VIRY.CZ

Pozdravujem Vás po krátkom čase... ale pred tým som mal väčši pauzu, no aj teraz by som Vás nežiadal o pomoc, keby sa nejednalo o dobrú priateľku, ktorá ma pôvodne oslovila len aby som sa pozrel na jej počítač , či si má kúpiť nový, lebo jej na ňom už nič nie je.. najprv som je stiahol nod.. a ani neviem kolko toho našlo.. potom som adwclearom niečo potom mbamom link nižšie (ak sa mám ísť podľa návodu tu a mám ísť najprv podľa FRST .odpravedlňujem sa a usmernite ma) Ďakujem za Váš čas a ochotu


Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2014.12.04.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Admin :: FUJITSUSIEMENS [administrátor]

4.12.2014 19:33:32
mbam-log-2014-12-04 (19-33-32).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 631805
Uplynutý čas: 1 hod, 11 min, 45 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 8
HKCR\CLSID\{038cb5c7-48ea-4af9-94e0-a1646542e62b} (PUP.Optional.ClientConnect) -> Bude odstránený po reštartovaní.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
HKCR\iMeshIEHelper.DNSGuard (PUP.Optional.iMeshMusicBoxTB.A) -> Pridanie do karantény a zmazanie úspešné.
HKCR\iMeshIEHelper.DNSGuard.1 (PUP.Optional.iMeshMusicBoxTB.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID} (PUP.Optional.DataMangr.A) -> Pridanie do karantény a zmazanie úspešné.
HKLM\System\CurrentControlSet\Services\MaintainerSvc2.83.1635684 (PUP.Optional.MaintainerSvc.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované registračné hodnoty: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Dáta: ǵŚęHůJ”ŕˇdeBć+ -> Pridanie do karantény a zmazanie úspešné.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{038CB5C7-48EA-4AF9-94E0-A1646542E62B} (PUP.Optional.ClientConnect) -> Dáta: ToggleEN Toolbar -> Pridanie do karantény a zmazanie úspešné.

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 43
C:\Documents and Settings\Mimi\Application Data\PriceGong (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0 (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0 (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\common (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.

