VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by David at 2013-11-22 19:50:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 406 GB (85%) free of 477 GB
Total RAM: 3326 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:50:41, on 22.11.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\Vista Components\Vista Drive Icon\DrvIcon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\Program Files\Philips Display\SmartControl II\DTHtml.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\David\Local Settings\Data aplikací\VNT\vntldr.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Portrait Displays\Pivot Software\floater.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\David\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\David.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.chatzum.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer - Microsoft Windows XP 2009 Ultra Edition
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\ChatZum Toolbar\tbunsi1B7.tmp\tbhelper.dll
O2 - BHO: Ask Toolbar BHO - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" (file missing)
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: TBSB09850 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\ChatZum Toolbar\tbunsi1B7.tmp\tbcore3.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll
O3 - Toolbar: ChatZum Toolbar - {37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - C:\Program Files\ChatZum Toolbar\tbunsi1B7.tmp\tbcore3.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" (file missing)
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Components\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
O4 - HKLM\..\Run: [DT PHL] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -PHL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [VNT] C:\Program Files\VNT\vntldr.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 11149 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "google.cz"
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll

C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\searchplugins\
askcom.xml
search-web.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7}]
Ask Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll [2013-11-08 12240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTo0.dll [2012-11-06 183112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-17 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-28 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-06-06 1519304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-17 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
TBSB09850 Class - C:\Program Files\ChatZum Toolbar\tbunsi1B7.tmp\tbcore3.dll [2012-07-03 2673992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files\uTorrentControl2\prxtbuTo0.dll [2012-11-06 183112]
{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - ChatZum Toolbar - C:\Program Files\ChatZum Toolbar\tbunsi1B7.tmp\tbcore3.dll [2012-07-03 2673992]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-28 606544]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-06-06 1519304]
{5054562D-5247-006A-76A7-7A786E7484D7} - Ask Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll [2013-11-08 12240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"AlwaysReady Power Message APP"=C:\WINDOWS\ARPWRMSG.EXE [2008-11-05 77312]
"DrvIcon"=C:\Program Files\Vista Components\Vista Drive Icon\DrvIcon.exe [2007-07-04 45056]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-13 98304]
"PivotSoftware"=C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe [2009-03-03 694824]
"DT PHL"=C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe [2009-03-20 86016]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2012-06-06 1564872]
"ApnTBMon"=C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2013-11-08 1707472]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-28 3567800]
"VNT"=C:\Program Files\VNT\vntldr.exe [2013-11-08 202192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-10-19 66560]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"Google Update"=C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-07-07 136176]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-08-14 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-24 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-09-23 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"ForceClassicControlPanel"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Maxthon3\Bin\Maxthon.exe"="C:\Program Files\Maxthon3\Bin\Maxthon.exe:*:Enabled:Maxthon"
"C:\Program Files\Maxthon3\Bin\MxUp.exe"="C:\Program Files\Maxthon3\Bin\MxUp.exe:*:Enabled:MxUp"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Warcraft III\War3.exe"="C:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"C:\Program Files\EA Games\Battlefield 2\BF2.exe"="C:\Program Files\EA Games\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"C:\Documents and Settings\David\Plocha\uTorrent.exe"="C:\Documents and Settings\David\Plocha\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-11-22 19:50:31 ----D---- C:\Program Files\trend micro
2013-11-22 19:50:30 ----D---- C:\rsit
2013-11-18 19:39:39 ----D---- C:\Program Files\Mozilla Firefox
2013-11-17 13:56:45 ----D---- C:\Documents and Settings\David\Data aplikací\PingTesterDataBas
2013-11-14 03:32:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 03:32:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 03:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 03:32:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$
2013-11-10 00:45:17 ----D---- C:\Program Files\VNT
2013-10-29 14:07:02 ----A---- C:\WINDOWS\War3Unin.pif
2013-10-29 14:07:02 ----A---- C:\WINDOWS\War3Unin.exe
2013-10-29 14:07:02 ----A---- C:\WINDOWS\War3Unin.dat
2013-10-29 14:03:59 ----D---- C:\Program Files\Warcraft III
2013-10-28 15:36:55 ----D---- C:\Documents and Settings\David\Data aplikací\AVAST Software
2013-10-28 15:22:21 ----A---- C:\WINDOWS\system32\drivers\aswNdis2.sys
2013-10-28 15:22:21 ----A---- C:\WINDOWS\system32\drivers\aswFW.sys
2013-10-28 15:21:53 ----A---- C:\WINDOWS\system32\drivers\aswNdis.sys
2013-10-26 23:27:10 ----D---- C:\Program Files\Mozilla Maintenance Service

