtect] C:\Documents and Settings\x\Data aplikací\SearchProtect\bin\cltmng.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoRun OSCleaner.lnk = ?
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 3208169953
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Search Protect by Conduit Updater (CltMngSvc) - Conduit - C:\Program Files\SearchProtect\bin\CltMngSvc.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe

--
End of file - 7722 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{424e2f9c-eb5b-4b51-87e5-5831781bc515}]
Systweak Toolbar - C:\Program Files\Systweak\prxtbSyst.dll [2013-10-15 226592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2010-10-07 1961240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2010-10-07 187672]
{424e2f9c-eb5b-4b51-87e5-5831781bc515} - Systweak Toolbar - C:\Program Files\Systweak\prxtbSyst.dll [2013-10-15 226592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-04 16841216]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-24 104984]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-24 121368]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-24 100888]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-08-19 102400]
"AsusTray"=C:\Program Files\Asus\EeePC ACPI\AsTray.exe [2008-01-21 98304]
"AsusACPIServer"=C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe [2007-12-25 454656]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2012-09-07 2777296]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-09-07 3673808]
"SearchProtectAll"=C:\Program Files\SearchProtect\bin\cltmng.exe [2013-09-22 3470624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"Jcqcql"=C:\Documents and Settings\x\Data aplikací\Jcqcql.exe []
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe /background []
"SystweakASP"=C:\Program Files\RegClean Pro\SystweakASP.exe /verysilent []
"SearchProtect"=C:\Documents and Settings\x\Data aplikací\SearchProtect\bin\cltmng.exe [2013-09-22 3470624]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutoRun OSCleaner.lnk - C:\Program Files\ASUS\Asus OS Cleaner\AsOSCleaner.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-10-10 155648]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Průvodce přenesením souborů a nastavení"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Spyware Terminator\SpywareTerminator.exe"="C:\Program Files\Spyware Terminator\SpywareTerminator.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Willing Webcam\wwcam.exe"="C:\Program Files\Willing Webcam\wwcam.exe:*:Disabled:Willing Webcam"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Disabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Disabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-10-22 18:45:15 ----D---- C:\rsit
2013-10-22 18:45:15 ----D---- C:\Program Files\trend micro
2013-10-22 16:09:23 ----D---- C:\Documents and Settings\x\Data aplikací\PriceGong
2013-10-22 16:04:57 ----D---- C:\Program Files\MyPC Backup
2013-10-22 16:04:40 ----D---- C:\Program Files\SearchProtect
2013-10-22 16:03:55 ----D---- C:\Documents and Settings\x\Data aplikací\SearchProtect
2013-10-22 16:03:53 ----D---- C:\Program Files\Conduit
2013-10-22 16:03:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Conduit
2013-10-22 16:03:38 ----D---- C:\Program Files\Systweak
2013-10-22 16:02:36 ----D---- C:\Documents and Settings\x\Data aplikací\Systweak
2013-10-22 16:02:12 ----A---- C:\WINDOWS\system32\roboot.exe
2013-10-21 09:29:47 ----D---- C:\Documents and Settings\x\Data aplikací\Spyware Terminator
2013-10-21 09:29:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2013-10-19 08:07:03 ----D---- C:\Documents and Settings\x\Data aplikací\Template
2013-10-19 03:10:07 ----D---- C:\WINDOWS\system32\XPSViewer
2013-10-19 03:09:51 ----D---- C:\Program Files\MSBuild
2013-10-19 03:09:44 ----D---- C:\WINDOWS\system32\en-US
2013-10-19 03:09:25 ----D---- C:\Program Files\Reference Assemblies
2013-10-19 03:08:31 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-10-19 03:08:30 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-10-19 03:08:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-10-19 03:08:29 ----D---- C:\596578e93151d425bcf5
2013-10-18 07:47:38 ----D---- C:\3421f5990ac92e38c37860a696
2013-10-18 07:47:28 ----D---- C:\c2f08513f60063c3aa775b
2013-10-18 01:31:38 ----D---- C:\Program Files\GUM16.tmp
2013-10-18 01:31:38 ----D---- C:\Program Files\Google
2013-10-18 01:31:38 ----A---- C:\Program Files\GUT17.tmp
2013-10-17 22:45:48 ----D---- C:\Program Files\Spyware Terminator