Detegované súbory: 288
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\prxtbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\RECYCLER\S-1-5-21-839522115-1214440339-682003330-1008\Dc102.exe (PUP.Optional.YourFileDownloader) -> Pridanie do karantény a zmazanie úspešné.
C:\RECYCLER\S-1-5-21-839522115-1214440339-682003330-1008\Dc96.exe (PUP.Optional.Bandoo) -> Pridanie do karantény a zmazanie úspešné.
C:\WINDOWS\Temp\b45e4455\SetupDataMngr_iLivid.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Local Settings\Application Data\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Admin\Local Settings\Application Data\Conduit\CT2077543\ToggleENAutoUpdaterHelper.exe.vir (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Emmka\Application Data\pay-by-ads\Yahoo! Search\1.3.15.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Emmka\Application Data\pay-by-ads\Yahoo! Search\1.3.8.2\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Guest\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe.vir (PUP.Optional.Blabbers) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrlte.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\dsrsetup.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Documents and Settings\Mimi_2\Application Data\pay-by-ads\Yahoo! Search\1.3.12.4\res.dll.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert0.dll.vir (PUP.Optional.Conduit) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL.vir (PUP.Optional.FunWebProducts.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\FunWebProducts\Installr\2.bin\F3EZSETP.DLL.vir (PUP.Optional.FunWebProducts.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\Uninstall.exe.vir (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\GC\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.PendingOverwrite.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.tmp.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\SerialTrunc.OfSvc.exe.vir (PUP.Optional.PayByAds.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\tmpDA.tmp.vir (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\{47351c22-0d6c-4658-a617-795d251145e2}.dll.vir (Adware.SwiftBrowse) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\{c1a40b4d-8d65-4ccf-92ca-4fa87c334bf3}.dll.vir (Adware.SwiftBrowse) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.Bromon.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.BroStats.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.CompatibilityChecker.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\AdwCleaner\Quarantine\C\Program Files\SerialTrunc\bin\plugins\SerialTrunc.OfSvc.dll.vir (PUP.Optional.Sanbreel.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\hk64tbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\hktbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\ldrtbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\tbTog1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\ToggleEN\tbTog2.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Temp\SQLite.dll (PUP.Optional.SweetIM) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\N8P0BDH0\tbedrs[1].dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\110.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\118.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\128E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\13F3.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\14.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\154E.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\16A.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\16C.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\17A6.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\195.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1A3.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1A5.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1F0.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\223.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\23.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\27A.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\27B.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2C63.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2CA.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\304.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\31.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\35F.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\36.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\36E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\384.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\394.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3C.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3D.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\40.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\41.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\42.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\440.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\46DB.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4B.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4C.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4D.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4E8.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\50.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\530.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\54.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\56D.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5A7.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5AC.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\61.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\62.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\68E.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6F.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7184.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\72.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\722.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\73.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\76.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7D.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7E.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\81.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\8B.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\93.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\938.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\98.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9A0.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9E.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\AC.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\B2.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\D5.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\DC5.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\E5.exe (PUP.BitCoinMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\FD.exe (Worm.Dorkbot) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\hid.exe (PUP.HideStart) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\SQLite.dll (PUP.Optional.SweetIM) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\Winlogo.exe (Trojan.BCMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\Winlogo2.exe (Trojan.BCMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\x30811.exe (PUP.BitMiner) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Start Menu\Programs\Startup\xD.exe (PUP.HiddenStart.H) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\BrotherSoft_Extreme\tbBro1.dll (PUP.Optional.ClientConnect) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsqE8D\Uninstall.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsqE8D\nsdEA6.tmp\nsbEB1.exe (PUP.Optional.Ilivid) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsxEB5\nsqEBE.tmp\iLividMediaBar.exe (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Temp\nsxEB5\nsqEBE.tmp\mediabar.exe (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml (PUP.Optional.SearchQu.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Program Files\Mozilla Firefox\searchplugins\iMeshWebSearch.xml (PUP.Optional.ImeshWebSearch.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Local Settings\Temp\blabbers-ff-le.xpi (PUP.Blabbers) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\23.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\31.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\40.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\41.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\42.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4B.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4C.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\50.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\61.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\72.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\73.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\76.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7D.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7E.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\81.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\9E.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Start Menu\Programs\Startup\xD.exe (Trojan.Agent) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6.exe (Trojan.Downloader) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\63.exe (Trojan.Banker) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\6D.exe (Trojan.Banker) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1289.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\1670.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2795.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3977.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\4229.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5091.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\5975.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\7184.exe (Trojan.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\2C63.exe (Backdoor.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Guest\Application Data\3A72.exe (Backdoor.Agent.Gen) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\1.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\a.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\b.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\c.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\d.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\e.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\f.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\g.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\h.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\i.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\j.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\k.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\l.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\m.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\mru.xml (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\n.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\o.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\p.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\q.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\r.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\s.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\t.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\u.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\v.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\w.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\x.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\y.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi\Application Data\PriceGong\Data\z.txt (PUP.Optional.PriceGong.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\background.js (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\content.js (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\icon.png (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\okbdcdmpkkncigegdkhhhamjblgjbfja\1.0.1_0\manifest.json (PUP.Optional.SerialTrunc.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Emmka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\manifest.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\background.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\config.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\registry.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\reporting.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\common\utils.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\build.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_128x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_24x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_32x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\logo_grey_19x.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\config\skin\images\logo\toolbar-icons.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\popup.html (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\bootstrap.css.map (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\css\uninstallInfo.css (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\ask_logo.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\cinema.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\comedy.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\m.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\magazine.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\movies.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\options.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\reviews.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\search.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\star.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\toolbar-icon-ask.ico (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\images\trailers.png (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\bootstrap.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\jquery.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\dropdown\js\popup.js (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.
C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob\35.4_0\_metadata\verified_contents.json (PUP.Optional.MoviesToolBar.A) -> Pridanie do karantény a zmazanie úspešné.