======List of files/folders modified in the last 1 month======

2013-11-22 19:50:31 ----RD---- C:\Program Files
2013-11-22 19:49:34 ----D---- C:\Documents and Settings\David\Data aplikací\Skype
2013-11-22 18:52:56 ----D---- C:\WINDOWS\Temp
2013-11-22 18:11:38 ----D---- C:\Program Files\The KMPlayer
2013-11-22 16:24:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-11-22 13:50:50 ----A---- C:\WINDOWS\ModemLog_LGE Virtual Modem.txt
2013-11-22 13:50:38 ----D---- C:\WINDOWS
2013-11-22 13:50:21 ----D---- C:\WINDOWS\system32\inetsrv
2013-11-22 13:50:10 ----D---- C:\WINDOWS\Registration
2013-11-21 17:01:51 ----D---- C:\WINDOWS\system32\CatRoot2
2013-11-17 13:42:01 ----D---- C:\Documents and Settings\David\Data aplikací\uTorrent
2013-11-16 00:05:46 ----D---- C:\WINDOWS\Prefetch
2013-11-14 17:56:22 ----D---- C:\WINDOWS\Minidump
2013-11-14 17:56:17 ----D---- C:\WINDOWS\system32
2013-11-14 03:32:56 ----HD---- C:\WINDOWS\inf
2013-11-14 03:32:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-11-14 03:32:51 ----A---- C:\WINDOWS\imsins.BAK
2013-11-14 03:32:46 ----SHD---- C:\WINDOWS\Installer
2013-11-14 03:32:45 ----SHD---- C:\Config.Msi
2013-11-14 03:31:52 ----D---- C:\Program Files\Internet Explorer
2013-11-14 03:31:43 ----D---- C:\WINDOWS\ie8updates
2013-11-12 22:11:49 ----SD---- C:\WINDOWS\Tasks
2013-11-10 00:42:33 ----D---- C:\WINDOWS\system32\drivers
2013-11-01 17:17:55 ----RSD---- C:\WINDOWS\assembly
2013-11-01 17:17:55 ----D---- C:\WINDOWS\system32\DirectX
2013-11-01 17:10:52 ----D---- C:\Program Files\EA Games
2013-11-01 17:10:49 ----HD---- C:\Program Files\InstallShield Installation Information
2013-10-29 18:55:20 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-29 01:25:01 ----D---- C:\Documents and Settings\David\Data aplikací\vlc
2013-10-28 15:28:16 ----D---- C:\WINDOWS\WinSxS
2013-10-28 15:27:52 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-10-28 15:23:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\aswNdis.sys [2013-09-25 12112]
R0 aswNdis2;avast! Firewall NDIS Driver; C:\WINDOWS\system32\drivers\aswNdis2.sys [2013-10-28 247192]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-10-28 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-10-28 178304]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-05-12 20576]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 aswKbd;aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys []
R1 AswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 nvport;NVIDIA PORT IO Control Driver; \??\C:\WINDOWS\system32\Drivers\nvport.sys []
R1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2009-03-03 17465]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 aracpi;aracpi; C:\WINDOWS\system32\DRIVERS\aracpi.sys [2008-11-05 22784]
R3 arhidfltr;MS Ar HID Filter Driver; C:\WINDOWS\system32\DRIVERS\arhidfltr.sys [2008-11-05 19200]
R3 arkbcfltr;Microsoft PS2 Keyboard Filter; C:\WINDOWS\system32\DRIVERS\arkbcfltr.sys [2008-11-05 5376]
R3 armoucfltr;Microsoft PS2 Mouse Filter; C:\WINDOWS\system32\DRIVERS\armoucfltr.sys [2008-11-05 4992]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ARPolicy;ARPolicy; C:\WINDOWS\system32\DRIVERS\arpolicy.sys [2008-11-05 10112]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-08-14 4485632]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-06-02 99856]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 LgBttPort;LGE Bluetooth TransPort; C:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2009-03-20 17064]
R3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\system32\drivers\pivotmou.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 Andbus;LGE Android Platform Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgandbus.sys [2010-12-07 14336]
S3 AndDiag;LGE Android Platform USB Serial Port; C:\WINDOWS\system32\DRIVERS\lganddiag.sys [2010-12-07 20736]
S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\WINDOWS\system32\DRIVERS\lgandgps.sys [2010-12-07 20096]
S3 ANDModem;LGE Android Platform USB Modem; C:\WINDOWS\system32\DRIVERS\lgandmodem.sys [2010-12-07 25088]
S3 MHNDRV;Ovladač platformy MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2006-03-29 9856]
S3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtKHDMI.sys [2008-12-25 3721664]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-09-23 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-09-23 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-11-08 166352]
R2 ARSVC;ARSVC; C:\WINDOWS\arservice.exe [2008-11-05 58880]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-08-14 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-28 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-10-28 179088]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2009-03-20 69632]
R2 ehRecvr;Služba přijímače aplikace Media Center; C:\WINDOWS\eHome\ehRecvr.exe [2008-10-10 238592]
R2 ehSched;Služba plánování aplikace Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-02-05 68136]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-17 182696]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [2011-12-21 578264]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2009-03-20 109096]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2012-07-07 66872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-08-13 593920]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-18 119408]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravim

Stahnete Shortcut Cleaner http://www.bleepingcomputer.com/downloa ... t-cleaner/

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Spustte tradicne dvouklikem
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v miste spusteni jako sc-cleaner.txt, ten sem vlozte

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Shortcut Cleaner 1.2.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
http://www.bleepingcomputer.com/downloa ... t-cleaner/

Windows Version: Microsoft Windows XP Service Pack 3
Program started at: 11/22/2013 08:57:23 PM.

Scanning for registry hijacks:

* No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Documents and Settings\David\Nabídka Start\

Searching C:\Documents and Settings\All Users\Nabídka Start\

Searching C:\Documents and Settings\David\Data aplikací\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Documents and Settings\All Users\Plocha\

Searching C:\Documents and Settings\David\Plocha


0 bad shortcuts found.

Program finished at: 11/22/2013 08:57:23 PM
Execution time: 0 hours(s), 0 minute(s), and 0 seconds(s)



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by David on p  22.11.2013 at 21:07:33,79
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] APNMCP
Successfully deleted: [Service] APNMCP



