Prosím o kontrolu Logu

[ladissad]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Acer at 2012-04-01 19:15:46
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 33 GB (61%) free of 54 GB
Total RAM: 1014 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:15:58, on 1.4.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\GIGABYTE\vivoTV\ScheduleAgent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\Acer\LOCALS~1\Temp\RtkBtMnt.exe
C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Acer\Plocha\RSIT.exe
C:\Program Files\trend micro\Acer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/accmeware/{AF ... 977233269D}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/accmeware/{AF ... 977233269D}
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://cs.intl.acer.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\AccmeWare Toolbar\tbhelper.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\AccmeWare Toolbar\tbcore3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: AccmeWare Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\AccmeWare Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
O4 - HKLM\..\Run: [UpdatePDRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\8.0"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TiVme Agent] C:\Program Files\GIGABYTE\vivoTV\ScheduleAgent.exe srec
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 10616 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2128494889-726027779-1670939013-1008Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2128494889-726027779-1670939013-1008UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files\AccmeWare Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2007-05-28 106496]
{338B4DFE-2E2C-4338-9E41-E176D497299E} - AccmeWare Toolbar - C:\Program Files\AccmeWare Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"preload"=C:\Windows\RUNXMLPL.exe [2007-04-20 20480]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-03-21 174872]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-09-07 1015808]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-05-28 16132608]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-06-11 53248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-03-08 40048]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-18 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-18 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-18 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-18 455168]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-06-13 142104]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-06-13 162584]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-06-13 138008]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-07 102400]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-01-08 68640]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"Acer ePresentation HPD"=C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2007-03-02 208896]
"ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2007-07-04 475136]
"Boot"=C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584]
"eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-05-28 342528]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2007-07-11 421888]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-10-17 858632]
"UpdatePPShortCut"=C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"UpdatePDRShortCut"=C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"RelevantKnowledge"=C:\Program Files\RelevantKnowledge\rlvknlg.exe [2011-10-12 2940432]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-03-31 136176]
"TiVme Agent"=C:\Program Files\GIGABYTE\vivoTV\ScheduleAgent.exe [2010-01-25 114688]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-06-05 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Documents and Settings\Acer\Plocha\Warcraft III\War3.exe"="C:\Documents and Settings\Acer\Plocha\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"c:\program files\relevantknowledge\rlvknlg.exe"="c:\program files\relevantknowledge\rlvknlg.exe:*:Enabled:rlvknlg.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-04-01 19:15:47 ----D---- C:\Program Files\trend micro
2012-04-01 19:15:46 ----D---- C:\rsit
2012-03-20 20:01:41 ----D---- C:\Documents and Settings\Acer\Data aplikací\WinRAR
2012-03-20 19:58:09 ----D---- C:\Program Files\WinRAR
2012-03-13 23:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2641653$
2012-03-13 22:58:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2621440$
2012-03-13 22:58:33 ----A---- C:\WINDOWS\imsins.BAK
2012-03-13 22:58:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2647518$
2012-03-06 21:00:57 ----D---- C:\WINDOWS\pss