(koniec)

Zdravím!
Vše, co MBAM nalezl, smažte. Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=130786 .

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-04 21:53:37
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 705 MB (2%) free of 38 GB
Total RAM: 3062 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:53:48, on 4.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\WINDOWS\Explorer.EXE
c:\program files\teamviewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - (no file)
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O3 - Toolbar: (no name) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O3 - Toolbar: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Xfmqmn] C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 6466 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}
{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{51a86bb3-6602-4c85-92a5-130ee4864f13} - BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Xfmqmn"=C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8
2014-11-11 17:39:56 ----D---- C:\Program Files\GUM5FE.tmp

======List of files/folders modified in the last 1 month======

2014-12-04 21:53:42 ----D---- C:\WINDOWS\Prefetch
2014-12-04 21:53:38 ----D---- C:\Program Files
2014-12-04 21:19:09 ----D---- C:\WINDOWS\Temp
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 21:08:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-04 19:06:48 ----D---- C:\WINDOWS\system32
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:32:45 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----SHD---- C:\WINDOWS\Installer
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----SD---- C:\WINDOWS\Tasks
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Teď spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v4.103 - Report created 04/12/2014 at 22:44:44
# Updated 01/12/2014 by Xplode
# Database : 2014-12-01.1 [Local]
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Admin - FUJITSUSIEMENS
# Running from : C:\Documents and Settings\Admin\Desktop\adwcleaner_4.103.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512


-\\ Mozilla Firefox v32.0.3 (x86 sk)


-\\ Google Chrome v

[C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://www.search.ask.com/?o=APN10645A&gct=hp& ... 30-308&t=4

*************************

AdwCleaner[R0].txt - [35107 octets] - [04/12/2014 19:00:25]
AdwCleaner[R1].txt - [1194 octets] - [04/12/2014 22:33:03]
AdwCleaner[R2].txt - [1193 octets] - [04/12/2014 22:35:40]
AdwCleaner[S0].txt - [34902 octets] - [04/12/2014 19:06:05]
AdwCleaner[S1].txt - [1118 octets] - [04/12/2014 22:44:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1178 octets] ##########

Poprosím o nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-05 19:22:54
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 600 MB (2%) free of 38 GB
Total RAM: 3062 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:23:02, on 5.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - (no file)
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O3 - Toolbar: (no name) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - (no file)
O3 - Toolbar: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Xfmqmn] C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 6420 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job - C:\Documents and Settings\Mimi_2\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}
{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{51a86bb3-6602-4c85-92a5-130ee4864f13} - BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Xfmqmn"=C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8
2014-11-11 17:39:56 ----D---- C:\Program Files\GUM5FE.tmp

======List of files/folders modified in the last 1 month======

2014-12-05 19:19:47 ----D---- C:\WINDOWS\Temp
2014-12-05 14:20:28 ----D---- C:\WINDOWS\Prefetch
2014-12-05 14:15:26 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 23:35:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-04 21:53:38 ----D---- C:\Program Files
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 19:06:48 ----D---- C:\WINDOWS\system32
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----SHD---- C:\WINDOWS\Installer
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----SD---- C:\WINDOWS\Tasks
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Documents and Settings\Admin\Application Data\Xfmqmn.exe
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-1214440339-682003330-1008UA.job
C:\Program Files\GUM5FE.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Xfmqmn"=-