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apnupdater
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC}
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbcommonutils.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbhelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\utorrentcontrol2
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\utorrentcontrol2
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.searchprovidermanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.searchprovidermanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\chatzum toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB09850.IEToolbar
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB09850.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB09850.TBSB09850
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB09850.TBSB09850.3
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar3.TBSB09850
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar3.TBSB09850.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB09850.IEToolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB09850.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB09850.TBSB09850
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB09850.TBSB09850.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.TBSB09850
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.TBSB09850.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3072253
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0BDA3B1C-A1B9-49F4-93F6-D44977108F9D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578B9-7132-4A7A-80E4-30EE31099E03}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{687578b9-7132-4a7a-80e4-30ee31099e03}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\apn"
Successfully deleted: [Registry Key] "hkey_current_user\software\ask.com"
Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork"
Successfully deleted: [Registry Key] "hkey_current_user\software\asktoolbar"
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"
Successfully deleted: [Registry Key] "hkey_local_machine\software\apn"
Successfully deleted: [Registry Key] "hkey_local_machine\software\askpartnernetwork"
Successfully deleted: [Registry Key] "hkey_local_machine\software\asktoolbar"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{44cbc005-6243-4502-8a02-3a096a282664}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{80703783-e415-4ee3-ab60-d36981c5a6f1}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{d8278076-bc68-4484-9233-6e7f1628b56c}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{f297534d-7b06-459d-bc19-2dd8ef69297b}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{2996f0e7-292b-4cae-893f-47b8b1c05b56}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{6978f29a-3493-40b2-8cdc-9c13a02f85a4}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{d7949a66-d936-4028-9552-14f7dc50f38d}"



~~~ Files

Successfully deleted: [File] "C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job"



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\David\Data aplikacˇ\toolbar4"
Successfully deleted: [Folder] "C:\Program Files\chatzum toolbar"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\safepcrepair_89ei"
Successfully deleted: [Folder] "C:\Program Files\utorrentcontrol2"
Successfully deleted: [Folder] "C:\Program Files\ask.com"
Successfully deleted: [Folder] "C:\Program Files\askpartnernetwork"
Successfully deleted: [Folder] "C:\WINDOWS\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"



~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\David\Data aplikacˇ\mozilla\firefox\profiles\653zlnwo.default\searchplugins\askcom.xml
Successfully deleted the following from C:\Documents and Settings\David\Data aplikacˇ\mozilla\firefox\profiles\653zlnwo.default\prefs.js

user_pref("browser.newtab.url", "search.chatzum.com");
user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\");
user_pref("extensions.asktb.abar-war-regex", "conduit\\.com");
user_pref("extensions.asktb.apn_dbr", "ff_3.5");
user_pref("extensions.asktb.autofill-competitor-query-enabled", true);
user_pref("extensions.asktb.cbid", "T8");
user_pref("extensions.asktb.config-updated", false);
user_pref("extensions.asktb.cr-o", "14670cr");
user_pref("extensions.asktb.crumb", "2012.10.13+14.08.24-toolbar014iad-CZ-SG9kb25pbixDemVjaCBSZXB1YmxpYw%3D%3D");
user_pref("extensions.asktb.default-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={qsrc}&o={o}&l={l}&q={query}&dm=all");
user_pref("extensions.asktb.displaybehavior", "");
user_pref("extensions.asktb.displaytext", "");
user_pref("extensions.asktb.dtid", "YYYYYYYYCZ");
user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "EZXX0036");
user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://utils.chatzum.com/?url=");
user_pref("extensions.asktb.fresh-install", false);
user_pref("extensions.asktb.guid", "396a7326-877d-4d79-8197-630ecbd4fada");
user_pref("extensions.asktb.hpr", "YES");
user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxp
user_pref("extensions.asktb.if", "first");
user_pref("extensions.asktb.l", "dis");
user_pref("extensions.asktb.last-config-req", "1350164146797");
user_pref("extensions.asktb.locale", "en_EU");
user_pref("extensions.asktb.location", "Hodonin,Czech Republic");
user_pref("extensions.asktb.lstation", "");
user_pref("extensions.asktb.new-tab-enabled", true);
user_pref("extensions.asktb.news-native-on", true);
user_pref("extensions.asktb.nthp", "YES");
user_pref("extensions.asktb.nthp_prev", "0");
user_pref("extensions.asktb.o", "14670");
user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
user_pref("extensions.asktb.pstate", "");
user_pref("extensions.asktb.qsrc", "2871");
user_pref("extensions.asktb.r", "2");
user_pref("extensions.asktb.sa", "YES");
user_pref("extensions.asktb.saguid", "EA016AD8-9089-42A4-A223-32F718B4F1D8");
user_pref("extensions.asktb.search-suggestions-enabled", true);
user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
user_pref("extensions.asktb.socialmini-first", true);
user_pref("extensions.asktb.socialmini-interval", "1200000");
user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
user_pref("extensions.asktb.socialmini-max-items", "30");
user_pref("extensions.asktb.socialmini-native-on", true);
user_pref("extensions.asktb.socialmini-speed", "10000");
user_pref("extensions.asktb.socialmini-transition-first-open", false);
user_pref("extensions.asktb.themeid", "");
user_pref("extensions.asktb.timeinstalled", "13.10.2012 23:09:23");
user_pref("extensions.asktb.to", "");
user_pref("extensions.asktb.v", "3.15.4.100013");
user_pref("extensions.asktb.version", "5.15.4.23821");
user_pref("extensions.asktb.volume", "");
user_pref("id_chatzum_tabpage", "hxxp%3A//search.chatzum.com/");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  22.11.2013 at 21:11:05,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





# AdwCleaner v3.012 - Report created 22/11/2013 at 21:23:01
# Updated 11/11/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : David - AL-1040C7D2717D
# Running from : C:\Documents and Settings\David\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\apn
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork
Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\apn
Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\AskToolbar
Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\DOCUME~1\David\LOCALS~1\Temp\apn
[!] Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn
[!] Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jbpcjmidkkgldeplajgnbpjkfpmpeepb
[!] Folder Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
File Deleted : C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\searchplugins\search-web.xml
