VIRY.CZ

Zdravím už asi dva dny se mi seká internet. Mám podezření malwer nebo nějaký jiný virus. Potřeboval bych pomoct. Předem děkuji za odpověd


Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2015-07-21 20:33:49
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 126 GB (53%) free of 238 GB
Total RAM: 1014 MB (22% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:34:01, on 21.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Documents and Settings\Tomáš\Plocha\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 65.112.87.186 master.gamespy.com
O2 - BHO: SpAceOfFeers - {3505E472-BD22-4BB2-9E07-170DEA6811AE} - C:\Program Files\SpAceOfFeers\KnGH881sYWoBGM.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Documents and Settings\Tomáš\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GSplay.exe] C:\Documents%20and%20Settings\Tom%c3%a1%c5%a1\Local%20Settings\Temp\Rar$EX01.250\GSplay.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Dreary Bevy - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe
O23 - Service: Horrified Advice - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Quizzical Manhood - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood\Quizzical Manhood.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 5604 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Bidaily Synchronize Task[973b].job - c:\documents and settings\all users\data aplikací\{0a481495-b3a6-edaa-0a48-81495b3a5256}\camtasia - intro 4.exe --startup=1 --single
C:\WINDOWS\tasks\DigiMakeover.job - c:\documents and settings\all users\data aplikací\{97facff5-5115-4435-97fa-acff55113fd5}\6703716656886438206b.exe --startup=1 --single
C:\WINDOWS\tasks\DigiMate.job - c:\documents and settings\all users\data aplikací\{b0b33557-f577-e602-b0b3-33557f57d55f}\8848629887946513452b.exe --startup=1 --single
C:\WINDOWS\tasks\FactorTractor.job - c:\documents and settings\all users\data aplikací\{998dbee9-a348-e2c0-998d-dbee9a34fba6}\1689922618321719396b.exe --startup=1 --single
C:\WINDOWS\tasks\Game_Booster_Startup.job - D:\Program Files\IObit\Game Booster 3\gbtray.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MoodMaster.job - c:\documents and settings\all users\data aplikací\{7e34a100-5e89-573d-7e34-4a1005e88401}\458653104794278577b.exe --startup=1 --single
C:\WINDOWS\tasks\PainSmack.job - c:\documents and settings\all users\data aplikací\{05ad0e60-ff13-dde2-05ad-d0e60ff13983}\8617314882164128735b.exe --startup=1 --single
C:\WINDOWS\tasks\PolishPics.job - c:\documents and settings\all users\data aplikací\{35cc6063-5da5-c8f6-35cc-c60635da818d}\3681008369599021656b.exe --startup=1 --single
C:\WINDOWS\tasks\YogaGuide.job - c:\documents and settings\all users\data aplikací\{6c5e303e-8e10-548a-6c5e-e303e8e1c0fa}\5122114207365047542b.exe --startup=1 --single