:services
SeaPort

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

dúfam že to prebehlo o.k. lebo PC obsluhijem cez teamviewer a počas výkonu ma prerušilo, keď som sa prihlásil tak už na ľavej strane OTM nič nebolo a na pravej niečo červenými písmenami no keď som to minimalizoval tak mi ostala prazdna plocha a PC sa muselo reštartovať tlačidlom

tu je RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2014-12-05 20:57:00
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 2 GB (5%) free of 38 GB
Total RAM: 3062 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:57:13, on 5.12.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TeamViewer\TeamViewer.exe
C:\Program Files\TeamViewer\tv_w32.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\program files\teamviewer\TeamViewer_Desktop.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Admin\Desktop\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O24 - Desktop Component 0: (no name) - http://www.kovozvar.sk/kovozvar/album/B ... ok_005.JPG

--
End of file - 5352 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job - C:\WINDOWS\system32\xp_eos.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0, {28D35620-51D9-11DE-9D13-2DB156D89593}:3.1, {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{B13721C7-F507-4982-B2E5-502A71474FED}

C:\Program Files\Mozilla Firefox\components\
aboutCertError.js.moz-backup
aboutPrivateBrowsing.js.moz-backup
aboutRights.js.moz-backup
aboutRobots.js.moz-backup
aboutSessionRestore.js.moz-backup
FeedProcessor.js.moz-backup
fuelApplication.js.moz-backup
NetworkGeolocationProvider.js.moz-backup
nsBadCertHandler.js.moz-backup
nsContentDispatchChooser.js.moz-backup
nsContentPrefService.js.moz-backup
nsDownloadManagerUI.js.moz-backup
nsHandlerService.js.moz-backup
nsLoginInfo.js.moz-backup
nsLoginManager.js.moz-backup
nsLoginManagerPrompter.js.moz-backup
nsPlacesDBFlush.js.moz-backup
nsPlacesTransactionsService.js.moz-backup
nsPostUpdateWin.js.moz-backup
nsProxyAutoConfig.js.moz-backup
nsSearchSuggestions.js.moz-backup
nsSetDefaultBrowser.js.moz-backup
nsTaggingService.js.moz-backup
nsTryToClose.js.moz-backup
nsWebHandlerApp.js.moz-backup
pluginGlue.js.moz-backup
storage-Legacy.js.moz-backup
storage-mozStorage.js.moz-backup
txEXSLTRegExFunctions.js.moz-backup

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml.moz-backup
azet-sk.xml.moz-backup
dunaj-sk.xml.moz-backup
eBay.xml.moz-backup
google.xml.moz-backup
slovnik-sk.xml.moz-backup
wikipedia-sk.xml.moz-backup
zoznam-sk.xml.moz-backup

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\extensions\
{28D35620-51D9-11DE-9D13-2DB156D89593}

C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\arztdx66.default\searchplugins\
mj-snr.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51a86bb3-6602-4c85-92a5-130ee4864f13}]
BrotherSoft Extreme Toolbar - C:\Program Files\BrotherSoft_Extreme\prxtbBrot.dll [2011-03-28 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-06 43848]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-06 152392]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-10-01 5088456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Disabled:Google Earth"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe"="C:\Documents and Settings\Mimi\My Documents\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe"="C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe:*:Enabled:Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Guest\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll

======List of files/folders created in the last 1 month======

2014-12-05 20:47:30 ----D---- C:\_OTM
2014-12-04 21:53:38 ----D---- C:\Program Files\trend micro
2014-12-04 21:53:37 ----D---- C:\rsit
2014-12-04 19:26:02 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2014-12-04 19:25:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-12-04 19:25:46 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-04 19:00:19 ----D---- C:\AdwCleaner
2014-12-04 18:40:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2014-12-03 19:30:54 ----D---- C:\Program Files\ESET
2014-12-03 19:14:15 ----D---- C:\Program Files\TeamViewer
2014-12-03 19:05:26 ----D---- C:\Program Files\CCleaner
2014-12-03 19:02:12 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-03 19:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2014-11-23 17:44:05 ----D---- C:\cc3779aab551a07f0247328ec8