======List of files/folders modified in the last 1 month======

2013-10-22 18:45:15 ----RD---- C:\Program Files
2013-10-22 17:34:47 ----D---- C:\WINDOWS\Temp
2013-10-22 17:30:19 ----D---- C:\WINDOWS
2013-10-22 17:23:47 ----N---- C:\WINDOWS\SchedLgU.Txt
2013-10-22 16:30:46 ----SD---- C:\WINDOWS\Tasks
2013-10-22 16:04:32 ----SHD---- C:\WINDOWS\Installer
2013-10-22 16:04:26 ----D---- C:\WINDOWS\WinSxS
2013-10-22 16:02:50 ----D---- C:\WINDOWS\Prefetch
2013-10-22 16:02:12 ----D---- C:\WINDOWS\system32
2013-10-20 08:05:53 ----D---- C:\WINDOWS\system32\CatRoot2
2013-10-20 08:05:50 ----D---- C:\Program Files\Windows Live
2013-10-20 08:00:14 ----D---- C:\Documents and Settings\x\Data aplikací\Microsoft
2013-10-19 09:30:12 ----RASH---- C:\boot.ini
2013-10-19 09:30:12 ----D---- C:\WINDOWS\pss
2013-10-19 09:30:12 ----A---- C:\WINDOWS\win.ini
2013-10-19 09:30:12 ----A---- C:\WINDOWS\system.ini
2013-10-19 03:38:09 ----RSD---- C:\WINDOWS\assembly
2013-10-19 03:32:57 ----D---- C:\WINDOWS\Microsoft.NET
2013-10-19 03:21:19 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-19 03:09:38 ----RSD---- C:\WINDOWS\Fonts
2013-10-19 03:08:53 ----HD---- C:\WINDOWS\inf
2013-10-19 03:08:50 ----D---- C:\WINDOWS\system32\spool
2013-10-19 03:08:43 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-10-19 03:04:41 ----D---- C:\Program Files\Internet Explorer
2013-10-18 10:46:23 ----D---- C:\Documents and Settings\x\Data aplikací\Skype
2013-10-18 08:35:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-10-18 08:33:04 ----D---- C:\WINDOWS\system32\drivers
2013-10-18 02:07:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\43571d
2013-10-18 01:30:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-18 01:28:08 ----D---- C:\Program Files\AVAST Software
2013-10-14 09:55:15 ----RD---- C:\Program Files\Skype
2013-10-14 09:55:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-10-11 07:54:04 ----D---- C:\WINDOWS\Debug
2013-10-10 15:38:29 ----D---- C:\WINDOWS\system32\MRT
2013-10-10 15:35:07 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-03-02 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2006-03-02 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2006-03-02 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2006-03-02 55936]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-05-02 546976]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2007-07-26 11264]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l251x86.sys [2007-10-19 30720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-10-10 1181824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-06 4611072]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-08-19 212704]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-03-02 31616]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-04 78464]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 DDPlayCam;DDPlay Virtual Camera; C:\WINDOWS\system32\DRIVERS\DDPlayCam.sys [2005-10-27 150016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2004-08-04 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CltMngSvc;Search Protect by Conduit Updater; C:\Program Files\SearchProtect\bin\CltMngSvc.exe [2013-09-22 220960]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2012-09-07 587472]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-05-03 158856]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

V informacích jsem si všimla tohoto:

Record Number: 26760
Source Name: Service Control Manager
Time Written: 20130807201423.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: ASUS
Event Code: 7036
Message: Stav služby Kompatibilita pro rychlé přepínání uživatelů byl změněn na: Spuštěno

Record Number: 26759
Source Name: Service Control Manager
Time Written: 20130807201420.000000+120
Event Type: Informace
User:

Computer Name: ASUS
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Kompatibilita pro rychlé přepínání uživatelů úspěšně odeslán.