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3505E472-BD22-4BB2-9E07-170DEA6811AE}]
SpAceOfFeers - C:\Program Files\SpAceOfFeers\KnGH881sYWoBGM.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-10 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-10 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Documents and Settings\Tomáš\Data aplikací\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904]
"Akamai NetSession Interface"=C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe [2014-10-30 4673432]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"AdobeBridge"= []
"GSplay.exe"=C:\Documents20Settings\Tom%c3%a1%c5%a1\Local%20Settings\Temp\Rar$EX01.250\GSplay.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe"="C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe:*:Enabled:Battlefield Heroes"
"C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe"="C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe"="C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe:*:Enabled:Update Engine"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe"="C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe:*:Enabled:GameRanger"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:rundll32"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe"="C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe:*:Enabled:Multi Theft Auto Server"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe"="C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe:*:Enabled:ImperialGlory"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"C:\Program Files\Vietcong\Vietcong.exe"="C:\Program Files\Vietcong\Vietcong.exe:*:Enabled:Vietcong"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\No Man's Land\Run\NML.exe"="C:\Program Files\No Man's Land\Run\NML.exe:*:Enabled:NML main engine"
"D:\Program Files\Garena+\Garena Plus\ggdllhost.exe"="D:\Program Files\Garena+\Garena Plus\ggdllhost.exe:*:Enabled:ggdllhost"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe"="C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe"="C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe:*:Enabled:Terraria"
"C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe"="C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe:*:Enabled:μTorrent"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Maxthon3\bin\MxUp.exe"="D:\Program Files\Maxthon3\bin\MxUp.exe:*:Enabled:MxUp"
"D:\Program Files\Maxthon3\bin\Maxthon.exe"="D:\Program Files\Maxthon3\bin\Maxthon.exe:*:Enabled:Maxthon"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\TmNationsForever\TmForever.exe"="D:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe:*:Enabled:LoL Patcher"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe:*:Enabled:LoL Patcher"
"D:\Program Files\Sierra\Empire Earth II\EE2.exe"="D:\Program Files\Sierra\Empire Earth II\EE2.exe:*:Enabled:Empire Earth II"
"D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe"="D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\Program Files\World of Warcraft\Launcher.exe"="D:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Games\World_of_Tanks\WoTLauncher.exe"="D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher"
"C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe"="C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Games\Worms Armageddon - New Edition\WA.exe"="D:\Games\Worms Armageddon - New Edition\WA.exe:*:Enabled:Worms Armageddon 3.6.31.0"
"C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe"="C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Battle.net\Battle.net.exe"="C:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe:*:Enabled:Medal of Honor Allied Assault(tm) Breakthrough"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Wolfenstein - Enemy Territory\et.exe"="D:\Program Files\Wolfenstein - Enemy Territory\et.exe:*:Enabled:et"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"VIDC.FPS1"=frapsvid.dll
"vidc.tscc"=C:\WINDOWS\system32\tsccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.tsc2"=C:\WINDOWS\system32\tsc2_codec32.dll

======List of files/folders created in the last 1 month======

2015-07-21 20:33:50 ----D---- C:\Program Files\trend micro
2015-07-21 20:33:49 ----D---- C:\rsit
2015-07-21 10:54:38 ----D---- C:\AdwCleaner
2015-07-19 22:00:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\16686630329967685641
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files\Java
2015-07-10 16:50:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Oracle
2015-07-08 11:38:29 ----D---- C:\Program Files\Common Files\Skype
2015-07-08 11:38:26 ----RD---- C:\Program Files\Skype
2015-07-07 23:35:18 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Battle.net
2015-07-07 23:34:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2015-07-05 20:40:04 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice

======List of files/folders modified in the last 1 month======

2015-07-21 20:33:50 ----D---- C:\Program Files
2015-07-21 20:29:17 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TS3Client
2015-07-21 20:28:02 ----A---- C:\WINDOWS\NeroDigital.ini
2015-07-21 20:26:46 ----D---- C:\WINDOWS\system32\inetsrv
2015-07-21 20:23:14 ----SHD---- C:\WINDOWS\Installer
2015-07-21 20:16:37 ----D---- C:\Documents and Settings
2015-07-21 20:11:25 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Sierra
2015-07-21 20:09:00 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\InstallShield Installation Information
2015-07-21 20:06:22 ----D---- C:\WINDOWS\system32
2015-07-21 20:06:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-21 20:04:05 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\uTorrent
2015-07-21 20:02:22 ----D---- C:\WINDOWS\Temp
2015-07-21 20:02:21 ----D---- C:\WINDOWS
2015-07-21 20:01:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-21 19:59:35 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TeamViewer
2015-07-21 19:59:35 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\DAEMON Tools Lite
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Minidump
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Logs
2015-07-21 19:55:18 ----D---- C:\Program Files\Sony
2015-07-21 15:17:57 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Skype
2015-07-21 09:44:31 ----D---- C:\WINDOWS\Prefetch
2015-07-21 09:44:19 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2015-07-19 22:41:39 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood
2015-07-19 22:41:39 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy
2015-07-19 16:10:51 ----D---- C:\WINDOWS\system32\drivers
2015-07-19 16:10:43 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-12 12:47:31 ----HD---- C:\Program Files\InstallShield Installation Information
2015-07-12 01:31:01 ----D---- C:\Program Files\Warcraft III Frozen Throne eSK
2015-07-11 00:16:03 ----D---- C:\WINDOWS\SHELLNEW
2015-07-10 17:12:16 ----D---- C:\WINDOWS\system32\DirectX
2015-07-10 17:11:56 ----HD---- C:\WINDOWS\msdownld.tmp
2015-07-10 17:11:49 ----HD---- C:\WINDOWS\inf
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files
2015-07-10 16:51:03 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-10 16:50:38 ----D---- C:\Program Files\Java
2015-07-09 18:17:04 ----SD---- C:\WINDOWS\Tasks
2015-07-09 00:54:35 ----A---- C:\WINDOWS\win.ini
2015-07-08 11:38:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2015-07-05 01:19:32 ----D---- C:\Program Files\xerox
2015-07-02 10:19:02 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-10-31 243128]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\WINDOWS\system32\DRIVERS\aswTap.sys [2014-12-18 35144]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2015-07-14 26176]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 VASDeviceDrm;Virtual Audio Streaming with Drm (WDM); C:\WINDOWS\system32\drivers\vasdDev.sys [2012-03-19 1450544]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Dreary Bevy;Dreary Bevy; C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe [2015-06-20 65536]
S2 Horrified Advice;Horrified Advice; C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe [2015-07-05 66048]
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2013-07-02 76888]
S2 Quizzical Manhood;Quizzical Manhood; C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood\Quizzical Manhood.exe [2015-06-20 65536]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-01-28 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-02 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Kamarád už mi dříve poslal tenhle program. Chcete poslat to co to napsalo předtím ?