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\databases\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0.localstorage
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbpcjmidkkgldeplajgnbpjkfpmpeepb_0.localstorage
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbpcjmidkkgldeplajgnbpjkfpmpeepb_0.localstorage-journal
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_facebook.conduitapps.com_0.localstorage
File Deleted : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{090ACFA1-1580-11D1-8AC0-00C0F00910F9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B4E90801-B83C-11D0-8B40-00C0F00AE35A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CA3EB689-8F09-4026-AA10-B9534C691CE0}]
Key Deleted : HKCU\Software\{ADFA33FD-16F5-4355-8504-DF4D664CFE83}
Key Deleted : HKCU\Software\ChatZum Toolbar
Key Deleted : HKCU\Software\OCS
Key Deleted : HKLM\Software\ChatZum Toolbar
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ChatZum Toolbar
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v25.0.1 (cs)

[ File : C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\prefs.js ]


-\\ Google Chrome v

[ File : C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : icon_url
Deleted : search_url
Deleted : suggest_url
Deleted : keyword
Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [11906 octets] - [22/11/2013 21:22:29]
AdwCleaner[S0].txt - [11912 octets] - [22/11/2013 21:23:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11973 octets] ##########

Stahnete FRST 32-bit version z teto stranky http://www.bleepingcomputer.com/downloa ... scan-tool/

Spuštění FRST

• Po spuštění FRST odsouhlasíme licenční podmínky kliknutím na [Ano].
• Dooznačíme položku Addition.txt - viz obrázek.
  
• Klikneme na tlačítko [Scan], čímž spustíme skenování.
• Počkáme na dokončení skenování FRST
• Otevře se nám textový soubor FRST.txt, což je požadovaný log a jehož obsah vložíme do svého tématu na fóru.
• Na ploše nám zbyde utilita FRST a dva logy - FRST.txt a Addition.txt - nic z toho zatím nemažeme!

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2013
Ran by David (administrator) on AL-1040C7D2717D on 23-11-2013 12:19:40
Running from C:\Documents and Settings\David\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft) C:\WINDOWS\arservice.exe
() C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehRecvr.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehSched.exe
() C:\Program Files\Gigabyte\EasySaver\essvr.exe
(Microsoft Corporation) C:\WINDOWS\system32\inetsrv\inetinfo.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Pandora.TV) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
(Portrait Displays, Inc.) C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Microsoft) C:\WINDOWS\arpwrmsg.exe
(artArmin) C:\Program Files\Vista Components\Vista Drive Icon\DrvIcon.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
() C:\Program Files\Portrait Displays\Pivot Software\wpCtrl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Portrait Displays, Inc) C:\Program Files\Philips Display\SmartControl II\dthtml.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\Portrait Displays\Pivot Software\Floater.exe
(APN LLC.) C:\Documents and Settings\David\Local Settings\Data aplikací\VNT\vntldr.exe
(Portrait Displays Inc.) C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation)
HKLM\...\Run: [AlwaysReady Power Message APP] - C:\WINDOWS\arpwrmsg.exe [77312 2008-11-05] (Microsoft)
HKLM\...\Run: [DrvIcon] - C:\Program Files\Vista Components\Vista Drive Icon\DrvIcon.exe [45056 2007-07-04] (artArmin)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [18084864 2009-01-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-13] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [PivotSoftware] - C:\Program Files\Portrait Displays\Pivot Software\wpCtrl.exe [694824 2009-03-03] ()
HKLM\...\Run: [DT PHL] - C:\Program Files\Common Files\Portrait Displays\Shared\DT_Startup.exe [86016 2009-03-20] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-28] (AVAST Software)
HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [202192 2013-11-08] (APN LLC.)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [136176 2012-07-07] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32

==================== Internet (Whitelisted) ====================

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
Toolbar: HKCU - No Name - {687578B9-7132-4A7A-80E4-30EE31099E03} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.203.254 62.240.178.250

FireFox:
========
FF ProfilePath: C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default
FF Homepage: hxxp://www.google.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: toolbar_PTV-RG - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\Extensions\toolbar_PTV-RG@apn.ask.com.xpi
FF Extension: defaults - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Ask) - http://www.google.com
CHR DefaultSuggestURL: (Ask) - http://www.google.com
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Documents and Settings\David\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Documents and Settings\David\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\30.0.1599.101\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\David\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll No File
CHR Plugin: (Conduit Chrome Plugin) - C:\Documents and Settings\David\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\plugins/ConduitChromeApiPlugin.dll No File
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Google Update) - C:\Documents and Settings\David\Local Settings\Data aplikac\u00ED\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\WINDOWS\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaahnibljmklpljnbpgfobmfpfhplch\22.56872_0
CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaapoomnboffjcgcebabolakmhbblbk\7.15.4.41936_0
CHR Extension: (Reload All Tabs) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\midkcinmplflbiflboepnahkboeonkam\3.2.1_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM\...\Chrome\Extension: [aaaahnibljmklpljnbpgfobmfpfhplch] - C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\PTV-RG\CRX\ToolbarCR.crx
CHR HKLM\...\Chrome\Extension: [aaaapoomnboffjcgcebabolakmhbblbk] - C:\Documents and Settings\David\Local Settings\Data aplikací\APN\GoogleCRXs\aaaapoomnboffjcgcebabolakmhbblbk_7.15.4.0.crx
CHR StartMenuInternet: Google Chrome - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 ARSVC; C:\WINDOWS\arservice.exe [58880 2008-11-05] (Microsoft)
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2009-08-13] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-28] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [179088 2013-10-28] (AVAST Software)
R2 DTSRVC; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [69632 2009-03-20] ()
R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-02-05] ()
R2 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation)
R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [578264 2011-12-21] (Pandora.TV)
R2 PdiService; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [109096 2009-03-20] (Portrait Displays, Inc.)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2012-07-07] ()
R2 W3SVC; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2008-04-14] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2010-12-07] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2010-12-07] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2010-12-07] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2010-12-07] (LG Electronics Inc.)
R3 aracpi; C:\Windows\System32\DRIVERS\aracpi.sys [22784 2008-11-05] (Microsoft Corporation)
R3 arhidfltr; C:\Windows\System32\DRIVERS\arhidfltr.sys [19200 2008-11-05] (Microsoft Corporation)
R3 arkbcfltr; C:\Windows\System32\DRIVERS\arkbcfltr.sys [5376 2008-11-05] (Microsoft Corporation)