Record Number: 26758
Source Name: Service Control Manager
Time Written: 20130807201420.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: ASUS
Event Code: 11724
Message: Produkt: STORMWARE POHODA Start CZ - Removal completed successfully.

Record Number: 3077
Source Name: MsiInstaller
Time Written: 20121030155829.000000+060
Event Type: Informace
User: ASUS\x

Computer Name: ASUS
Event Code: 1904
Message:
Record Number: 3076
Source Name: HHCTRL
Time Written: 20121030155231.000000+060
Event Type: Informace
User:

Computer Name: ASUS
Event Code: 1904
Message:
Record Number: 3075
Source Name: HHCTRL
Time Written: 20121030155230.000000+060
Event Type: Informace
User:

Computer Name: ASUS
Event Code: 1904
Message:
Record Number: 3074
Source Name: HHCTRL
Time Written: 20121030155228.000000+060
Event Type: Informace
User:



Je mi divné, že tam je spuštěno rychlé přepínání uživatelů. Není více uživatelů a nic jsem nepřepínala a nespouštěla...

Děkuji za Váš čas a pomoc.

Zdravim

Omlouvam se kolegovi za vstup

Na jeden notas jste zalozila uz TRI temata, kdo se v tom ma vyznat Vsechno jsem to sloucil do jednoho

Nez se kolega vrati, tak aspon prvotni procisteni

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Děkuji kolegovi za vstup a další návod.

to Petra333
nemáš nějakého kamaráda který by ti s tím pomohl?

evidentně se ti zatím nepodařilo nainstalovat SP3
nemáš nějaký problém s legalitou systému?

Ahoj.
Legalita systému je OK, wind. je originál, už byl nainstalovaný v zakoupeném noťasu, byl zakoupen v orig. prodejně, několikrát jsem dělala něco, co kontrolovalo legalitu ard. Tak snad vše OK.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Microsoft Windows XP x86
Ran by x on Łt 22.10.2013 at 19:43:22,40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] cltmngsvc
Successfully deleted: [Service] cltmngsvc