# AdwCleaner v4.208 - Log vytvořen 21/07/2015 v 20:58:39
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operační system : Microsoft Windows XP Service Pack 3 (x86)
# Uživatelské jméno : Tomáš - X-605190BB9C7A4
# Spuštěno z : C:\Documents and Settings\Tomáš\Plocha\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Conduit
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Prohlížeče ] *****

-\\ Internet Explorer v7.0.5730.13


-\\ Mozilla Firefox v


-\\ Google Chrome v43.0.2357.124


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [13442 bytů] - [21/07/2015 10:54:41]
AdwCleaner[R1].txt - [13501 bytů] - [21/07/2015 10:56:17]
AdwCleaner[R2].txt - [1195 bytů] - [21/07/2015 11:00:06]
AdwCleaner[R3].txt - [1266 bytů] - [21/07/2015 20:57:15]
AdwCleaner[S0].txt - [11783 bytů] - [21/07/2015 10:57:19]
AdwCleaner[S1].txt - [1265 bytů] - [21/07/2015 11:01:05]
AdwCleaner[S2].txt - [1189 bytů] - [21/07/2015 20:58:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1247 bytů] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2015-07-21 23:45:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 135 GB (56%) free of 238 GB
Total RAM: 1014 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:45:32, on 21.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\WINDOWS\system32\taskmgr.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
D:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Documents and Settings\Tomáš\Plocha\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 65.112.87.186 master.gamespy.com
O2 - BHO: SpAceOfFeers - {3505E472-BD22-4BB2-9E07-170DEA6811AE} - C:\Program Files\SpAceOfFeers\KnGH881sYWoBGM.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-823518204-261478967-1801674531-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'x')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Dreary Bevy - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe (file missing)
O23 - Service: Horrified Advice - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Quizzical Manhood - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood\Quizzical Manhood.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 5374 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Bidaily Synchronize Task[973b].job - c:\documents and settings\all users\data aplikací\{0a481495-b3a6-edaa-0a48-81495b3a5256}\camtasia - intro 4.exe --startup=1 --single
C:\WINDOWS\tasks\DigiMakeover.job - c:\documents and settings\all users\data aplikací\{97facff5-5115-4435-97fa-acff55113fd5}\6703716656886438206b.exe --startup=1 --single
C:\WINDOWS\tasks\DigiMate.job - c:\documents and settings\all users\data aplikací\{b0b33557-f577-e602-b0b3-33557f57d55f}\8848629887946513452b.exe --startup=1 --single
C:\WINDOWS\tasks\FactorTractor.job - c:\documents and settings\all users\data aplikací\{998dbee9-a348-e2c0-998d-dbee9a34fba6}\1689922618321719396b.exe --startup=1 --single
C:\WINDOWS\tasks\Game_Booster_Startup.job - D:\Program Files\IObit\Game Booster 3\gbtray.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\MoodMaster.job - c:\documents and settings\all users\data aplikací\{7e34a100-5e89-573d-7e34-4a1005e88401}\458653104794278577b.exe --startup=1 --single
C:\WINDOWS\tasks\PainSmack.job - c:\documents and settings\all users\data aplikací\{05ad0e60-ff13-dde2-05ad-d0e60ff13983}\8617314882164128735b.exe --startup=1 --single
C:\WINDOWS\tasks\PolishPics.job - c:\documents and settings\all users\data aplikací\{35cc6063-5da5-c8f6-35cc-c60635da818d}\3681008369599021656b.exe --startup=1 --single
C:\WINDOWS\tasks\YogaGuide.job - c:\documents and settings\all users\data aplikací\{6c5e303e-8e10-548a-6c5e-e303e8e1c0fa}\5122114207365047542b.exe --startup=1 --single