======List of files/folders modified in the last 1 month======

2014-12-05 20:54:49 ----D---- C:\WINDOWS\Prefetch
2014-12-05 20:54:09 ----D---- C:\WINDOWS\Temp
2014-12-05 20:53:35 ----D---- C:\WINDOWS\system32
2014-12-05 20:51:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-12-05 20:47:33 ----SD---- C:\WINDOWS\Tasks
2014-12-05 20:47:33 ----D---- C:\Program Files
2014-12-05 14:24:07 ----SHD---- C:\WINDOWS\Installer
2014-12-05 14:15:26 ----D---- C:\Documents and Settings\Admin\Application Data\Skype
2014-12-04 21:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2014-12-04 21:09:11 ----D---- C:\WINDOWS\system32\drivers
2014-12-04 19:06:13 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2014-12-04 18:28:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-04 18:25:58 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2014-12-03 19:41:55 ----D---- C:\WINDOWS
2014-12-03 19:34:17 ----HD---- C:\WINDOWS\inf
2014-12-03 19:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2014-12-03 19:29:32 ----A---- C:\WINDOWS\win.ini
2014-12-03 19:14:39 ----RSD---- C:\WINDOWS\Fonts
2014-12-03 19:11:07 ----D---- C:\Documents and Settings\All Users\Application Data\BlueStacksSetup
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Minidump
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Logs
2014-12-03 19:10:24 ----D---- C:\WINDOWS\Debug
2014-12-03 19:01:43 ----D---- C:\Program Files\Mozilla Firefox
2014-12-03 18:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\0df3a3ff-f340-47c8-bd12-69f1b8f009ac
2014-11-25 17:04:13 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2014-11-25 17:02:08 ----D---- C:\Program Files\Google
2014-11-25 08:26:35 ----D---- C:\Program Files\ToggleEN
2014-11-15 20:05:26 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2014-10-10 191928]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2014-10-10 135296]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2014-10-10 119792]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2010-04-28 54760]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-06-19 190336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-07-08 267392]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 AX88772;USB2.0 to Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\ax88772.sys [2009-09-03 46720]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 FlrnUSB;Leadtek USB Network Interface; C:\WINDOWS\system32\DRIVERS\LtkUSB.sys [2010-09-13 41907]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter_hs.sys [2011-02-15 9216]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 zgwhsdiag;HSPA WCDMA Handset Diagnostic Port; C:\WINDOWS\system32\DRIVERS\gwhsdiag.sys [2011-02-15 106240]
S3 zgwhsmdm;HSPAHandSet WCDMA Handset USB Modem; C:\WINDOWS\system32\DRIVERS\gwhsmdm.sys [2011-02-15 106240]
S3 zgwhsnmea;WCDMA Handset NMEA Port; C:\WINDOWS\system32\DRIVERS\gwhsnmea.sys [2011-02-15 106240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-10-01 1349576]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-06 553288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-24 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Dvouklikem na soubor spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - Default URLSearchHook is missing
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Máte málo volného místa na systémovém disku. Přesuňte některá svá data na jiné úložiště, příp. odinstalujte nepoužívané aplikace.

HijackThis si mám stiahnuť predpokladám (správne ?)

Nee. Klikněte na soubor C:\Program Files\trend micro\Admin.exe a on se spustí. Zapoměl jsem prve napsat ten soubor. Omlouvám se.

Rudy píše:Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Máte málo volného místa na systémovém disku. Přesuňte některá svá data na jiné úložiště, příp. odinstalujte nepoužívané aplikace.

malo by byť hotovo ? včera sme spolu prechádzali veci a fakt neviem kde sú obsadené tie GB ? skúsim niečo pohladať čo by sa dalo mazať

Vaše data (dokumenty, fotky, videa apod.) přesuňte na jiné úložiště. Nepoužívané aplikace odinstalujte (nemažte). Od zbytečností byl systém vyčištěn.

Ďakujem veľmi pekne za Vášu pomoc , čas a ochotu. Nech sa darí !