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\searchprotect
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\searchprotectall
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\systweakasp
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\searchprotect
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\searchprotect
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchprotect
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3267244
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{38C1A5E8-5B86-4F81-944B-43F10D26B44D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9dea4c61-2464-442d-8c45-66fe53857fc3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{424e2f9c-eb5b-4b51-87e5-5831781bc515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{424e2f9c-eb5b-4b51-87e5-5831781bc515}



~~~ Files

Successfully deleted: [File] "C:\WINDOWS\system32\roboot.exe"
Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\x\Data aplikacˇ\pricegong"
Successfully deleted: [Folder] "C:\Documents and Settings\x\Data aplikacˇ\searchprotect"
Successfully deleted: [Folder] "C:\Documents and Settings\x\Data aplikacˇ\systweak"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\mypc backup"
Successfully deleted: [Folder] "C:\Program Files\searchprotect"
Successfully deleted: [Folder] "C:\Program Files\systweak"


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 22.10.2013 at 20:07:48,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Dále:

# AdwCleaner v3.010 - Report created 22/10/2013 at 20:15:41
# Updated 20/10/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)
# Username : x - ASUS
# Running from : C:\Documents and Settings\x\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\x\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\x\Local Settings\Data aplikací\Systweak

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


*************************

AdwCleaner[R0].txt - [2328 octets] - [22/10/2013 20:11:56]
AdwCleaner[S0].txt - [2291 octets] - [22/10/2013 20:15:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2351 octets] ##########


Učinila jsem vše, dle vašich návodů.

Jak to vidíte???
P.S. mohl někdo stáhnout hesla k mailům atp.???
Moc díky za pomoc.

Toto jsi provedla dobře - můžeš ještě zkusit ten MBAM

Na stažení hesel to zatím nevypadá

Ten MBAM jsem už zkoušela, ale to je na mě už asi moc, jelikož mi to stáhlo to, co jsem už někde výše napsala a nemohla jsem se toho zbavit. Tak to podruhé raději nebudu riskovat.

Co s tím tedy podle Vás mám? Je to nabourané z venčí nebo není?
Pokud je, o co tak asi šlo/jde?

Taky je divné, že mi nešlo "obnovení systému", ještě jsem nezkoušela to po této "opravě" znova.

pokud mi nechceš/neumíš spustit programy na kontrolu, tak ti nemůžu odpovědět

dej mi nový RSIT

Myslíš tohle?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:07:02, on 22.10.2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Asus\EeePC ACPI\AsTray.exe
C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\x\Plocha\RSIT.exe
C:\Program Files\trend micro\x.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://eeepc.asus.com/global
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {424e2f9c-eb5b-4b51-87e5-5831781bc515} - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: (no name) - {424e2f9c-eb5b-4b51-87e5-5831781bc515} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\Asus\EeePC ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Jcqcql] C:\Documents and Settings\x\Data aplikací\Jcqcql.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoRun OSCleaner.lnk = ?
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 3208169953
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe

--
End of file - 6758 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2010-10-07 1961240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2010-10-07 187672]
{424e2f9c-eb5b-4b51-87e5-5831781bc515}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-04 16841216]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-24 104984]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-24 121368]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-24 100888]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-08-19 102400]
"AsusTray"=C:\Program Files\Asus\EeePC ACPI\AsTray.exe [2008-01-21 98304]
"AsusACPIServer"=C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe [2007-12-25 454656]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2012-09-07 2777296]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-09-07 3673808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"Jcqcql"=C:\Documents and Settings\x\Data aplikací\Jcqcql.exe []
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe /background []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutoRun OSCleaner.lnk - C:\Program Files\ASUS\Asus OS Cleaner\AsOSCleaner.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-10-10 155648]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Průvodce přenesením souborů a nastavení"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Spyware Terminator\SpywareTerminator.exe"="C:\Program Files\Spyware Terminator\SpywareTerminator.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Willing Webcam\wwcam.exe"="C:\Program Files\Willing Webcam\wwcam.exe:*:Disabled:Willing Webcam"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Disabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Disabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 3 months======