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3505E472-BD22-4BB2-9E07-170DEA6811AE}]
SpAceOfFeers - C:\Program Files\SpAceOfFeers\KnGH881sYWoBGM.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-10 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-10 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Akamai NetSession Interface"=C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe [2014-10-30 4673432]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\Tomáš\Data aplikací\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GSplay.exe]
C:\Documents20Settings\Tom%c3%a1%c5%a1\Local%20Settings\Temp\Rar$EX01.250\GSplay.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe"="C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe:*:Enabled:Battlefield Heroes"
"C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe"="C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe"="C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe:*:Enabled:Update Engine"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe"="C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe:*:Enabled:GameRanger"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:rundll32"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe"="C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe:*:Enabled:Multi Theft Auto Server"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe"="C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe:*:Enabled:ImperialGlory"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"C:\Program Files\Vietcong\Vietcong.exe"="C:\Program Files\Vietcong\Vietcong.exe:*:Enabled:Vietcong"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\No Man's Land\Run\NML.exe"="C:\Program Files\No Man's Land\Run\NML.exe:*:Enabled:NML main engine"
"D:\Program Files\Garena+\Garena Plus\ggdllhost.exe"="D:\Program Files\Garena+\Garena Plus\ggdllhost.exe:*:Enabled:ggdllhost"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe"="C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe"="C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe:*:Enabled:Terraria"
"C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe"="C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe:*:Enabled:μTorrent"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Maxthon3\bin\MxUp.exe"="D:\Program Files\Maxthon3\bin\MxUp.exe:*:Enabled:MxUp"
"D:\Program Files\Maxthon3\bin\Maxthon.exe"="D:\Program Files\Maxthon3\bin\Maxthon.exe:*:Enabled:Maxthon"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\TmNationsForever\TmForever.exe"="D:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe:*:Enabled:LoL Patcher"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe:*:Enabled:LoL Patcher"
"D:\Program Files\Sierra\Empire Earth II\EE2.exe"="D:\Program Files\Sierra\Empire Earth II\EE2.exe:*:Enabled:Empire Earth II"
"D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe"="D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\Program Files\World of Warcraft\Launcher.exe"="D:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Games\World_of_Tanks\WoTLauncher.exe"="D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher"
"C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe"="C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Games\Worms Armageddon - New Edition\WA.exe"="D:\Games\Worms Armageddon - New Edition\WA.exe:*:Enabled:Worms Armageddon 3.6.31.0"
"C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe"="C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Battle.net\Battle.net.exe"="C:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe:*:Enabled:Medal of Honor Allied Assault(tm) Breakthrough"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Wolfenstein - Enemy Territory\et.exe"="D:\Program Files\Wolfenstein - Enemy Territory\et.exe:*:Enabled:et"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"VIDC.FPS1"=frapsvid.dll
"vidc.tscc"=C:\WINDOWS\system32\tsccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.tsc2"=C:\WINDOWS\system32\tsc2_codec32.dll