R3 armoucfltr; C:\Windows\System32\DRIVERS\armoucfltr.sys [4992 2008-11-05] (Microsoft Corporation)
R3 ARPolicy; C:\Windows\System32\DRIVERS\arpolicy.sys [10112 2008-11-05] (Microsoft Corporation)
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [35656 2013-10-28] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [26136 2013-10-28] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2013-10-28] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12112 2013-09-25] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [247192 2013-10-28] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2013-10-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-28] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [774392 2013-10-28] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [403440 2013-11-09] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2013-10-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-10-28] ()
R3 gdrv; C:\WINDOWS\gdrv.sys [16608 2013-11-22] (Windows (R) 2000 DDK provider)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtport.sys [12160 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbus.sys [10496 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmodem.sys [12928 2009-09-29] (LG Electronics Inc.)
R1 nvport; C:\WINDOWS\system32\Drivers\nvport.sys [4608 2006-05-05] (NVIDIA Corporation.)
R3 PdiPorts; C:\Windows\System32\Drivers\PdiPorts.sys [17064 2009-03-20] (Portrait Displays, Inc.)
S3 pfc; C:\Windows\System32\drivers\pfc.sys [9856 2006-03-29] (Padus, Inc.)
R1 Pivot; C:\Windows\System32\drivers\pivot.sys [17465 2009-03-03] (Portrait Displays, Inc.)
R3 pivotmou; C:\WINDOWS\system32\drivers\pivotmou.sys [11323 2009-03-03] (Portrait Displays, Inc.)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtKHDMI.sys [3721664 2008-12-25] (Realtek Semiconductor Corp.)
S4 IntelIde; No ImagePath
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================

NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation)

==================== One Month Created Files and Folders ========

2013-11-23 12:19 - 2013-11-23 12:19 - 00016821 _____ C:\Documents and Settings\David\Plocha\FRST.txt
2013-11-23 12:19 - 2013-11-23 12:19 - 00000000 ____D C:\FRST
2013-11-23 12:18 - 2013-11-23 12:18 - 01091049 _____ (Farbar) C:\Documents and Settings\David\Plocha\FRST.exe
2013-11-22 23:14 - 2013-11-22 23:46 - 299751265 _____ C:\Documents and Settings\David\Plocha\Breaking.Bad.S05E07.Say.My.Name.720p.WEB-DL.DD5.1.H.264-CtrlHD.mkv
2013-11-22 21:22 - 2013-11-22 21:23 - 00000000 ____D C:\AdwCleaner
2013-11-22 21:21 - 2013-11-22 21:21 - 00015193 _____ C:\Documents and Settings\David\Plocha\JRT.txt
2013-11-22 21:07 - 2013-11-22 21:07 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-22 21:05 - 2013-11-22 21:05 - 00001876 _____ C:\Documents and Settings\David\Plocha\sc-cleaner
2013-11-22 20:55 - 2013-11-22 20:57 - 00001876 _____ C:\sc-cleaner.txt
2013-11-22 20:54 - 2013-11-22 20:54 - 01085542 _____ C:\Documents and Settings\David\Plocha\adwcleaner.exe
2013-11-22 20:54 - 2013-11-22 20:54 - 01034531 _____ (Thisisu) C:\Documents and Settings\David\Plocha\JRT.exe
2013-11-22 20:53 - 2013-11-22 20:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Documents and Settings\David\Plocha\sc-cleaner.exe
2013-11-22 19:50 - 2013-11-22 19:50 - 00781383 _____ C:\Documents and Settings\David\Plocha\RSIT.exe
2013-11-22 19:50 - 2013-11-22 19:50 - 00000000 ____D C:\rsit
2013-11-22 19:50 - 2013-11-22 19:50 - 00000000 ____D C:\Program Files\trend micro
2013-11-18 19:39 - 2013-11-18 21:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-17 13:56 - 2013-11-17 13:59 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\PingTesterDataBas
2013-11-17 13:54 - 2013-11-17 13:54 - 00001104 _____ C:\Documents and Settings\David\thepiratebay.sx
2013-11-16 19:22 - 2013-11-16 19:22 - 01355126 _____ C:\Documents and Settings\David\Plocha\dads.bmp
2013-11-14 17:56 - 2013-11-14 17:56 - 00065536 _____ C:\WINDOWS\Minidump\Mini111413-01.dmp
2013-11-14 03:32 - 2013-11-14 03:32 - 00011338 _____ C:\WINDOWS\KB2900986.log
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 03:31 - 2013-11-14 03:31 - 00013881 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-13 19:40 - 2013-11-14 03:32 - 00019421 _____ C:\WINDOWS\KB2868626.log
2013-11-13 19:40 - 2013-11-14 03:32 - 00018388 _____ C:\WINDOWS\KB2862152.log
2013-11-13 19:40 - 2013-11-14 03:32 - 00017874 _____ C:\WINDOWS\KB2876331.log
2013-11-11 16:51 - 2013-11-11 16:51 - 00000000 ____D C:\Documents and Settings\David\Plocha\01_audio
2013-11-10 00:45 - 2013-11-10 00:45 - 00000000 ____D C:\Program Files\VNT
2013-11-10 00:45 - 2013-11-10 00:45 - 00000000 ____D C:\Documents and Settings\David\Local Settings\Data aplikací\VNT
2013-11-02 22:27 - 2013-11-02 22:28 - 00065536 _____ C:\WINDOWS\Minidump\Mini110213-01.dmp
2013-11-01 17:22 - 2013-11-01 17:22 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Battlefield 2
2013-11-01 17:18 - 2013-11-01 17:18 - 00001723 _____ C:\Documents and Settings\All Users\Plocha\Battlefield 2.lnk
2013-11-01 17:17 - 2013-11-01 17:17 - 00023901 _____ C:\WINDOWS\DirectX.log
2013-10-29 14:07 - 2013-10-29 14:07 - 00126976 _____ (Blizzard Entertainment) C:\WINDOWS\War3Unin.exe
2013-10-29 14:07 - 2013-10-29 14:07 - 00016771 _____ C:\WINDOWS\War3Unin.dat
2013-10-29 14:07 - 2013-10-29 14:07 - 00002829 _____ C:\WINDOWS\War3Unin.pif
2013-10-29 14:07 - 2013-10-29 14:07 - 00001612 _____ C:\Documents and Settings\David\Plocha\Warcraft III.lnk
2013-10-29 14:07 - 2013-10-29 14:07 - 00000000 ____D C:\Documents and Settings\David\Nabídka Start\Programy\Warcraft III
2013-10-29 14:03 - 2013-10-29 14:18 - 00000000 ____D C:\Program Files\Warcraft III
2013-10-28 23:41 - 2013-10-28 23:41 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Skype Voice Records
2013-10-28 23:41 - 2013-10-28 23:41 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Clownfish Avatars
2013-10-28 15:47 - 2013-10-28 15:47 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
2013-10-28 15:36 - 2013-10-28 15:36 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\AVAST Software
2013-10-28 15:28 - 2013-10-28 15:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2013-10-28 15:22 - 2013-10-28 15:27 - 00247192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys
2013-10-28 15:22 - 2013-10-14 19:41 - 00104752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFW.sys
2013-10-28 15:21 - 2013-09-25 14:15 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys
2013-10-28 15:14 - 2013-10-28 15:14 - 00000000 ___RD C:\Documents and Settings\David\Dokumenty\Filmy
2013-10-28 15:14 - 2013-10-28 15:14 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Filmy
2013-10-28 13:17 - 2013-10-28 14:18 - 00000000 ____D C:\Documents and Settings\David\Plocha\Escape Plan 2013 DVDRip XviD-SPARKS
2013-10-26 23:27 - 2013-11-07 17:05 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

==================== One Month Modified Files and Folders =======

2013-11-23 12:19 - 2013-11-23 12:19 - 00016821 _____ C:\Documents and Settings\David\Plocha\FRST.txt
2013-11-23 12:19 - 2013-11-23 12:19 - 00000000 ____D C:\FRST
2013-11-23 12:19 - 2012-06-30 20:55 - 00000000 ____D C:\Documents and Settings\David\Plocha
2013-11-23 12:18 - 2013-11-23 12:18 - 01091049 _____ (Farbar) C:\Documents and Settings\David\Plocha\FRST.exe
2013-11-23 12:10 - 2012-06-30 21:42 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\Skype
2013-11-23 11:58 - 2012-06-30 21:35 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-23 11:33 - 2012-06-30 20:46 - 01154836 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-23 11:30 - 2012-07-07 10:44 - 00001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006UA.job
2013-11-23 04:34 - 2013-09-14 09:51 - 00046566 _____ C:\WINDOWS\KB973768.log