2013-10-22 20:11:45 ----D---- C:\AdwCleaner
2013-10-22 19:43:17 ----D---- C:\WINDOWS\ERUNT
2013-10-22 18:45:15 ----D---- C:\rsit
2013-10-22 18:45:15 ----D---- C:\Program Files\trend micro
2013-10-21 09:29:47 ----D---- C:\Documents and Settings\x\Data aplikací\Spyware Terminator
2013-10-21 09:29:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2013-10-19 08:07:03 ----D---- C:\Documents and Settings\x\Data aplikací\Template
2013-10-19 03:10:07 ----D---- C:\WINDOWS\system32\XPSViewer
2013-10-19 03:09:51 ----D---- C:\Program Files\MSBuild
2013-10-19 03:09:44 ----D---- C:\WINDOWS\system32\en-US
2013-10-19 03:09:25 ----D---- C:\Program Files\Reference Assemblies
2013-10-19 03:08:31 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-10-19 03:08:30 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-10-19 03:08:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-10-19 03:08:29 ----D---- C:\596578e93151d425bcf5
2013-10-18 07:47:38 ----D---- C:\3421f5990ac92e38c37860a696
2013-10-18 07:47:28 ----D---- C:\c2f08513f60063c3aa775b
2013-10-18 01:31:38 ----D---- C:\Program Files\GUM16.tmp
2013-10-18 01:31:38 ----D---- C:\Program Files\Google
2013-10-18 01:31:38 ----A---- C:\Program Files\GUT17.tmp
2013-10-17 22:45:48 ----D---- C:\Program Files\Spyware Terminator
2013-08-03 15:08:02 ----D---- C:\Documents and Settings\x\Data aplikací\NCH Software
2013-08-01 08:05:48 ----D---- C:\WINDOWS\system32\MRT
2013-07-25 13:55:15 ----A---- C:\Documents and Settings\x\Data aplikací\wklnhst.dat

======List of files/folders modified in the last 3 months======

2013-10-22 21:35:07 ----D---- C:\WINDOWS\Prefetch
2013-10-22 21:03:25 ----D---- C:\WINDOWS
2013-10-22 20:16:19 ----N---- C:\WINDOWS\SchedLgU.Txt
2013-10-22 19:47:51 ----RD---- C:\Program Files
2013-10-22 19:46:10 ----D---- C:\WINDOWS\system32
2013-10-22 17:34:47 ----D---- C:\WINDOWS\Temp
2013-10-22 17:28:44 ----D---- C:\Documents and Settings\x\Data aplikací\Microsoft
2013-10-22 16:30:46 ----SD---- C:\WINDOWS\Tasks
2013-10-22 16:04:32 ----SHD---- C:\WINDOWS\Installer
2013-10-22 16:04:26 ----D---- C:\WINDOWS\WinSxS
2013-10-20 08:05:53 ----D---- C:\WINDOWS\system32\CatRoot2
2013-10-20 08:05:50 ----D---- C:\Program Files\Windows Live
2013-10-19 09:30:12 ----RASH---- C:\boot.ini
2013-10-19 09:30:12 ----D---- C:\WINDOWS\pss
2013-10-19 09:30:12 ----A---- C:\WINDOWS\win.ini
2013-10-19 09:30:12 ----A---- C:\WINDOWS\system.ini
2013-10-19 03:38:09 ----RSD---- C:\WINDOWS\assembly
2013-10-19 03:32:57 ----D---- C:\WINDOWS\Microsoft.NET
2013-10-19 03:21:19 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-19 03:09:38 ----RSD---- C:\WINDOWS\Fonts
2013-10-19 03:08:53 ----HD---- C:\WINDOWS\inf
2013-10-19 03:08:50 ----D---- C:\WINDOWS\system32\spool
2013-10-19 03:08:43 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-10-19 03:04:41 ----D---- C:\Program Files\Internet Explorer
2013-10-18 10:46:23 ----D---- C:\Documents and Settings\x\Data aplikací\Skype
2013-10-18 08:35:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-10-18 08:33:04 ----D---- C:\WINDOWS\system32\drivers
2013-10-18 02:07:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\43571d
2013-10-18 01:30:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-18 01:28:08 ----D---- C:\Program Files\AVAST Software
2013-10-14 09:55:15 ----RD---- C:\Program Files\Skype
2013-10-14 09:55:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-10-11 07:54:04 ----D---- C:\WINDOWS\Debug
2013-10-10 15:35:07 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-03-02 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2006-03-02 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2006-03-02 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2006-03-02 55936]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-05-02 546976]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2007-07-26 11264]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l251x86.sys [2007-10-19 30720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-10-10 1181824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-06 4611072]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-08-19 212704]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-03-02 31616]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-04 78464]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 DDPlayCam;DDPlay Virtual Camera; C:\WINDOWS\system32\DRIVERS\DDPlayCam.sys [2005-10-27 150016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2004-08-04 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2012-09-07 587472]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-05-03 158856]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

To není o tom, že bych nechtěla, ale udělalo mi to tak trochu paseku, je to v AJ a klikám jen "intuitivně" odhadem, Ono mi to i instalovalo nějaký MyPC Backup a ani mi to nechtělo ho odinstalovat, výše jsem to popsala. Prostě těmto věcem nerozumím, navíc tento noťas mám jako rezervní, je to cca před 6ti lety kupovaný, obsah C má cca 3,65 GB na disku, volné místo jsem udržovala kolem 1 GB a nyní už to je cca 250 MB. V podstatě to mám jen na připojení na net, zprávy, maily atd. a jako psací stroj, když mi klekne PC.

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „MoveIt!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\ - dej mi ho sem na kontrolu

Script OTM