======List of files/folders created in the last 2 months======

2015-07-21 22:13:00 ----D---- C:\WINDOWS\pss
2015-07-21 21:59:04 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TeamViewer
2015-07-21 20:33:50 ----D---- C:\Program Files\trend micro
2015-07-21 20:33:49 ----D---- C:\rsit
2015-07-21 10:54:38 ----D---- C:\AdwCleaner
2015-07-19 22:00:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\16686630329967685641
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files\Java
2015-07-10 16:50:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Oracle
2015-07-08 11:38:29 ----D---- C:\Program Files\Common Files\Skype
2015-07-08 11:38:26 ----RD---- C:\Program Files\Skype
2015-07-07 23:34:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2015-06-18 16:09:20 ----D---- C:\WINDOWS\system32\GroupPolicy

======List of files/folders modified in the last 2 months======

2015-07-21 23:37:36 ----D---- C:\WINDOWS
2015-07-21 23:36:43 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-21 23:35:09 ----RSD---- C:\WINDOWS\Fonts
2015-07-21 23:09:47 ----D---- C:\WINDOWS\system32
2015-07-21 22:52:46 ----SH---- C:\boot.ini
2015-07-21 22:52:46 ----A---- C:\WINDOWS\win.ini
2015-07-21 22:52:46 ----A---- C:\WINDOWS\system.ini
2015-07-21 22:45:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-21 22:43:26 ----D---- C:\WINDOWS\system32\inetsrv
2015-07-21 22:42:50 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TS3Client
2015-07-21 22:42:47 ----SHD---- C:\System Volume Information
2015-07-21 22:42:47 ----D---- C:\WINDOWS\system32\Restore
2015-07-21 22:41:43 ----D---- C:\WINDOWS\Temp
2015-07-21 22:34:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-21 21:27:12 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Sony
2015-07-21 20:33:50 ----D---- C:\Program Files
2015-07-21 20:28:02 ----A---- C:\WINDOWS\NeroDigital.ini
2015-07-21 20:23:25 ----SHD---- C:\WINDOWS\Installer
2015-07-21 20:16:37 ----D---- C:\Documents and Settings
2015-07-21 20:04:05 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\uTorrent
2015-07-21 19:59:35 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\DAEMON Tools Lite
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Minidump
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Logs
2015-07-21 19:55:18 ----D---- C:\Program Files\Sony
2015-07-21 15:17:57 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Skype
2015-07-21 09:44:31 ----D---- C:\WINDOWS\Prefetch
2015-07-21 09:44:19 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2015-07-19 16:10:51 ----D---- C:\WINDOWS\system32\drivers
2015-07-12 12:47:31 ----HD---- C:\Program Files\InstallShield Installation Information
2015-07-12 01:31:01 ----D---- C:\Program Files\Warcraft III Frozen Throne eSK
2015-07-11 00:16:03 ----D---- C:\WINDOWS\SHELLNEW
2015-07-10 17:12:16 ----D---- C:\WINDOWS\system32\DirectX
2015-07-10 17:11:56 ----HD---- C:\WINDOWS\msdownld.tmp
2015-07-10 17:11:49 ----HD---- C:\WINDOWS\inf
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files
2015-07-10 16:51:03 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-10 16:50:38 ----D---- C:\Program Files\Java
2015-07-09 18:17:04 ----SD---- C:\WINDOWS\Tasks
2015-07-08 11:38:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2015-07-05 01:19:32 ----D---- C:\Program Files\xerox
2015-07-02 10:19:02 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-06-18 16:47:06 ----AD---- C:\ProgramData
2015-06-18 16:42:47 ----D---- C:\Program Files\Microsoft Games
2015-06-18 16:28:12 ----D---- C:\Program Files\Common Files\Adobe
2015-06-18 16:26:52 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Adobe
2015-06-18 16:26:20 ----D---- C:\Program Files\Adobe
2015-06-18 16:25:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2015-05-30 17:55:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2015-05-29 13:13:41 ----D---- C:\WINDOWS\system32\config
2015-05-29 13:13:25 ----D---- C:\WINDOWS\system32\wbem
2015-05-29 13:13:24 ----D---- C:\WINDOWS\Registration
2015-05-29 13:08:51 ----D---- C:\WINDOWS\system32\NtmsData
2015-05-29 13:04:36 ----D---- C:\WINDOWS\Help
2015-05-24 17:33:53 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\.minecraft
2015-05-24 00:32:30 ----D---- C:\WINDOWS\system32\drivers\etc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-10-31 243128]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\WINDOWS\system32\DRIVERS\aswTap.sys [2014-12-18 35144]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2015-07-14 26176]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 VASDeviceDrm;Virtual Audio Streaming with Drm (WDM); C:\WINDOWS\system32\drivers\vasdDev.sys [2012-03-19 1450544]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Dreary Bevy;Dreary Bevy; C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe []
S2 Horrified Advice;Horrified Advice; C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe []
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2013-07-02 76888]
S2 Quizzical Manhood;Quizzical Manhood; C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood\Quizzical Manhood.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-01-28 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-02 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\SpAceOfFeers
C:\WINDOWS\tasks\Bidaily Synchronize Task[973b].job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\YogaGuide.job
C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai
C:\Documents and Settings\Tomáš\Data aplikací\Quizzical Manhood