======List of files/folders modified in the last 1 month======

2012-04-01 19:15:54 ----D---- C:\WINDOWS\Prefetch
2012-04-01 19:15:47 ----D---- C:\Program Files
2012-04-01 18:56:06 ----D---- C:\WINDOWS\Temp
2012-04-01 18:48:45 ----AD---- C:\WINDOWS
2012-04-01 18:48:11 ----A---- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt
2012-03-31 13:09:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-03-31 12:27:09 ----D---- C:\Program Files\RelevantKnowledge
2012-03-31 11:46:16 ----SHD---- C:\WINDOWS\Installer
2012-03-31 11:46:16 ----SHD---- C:\Config.Msi
2012-03-27 19:39:41 ----A---- C:\WINDOWS\win.ini
2012-03-27 18:30:00 ----SD---- C:\WINDOWS\Tasks
2012-03-27 18:29:52 ----D---- C:\Program Files\Google
2012-03-26 22:10:28 ----D---- C:\WINDOWS\system32
2012-03-26 22:10:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-03-23 22:51:33 ----D---- C:\WINDOWS\system32\CatRoot2
2012-03-23 20:47:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-03-23 20:42:05 ----HD---- C:\WINDOWS\inf
2012-03-13 23:00:46 ----RSHD---- C:\WINDOWS\system32\dllcache
2012-03-13 23:00:42 ----HD---- C:\WINDOWS\$hf_mig$
2012-03-13 22:58:53 ----D---- C:\WINDOWS\Debug
2012-03-13 22:58:48 ----A---- C:\WINDOWS\system32\MRT.exe
2012-03-13 22:58:41 ----D---- C:\WINDOWS\system32\drivers
2012-03-07 01:15:14 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-03-06 21:04:36 ----D---- C:\WINDOWS\system32\NtmsData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
R0 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
R0 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-03-21 304920]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
R0 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2006-08-28 13952]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 int15;int15; \??\C:\WINDOWS\system32\drivers\int15.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 tvicport;tvicport; \??\C:\WINDOWS\system32\drivers\tvicport.sys []
R2 zntport;zntport; \??\C:\WINDOWS\system32\drivers\zntport.sys []
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-05-02 546976]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-16 160256]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2007-03-23 539072]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2007-03-23 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-03-31 876384]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2006-01-20 17408]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2006-12-22 988800]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2006-12-22 209664]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-06-06 5761728]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-05-30 4424192]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2007-08-14 6144]
R3 psdfilter;psdfilter; \??\C:\WINDOWS\system32\Drivers\psdfilter.sys []
R3 psdvdisk;psdvdisk; \??\C:\WINDOWS\system32\Drivers\psdvdisk.sys []
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-09-07 215904]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2007-05-02 290816]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2006-12-22 730112]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2007-03-23 149123]
S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2007-03-31 55352]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-03-23 67960]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver; C:\WINDOWS\system32\drivers\RTL2832UBDA.sys [2010-01-22 143264]
S3 RTL2832UUSB;REALTEK 2832U USB Driver; C:\WINDOWS\System32\Drivers\RTL2832UUSB.sys [2010-01-22 32800]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-04-01 273256]
R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-03-01 24576]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-03-21 355096]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2006-04-14 28933976]
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2009-04-17 247152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-27 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-27 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2006-04-14 240416]

-----------------EOF-----------------

[Roli]

Zdravím, tohle fixni v HJT :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/accmeware/{AF ... 977233269D}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://cs.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/accmeware/{AF ... 977233269D}
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://cs.intl.acer.yahoo.com/
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\AccmeWare Toolbar\tbhelper.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\AccmeWare Toolbar\tbcore3.dll
O3 - Toolbar: AccmeWare Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\AccmeWare Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
O4 - HKLM\..\Run: [UpdatePDRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\8.0"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Acer\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

HJT najdeš zde :

C:\Program Files\trend micro\Acer.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Spustit >> napiš - services.msc >> OK. Najdi službu :

Služba Google Update (gupdate)

Služba Google Update (gupdatem)

Cyberlink RichVideo Service(CRVS)

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

[ladissad]

2012/04/05 21:42:23 +0200 ACER-109CD108E4 Acer MESSAGE Starting protection
2012/04/05 21:42:30 +0200 ACER-109CD108E4 Acer MESSAGE Protection started successfully
2012/04/05 21:42:33 +0200 ACER-109CD108E4 Acer MESSAGE Starting IP protection
2012/04/05 21:42:47 +0200 ACER-109CD108E4 Acer MESSAGE IP Protection started successfully
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:43 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:50 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:45:50 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:46:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:46:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:47:26 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:47:28 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:47:28 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:47:28 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:47:28 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:49:50 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:49:50 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:50:31 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:50:37 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:50:37 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:01 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:01 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:01 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:02 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:02 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:02 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:03 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:03 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:04 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:04 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:04 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:06 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:11 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:12 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:51:13 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 21:58:18 +0200 ACER-109CD108E4 Acer MESSAGE Executing scheduled update: Daily
2012/04/05 21:58:25 +0200 ACER-109CD108E4 Acer MESSAGE Database already up-to-date
2012/04/05 22:10:05 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:07 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:08 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:10:09 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:11:00 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:11:00 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:11:00 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:12:10 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:12:11 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
2012/04/05 22:12:11 +0200 ACER-109CD108E4 Acer DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW

[Roli]

A to je jako co ?