VIRY.CZ

Dobrý den,
chtěl bych pomoci svému bratrovi vyčistit počítač. Bratr je duševně nemocný a o PC se určitě nestará, tak se nelekněte, jestli uvidíte, v jakém stavu je jeho počítač
Předem říkám, že nejde o můj počítač, tak jestli najdete něco nelegálního, tak já s tím nemám nic společného (nechci si kazit reputaci), a samozřejmě bych mu to smazal. On si toho stejně nevšimne, je momentálně na delší čas pryč.

Jo a abych nezapomněl, problém s počítačem je takový, že při hraní her, nebo pouštění hudby/filmů a dalších aplikací se počítač dost ošklivě zamrzne.... Ani ta hudba se poslouchat nedá, během skladby se to zasekne na 5 - 10 vteřin a udělá to dost ošklivý zvuk.... Bohužel, lépe to popsat nedokážu

Počítač nemá připojení k internetu.
Zde posílám log:


Logfile of random's system information tool 1.09 (written by random/random)
Run by pavel at 2015-01-26 23:02:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 54 GB (30%) free of 182 GB
Total RAM: 2046 MB (69% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\P R O G R A M [2012-12-08 6527128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AMBDef"=C:\WINDOWS\AMBDef.exe [2008-01-24 53248]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-02-17 20029032]
"AvastUI.exe"=D:\P R O G R A M [2012-12-08 6527128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\OscarX7H\program files\OSCAR Editor\OscarEditor.exe [2009-08-31 4053504]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"GarenaPlus"=C:\Program Files\Garena Plus\GarenaMessenger.exe [2014-04-29 9936176]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [2006-09-13 139264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncService]
C:\Program Files\InstallShield Installation Information\{EC6D5F08-1694-431F-8200-3B0A8A61AC5A}\AMBSPISyncService.exe [2008-08-12 1233199]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus]
C:\Program Files\Garena Plus\GarenaMessenger.exe [2014-04-29 9936176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-08-22 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent]
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe [2006-11-13 1289000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
D:\P R O G R A M [2012-12-08 6527128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\steam.exe [2014-04-23 1825984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
D:\P R O G R A M [2012-12-08 6527128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\program files\real\realplayer\update\realsched.exe -osboot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel]
C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [2008-07-10 225396]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WiseStubReboot]
MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST WISE_SETUP_EXE_PATH=e:\driver\2k_xp\191.07\PhysX_9.09.0814_SystemSoftware.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nabídka Start^Programy^Po spuštění^hamachi.lnk]
D:\PROGRA~1\hamachi.exe [2010-11-17 625952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\P R O G R A M [2012-12-08 6527128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\P R O G R A M [2012-12-08 6527128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Šikovné programy\Steam\Steam.exe"="D:\Šikovné programy\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Rage of Mages 2\rom2.exe"="C:\Rage of Mages 2\rom2.exe:*:Enabled:rom2"
"D:\Rage of Mages 2\rom2.exe"="D:\Rage of Mages 2\rom2.exe:*:Enabled:rom2"
"F:\CRACK\STARCRAFT II.EXE"="F:\CRACK\STARCRAFT II.EXE:*:Enabled:Blizzard Launcher"
"D:\Hry\StarCraft II\StarCraft II.exe"="D:\Hry\StarCraft II\StarCraft II.exe:*:Enabled:Blizzard Launcher"
"D:\Hry\StarCraft II\Versions\Base15405\SC2.exe"="D:\Hry\StarCraft II\Versions\Base15405\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\StarCraft II\Versions\Base16561\SC2.exe"="D:\Hry\StarCraft II\Versions\Base16561\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\Counter strike 1.6\hl.exe"="D:\Hry\Counter strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\P R O G R A M Y\QIP\qip.exe"="D:\P R O G R A M Y\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\P R O G R A M Y\utorrent\uTorrent.exe"="D:\P R O G R A M Y\utorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\CNAB4RPK.EXE"="C:\WINDOWS\system32\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process"
"D:\Hry\Counter strike Source\Counter Strike Source 2010\hl2.exe"="D:\Hry\Counter strike Source\Counter Strike Source 2010\hl2.exe:*:Enabled:hl2"
"D:\Hry\Counter strike 1.6\hlds.exe"="D:\Hry\Counter strike 1.6\hlds.exe:*:Enabled:HLDS Launcher"
"D:\Hry\NFS Hot Pursuit\Launcher.exe"="D:\Hry\NFS Hot Pursuit\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"D:\Hry\NFS Hot Pursuit\NFS11.exe"="D:\Hry\NFS Hot Pursuit\NFS11.exe:*:Enabled:Need for Speed(TM) Hot Pursuit Application"
"D:\P R O G R A M Y\Garena\Garena.exe"="D:\P R O G R A M Y\Garena\Garena.exe:*:Enabled:Garena"
"D:\Hry\Call of Duty 2\CoD2MP_s.exe"="D:\Hry\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\Hry\Team Fortress 2\hl2.exe"="D:\Hry\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"D:\Hry\TF2\Team Fortress 2\hl2.exe"="D:\Hry\TF2\Team Fortress 2\hl2.exe:*:Enabled:hl2"
"D:\Hry\Team Fortress NS\hl2.exe"="D:\Hry\Team Fortress NS\hl2.exe:*:Enabled:hl2"
"D:\Hry\StarCraft II\Versions\Base16939\SC2.exe"="D:\Hry\StarCraft II\Versions\Base16939\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\StarCraft II\Versions\Base17326\SC2.exe"="D:\Hry\StarCraft II\Versions\Base17326\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\BaboViolent 2\bv2Dedicated.exe"="D:\Hry\BaboViolent 2\bv2Dedicated.exe:*:Enabled:bv2Dedicated"
"D:\Hry\BaboViolent 2\bv2.exe"="D:\Hry\BaboViolent 2\bv2.exe:*:Enabled:bv2"
"D:\Hry\BaboViolent 2\bv2Dedicated_v2_11fpro.exe"="D:\Hry\BaboViolent 2\bv2Dedicated_v2_11fpro.exe:*:Enabled:bv2Dedicated_v2_11fpro"
"D:\Hry\FixKorea\tacint\ti.exe"="D:\Hry\FixKorea\tacint\ti.exe:*:Enabled:ti"
"C:\Documents and Settings\pavel\Plocha\RGC\Ranked Gaming Client\rgc.exe"="C:\Documents and Settings\pavel\Plocha\RGC\Ranked Gaming Client\rgc.exe:*:Enabled:rgc"
"D:\Hry\Dead Space 2\deadspace2.exe"="D:\Hry\Dead Space 2\deadspace2.exe:*:Enabled:Dead Space™ 2"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"D:\Hry\Diablo II\Diablo II.exe"="D:\Hry\Diablo II\Diablo II.exe:*:Enabled:Diablo II - Lord of Destruction"
"D:\Hry\StarCraft II\Versions\Base18092\SC2.exe"="D:\Hry\StarCraft II\Versions\Base18092\SC2.exe:*:Enabled:StarCraft II"
"H:\WinDVD.exe"="H:\WinDVD.exe:*:Enabled:WinDVD"
"D:\Hry\Warcraft III\Warcraft III.exe"="D:\Hry\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\P R O G R A M Y\hamachi.exe"="D:\P R O G R A M Y\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Documents and Settings\pavel\Local Settings\Temp\Rar$EX00.468\WoW-BurningCrusade-enGBdownloader.exe"="C:\Documents and Settings\pavel\Local Settings\Temp\Rar$EX00.468\WoW-BurningCrusade-enGBdownloader.exe:*:Enabled:Blizzard Downloader"
"D:\World Of Warcraft Classic\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"="D:\World Of Warcraft Classic\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe:*:Enabled:Blizzard Downloader"
"D:\World Of Warcraft Classic\Launcher.exe"="D:\World Of Warcraft Classic\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\World Of Warcraft Classic\Launcher.patch.exe"="D:\World Of Warcraft Classic\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"D:\Hry\World of Warcraft\Launcher.exe"="D:\Hry\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Hry\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"="D:\Hry\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Documents and Settings\pavel\Plocha\WoW-3.2.0-enGB-downloader.exe"="C:\Documents and Settings\pavel\Plocha\WoW-3.2.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Hry\Portal 2\portal2.exe"="D:\Hry\Portal 2\portal2.exe:*:Enabled:portal2"
"D:\Hry\GTA IV\Grand Theft Auto IV\GTAIV.exe"="D:\Hry\GTA IV\Grand Theft Auto IV\GTAIV.exe:*:Disabled:Grand Theft Auto IV"
"D:\Hry\NHL 09\nhl2009.exe"="D:\Hry\NHL 09\nhl2009.exe:*:Disabled:nhl2009"
"D:\Hry\NHL08\nhl2008.exe"="D:\Hry\NHL08\nhl2008.exe:*:Enabled:nhl2008"
"D:\Hry\nhl04\nhl2004.exe"="D:\Hry\nhl04\nhl2004.exe:*:Enabled:nhl2004"
"D:\Hry\Heroes2\HEROES2W.EXE"="D:\Hry\Heroes2\HEROES2W.EXE:*:Enabled:HEROES2W"
"D:\Hry\StarCraft II\Versions\Base18574\SC2.exe"="D:\Hry\StarCraft II\Versions\Base18574\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\Witcher 2\bin\witcher2.exe"="D:\Hry\Witcher 2\bin\witcher2.exe:*:Enabled:The Witcher 2: Assasins of Kings"
"D:\Hry\Commandos 2\comm2.exe"="D:\Hry\Commandos 2\comm2.exe:*:Enabled:comm2"
"D:\Hry\Fifa 11\Game\fifa.exe"="D:\Hry\Fifa 11\Game\fifa.exe:*:Enabled:FIFA 11"
"D:\Hry\L4D2\Left 4 Dead 2\left4dead2.exe"="D:\Hry\L4D2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"H:\L4D2\Left 4 Dead 2\left4dead2.exe"="H:\L4D2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"D:\Hry\Left 4 Dead 2\L4D2\Left 4 Dead 2\left4dead2.exe"="D:\Hry\Left 4 Dead 2\L4D2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"D:\Hry\FEAR3\F.E.A.R. 3\F.E.A.R. 3.exe"="D:\Hry\FEAR3\F.E.A.R. 3\F.E.A.R. 3.exe:*:Enabled:F.E.A.R. 3"
"D:\Hry\BorderLands\Gearbox Software\Borderlands\Binaries\Borderlands.exe"="D:\Hry\BorderLands\Gearbox Software\Borderlands\Binaries\Borderlands.exe:*:Enabled:Borderlands"
"D:\P R O G R A M Y\Steam\Steam.exe"="D:\P R O G R A M Y\Steam\Steam.exe:*:Enabled:Steam"
"D:\Hry\F.E.A.R. 3\F.E.A.R. 3.exe"="D:\Hry\F.E.A.R. 3\F.E.A.R. 3.exe:*:Enabled:F.E.A.R. 3"
"D:\Hry\Titan Quest\Titan Quest.exe"="D:\Hry\Titan Quest\Titan Quest.exe:*:Enabled:Titan Quest"
"D:\Hry\Titan Quest IT\Tqit.exe"="D:\Hry\Titan Quest IT\Tqit.exe:*:Enabled:Tqit"
"D:\Hry\TQ IT\Tqit.exe"="D:\Hry\TQ IT\Tqit.exe:*:Enabled:Tqit"
"D:\Hry\StarCraft II\Versions\Base19132\SC2.exe"="D:\Hry\StarCraft II\Versions\Base19132\SC2.exe:*:Enabled:StarCraft II"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Hry\BF4free\BFP4f.exe"="D:\Hry\BF4free\BFP4f.exe:*:Enabled:BFP4f"
"D:\Program Files\Capcom\Bionic Commando\bionic_commando.exe"="D:\Program Files\Capcom\Bionic Commando\bionic_commando.exe:*:Enabled:Bionic Commando"
"D:\Hry\Re-Volt\revolt.exe"="D:\Hry\Re-Volt\revolt.exe:*:Enabled:revolt"
"D:\P R O G R A M Y\Steam\steamapps\paulie0001\team fortress 2\hl2.exe"="D:\P R O G R A M Y\Steam\steamapps\paulie0001\team fortress 2\hl2.exe:*:Enabled:hl2"
"D:\Hry\Dead Island\Dead Island\deadislandgame.exe"="D:\Hry\Dead Island\Dead Island\deadislandgame.exe:*:Enabled:DeadIsland"
"D:\Hry\Driver San Francisko\Driver.exe"="D:\Hry\Driver San Francisko\Driver.exe:*:Enabled:Driver San Francisco"
"D:\Hry\Assassins Creed 3\ACBMP.exe"="D:\Hry\Assassins Creed 3\ACBMP.exe:*:Enabled:Assassin's Creed Brotherhood Multiplayer"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.439\Agent.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.439\Agent.exe:*:Enabled:Blizzard Agent"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.440\Agent.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.440\Agent.exe:*:Enabled:Blizzard Agent"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\P R O G R A M Y\Steam\SmartSteam\Steam.exe"="D:\P R O G R A M Y\Steam\SmartSteam\Steam.exe:*:Enabled:Steam"
"D:\Hry\Warcraft III\gproxy.exe"="D:\Hry\Warcraft III\gproxy.exe:*:Enabled:gproxy Application"
"D:\Hry\Warcraft III\war3.exe"="D:\Hry\Warcraft III\war3.exe:*:Enabled:Warcraft III"
"\\ZEM-FC29537D19D\Jirsoun (D)\Age Of Empires 2\empires2.exe"="\\ZEM-FC29537D19D\Jirsoun (D)\Age Of Empires 2\empires2.exe:*:Enabled:empires2.exe"
"D:\P R O G R A M Y\ParadiseCasino\casino.exe"="D:\P R O G R A M Y\ParadiseCasino\casino.exe:*:Enabled:casino"
"D:\Hry\Age of Empires 3\age3y.exe"="D:\Hry\Age of Empires 3\age3y.exe:*:Enabled:Age of Empires III - The Asian Dynasties"
"D:\Hry\Crysis 2\bin32\Crysis2.exe"="D:\Hry\Crysis 2\bin32\Crysis2.exe:*:Enabled:Crysis2"
"\\ZEM-FC29537D19D\JIRSOUN (D)\MOHAA\MOHAA.exe"="\\ZEM-FC29537D19D\JIRSOUN (D)\MOHAA\MOHAA.exe:*:Enabled:MOHAA.exe"
"D:\Hry\StarCraft II\Versions\Base21029\SC2.exe"="D:\Hry\StarCraft II\Versions\Base21029\SC2.exe:*:Enabled:StarCraft II"
"D:\Hry\Age of Empires 3\age3x.exe"="D:\Hry\Age of Empires 3\age3x.exe:*:Enabled:Age of Empires III - The WarChiefs"
"D:\Max Payne 3\MaxPayne3.exe"="D:\Max Payne 3\MaxPayne3.exe:*:Enabled:Max Payne 3"
"D:\Hry\StarCraft II\sc2-x.x.x.x-1.5.0.22342-enUS-Downloader.exe"="D:\Hry\StarCraft II\sc2-x.x.x.x-1.5.0.22342-enUS-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1199\Agent.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1199\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Hry\StarCraft II\StarCraft II Public Test.exe"="D:\Hry\StarCraft II\StarCraft II Public Test.exe:*:Enabled:StarCraft II Public Test"
"C:\Program Files\Garena Plus\Room\garena_room.exe"="C:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:Garena"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1267\Agent.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Battle.net\Agent\Agent.1267\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\P R O G R A M Y\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_32server.exe"="D:\P R O G R A M Y\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_32server.exe:*:Enabled:mental ray satellite server for Autodesk 3ds Max Design 2013 32-bit"
"D:\P R O G R A M Y\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_32.exe"="D:\P R O G R A M Y\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_32.exe:*:Enabled:mental ray satellite for Autodesk 3ds Max Design 2013 32-bit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"msacm.lhacm"=lhacm.acm
"VIDC.FFDS"=ff_vfw.dll
"msacm.avis"=ff_acm.acm
"SENTINEL"=snti386.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.iv50"=ir50_32.dll
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"VIDC.IV41"=IR41_32.AX
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.vorbis"=vorbis.acm
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======