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3505E472-BD22-4BB2-9E07-170DEA6811AE}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]

:services
Quizzical Manhood

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomáš at 2015-07-23 00:40:31
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 136 GB (57%) free of 238 GB
Total RAM: 1014 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:40:35, on 23.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Tomáš\Plocha\Složky\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 65.112.87.186 master.gamespy.com
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Dreary Bevy - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe (file missing)
O23 - Service: Horrified Advice - Unknown owner - C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 4410 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\DigiMakeover.job - c:\documents and settings\all users\data aplikací\{97facff5-5115-4435-97fa-acff55113fd5}\6703716656886438206b.exe --startup=1 --single
C:\WINDOWS\tasks\DigiMate.job - c:\documents and settings\all users\data aplikací\{b0b33557-f577-e602-b0b3-33557f57d55f}\8848629887946513452b.exe --startup=1 --single
C:\WINDOWS\tasks\FactorTractor.job - c:\documents and settings\all users\data aplikací\{998dbee9-a348-e2c0-998d-dbee9a34fba6}\1689922618321719396b.exe --startup=1 --single
C:\WINDOWS\tasks\Game_Booster_Startup.job - D:\Program Files\IObit\Game Booster 3\gbtray.exe
C:\WINDOWS\tasks\MoodMaster.job - c:\documents and settings\all users\data aplikací\{7e34a100-5e89-573d-7e34-4a1005e88401}\458653104794278577b.exe --startup=1 --single
C:\WINDOWS\tasks\PainSmack.job - c:\documents and settings\all users\data aplikací\{05ad0e60-ff13-dde2-05ad-d0e60ff13983}\8617314882164128735b.exe --startup=1 --single
C:\WINDOWS\tasks\PolishPics.job - c:\documents and settings\all users\data aplikací\{35cc6063-5da5-c8f6-35cc-c60635da818d}\3681008369599021656b.exe --startup=1 --single