2013-11-23 04:34 - 2012-06-30 22:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2013-11-22 23:46 - 2013-11-22 23:14 - 299751265 _____ C:\Documents and Settings\David\Plocha\Breaking.Bad.S05E07.Say.My.Name.720p.WEB-DL.DD5.1.H.264-CtrlHD.mkv
2013-11-22 23:14 - 2012-07-01 20:00 - 00000000 ____D C:\Program Files\The KMPlayer
2013-11-22 23:09 - 2013-02-03 14:07 - 00002515 _____ C:\Documents and Settings\David\Plocha\Kalkulačka.lnk
2013-11-22 22:30 - 2012-06-30 21:38 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Stažené soubory
2013-11-22 22:11 - 2012-06-30 21:54 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-11-22 21:30 - 2012-06-30 20:55 - 00032532 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-22 21:25 - 2012-06-30 21:01 - 00000124 _____ C:\service.log
2013-11-22 21:25 - 2012-06-30 20:44 - 00000000 ____D C:\WINDOWS\Registration
2013-11-22 21:25 - 2001-10-25 16:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-22 21:24 - 2012-06-30 22:34 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-11-22 21:24 - 2012-06-30 22:34 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-11-22 21:24 - 2012-06-30 21:00 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2013-11-22 21:24 - 2012-06-30 20:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-22 21:23 - 2013-11-22 21:22 - 00000000 ____D C:\AdwCleaner
2013-11-22 21:23 - 2012-06-30 22:29 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-11-22 21:23 - 2012-06-30 21:14 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2013-11-22 21:23 - 2012-06-30 20:55 - 00000178 ___SH C:\Documents and Settings\David\ntuser.ini
2013-11-22 21:23 - 2012-06-30 20:55 - 00000000 ___HD C:\Documents and Settings\David\Local Settings\Data aplikací
2013-11-22 21:21 - 2013-11-22 21:21 - 00015193 _____ C:\Documents and Settings\David\Plocha\JRT.txt
2013-11-22 21:08 - 2012-06-30 20:55 - 00000000 __RHD C:\Documents and Settings\David\Data aplikací
2013-11-22 21:07 - 2013-11-22 21:07 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-22 21:05 - 2013-11-22 21:05 - 00001876 _____ C:\Documents and Settings\David\Plocha\sc-cleaner
2013-11-22 20:57 - 2013-11-22 20:55 - 00001876 _____ C:\sc-cleaner.txt
2013-11-22 20:54 - 2013-11-22 20:54 - 01085542 _____ C:\Documents and Settings\David\Plocha\adwcleaner.exe
2013-11-22 20:54 - 2013-11-22 20:54 - 01034531 _____ (Thisisu) C:\Documents and Settings\David\Plocha\JRT.exe
2013-11-22 20:53 - 2013-11-22 20:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Documents and Settings\David\Plocha\sc-cleaner.exe
2013-11-22 19:50 - 2013-11-22 19:50 - 00781383 _____ C:\Documents and Settings\David\Plocha\RSIT.exe
2013-11-22 19:50 - 2013-11-22 19:50 - 00000000 ____D C:\rsit
2013-11-22 19:50 - 2013-11-22 19:50 - 00000000 ____D C:\Program Files\trend micro
2013-11-22 14:30 - 2012-07-07 10:44 - 00000974 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006Core.job
2013-11-21 17:01 - 2013-09-24 22:37 - 00065424 _____ C:\WINDOWS\setupapi.log
2013-11-18 21:36 - 2013-11-18 19:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-17 13:59 - 2013-11-17 13:56 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\PingTesterDataBas
2013-11-17 13:54 - 2013-11-17 13:54 - 00001104 _____ C:\Documents and Settings\David\thepiratebay.sx
2013-11-17 13:54 - 2012-06-30 20:55 - 00000000 ____D C:\Documents and Settings\David
2013-11-17 13:42 - 2012-07-04 13:14 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\uTorrent
2013-11-16 19:22 - 2013-11-16 19:22 - 01355126 _____ C:\Documents and Settings\David\Plocha\dads.bmp
2013-11-16 00:04 - 2012-06-30 22:24 - 230473728 _____ C:\WINDOWS\MEMORY.DMP
2013-11-14 17:56 - 2013-11-14 17:56 - 00065536 _____ C:\WINDOWS\Minidump\Mini111413-01.dmp
2013-11-14 17:56 - 2013-07-22 13:42 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-14 03:32 - 2013-11-14 03:32 - 00011338 _____ C:\WINDOWS\KB2900986.log
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 03:32 - 2013-11-14 03:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 03:32 - 2013-11-13 19:40 - 00019421 _____ C:\WINDOWS\KB2868626.log
2013-11-14 03:32 - 2013-11-13 19:40 - 00018388 _____ C:\WINDOWS\KB2862152.log
2013-11-14 03:32 - 2013-11-13 19:40 - 00017874 _____ C:\WINDOWS\KB2876331.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00079673 _____ C:\WINDOWS\iis6.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00068621 _____ C:\WINDOWS\FaxSetup.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00063978 _____ C:\WINDOWS\ocgen.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00032806 _____ C:\WINDOWS\tsoc.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00022990 _____ C:\WINDOWS\comsetup.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00021286 _____ C:\WINDOWS\msmqinst.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00014171 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00007585 _____ C:\WINDOWS\updspapi.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00004329 _____ C:\WINDOWS\ocmsn.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00003569 _____ C:\WINDOWS\msgsocm.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00003421 _____ C:\WINDOWS\tabletoc.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-14 03:32 - 2013-10-12 06:01 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-11-14 03:31 - 2013-11-14 03:31 - 00013881 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-14 03:31 - 2012-07-01 21:12 - 00000000 ____D C:\WINDOWS\ie8updates
2013-11-11 16:51 - 2013-11-11 16:51 - 00000000 ____D C:\Documents and Settings\David\Plocha\01_audio
2013-11-11 16:46 - 2012-07-09 22:29 - 00013824 _____ C:\Documents and Settings\David\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-10 01:16 - 2012-06-30 20:47 - 00000000 __SHD C:\Documents and Settings\All Users\DRM
2013-11-10 00:45 - 2013-11-10 00:45 - 00000000 ____D C:\Program Files\VNT
2013-11-10 00:45 - 2013-11-10 00:45 - 00000000 ____D C:\Documents and Settings\David\Local Settings\Data aplikací\VNT
2013-11-09 15:22 - 2012-06-30 21:54 - 00403440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2013-11-09 00:32 - 2012-08-04 01:06 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-11-07 17:05 - 2013-10-26 23:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-02 22:28 - 2013-11-02 22:27 - 00065536 _____ C:\WINDOWS\Minidump\Mini110213-01.dmp
2013-11-01 21:16 - 2012-06-30 22:31 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-11-01 17:22 - 2013-11-01 17:22 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Battlefield 2
2013-11-01 17:22 - 2012-06-30 20:55 - 00000000 ___RD C:\Documents and Settings\David\Dokumenty
2013-11-01 17:18 - 2013-11-01 17:18 - 00001723 _____ C:\Documents and Settings\All Users\Plocha\Battlefield 2.lnk
2013-11-01 17:17 - 2013-11-01 17:17 - 00023901 _____ C:\WINDOWS\DirectX.log
2013-11-01 17:17 - 2012-06-30 20:46 - 00000000 ____D C:\WINDOWS\system32\DirectX
2013-11-01 17:10 - 2012-07-06 20:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\EA Games
2013-11-01 17:10 - 2012-07-06 20:23 - 00000000 ____D C:\Program Files\EA Games
2013-11-01 17:10 - 2012-06-30 20:57 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-10-29 18:55 - 2012-06-30 21:35 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-29 18:55 - 2012-06-30 21:35 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-29 14:18 - 2013-10-29 14:03 - 00000000 ____D C:\Program Files\Warcraft III
2013-10-29 14:07 - 2013-10-29 14:07 - 00126976 _____ (Blizzard Entertainment) C:\WINDOWS\War3Unin.exe
2013-10-29 14:07 - 2013-10-29 14:07 - 00016771 _____ C:\WINDOWS\War3Unin.dat
2013-10-29 14:07 - 2013-10-29 14:07 - 00002829 _____ C:\WINDOWS\War3Unin.pif
2013-10-29 14:07 - 2013-10-29 14:07 - 00001612 _____ C:\Documents and Settings\David\Plocha\Warcraft III.lnk
2013-10-29 14:07 - 2013-10-29 14:07 - 00000000 ____D C:\Documents and Settings\David\Nabídka Start\Programy\Warcraft III