======List of files/folders modified in the last 1 month======

2015-01-26 23:02:07 ----D---- C:\Program Files\trend micro
2015-01-26 22:59:55 ----D---- C:\WINDOWS\Temp
2015-01-23 12:07:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-01-23 11:13:00 ----D---- C:\WINDOWS\Prefetch
2015-01-22 12:22:00 ----D---- C:\Documents and Settings\pavel\Data aplikací\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-08-01 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-08-01 192352]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-02-04 717296]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2012-10-30 20624]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-08-01 55112]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-22 779536]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-08-01 414520]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-08-01 57800]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\D:\P R O G R A M Y\SuperAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\P R O G R A M Y\SuperAntiSpyware\SASKUTIL.SYS []
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-08-01 24184]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-08-01 67824]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2010-10-09 279712]
R2 hardlock;hardlock; C:\WINDOWS\System32\DRIVERS\hardlock.sys [2004-01-31 420000]
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2011-09-14 162432]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2011-09-14 12032]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2010-10-09 25888]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [2004-05-17 76288]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-11-17 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-02-24 6340200]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2010-05-03 225232]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 a3g0amsl;a3g0amsl; C:\WINDOWS\system32\drivers\a3g0amsl.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-10-21 47360]
S3 SECUSB2;SECUSB2.sys, SEC SOC USBD Driver; C:\WINDOWS\System32\Drivers\SECUSB2.sys [2008-04-16 10528]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-16 104576]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; D:\P R O G R A M [2012-12-08 6527128]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\System32\CTsvcCDA.exe [1999-12-12 44032]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-04-30 417792]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-07-05 161704]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-25 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-08-19 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-25 136176]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2010-08-19 79360]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-03-15 543656]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2013-11-06 758224]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravim

Tak mu trochu odlehcime

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Zdravím, posílám log a omlouvám se za zpoždění:

# AdwCleaner v4.109 - Report created 28/01/2015 at 01:16:33
# Updated 24/01/2015 by Xplode
# Database : 2015-01-24.3 [Local]
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : pavel - PRVN-4WVTXYCSU1
# Running from : C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Data aplikací\NNextCoup
Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Data aplikací\7bbf9f6402f92a59
Folder Deleted : C:\Program Files\NNextCoup
Folder Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\AlterGeo
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
[!] Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
[!] Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
[!] Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
[!] Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
[!] Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
[!] Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
[!] Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
[!] Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Comodo\Dragon\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\bapmofnmfigbamdipkeggiefibdgedke
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\ASPNET\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\Guest\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\HelpAssistant\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
Folder Deleted : C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Data aplikací\Google\Chrome SxS\User Data\Default\Extensions\gkholhaaeadpbklimoombokjgigmakje
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsmode.com_0.localstorage
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsmode.com_0.localstorage-journal
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbnkijekempmdlleaimfelifcejbkmcd_0.localstorage
File Deleted : C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{87162843-2059-2054-7171-45775F2A6708}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{87162843-2059-2054-7171-45775F2A6708}

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Google Chrome v

[C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : bapmofnmfigbamdipkeggiefibdgedke
[C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : gkholhaaeadpbklimoombokjgigmakje

-\\ Chromium v


-\\ Comodo Dragon v


-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [18835 octets] - [11/05/2014 11:32:11]
AdwCleaner[R1].txt - [2518 octets] - [02/07/2014 23:39:35]
AdwCleaner[R2].txt - [2578 octets] - [03/07/2014 11:02:53]
AdwCleaner[R3].txt - [2697 octets] - [03/07/2014 11:32:49]
AdwCleaner[R4].txt - [8902 octets] - [28/01/2015 01:09:04]
AdwCleaner[S0].txt - [19725 octets] - [11/05/2014 11:33:54]
AdwCleaner[S1].txt - [362 octets] - [03/07/2014 11:05:14]
AdwCleaner[S2].txt - [2792 octets] - [03/07/2014 11:34:17]
AdwCleaner[S3].txt - [8836 octets] - [28/01/2015 01:16:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [8896 octets] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Zde posílám log Z FRST, a v příloze soubor RAR, kde se nachází Audition + i FRST, který vidíte zde:


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-01-2015 01
Ran by pavel (administrator) on PRVN-4WVTXYCSU1 on 28-01-2015 11:55:21
Running from C:\Documents and Settings\pavel\Plocha
Loaded Profiles: pavel (Available profiles: pavel & Administrator)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(AVAST Software) D:\P R O G R A M Y\avast\AvastSvc.exe
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(AVAST Software) D:\P R O G R A M Y\avast\AvastUI.exe
() C:\OscarX7H\program files\OSCAR Editor\OscarEditor.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
() C:\Program Files\Garena Plus\GarenaMessenger.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe
(Microsoft Corporation) C:\PROGRA~1\MI3AA1~1\rapimgr.exe
(Creative Technology Ltd) C:\WINDOWS\system32\CTSVCCDA.EXE
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Oracle Corporation) C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
(CANON INC.) C:\WINDOWS\system32\CNAB4RPK.EXE
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(forum.viry.cz) C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AMBDef] => C:\WINDOWS\AMBDef.exe [53248 2008-01-24] (Creative Technology Ltd.)
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1753192 2010-11-04] ()
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20029032 2011-02-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AvastUI.exe] => D:\P R O G R A M Y\avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)
Winlogon\Notify\!SASWinLogon: D:\P R O G R A M Y\SuperAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [OscarEditor] => C:\OscarX7H\program files\OSCAR Editor\OscarEditor.exe [4053504 2009-08-31] ()
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [GarenaPlus] => C:\Program Files\Garena Plus\GarenaMessenger.exe [9936176 2014-04-29] ()
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [H/PC Connection Agent] => C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\P R O G R A M Y\avast\ashShell.dll (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1343024091-343818398-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKU\S-1-5-21-1343024091-343818398-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKU\S-1-5-21-1343024091-343818398-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1343024091-343818398-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\P R O G R A M Y\avast\aswWebRepIE.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll No File
Toolbar: HKU\S-1-5-21-1343024091-343818398-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\System32\browseui.dll (Společnost Microsoft)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\P R O G R A M Y\SuperAntiSpyware\SASSEH.DLL [77824 2008-05-13] (SuperAdBlocker.com)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.11.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.652 -> C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.652 -> C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @t.garena.com/garenatalk -> C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1343024091-343818398-839522115-1003: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1343024091-343818398-839522115-1003: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-03]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-08-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - D:\P R O G R A M Y\avast\WebRep\FF
FF Extension: avast! Online Security - D:\P R O G R A M Y\avast\WebRep\FF [2011-04-17]

Chrome:
=======
CHR Profile: C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (AdBlock) - C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-13]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-06]
CHR Extension: (Peněženka Google) - C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-08]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\P R O G R A M Y\avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-01]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path
StartMenuInternet: chrome.exe - C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; D:\P R O G R A M Y\avast\AvastSvc.exe [50344 2014-08-01] (AVAST Software)
S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-08-19] (Creative Labs) [File not signed]
R2 Creative Service for CDROM Access; C:\WINDOWS\System32\CTsvcCDA.exe [44032 1999-12-12] (Creative Technology Ltd) [File not signed]
R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [417792 2008-04-30] (Creative Technology Ltd) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [161704 2012-07-05] (Oracle Corporation)
S3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2010-08-19] (Creative Labs) [File not signed]
S3 TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-01] ()
R1 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [20624 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-01] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-01] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-01] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-11-22] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-01] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-01] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-01] ()
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [279712 2010-10-09] ()
R3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [25280 2010-11-17] (LogMeIn, Inc.)
R2 hardlock; C:\WINDOWS\System32\DRIVERS\hardlock.sys [420000 2004-01-31] () [File not signed]
R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2003-12-18] (Aladdin Knowledge Systems) [File not signed]
R2 ithsgt; C:\WINDOWS\System32\DRIVERS\ithsgt.sys [162432 2011-09-14] () [File not signed]
R2 lilsgt; C:\WINDOWS\System32\DRIVERS\lilsgt.sys [12032 2011-09-14] () [File not signed]
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2010-10-09] ()
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [100456 2010-11-12] (NVIDIA Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-13] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2001-10-25] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2001-10-25] (Microsoft Corporation)
S3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2010-10-21] (VSO Software) [File not signed]
R1 SASDIFSV; D:\P R O G R A M Y\SuperAntiSpyware\SASDIFSV.SYS [12872 2010-02-17] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; D:\P R O G R A M Y\SuperAntiSpyware\SASKUTIL.SYS [67656 2010-05-10] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [56268 2009-03-15] (PowerISO Computing, Inc.) [File not signed]
S3 SECUSB2; C:\WINDOWS\System32\Drivers\SECUSB2.sys [10528 2008-04-16] (Windows (R) 2000 DDK provider) [File not signed]
R2 Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2004-05-17] (Rainbow Technologies, Inc.) [File not signed]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [717296 2011-02-04] () [File not signed]
R3 tap0901t; C:\WINDOWS\System32\DRIVERS\tap0901t.sys [27136 2009-09-16] (Tunngle.net) [File not signed]
S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [104576 2008-04-16] (Microsoft Corporation) [File not signed]
U3 a4p3zce0; C:\WINDOWS\system32\Drivers\a4p3zce0.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-28 11:55 - 2015-01-28 11:55 - 00015514 _____ () C:\Documents and Settings\pavel\Plocha\FRST.txt
2015-01-28 11:55 - 2015-01-28 11:55 - 00000000 ____D () C:\FRST
2015-01-28 11:54 - 2015-01-28 11:48 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe
2015-01-28 11:54 - 2015-01-28 11:47 - 01120768 _____ (Farbar) C:\Documents and Settings\pavel\Plocha\frst.exe
2015-01-28 01:08 - 2015-01-27 21:16 - 02194432 _____ () C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe
2015-01-22 12:24 - 2015-01-22 12:25 - 00000000 ____D () C:\Documents and Settings\pavel\Plocha\Nová složka
2015-01-22 12:21 - 1995-01-01 01:39 - 00000044 _____ () C:\Documents and Settings\pavel\Plocha\Track13.cda