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-10 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-10 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\Tomáš\Data aplikací\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GSplay.exe]
C:\Documents20Settings\Tom%c3%a1%c5%a1\Local%20Settings\Temp\Rar$EX01.250\GSplay.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1040\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.1544\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\Tomáš\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="D:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe"="C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe:*:Enabled:Battlefield Heroes"
"C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe"="C:\Documents and Settings\Tomáš\Dokumenty\Downloads\Left 4 Dead 2 v2.0.0.1 Cracked\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe"="C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe:*:Enabled:Update Engine"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe"="C:\Documents and Settings\Tomáš\Data aplikací\GameRanger\GameRanger\GameRanger.exe:*:Enabled:GameRanger"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:rundll32"
"C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe"="C:\Program Files\Counter-Strike 1.6 Non-Steam\hlds.exe:*:Enabled:HLDS Launcher"
"C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe"="C:\Program Files\Rockstar Games\GTA San Andreas\MTA San Andreas 1.3\server\MTA Server.exe:*:Enabled:Multi Theft Auto Server"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe"="C:\Program Files\Pyro Studios\Imperial Glory\ImperialGlory.exe:*:Enabled:ImperialGlory"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\x\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"C:\Program Files\Vietcong\Vietcong.exe"="C:\Program Files\Vietcong\Vietcong.exe:*:Enabled:Vietcong"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\No Man's Land\Run\NML.exe"="C:\Program Files\No Man's Land\Run\NML.exe:*:Enabled:NML main engine"
"D:\Program Files\Garena+\Garena Plus\ggdllhost.exe"="D:\Program Files\Garena+\Garena Plus\ggdllhost.exe:*:Enabled:ggdllhost"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe"="C:\Program Files\Warcraft III Frozen Throne eSK\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe"="C:\Documents and Settings\Tomáš\Plocha\Terraria\terraria 1.1.2\terraria\TerrariaServer.exe:*:Enabled:Terraria"
"C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe"="C:\Documents and Settings\Tomáš\Data aplikací\uTorrent\uTorrent.exe:*:Enabled:μTorrent"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\Age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="C:\Documents and Settings\Tomáš\Plocha\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Maxthon3\bin\MxUp.exe"="D:\Program Files\Maxthon3\bin\MxUp.exe:*:Enabled:MxUp"
"D:\Program Files\Maxthon3\bin\Maxthon.exe"="D:\Program Files\Maxthon3\bin\Maxthon.exe:*:Enabled:Maxthon"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\TmNationsForever\TmForever.exe"="D:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe:*:Enabled:LoL Patcher"
"D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe"="D:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe:*:Enabled:LoL Patcher"
"D:\Program Files\Sierra\Empire Earth II\EE2.exe"="D:\Program Files\Sierra\Empire Earth II\EE2.exe:*:Enabled:Empire Earth II"
"D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe"="D:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"D:\Program Files\World of Warcraft\Launcher.exe"="D:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="D:\Program Files\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Games\World_of_Tanks\WoTLauncher.exe"="D:\Games\World_of_Tanks\WoTLauncher.exe:*:Enabled:World of Tanks Launcher"
"C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe"="C:\Documents and Settings\Tomáš\GSplay\csko\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Games\Worms Armageddon - New Edition\WA.exe"="D:\Games\Worms Armageddon - New Edition\WA.exe:*:Enabled:Worms Armageddon 3.6.31.0"
"C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe"="C:\Documents and Settings\Tomáš\Plocha\Stronghold Crusader HD\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\MYTH-Age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe"="D:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Battle.net\Battle.net.exe"="C:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_Breakthrough.exe:*:Enabled:Medal of Honor Allied Assault(tm) Breakthrough"
"D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe"="D:\Program Files\Medal of Honor Allied Assault Complete Collection\moh_spearhead_server.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\Wolfenstein - Enemy Territory\et.exe"="D:\Program Files\Wolfenstein - Enemy Territory\et.exe:*:Enabled:et"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"VIDC.FPS1"=frapsvid.dll
"vidc.tscc"=C:\WINDOWS\system32\tsccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.tsc2"=C:\WINDOWS\system32\tsc2_codec32.dll

======List of files/folders created in the last 1 month======

2015-07-23 00:36:13 ----D---- C:\_OTM
2015-07-22 19:25:27 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\LolClient
2015-07-21 22:13:00 ----D---- C:\WINDOWS\pss
2015-07-21 21:59:04 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TeamViewer
2015-07-21 20:33:50 ----D---- C:\Program Files\trend micro
2015-07-21 20:33:49 ----D---- C:\rsit
2015-07-21 10:54:38 ----D---- C:\AdwCleaner
2015-07-19 22:00:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\16686630329967685641
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2015-07-10 16:53:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files\Java
2015-07-10 16:50:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Oracle
2015-07-08 11:38:29 ----D---- C:\Program Files\Common Files\Skype
2015-07-08 11:38:26 ----RD---- C:\Program Files\Skype
2015-07-07 23:34:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment

======List of files/folders modified in the last 1 month======

2015-07-23 00:39:18 ----D---- C:\WINDOWS\Temp
2015-07-23 00:39:03 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\TS3Client
2015-07-23 00:38:36 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-23 00:38:35 ----D---- C:\WINDOWS\system32\inetsrv
2015-07-23 00:38:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-23 00:36:47 ----D---- C:\WINDOWS\system32
2015-07-23 00:36:47 ----D---- C:\WINDOWS
2015-07-23 00:36:20 ----SD---- C:\WINDOWS\Tasks
2015-07-22 21:30:38 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Skype
2015-07-22 19:01:32 ----SHD---- C:\WINDOWS\Installer
2015-07-22 19:01:31 ----D---- C:\WINDOWS\WinSxS
2015-07-22 18:41:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-21 23:36:43 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-21 23:35:09 ----RSD---- C:\WINDOWS\Fonts
2015-07-21 22:52:46 ----SH---- C:\boot.ini
2015-07-21 22:52:46 ----A---- C:\WINDOWS\win.ini
2015-07-21 22:52:46 ----A---- C:\WINDOWS\system.ini
2015-07-21 22:42:47 ----SHD---- C:\System Volume Information
2015-07-21 22:42:47 ----D---- C:\WINDOWS\system32\Restore
2015-07-21 21:27:12 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Sony
2015-07-21 20:33:50 ----D---- C:\Program Files
2015-07-21 20:28:02 ----A---- C:\WINDOWS\NeroDigital.ini
2015-07-21 20:16:37 ----D---- C:\Documents and Settings
2015-07-21 20:04:05 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\uTorrent
2015-07-21 19:59:35 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\DAEMON Tools Lite
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Minidump
2015-07-21 19:59:27 ----D---- C:\WINDOWS\Logs
2015-07-21 19:55:18 ----D---- C:\Program Files\Sony
2015-07-21 09:44:31 ----D---- C:\WINDOWS\Prefetch
2015-07-21 09:44:19 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2015-07-19 16:10:51 ----D---- C:\WINDOWS\system32\drivers
2015-07-12 12:47:31 ----HD---- C:\Program Files\InstallShield Installation Information
2015-07-12 01:31:01 ----D---- C:\Program Files\Warcraft III Frozen Throne eSK
2015-07-11 00:16:03 ----D---- C:\WINDOWS\SHELLNEW
2015-07-10 17:12:16 ----D---- C:\WINDOWS\system32\DirectX
2015-07-10 17:11:49 ----HD---- C:\WINDOWS\inf
2015-07-10 16:51:38 ----D---- C:\Program Files\Common Files
2015-07-10 16:51:03 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-10 16:50:38 ----D---- C:\Program Files\Java
2015-07-08 11:38:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2015-07-05 01:19:32 ----D---- C:\Program Files\xerox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2013-10-31 243128]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\WINDOWS\system32\DRIVERS\aswTap.sys [2014-12-18 35144]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2015-07-14 26176]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 VASDeviceDrm;Virtual Audio Streaming with Drm (WDM); C:\WINDOWS\system32\drivers\vasdDev.sys [2012-03-19 1450544]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Dreary Bevy;Dreary Bevy; C:\Documents and Settings\Tomáš\Data aplikací\Dreary Bevy\Dreary Bevy.exe []
S2 Horrified Advice;Horrified Advice; C:\Documents and Settings\Tomáš\Data aplikací\Horrified Advice\Horrified Advice.exe []
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2013-07-02 76888]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2014-01-28 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-23 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Dvouklikem na soubor spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

Dvouklikem na soubor C:\Program Files\trend micro\Tomáš.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Tak a to je všechno ??

Stav se zlepšil?

bohužel je to pořád stejné

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Nainstaluji to, ale kvuli tomuhle to nespustím.

Rudy promiň

Zdravím
nejprve odinstaluj MBAM ver.2 http://www.malwarebytes.org/mbam-clean.exe - ta na WinXP nechodí

Stáhni a nainstaluj MBAM zde http://www.bleepingcomputer.com/downloa ... re/dl/241/ verzi 1.75
Při instalaci ti jako první nabídne instalaci nové verze (případně i při spuštění) - dáš Storno - bude aktualizována jen databáze
Po instalaci Spustit -> na 1.záložce "Kontrolor" -> Úplná kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení a program nezavírej, jen minimalizuj

Už po třetí se mi to seklo v téhle části už čekám víc jak hodinu a pořád nic