2013-10-29 14:07 - 2012-06-30 20:55 - 00000000 ___RD C:\Documents and Settings\David\Nabídka Start\Programy
2013-10-29 01:25 - 2013-07-20 13:21 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\vlc
2013-10-28 23:41 - 2013-10-28 23:41 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Skype Voice Records
2013-10-28 23:41 - 2013-10-28 23:41 - 00000000 ____D C:\Documents and Settings\David\Dokumenty\Clownfish Avatars
2013-10-28 15:47 - 2013-10-28 15:47 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
2013-10-28 15:47 - 2012-06-30 22:31 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-10-28 15:36 - 2013-10-28 15:36 - 00000000 ____D C:\Documents and Settings\David\Data aplikací\AVAST Software
2013-10-28 15:28 - 2013-10-28 15:28 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2013-10-28 15:27 - 2013-10-28 15:22 - 00247192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys
2013-10-28 15:27 - 2013-06-30 21:06 - 00178304 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-10-28 15:27 - 2013-06-30 21:06 - 00070384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-10-28 15:27 - 2013-06-30 21:06 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-10-28 15:27 - 2012-08-27 17:18 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2013-10-28 15:27 - 2012-06-30 21:54 - 00774392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-10-28 15:27 - 2012-06-30 21:54 - 00269216 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-10-28 15:27 - 2012-06-30 21:54 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-10-28 15:27 - 2012-06-30 21:54 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-10-28 15:27 - 2012-06-30 21:54 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-10-28 15:27 - 2012-06-30 21:54 - 00035656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-10-28 15:23 - 2012-06-30 21:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-10-28 15:22 - 2012-06-30 20:48 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2013-10-28 15:14 - 2013-10-28 15:14 - 00000000 ___RD C:\Documents and Settings\David\Dokumenty\Filmy
2013-10-28 15:14 - 2013-10-28 15:14 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Filmy
2013-10-28 15:14 - 2013-09-24 22:38 - 00002756 _____ C:\WINDOWS\wmsetup.log
2013-10-28 15:14 - 2012-06-30 22:31 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty
2013-10-28 15:14 - 2012-06-30 20:55 - 00000788 _____ C:\Documents and Settings\David\Nabídka Start\Programy\Windows Media Player.lnk
2013-10-28 14:18 - 2013-10-28 13:17 - 00000000 ____D C:\Documents and Settings\David\Plocha\Escape Plan 2013 DVDRip XviD-SPARKS
2013-10-26 23:27 - 2012-06-30 21:37 - 00000730 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
2013-10-25 23:04 - 2013-05-29 16:48 - 00000000 ____D C:\Documents and Settings\David\Plocha\travian

Some content of TEMP:
====================
C:\Documents and Settings\David\Local Settings\Temp\7za.exe
C:\Documents and Settings\David\Local Settings\Temp\down.exe
C:\Documents and Settings\David\Local Settings\Temp\firefox.exe
C:\Documents and Settings\David\Local Settings\Temp\ie.exe
C:\Documents and Settings\David\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.6.0.87.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.109.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.113.exe
C:\Documents and Settings\David\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\David\Local Settings\Temp\SIntf16.dll
C:\Documents and Settings\David\Local Settings\Temp\SIntf32.dll
C:\Documents and Settings\David\Local Settings\Temp\SIntfNT.dll
C:\Documents and Settings\David\Local Settings\Temp\wmfdist.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-10-19 07:35] - [2008-10-19 07:35] - 1589760 ____A (Microsoft Corporation) dd7e25e20aebd672dae7e1d911c2d824

C:\Windows\System32\winlogon.exe
[2008-10-19 07:38] - [2008-10-19 07:38] - 0557056 ____A (Microsoft Corporation) 12a799ad9415ae9c8abcc5f75e9cf034

C:\Windows\System32\svchost.exe
[2008-04-14 08:52] - [2008-04-14 08:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2008-04-14 08:52] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2008-10-19 07:38] - [2008-10-19 07:38] - 0578560 ____A (Microsoft Corporation) ccb32d10c69a89822e9134c0c4894be1

C:\Windows\System32\userinit.exe
[2008-04-14 08:52] - [2008-04-14 08:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 07:42] - [2008-04-14 07:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
  HKLM\...\Run: [] - [x]
  HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
  HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
  HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
  HKCU\...\Run: [Google Update] - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [136176 2012-07-07] (Google Inc.)
  HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
  HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1
  HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1
  HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32
  
  URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
  URLSearchHook: HKCU - DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
  URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
  SearchScopes: HKLM - DefaultScope value is missing.
  SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  BHO: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
  Toolbar: HKLM - No Name - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
  Toolbar: HKLM - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
  Toolbar: HKCU - No Name - {687578B9-7132-4A7A-80E4-30EE31099E03} - No File
  
  FF Extension: toolbar_PTV-RG - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\Extensions\toolbar_PTV-RG@apn.ask.com.xpi
  
  CHR DefaultSearchURL: (Ask) - http://www.google.com
  CHR DefaultSuggestURL: (Ask) - http://www.google.com
  CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaahnibljmklpljnbpgfobmfpfhplch\22.56872_0
  CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaapoomnboffjcgcebabolakmhbblbk\7.15.4.41936_0
  CHR HKLM\...\Chrome\Extension: [aaaahnibljmklpljnbpgfobmfpfhplch] - C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\PTV-RG\CRX\ToolbarCR.crx
  CHR HKLM\...\Chrome\Extension: [aaaapoomnboffjcgcebabolakmhbblbk] - C:\Documents and Settings\David\Local Settings\Data aplikací\APN\GoogleCRXs\aaaapoomnboffjcgcebabolakmhbblbk_7.15.4.0.crx
  
  R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [578264 2011-12-21] (Pandora.TV)
  S4 IntelIde; No ImagePath
  U1 WS2IFSL; 
  
  2013-11-22 21:05 - 2013-11-22 21:05 - 00001876 _____ C:\Documents and Settings\David\Plocha\sc-cleaner
  2013-11-22 20:55 - 2013-11-22 20:57 - 00001876 _____ C:\sc-cleaner.txt
  2013-11-22 20:53 - 2013-11-22 20:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Documents and Settings\David\Plocha\sc-cleaner.exe
  C:\Documents and Settings\David\Local Settings\Temp\7za.exe
  C:\Documents and Settings\David\Local Settings\Temp\down.exe
  C:\Documents and Settings\David\Local Settings\Temp\firefox.exe
  C:\Documents and Settings\David\Local Settings\Temp\ie.exe
  C:\Documents and Settings\David\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe
  C:\Documents and Settings\David\Local Settings\Temp\KMP_3.6.0.87.exe
  C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.109.exe
  C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.113.exe
  C:\Documents and Settings\David\Local Settings\Temp\Quarantine.exe
  C:\Documents and Settings\David\Local Settings\Temp\SIntf16.dll
  C:\Documents and Settings\David\Local Settings\Temp\SIntf32.dll
  C:\Documents and Settings\David\Local Settings\Temp\SIntfNT.dll
  C:\Documents and Settings\David\Local Settings\Temp\wmfdist.exe
  
  C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  C:\WINDOWS\tasks\avast! Emergency Update.job