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-28 11:55 - 2010-08-19 20:05 - 00000000 ____D () C:\Documents and Settings\pavel\Plocha
2015-01-28 11:55 - 2010-08-19 20:05 - 00000000 ____D () C:\Documents and Settings\pavel\Local Settings\Temp
2015-01-28 11:54 - 2010-08-19 20:05 - 00000000 ___HD () C:\Documents and Settings\pavel\Local Settings\Data aplikací
2015-01-28 11:53 - 2012-08-28 07:24 - 00000338 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-01-28 11:48 - 2010-08-22 20:36 - 02081081 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-28 11:47 - 2014-05-17 19:35 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-28 11:47 - 2014-05-17 19:35 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-01-28 11:46 - 2013-10-10 10:04 - 00000278 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job
2015-01-28 11:46 - 2010-08-19 20:02 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-28 01:52 - 2010-08-19 20:05 - 00032430 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-28 01:16 - 2014-05-11 11:32 - 00000000 ____D () C:\AdwCleaner
2015-01-28 01:16 - 2010-08-19 21:35 - 00000000 __RHD () C:\Documents and Settings\All Users.WINDOWS\Data aplikací
2015-01-28 01:13 - 2010-08-22 20:47 - 00001026 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job
2015-01-28 01:07 - 2001-10-25 15:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-01-26 23:02 - 2010-11-08 19:12 - 00000000 ____D () C:\Program Files\trend micro
2015-01-23 12:07 - 2010-08-22 20:47 - 00000974 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job
2015-01-22 12:36 - 2014-05-12 07:21 - 00022521 _____ () C:\WINDOWS\wmsetup.log
2015-01-22 12:22 - 2012-12-14 17:06 - 00000000 ____D () C:\Documents and Settings\pavel\Data aplikací\vlc

==================== Files in the root of some directories =======

2010-12-17 14:33 - 2010-12-17 14:33 - 0002528 ____C () C:\Documents and Settings\pavel\Data aplikací\$_hpcst$.hpc
2010-09-28 18:32 - 2012-08-18 09:18 - 0087608 ____C () C:\Documents and Settings\pavel\Data aplikací\inst.exe
2010-09-28 18:32 - 2012-08-18 09:18 - 0007887 ____C () C:\Documents and Settings\pavel\Data aplikací\pcouffin.cat
2010-09-28 18:32 - 2012-08-18 09:18 - 0001144 ____C () C:\Documents and Settings\pavel\Data aplikací\pcouffin.inf
2010-09-28 18:32 - 2012-08-18 09:18 - 0000033 ____C () C:\Documents and Settings\pavel\Data aplikací\pcouffin.log
2010-09-28 18:32 - 2012-08-18 09:18 - 0047360 ____C (VSO Software) C:\Documents and Settings\pavel\Data aplikací\pcouffin.sys
2011-07-26 11:52 - 2011-07-26 11:52 - 0138056 ____C () C:\Documents and Settings\pavel\Data aplikací\PnkBstrK.sys
2011-03-24 16:56 - 2011-05-24 21:08 - 0046658 ____C () C:\Documents and Settings\pavel\Data aplikací\room.dat
2011-05-28 17:15 - 2014-05-29 14:09 - 0045194 _____ () C:\Documents and Settings\pavel\Data aplikací\room_v3.dat
2010-09-28 18:32 - 2012-06-15 14:52 - 0001057 ____C () C:\Documents and Settings\pavel\Data aplikací\vso_ts_preview.xml
2010-08-21 20:27 - 2014-12-04 20:39 - 0088576 _____ () C:\Documents and Settings\pavel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Files to move or delete:
====================
C:\Documents and Settings\pavel\tadle mrcha nejde smazat KRENAME.dll


Some content of TEMP:
====================
C:\Documents and Settings\pavel\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\pavel\Local Settings\Temp\setup_wm.exe
C:\Documents and Settings\pavel\Local Settings\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (sata-systemos) (Fixed) (Total:177.6 GB) (Free:53.38 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (sata-programos) (Fixed) (Total:288.16 GB) (Free:78.4 GB) NTFS
Drive f: (KINGSTON) (Removable) (Total:7.31 GB) (Free:2.93 GB) FAT32

Available physical RAM: 1462.33 MB
Total physical RAM: 2046.42 MB
Percentage of memory in use: 28%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 465.8 GB) (Disk ID: 50675067)
Partition 1: (Active) - (Size=177.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=288.2 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows XP) (Size: 7.3 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => D:\P R O G R A M Y\avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939

==================== Security Center ==================

AV: Norton Internet Security (Disabled - Up to date) {E10A9785-9598-4754-B552-92431C1C35F8}
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Norton Internet Security (Disabled) {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\pavel\Plocha" je 74592 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
"C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE
C:\WINDOWS\system32\ctfmon.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncService
C:\Program Files\InstallShield Installation Information\{EC6D5F08-1694-431F-8200-3B0A8A61AC5A}\AMBSPISyncService.exe /StartRunKey [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus
"C:\Program Files\Garena Plus\GarenaMessenger.exe" -autolaunch [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Documents and Settings\pavel\Local Settings\Data aplikac�\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent
"C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM
"C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS
"C:\Program Files\Messenger\msmsgs.exe" /background [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE
D:\P R O G R A M Y\PowerISO\PWRISOVM.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam
"C:\Program Files\Steam\steam.exe" -silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware
D:\P R O G R A M Y\SuperAntiSpyware\SUPERAntiSpyware.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe
"C:\program files\real\realplayer\update\realsched.exe" -osboot [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe
"C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg
C:\WINDOWS\UpdReg.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel
"C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WiseStubReboot
MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST" WISE_SETUP_EXE_PATH="e:\driver\2k_xp\191.07\PhysX_9.09.0814_SystemSoftware.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nab�dka Start^Programy^Po spu�t�n�^hamachi.lnk
D:\PROGRA~1\hamachi.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\�ikovn� programy\\Steam\\Steam.exe"="D:\\�ikovn� programy\\Steam\\Steam.exe:*:Enabled:Steam"
"C:\\WINDOWS\\system32\\dplaysvr.exe"="C:\\WINDOWS\\system32\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\\Rage of Mages 2\\rom2.exe"="C:\\Rage of Mages 2\\rom2.exe:*:Enabled:rom2"
"D:\\Rage of Mages 2\\rom2.exe"="D:\\Rage of Mages 2\\rom2.exe:*:Enabled:rom2"
"F:\\CRACK\\STARCRAFT II.EXE"="F:\\CRACK\\STARCRAFT II.EXE:*:Enabled:Blizzard Launcher"
"D:\\Hry\\StarCraft II\\StarCraft II.exe"="D:\\Hry\\StarCraft II\\StarCraft II.exe:*:Enabled:Blizzard Launcher"
"D:\\Hry\\StarCraft II\\Versions\\Base15405\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base15405\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\StarCraft II\\Versions\\Base16561\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base16561\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\Counter strike 1.6\\hl.exe"="D:\\Hry\\Counter strike 1.6\\hl.exe:*:Enabled:Half-Life Launcher"
"D:\\P R O G R A M Y\\QIP\\qip.exe"="D:\\P R O G R A M Y\\QIP\\qip.exe:*:Enabled:Quiet Internet Pager"
"D:\\P R O G R A M Y\\utorrent\\uTorrent.exe"="D:\\P R O G R A M Y\\utorrent\\uTorrent.exe:*:Enabled:uTorrent"
"C:\\WINDOWS\\system32\\CNAB4RPK.EXE"="C:\\WINDOWS\\system32\\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process"
"D:\\Hry\\Counter strike Source\\Counter Strike Source 2010\\hl2.exe"="D:\\Hry\\Counter strike Source\\Counter Strike Source 2010\\hl2.exe:*:Enabled:hl2"
"D:\\Hry\\Counter strike 1.6\\hlds.exe"="D:\\Hry\\Counter strike 1.6\\hlds.exe:*:Enabled:HLDS Launcher"
"D:\\Hry\\NFS Hot Pursuit\\Launcher.exe"="D:\\Hry\\NFS Hot Pursuit\\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"D:\\Hry\\NFS Hot Pursuit\\NFS11.exe"="D:\\Hry\\NFS Hot Pursuit\\NFS11.exe:*:Enabled:Need for Speed(TM) Hot Pursuit Application"
"D:\\P R O G R A M Y\\Garena\\Garena.exe"="D:\\P R O G R A M Y\\Garena\\Garena.exe:*:Enabled:Garena"
"D:\\Hry\\Call of Duty 2\\CoD2MP_s.exe"="D:\\Hry\\Call of Duty 2\\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\\Hry\\Team Fortress 2\\hl2.exe"="D:\\Hry\\Team Fortress 2\\hl2.exe:*:Enabled:hl2"
"D:\\Hry\\TF2\\Team Fortress 2\\hl2.exe"="D:\\Hry\\TF2\\Team Fortress 2\\hl2.exe:*:Enabled:hl2"
"D:\\Hry\\Team Fortress NS\\hl2.exe"="D:\\Hry\\Team Fortress NS\\hl2.exe:*:Enabled:hl2"
"D:\\Hry\\StarCraft II\\Versions\\Base16939\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base16939\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\StarCraft II\\Versions\\Base17326\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base17326\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\BaboViolent 2\\bv2Dedicated.exe"="D:\\Hry\\BaboViolent 2\\bv2Dedicated.exe:*:Enabled:bv2Dedicated"
"D:\\Hry\\BaboViolent 2\\bv2.exe"="D:\\Hry\\BaboViolent 2\\bv2.exe:*:Enabled:bv2"
"D:\\Hry\\BaboViolent 2\\bv2Dedicated_v2_11fpro.exe"="D:\\Hry\\BaboViolent 2\\bv2Dedicated_v2_11fpro.exe:*:Enabled:bv2Dedicated_v2_11fpro"
"D:\\Hry\\FixKorea\\tacint\\ti.exe"="D:\\Hry\\FixKorea\\tacint\\ti.exe:*:Enabled:ti"
"C:\\Documents and Settings\\pavel\\Plocha\\RGC\\Ranked Gaming Client\\rgc.exe"="C:\\Documents and Settings\\pavel\\Plocha\\RGC\\Ranked Gaming Client\\rgc.exe:*:Enabled:rgc"
"D:\\Hry\\Dead Space 2\\deadspace2.exe"="D:\\Hry\\Dead Space 2\\deadspace2.exe:*:Enabled:Dead Spacet 2"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"D:\\Hry\\Diablo II\\Diablo II.exe"="D:\\Hry\\Diablo II\\Diablo II.exe:*:Enabled:Diablo II - Lord of Destruction"
"D:\\Hry\\StarCraft II\\Versions\\Base18092\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base18092\\SC2.exe:*:Enabled:StarCraft II"
"H:\\WinDVD.exe"="H:\\WinDVD.exe:*:Enabled:WinDVD"
"D:\\Hry\\Warcraft III\\Warcraft III.exe"="D:\\Hry\\Warcraft III\\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"="C:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"="C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe:*:Enabled:Nero Home"
"D:\\P R O G R A M Y\\hamachi.exe"="D:\\P R O G R A M Y\\hamachi.exe:*:Enabled:Hamachi Client"
"C:\\Documents and Settings\\pavel\\Local Settings\\Temp\\Rar$EX00.468\\WoW-BurningCrusade-enGBdownloader.exe"="C:\\Documents and Settings\\pavel\\Local Settings\\Temp\\Rar$EX00.468\\WoW-BurningCrusade-enGBdownloader.exe:*:Enabled:Blizzard Downloader"
"D:\\World Of Warcraft Classic\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"="D:\\World Of Warcraft Classic\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe:*:Enabled:Blizzard Downloader"
"D:\\World Of Warcraft Classic\\Launcher.exe"="D:\\World Of Warcraft Classic\\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\\World Of Warcraft Classic\\Launcher.patch.exe"="D:\\World Of Warcraft Classic\\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"D:\\Hry\\World of Warcraft\\Launcher.exe"="D:\\Hry\\World of Warcraft\\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\\Hry\\World of Warcraft\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe"="D:\\Hry\\World of Warcraft\\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Documents and Settings\\pavel\\Plocha\\WoW-3.2.0-enGB-downloader.exe"="C:\\Documents and Settings\\pavel\\Plocha\\WoW-3.2.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\\Hry\\Portal 2\\portal2.exe"="D:\\Hry\\Portal 2\\portal2.exe:*:Enabled:portal2"
"D:\\Hry\\GTA IV\\Grand Theft Auto IV\\GTAIV.exe"="D:\\Hry\\GTA IV\\Grand Theft Auto IV\\GTAIV.exe:*:Disabled:Grand Theft Auto IV"
"D:\\Hry\\NHL 09\\nhl2009.exe"="D:\\Hry\\NHL 09\\nhl2009.exe:*:Disabled:nhl2009"
"D:\\Hry\\NHL08\\nhl2008.exe"="D:\\Hry\\NHL08\\nhl2008.exe:*:Enabled:nhl2008"
"D:\\Hry\\nhl04\\nhl2004.exe"="D:\\Hry\\nhl04\\nhl2004.exe:*:Enabled:nhl2004"
"D:\\Hry\\Heroes2\\HEROES2W.EXE"="D:\\Hry\\Heroes2\\HEROES2W.EXE:*:Enabled:HEROES2W"
"D:\\Hry\\StarCraft II\\Versions\\Base18574\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base18574\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\Witcher 2\\bin\\witcher2.exe"="D:\\Hry\\Witcher 2\\bin\\witcher2.exe:*:Enabled:The Witcher 2: Assasins of Kings"
"D:\\Hry\\Commandos 2\\comm2.exe"="D:\\Hry\\Commandos 2\\comm2.exe:*:Enabled:comm2"
"D:\\Hry\\Fifa 11\\Game\\fifa.exe"="D:\\Hry\\Fifa 11\\Game\\fifa.exe:*:Enabled:FIFA 11"
"D:\\Hry\\L4D2\\Left 4 Dead 2\\left4dead2.exe"="D:\\Hry\\L4D2\\Left 4 Dead 2\\left4dead2.exe:*:Enabled:left4dead2"
"H:\\L4D2\\Left 4 Dead 2\\left4dead2.exe"="H:\\L4D2\\Left 4 Dead 2\\left4dead2.exe:*:Enabled:left4dead2"
"D:\\Hry\\Left 4 Dead 2\\L4D2\\Left 4 Dead 2\\left4dead2.exe"="D:\\Hry\\Left 4 Dead 2\\L4D2\\Left 4 Dead 2\\left4dead2.exe:*:Enabled:left4dead2"
"D:\\Hry\\FEAR3\\F.E.A.R. 3\\F.E.A.R. 3.exe"="D:\\Hry\\FEAR3\\F.E.A.R. 3\\F.E.A.R. 3.exe:*:Enabled:F.E.A.R. 3"
"D:\\Hry\\BorderLands\\Gearbox Software\\Borderlands\\Binaries\\Borderlands.exe"="D:\\Hry\\BorderLands\\Gearbox Software\\Borderlands\\Binaries\\Borderlands.exe:*:Enabled:Borderlands"
"D:\\P R O G R A M Y\\Steam\\Steam.exe"="D:\\P R O G R A M Y\\Steam\\Steam.exe:*:Enabled:Steam"
"D:\\Hry\\F.E.A.R. 3\\F.E.A.R. 3.exe"="D:\\Hry\\F.E.A.R. 3\\F.E.A.R. 3.exe:*:Enabled:F.E.A.R. 3"
"D:\\Hry\\Titan Quest\\Titan Quest.exe"="D:\\Hry\\Titan Quest\\Titan Quest.exe:*:Enabled:Titan Quest"
"D:\\Hry\\Titan Quest IT\\Tqit.exe"="D:\\Hry\\Titan Quest IT\\Tqit.exe:*:Enabled:Tqit"
"D:\\Hry\\TQ IT\\Tqit.exe"="D:\\Hry\\TQ IT\\Tqit.exe:*:Enabled:Tqit"
"D:\\Hry\\StarCraft II\\Versions\\Base19132\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base19132\\SC2.exe:*:Enabled:StarCraft II"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\\Hry\\BF4free\\BFP4f.exe"="D:\\Hry\\BF4free\\BFP4f.exe:*:Enabled:BFP4f"
"D:\\Program Files\\Capcom\\Bionic Commando\\bionic_commando.exe"="D:\\Program Files\\Capcom\\Bionic Commando\\bionic_commando.exe:*:Enabled:Bionic Commando"
"D:\\Hry\\Re-Volt\\revolt.exe"="D:\\Hry\\Re-Volt\\revolt.exe:*:Enabled:revolt"
"D:\\P R O G R A M Y\\Steam\\steamapps\\paulie0001\\team fortress 2\\hl2.exe"="D:\\P R O G R A M Y\\Steam\\steamapps\\paulie0001\\team fortress 2\\hl2.exe:*:Enabled:hl2"
"D:\\Hry\\Dead Island\\Dead Island\\deadislandgame.exe"="D:\\Hry\\Dead Island\\Dead Island\\deadislandgame.exe:*:Enabled:DeadIsland"
"D:\\Hry\\Driver San Francisko\\Driver.exe"="D:\\Hry\\Driver San Francisko\\Driver.exe:*:Enabled:Driver San Francisco"
"D:\\Hry\\Assassins Creed 3\\ACBMP.exe"="D:\\Hry\\Assassins Creed 3\\ACBMP.exe:*:Enabled:Assassin's Creed Brotherhood Multiplayer"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.439\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.439\\Agent.exe:*:Enabled:Blizzard Agent"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.440\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.440\\Agent.exe:*:Enabled:Blizzard Agent"
"C:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"="C:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\\P R O G R A M Y\\Steam\\SmartSteam\\Steam.exe"="D:\\P R O G R A M Y\\Steam\\SmartSteam\\Steam.exe:*:Enabled:Steam"
"D:\\Hry\\Warcraft III\\gproxy.exe"="D:\\Hry\\Warcraft III\\gproxy.exe:*:Enabled:gproxy Application"
"D:\\Hry\\Warcraft III\\war3.exe"="D:\\Hry\\Warcraft III\\war3.exe:*:Enabled:Warcraft III"
"\\\\ZEM-FC29537D19D\\Jirsoun (D)\\Age Of Empires 2\\empires2.exe"="\\\\ZEM-FC29537D19D\\Jirsoun (D)\\Age Of Empires 2\\empires2.exe:*:Enabled:empires2.exe"
"D:\\P R O G R A M Y\\ParadiseCasino\\casino.exe"="D:\\P R O G R A M Y\\ParadiseCasino\\casino.exe:*:Enabled:casino"
"D:\\Hry\\Age of Empires 3\\age3y.exe"="D:\\Hry\\Age of Empires 3\\age3y.exe:*:Enabled:Age of Empires III - The Asian Dynasties"
"D:\\Hry\\Crysis 2\\bin32\\Crysis2.exe"="D:\\Hry\\Crysis 2\\bin32\\Crysis2.exe:*:Enabled:Crysis2"
"\\\\ZEM-FC29537D19D\\JIRSOUN (D)\\MOHAA\\MOHAA.exe"="\\\\ZEM-FC29537D19D\\JIRSOUN (D)\\MOHAA\\MOHAA.exe:*:Enabled:MOHAA.exe"
"D:\\Hry\\StarCraft II\\Versions\\Base21029\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base21029\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\Age of Empires 3\\age3x.exe"="D:\\Hry\\Age of Empires 3\\age3x.exe:*:Enabled:Age of Empires III - The WarChiefs"
"D:\\Max Payne 3\\MaxPayne3.exe"="D:\\Max Payne 3\\MaxPayne3.exe:*:Enabled:Max Payne 3"
"D:\\Hry\\StarCraft II\\sc2-x.x.x.x-1.5.0.22342-enUS-Downloader.exe"="D:\\Hry\\StarCraft II\\sc2-x.x.x.x-1.5.0.22342-enUS-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1040\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1040\\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1199\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1199\\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\\Hry\\StarCraft II\\StarCraft II Public Test.exe"="D:\\Hry\\StarCraft II\\StarCraft II Public Test.exe:*:Enabled:StarCraft II Public Test"
"C:\\Program Files\\Garena Plus\\Room\\garena_room.exe"="C:\\Program Files\\Garena Plus\\Room\\garena_room.exe:*:Enabled:Garena"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1267\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1267\\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\NVIDIA\\raysat_3dsmax2013_32server.exe"="D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\NVIDIA\\raysat_3dsmax2013_32server.exe:*:Enabled:mental ray satellite server for Autodesk 3ds Max Design 2013 32-bit"
"D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\NVIDIA\\raysat_3dsmax2013_32.exe"="D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\NVIDIA\\raysat_3dsmax2013_32.exe:*:Enabled:mental ray satellite for Autodesk 3ds Max Design 2013 32-bit"
"D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\3dsmax.exe"="D:\\P R O G R A M Y\\AutoDesk\\3ds Max Design 2013\\3dsmax.exe:*:Enabled:Autodesk 3ds Max Design 2013 32-bit"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1363\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1363\\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\\Hry\\Age of Empires 1\\GAME\\EMPIRES.EXE"="D:\\Hry\\Age of Empires 1\\GAME\\EMPIRES.EXE:*:Enabled:Age of Empires"
"D:\\Hry\\NFS2\\SPEED2.EXE"="D:\\Hry\\NFS2\\SPEED2.EXE:*:Enabled:SPEED2"
"D:\\Hry\\StarCraft II\\Versions\\Base23260\\SC2.exe"="D:\\Hry\\StarCraft II\\Versions\\Base23260\\SC2.exe:*:Enabled:StarCraft II"
"D:\\Hry\\Diablo\\Diablo.exe"="D:\\Hry\\Diablo\\Diablo.exe:*:Enabled:Diablo"
"D:\\Hry\\Diablo\\SIERRA\\HELLFIRE\\hellfire.exe"="D:\\Hry\\Diablo\\SIERRA\\HELLFIRE\\hellfire.exe:*:Enabled:Hellfire"
"C:\\Documents and Settings\\pavel\\Plocha\\Worms-Armageddon\\Worms Armageddon\\Worms\\WA.exe"="C:\\Documents and Settings\\pavel\\Plocha\\Worms-Armageddon\\Worms Armageddon\\Worms\\WA.exe:*:Enabled:Worms Armageddon"
"C:\\Documents and Settings\\pavel\\Plocha\\IPCurve\\ipcurve.exe"="C:\\Documents and Settings\\pavel\\Plocha\\IPCurve\\ipcurve.exe:*:Enabled:ipcurve"
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1637\\Agent.exe"="C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikac�\\Battle.net\\Agent\\Agent.1637\\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\\Program Files\\Steam\\Steam.exe"="C:\\Program Files\\Steam\\Steam.exe:*:Enabled:Steam"
"D:\\Hry\\Age of empires 2\\age2_x1.exe"="D:\\Hry\\Age of empires 2\\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\\Hry\\Saints Row The Third\\saintsrowthethird.exe"="D:\\Hry\\Saints Row The Third\\saintsrowthethird.exe:*:Enabled:Saints Row: the Third"
"C:\\Program Files\\Garena Plus\\ggdllhost.exe"="C:\\Program Files\\Garena Plus\\ggdllhost.exe:*:Enabled:ggdllhost"
"C:\\Program Files\\Steam\\SteamApps\\common\\dota 2 beta\\dota.exe"="C:\\Program Files\\Steam\\SteamApps\\common\\dota 2 beta\\dota.exe:*:Enabled:Dota 2"
"C:\\Program Files\\Tunngle\\tnglctrl.exe"="C:\\Program Files\\Tunngle\\tnglctrl.exe:*:Enabled:Tunngle Service"
"C:\\Program Files\\Tunngle\\tunngle.exe"="C:\\Program Files\\Tunngle\\tunngle.exe:*:Enabled:Tunngle Client"
"C:\\Program Files\\Java\\jre7\\launch4j-tmp\\frd.exe"="C:\\Program Files\\Java\\jre7\\launch4j-tmp\\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"26675:TCP"="26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service"
"139:TCP"="139:TCP:*:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:*:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:*:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:*:Enabled:@xpsp2res.dll,-22002"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
"26675:TCP"="26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service"
"6112:TCP"="6112:TCP:*:Enabled:D2"
"4000:TCP"="4000:TCP:*:Enabled:D2"
"139:TCP"="139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002"


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000


==================== End Of Log ==============================

V logu jsou jeste pozustatky po Nortonu, tak je docistete https://support.norton.com/sp/cs/cz/hom ... file_cs_cz

Aktualizujte Adobe Flash Player na http://get.adobe.com/cz/flashplayer/ - pred stazenim pozor na adware viz http://forum.viry.cz/viewtopic.php?p=1374437#p1374437

Odinstalujte stare a zranitelne verze javy Java 7 Update 11, Java(TM) 6 Update 26 a JavaFX 2.1.1. Pokud javu potrebujete, pak nainstalujte novou z java.com - pozor na adware pri jeji instalaci http://forum.viry.cz/viewtopic.php?p=1374438#p1374438 . Z hlediska bezpecnosti (exploity) je lepsi ji nemit.

Velikost plochy by nemela presahovat 200 MB. Zpomaluje se pak start i samotny chod celeho PC. Hodte mu vetsi slozky napr. do dokumentu a na plochu dejte jen zastupce

• Ulozte na plochu OTM - http://oldtimer.geekstogo.com/OTM.exe
• ukoncete vsechny programy
• kliknete pravym na ikonu OTM.exe a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• obsah bileho pole zkopirujte do leveho okna OTM a kliknete na MoveIt!
• po restartu vlozte log, ktery bude v C:\_OTM\MovedFiles\mmddyyyy_hhmmss.log

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
  CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  CHR HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  
  HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
  SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-21-1343024091-343818398-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
  BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll No File
  BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll No File
  CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path
  
  S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X]
  S4 IntelIde; No ImagePath
  2015-01-28 11:54 - 2015-01-28 11:48 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe
  2015-01-28 01:08 - 2015-01-27 21:16 - 02194432 _____ () C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe
  2015-01-28 01:16 - 2014-05-11 11:32 - 00000000 ____D () C:\AdwCleaner
  2015-01-26 23:02 - 2010-11-08 19:12 - 00000000 ____D () C:\Program Files\trend micro
  
  C:\Documents and Settings\pavel\tadle mrcha nejde smazat KRENAME.dll
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nabídka Start^Programy^Po spuštění^hamachi.lnk" /f
  REG: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v "EnableFirewall" /t "REG_DWORD" /d "00000001"
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
  Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
  Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
  AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
  AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
  Hosts:
  EmptyTemp:
  End
  

No, málem to se mnou švihlo, když jsem zjistil, že ta bráchova plocha má 77 GB, přičemž nemá přesahovat 200 mb A taky jsem se pobavil souborem "tadle mrcha nejde smazat KRENAME.dll". To je soubor, který jsem přejmenoval před časem, kdy počítač patřil ještě mně. Je to asi 5 let zpátky, úplně jsem na to zapomněl, a ted se mi tím vrátily vtipné vzpomínky, jak jsem se tenkrát u toho nervoval :D

Jinak Javu jsem smazal, místo na ploše uvolnil, ale nestáhl jsem Adobe flash player. Ten učiním až nakonec, až bude mít bratr možnost připojení k internetu.
také jsem si všiml, že po restartu PC vždy vyběhne tato chybová hláška, je taková otravná, nevíte jak se jí zbavit?
Prozatím děkuju za velikou pomoc a Váš čas
Posílám log přes OTM:


All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: All Users.WINDOWS

User: ASPNET

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User.WINDOWS
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest

User: HelpAssistant

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: pavel
->Temp folder emptied: 119206921 bytes
->Temporary Internet Files folder emptied: 103637573 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 288840328 bytes
->Flash cache emptied: 0 bytes

User: Pavlik
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: SUPPORT_388945a0

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1033897 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 5850567155 bytes

Total Files Cleaned = 6 069,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: All Users.WINDOWS

User: ASPNET

User: Default User

User: Default User.WINDOWS

User: Guest

User: HelpAssistant

User: LocalService

User: LocalService.NT AUTHORITY

User: NetworkService

User: NetworkService.NT AUTHORITY

User: pavel
->Flash cache emptied: 0 bytes

User: Pavlik

User: SUPPORT_388945a0

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: Administrator

User: All Users

User: All Users.WINDOWS

User: ASPNET

User: Default User

User: Default User.WINDOWS

User: Guest

User: HelpAssistant

User: LocalService

User: LocalService.NT AUTHORITY

User: NetworkService

User: NetworkService.NT AUTHORITY

User: pavel
->Java cache emptied: 0 bytes

User: Pavlik

User: SUPPORT_388945a0

Total Java Files Cleaned = 0,00 mb

========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP258.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3B5.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3D3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP436.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4B5.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP58.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP594.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP86D.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP948.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP970.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPFA.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI22B.tmp moved successfully.
C:\WINDOWS\Installer\MSI36E.tmp moved successfully.
C:\WINDOWS\Installer\MSI370.tmp moved successfully.
C:\WINDOWS\Installer\MSIAC.tmp moved successfully.
C:\WINDOWS\Installer\MSIAE.tmp moved successfully.
C:\WINDOWS\Installer\MSIB.tmp moved successfully.
C:\WINDOWS\Installer\MSIB32.tmp moved successfully.
C:\WINDOWS\Installer\MSID13.tmp moved successfully.
C:\WINDOWS\Installer\MSID1B.tmp moved successfully.
C:\WINDOWS\Installer\MSID1C.tmp moved successfully.
C:\WINDOWS\Installer\MSID1D.tmp moved successfully.
C:\WINDOWS\Installer\MSID1E.tmp moved successfully.
C:\WINDOWS\Installer\MSID1F.tmp moved successfully.
C:\WINDOWS\Installer\MSID20.tmp moved successfully.
C:\WINDOWS\Installer\MSID21.tmp moved successfully.
C:\WINDOWS\Installer\MSID22.tmp moved successfully.
C:\WINDOWS\Installer\MSID23.tmp moved successfully.
C:\WINDOWS\Installer\MSID24.tmp moved successfully.
C:\WINDOWS\Installer\MSID25.tmp moved successfully.
C:\WINDOWS\Installer\MSIDD1.tmp moved successfully.
C:\WINDOWS\Installer\MSIF42.tmp moved successfully.
C:\WINDOWS\Installer\MSIF44.tmp moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\26675:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\139:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\445:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\137:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\138:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\26675:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\6112:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\4000:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\139:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\445:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\137:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\138:UDP deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 01282015_160335

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File C:\WINDOWS\temp\_avast_\Webshlock.txt not found!

Registry entries deleted on Reboot...

a 2. log přes FRST, ale nejspíš nedokončil svoji práci, protože v půlce přestal program odpovídat a musel jsem ho zavřít. Co s tím?

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 24-01-2015 01
Ran by pavel at 2015-01-28 16:13:52 Run:1
Running from C:\Documents and Settings\pavel\Plocha
Loaded Profiles: pavel (Available profiles: pavel & Administrator)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1343024091-343818398-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll No File
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path

S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X]
S4 IntelIde; No ImagePath
2015-01-28 11:54 - 2015-01-28 11:48 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe
2015-01-28 01:08 - 2015-01-27 21:16 - 02194432 _____ () C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe
2015-01-28 01:16 - 2014-05-11 11:32 - 00000000 ____D () C:\AdwCleaner
2015-01-26 23:02 - 2010-11-08 19:12 - 00000000 ____D () C:\Program Files\trend micro

C:\Documents and Settings\pavel\tadle mrcha nejde smazat KRENAME.dll
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nabídka Start^Programy^Po spuštění^hamachi.lnk" /f
REG: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v "EnableFirewall" /t "REG_DWORD" /d "00000001"
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-1343024091-343818398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS => value deleted successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}" => Key deleted successfully.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}" => Key deleted successfully.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => Key not found.

fixlist... bud se mu nelibi, ze mazeme mrchu, ktera nejde smazat nebo ze zapiname firewall... zopakujte krok s fixlistem (stejny obsah).

Na avast se pak podivame zbytky Nortonu jste pomoci odinstalatoru smazal?

Kdy bratr prijede? Abych vedel kdy mame +- skoncit

Bratr je na tzv. "služební dovolené" v Bohnicích, nejspíš ho pustí během 3 týdnů, takže času myslím máme dost.
Ačkoli v sobotu se u nás staví na návštěvu, ale ten jeho PC bez internetu je pro něj k nepoužití, takže prozatím mu půjčím PC můj.

Zbytky po nortonu jsem smazal, myslím že úspěšně.

FRST opět spadl, ale po restartu PC jsem to zkusil ještě jednou a už to šlapalo. Posílám log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 24-01-2015 01
Ran by pavel at 2015-01-28 17:47:08 Run:3
Running from C:\Documents and Settings\pavel\Plocha
Loaded Profiles: pavel (Available profiles: pavel & Administrator)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-1343024091-343818398-839522115-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1343024091-343818398-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll No File
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path

S3 GGSAFERDriver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys [X]
S4 IntelIde; No ImagePath
2015-01-28 11:54 - 2015-01-28 11:48 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe
2015-01-28 01:08 - 2015-01-27 21:16 - 02194432 _____ () C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe
2015-01-28 01:16 - 2014-05-11 11:32 - 00000000 ____D () C:\AdwCleaner
2015-01-26 23:02 - 2010-11-08 19:12 - 00000000 ____D () C:\Program Files\trend micro

C:\Documents and Settings\pavel\tadle mrcha nejde smazat KRENAME.dll
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nabídka Start^Programy^Po spuštění^hamachi.lnk" /f
REG: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v "EnableFirewall" /t "REG_DWORD" /d "00000001"
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job => C:\Documents and Settings\pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:A1EDB939
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-1343024091-343818398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS => Value not found.
HKLM\SOFTWARE\Policies\Google => Key not found.
HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Policies\Google => Key not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-21-1343024091-343818398-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => Key not found.
"HKCR\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => Key not found.
"HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk" => Key deleted successfully.
GGSAFERDriver => Service deleted successfully.
IntelIde => Service deleted successfully.
C:\Documents and Settings\pavel\Plocha\FRSTLauncher.exe => Moved successfully.
"C:\Documents and Settings\pavel\Plocha\adwcleaner_4.109.exe" => File/Directory not found.
C:\AdwCleaner => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Documents and Settings\pavel\tadle mrcha nejde smazat KRENAME.dll => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarenaPlus" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pavel^Nabídka Start^Programy^Po spuštění^hamachi.lnk" /f =========


Operace byla dokončena úspěšně.


========= End of Reg: =========


========= reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v "EnableFirewall" /t "REG_DWORD" /d "00000001" =========

Value EnableFirewall exists, overwrite(Y/N)?
Operace byla dokončena úspěšně.


========= End of Reg: =========

C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003Core.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-343818398-839522115-1003UA.job => Moved successfully.
C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-343818398-839522115-1003.job => Moved successfully.
C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-343818398-839522115-1003.job => Moved successfully.
C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP => ":A1EDB939" ADS removed successfully.
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP" => ":A1EDB939" ADS not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 105 MB temporary data.


The system needed a reboot.

==== End of Fixlog 17:47:36 ====

ok


odinstalujte avast nasledujicim postupem https://www.avast.com/cs-cz/uninstall-utility

pak nainstalujte novy - stahujte idealne primo ze stranek avastu (nejsou adwary)

dejte pak vedet jestli hlaska pri zapnuti PC stale vyskakuje

Avast jsem úspěšně odinstaloval, ale mám problém ho opět nainstalovat. Asi ho doinstaluju, až budu mít ten internet, ono to vyžaduje různé updaty. Nevadí, že bychom tento krok prozatím přeskočili?

oukej... ale pamatujte, at je to prvni vec, kterou po pripojeni k internetu udelate

• Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_2.zip
• archiv extrahujte a spustte vyextrahovany soubor DiskInfo.exe
• ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
• log vlozte do dalsi odpovedi (Ctrl + V)

----------------------------------------------------------------------------
CrystalDiskInfo 6.2.2 (C) 2008-2014 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2015/01/28 19:14:57

-- Controller Map ----------------------------------------------------------
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- Primární kanál IDE (0)
- Sekundární kanál IDE (1)
+ Intel(R) ICH10 Family 4 port Serial ATA Storage Controller 1 - 3A20 [ATA]
+ Primární kanál IDE (0)
- ST3500418AS
- Sekundární kanál IDE (1)
+ Intel(R) ICH10 Family 2 port Serial ATA Storage Controller 2 - 3A26 [ATA]
- Primární kanál IDE (0)
+ Sekundární kanál IDE (1)
- Optiarc DVD RW AD-7243S
+ AV7SVC2F IDE Controller [SCSI]
- NSTAHUH BSXY3WLA SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) ST3500418AS : 500,1 GB [0/5/0, pd1] - st

----------------------------------------------------------------------------
(1) ST3500418AS
----------------------------------------------------------------------------
Model : ST3500418AS
Firmware : CC38
Serial Number : 6VME1Q45
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : ---- | SATA/300
Power On Hours : 29860 hod.
Power On Count : 1182 krát
Temperature : 28 C (82 F)
Health Status : Pozor
Features : S.M.A.R.T., AAM, 48bit LBA, NCQ
APM Level : ----
AAM Level : FE00h [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 107 _99 __6 000000CEFC5A Počet chyb čtení
03 _97 _97 __0 000000000000 Čas na roztočení ploten
04 _98 _98 _20 000000000958 Počet spuštění/zastavení
05 100 100 _36 000000000002 Počet přemapovaných sektorů
07 _85 _60 _30 000017063D10 Počet chybných hledání
09 _66 _66 __0 0000000074A4 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 _20 00000000049E Počet cyklů zapnutí zařízení
B7 100 100 __0 000000000000 Specifický pro výrobce
B8 100 100 _99 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 00000000000C Časový limit příkazu
BD _40 _40 __0 00000000003C Vysoká rychlost zápisu
BE _72 _46 _45 00001C1B001C Teplota toku vzduchu
C2 _28 _54 __0 000B0000001C Teplota
C3 _46 _19 __0 000000CEFC5A Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
F0 100 253 __0 5F6400008141 Čas nastavování hlaviček - v hodinách
F1 100 253 __0 00000B80F09C Total Host Writes
F2 100 253 __0 00009B687413 Total Host Reads

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 3656 4D45 3151 3435
020: 0000 8000 0004 4343 3338 2020 2020 5354 3335 3030
030: 3431 3841 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0506 0000 0048 0040
080: 01F0 0029 346B 7F01 4163 3469 BE01 4163 207F 0029
090: 0029 0000 FFFE 0000 FE00 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5000 C500
110: 2285 1B1F 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 6030
130: 3A38 6030 3A38 2020 0002 0140 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 0000 004F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 3F00 9800
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 103F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 1010 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 B1A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 6B 63 5A FC CE 00 00 00 00 03 03
010: 00 61 61 00 00 00 00 00 00 00 04 32 00 62 62 58
020: 09 00 00 00 00 00 05 33 00 64 64 02 00 00 00 00
030: 00 00 07 0F 00 55 3C 10 3D 06 17 00 00 00 09 32
040: 00 42 42 A4 74 00 00 00 00 00 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 32 00 63 63 9E 04 00 00 00
060: 00 00 B7 32 00 64 64 00 00 00 00 00 00 00 B8 32
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 64 64 00
080: 00 00 00 00 00 00 BC 32 00 64 63 0C 00 00 00 00
090: 00 00 BD 3A 00 28 28 3C 00 00 00 00 00 00 BE 22
0A0: 00 48 2E 1C 00 1B 1C 00 00 00 C2 22 00 1C 36 1C
0B0: 00 00 00 0B 00 00 C3 1A 00 2E 13 5A FC CE 00 00
0C0: 00 00 C5 12 00 64 64 00 00 00 00 00 00 00 C6 10
0D0: 00 64 64 00 00 00 00 00 00 00 C7 3E 00 C8 C8 00
0E0: 00 00 00 00 00 00 F0 00 00 64 FD 41 81 00 00 64
0F0: 5F 1B F1 00 00 64 FD 9C F0 80 0B 00 00 00 F2 00
100: 00 64 FD 13 74 68 9B 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 58 02 00 7B
170: 03 00 01 00 01 57 02 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 27 15 00 00 06 03 03 03 03 03 03 03
190: 03 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 B7 E0 B1 C8 CB 61 00 00
1B0: 00 00 00 00 01 00 09 03 9C F0 80 0B 7A 00 00 00
1C0: 13 74 68 9B 99 12 00 00 00 00 00 00 6B 6B 16 00
1D0: 00 00 00 3E 00 00 00 00 60 21 00 00 2A 00 08 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0F
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B7 00 00 00 00 00 00 00 00 00 00 00 B8 63
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 BC 00 00 00 00 00 00 00 00 00
090: 00 00 BD 00 00 00 00 00 00 00 00 00 00 00 BE 2D
0A0: 00 00 00 00 00 00 00 00 00 00 C2 00 00 00 00 00
0B0: 00 00 00 00 00 00 C3 00 00 00 00 00 00 00 00 00
0C0: 00 00 C5 00 00 00 00 00 00 00 00 00 00 00 C6 00
0D0: 00 00 00 00 00 00 00 00 00 00 C7 00 00 00 00 00
0E0: 00 00 00 00 00 00 F0 00 00 00 00 00 00 00 00 00
0F0: 00 00 F1 00 00 00 00 00 00 00 00 00 00 00 F2 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60

Zlepsil se zatim stav PC, ci stale zamrza?

Disk neni v nejlepsim stavu...

Drzte se presne navodu! Win XP neni podporovan novou verzi 2.0

• Stahnete a nainstalujte MBAM 1.75 http://www.bleepingcomputer.com/downloa ... i-malware/
• na konci instalace zruste zatrzitko u polozky Povolit bezplatnou zkusebni verzi Malwarebytes Anti-Malware PRO
• ted je dulezity krok - stahuje se aktualizace celeho programu a na konci vyskoci hlaska - zvolte Cancel, pripadne Storno
• jako dalsi se sama stahla aktualizace virove databaze a dava Vam jedinou moznost -> OK
• opet je Vam nabizena aktualizace celeho programu -> zvolte opet Cancel
• v zalozce Kontrolor vyberte moznost Kompletni kontrola a kliknete na Prohledat
• po dokonceni skenovani, ktere se muze protahnout az na nekolik hodin, na Vas vyskoci log, ktery mi zkopirujte do pristi odpovedi... pripadne jej najdete v karte Slozka protokolu