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006Core.job
  C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006UA.job
  C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
  C:\Program Files\PANDORA.TV
  
  REG: reg delete "HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list" /v "C:\Program Files\PANDORA.TV\PanService\PandoraService.exe" /f
  
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-11-2013
Ran by David at 2013-11-24 01:25:40 Run:1
Running from C:\Documents and Settings\David\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Documents and Settings\David\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [136176 2012-07-07] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKCU\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\Default User\...\RunOnce: [nltide_2] - regsvr32 /s /n /i:U shell32

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
URLSearchHook: HKCU - (No Name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
Toolbar: HKLM - No Name - {687578b9-7132-4a7a-80e4-30ee31099e03} - No File
Toolbar: HKLM - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll" No File
Toolbar: HKCU - No Name - {687578B9-7132-4A7A-80E4-30EE31099E03} - No File

FF Extension: toolbar_PTV-RG - C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\Extensions\toolbar_PTV-RG@apn.ask.com.xpi

CHR DefaultSearchURL: (Ask) - http://www.google.com
CHR DefaultSuggestURL: (Ask) - http://www.google.com
CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaahnibljmklpljnbpgfobmfpfhplch\22.56872_0
CHR Extension: (Ask Toolbar) - C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaapoomnboffjcgcebabolakmhbblbk\7.15.4.41936_0
CHR HKLM\...\Chrome\Extension: [aaaahnibljmklpljnbpgfobmfpfhplch] - C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\PTV-RG\CRX\ToolbarCR.crx
CHR HKLM\...\Chrome\Extension: [aaaapoomnboffjcgcebabolakmhbblbk] - C:\Documents and Settings\David\Local Settings\Data aplikací\APN\GoogleCRXs\aaaapoomnboffjcgcebabolakmhbblbk_7.15.4.0.crx

R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [578264 2011-12-21] (Pandora.TV)
S4 IntelIde; No ImagePath
U1 WS2IFSL;

2013-11-22 21:05 - 2013-11-22 21:05 - 00001876 _____ C:\Documents and Settings\David\Plocha\sc-cleaner
2013-11-22 20:55 - 2013-11-22 20:57 - 00001876 _____ C:\sc-cleaner.txt
2013-11-22 20:53 - 2013-11-22 20:53 - 00406264 _____ (Bleeping Computer, LLC) C:\Documents and Settings\David\Plocha\sc-cleaner.exe
C:\Documents and Settings\David\Local Settings\Temp\7za.exe
C:\Documents and Settings\David\Local Settings\Temp\down.exe
C:\Documents and Settings\David\Local Settings\Temp\firefox.exe
C:\Documents and Settings\David\Local Settings\Temp\ie.exe
C:\Documents and Settings\David\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.6.0.87.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.109.exe
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.113.exe
C:\Documents and Settings\David\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\David\Local Settings\Temp\SIntf16.dll
C:\Documents and Settings\David\Local Settings\Temp\SIntf32.dll
C:\Documents and Settings\David\Local Settings\Temp\SIntfNT.dll
C:\Documents and Settings\David\Local Settings\Temp\wmfdist.exe

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\Program Files\PANDORA.TV

REG: reg delete "HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list" /v "C:\Program Files\PANDORA.TV\PanService\PandoraService.exe" /f


Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoRemoteRecursiveEvents => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoRecentDocsMenu => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ForceClassicControlPanel => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_2 => Value deleted successfully.
Default URLSearchHook was restored successfully .
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} => Value deleted successfully.
HKCR\CLSID\{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{687578b9-7132-4a7a-80e4-30ee31099e03} => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5054562D-5247-006A-76A7-7A786E7484D7} => Key deleted successfully.
HKCR\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{687578b9-7132-4a7a-80e4-30ee31099e03} => Value deleted successfully.
HKCR\CLSID\{687578b9-7132-4a7a-80e4-30ee31099e03} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{5054562D-5247-006A-76A7-7A786E7484D7} => Value deleted successfully.
HKCR\CLSID\{5054562D-5247-006A-76A7-7A786E7484D7} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{687578B9-7132-4A7A-80E4-30EE31099E03} => Value deleted successfully.
HKCR\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03} => Key not found.
C:\Documents and Settings\David\Data aplikací\Mozilla\Firefox\Profiles\653zlnwo.default\Extensions\toolbar_PTV-RG@apn.ask.com.xpi => Moved successfully.
CHR DefaultSearchURL: (Ask) - http://www.google.com ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSuggestURL: (Ask) - http://www.google.com ==> The Chrome "Settings" can be used to fix the entry.
C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaahnibljmklpljnbpgfobmfpfhplch => Moved successfully.
C:\DOCUME~1\David\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aaaapoomnboffjcgcebabolakmhbblbk => Moved successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\aaaahnibljmklpljnbpgfobmfpfhplch => Key deleted successfully.
"C:\Documents and Settings\All Users\Data aplikací\AskPartnerNetwork\Toolbar\PTV-RG\CRX\ToolbarCR.crx" => File/Directory not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\aaaapoomnboffjcgcebabolakmhbblbk => Key deleted successfully.
"C:\Documents and Settings\David\Local Settings\Data aplikací\APN\GoogleCRXs\aaaapoomnboffjcgcebabolakmhbblbk_7.15.4.0.crx" => File/Directory not found.
PanService => Service deleted successfully.
IntelIde => Service deleted successfully.
WS2IFSL => Service deleted successfully.
C:\Documents and Settings\David\Plocha\sc-cleaner => Moved successfully.
C:\sc-cleaner.txt => Moved successfully.
C:\Documents and Settings\David\Plocha\sc-cleaner.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\7za.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\down.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\firefox.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\ie.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.6.0.87.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.109.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\KMP_3.7.0.113.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\Quarantine.exe => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\SIntf16.dll => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\SIntf32.dll => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\SIntfNT.dll => Moved successfully.
C:\Documents and Settings\David\Local Settings\Temp\wmfdist.exe => Moved successfully.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\tasks\avast! Emergency Update.job => Moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006Core.job => Moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-838170752-1801674531-1006UA.job => Moved successfully.
"C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job" => File/Directory not found.
C:\Program Files\PANDORA.TV => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list" /v "C:\Program Files\PANDORA.TV\PanService\PandoraService.exe" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needs a manual reboot.

==== End of Fixlog ====

Jak se chova PC

urcite je to lepsi nez predtim.. využití CPU je ted minimalni.. predtim, i kdyz sem nemel nic spustene to bylo kolem 70% .. vyuziti pameti mi ted pise 720M / 5210M .. predtim kolem 1200M

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

ok, dekuji za pomoc

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat