samoVyskakovací okna? co s tím?

[akem]

Extras.Txt


OTL Extras logfile created on: 10.11.2012 10:37:52 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Akem\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,93 Gb Total Physical Memory | 2,43 Gb Available Physical Memory | 61,95% Memory free
7,85 Gb Paging File | 6,33 Gb Available in Paging File | 80,53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 102,67 Gb Total Space | 56,51 Gb Free Space | 55,04% Space Free | Partition Type: NTFS
Drive D: | 195,32 Gb Total Space | 166,90 Gb Free Space | 85,45% Space Free | Partition Type: NTFS

Computer Name: AKEM-PC | User Name: Akem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0DF29D7C-7B33-4B6C-9110-4BD3D1862788}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1C83D17A-AC61-4693-87C1-6E2FBD582531}" = lport=139 | protocol=6 | dir=in | app=system |
"{2F3AF514-2701-4209-9588-663E5313502E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{32FA5868-1126-49DD-A289-AC7F20E0A4D6}" = rport=10243 | protocol=6 | dir=out | app=system |
"{3CE1B131-3CFD-41EE-9D69-0AE314B95437}" = rport=445 | protocol=6 | dir=out | app=system |
"{45DAF0E5-C375-4397-B250-C0CA85ED23C1}" = lport=2869 | protocol=6 | dir=in | app=system |
"{4BB5002A-564C-45B5-A9C8-074EA837F671}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4C74A044-F3A8-485C-BE78-5F5A76A8E588}" = lport=138 | protocol=17 | dir=in | app=system |
"{4D209B7F-DF9F-46FB-9FB1-D2A5CB025AC2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4EA7E189-3678-4480-8D26-600B13A99B56}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{5C0C10D0-326F-46BF-B5F4-3DFE3823F89E}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{5F32D9AE-F758-4063-8F15-F8A87AA715B9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{61BD81AD-0E32-43D2-A5A0-9F588219ADBE}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{62C6C1BE-1DF8-40CB-A020-C29E12E18360}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{70380835-75C9-4A02-97DD-F1A989159371}" = lport=10243 | protocol=6 | dir=in | app=system |
"{70745E17-3912-413C-90BA-87F5F702AB2C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{70F1108E-9F20-4E38-A4C3-726CB6B48BF2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7276AE18-0850-4C92-81D5-8FC70768D3BE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{94099115-3E10-4384-AE4C-761AEBCA9D3F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{95F26A1D-4CB2-4F78-AEE5-DC9681E9B3E7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{987E7616-5D1F-4AAF-93B2-C6E7307D631B}" = rport=139 | protocol=6 | dir=out | app=system |
"{A5BB4C6F-AE0D-43CD-9E8A-01AB2480B3BC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BF44BD32-A331-4400-90E3-D793B57A436A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CE2EFA2F-9318-411F-81FC-BFBE8B416108}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{CE391D9F-3B0A-4F13-8744-B507D842FA50}" = lport=49194 | protocol=6 | dir=in | name=akamai netsession interface |
"{D18FCE48-610D-475E-A344-6B00624E6151}" = rport=138 | protocol=17 | dir=out | app=system |
"{D38BDDB7-2EE6-471C-820C-5FDC61A90452}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DC392DB4-484C-4809-B0C9-F561EC70867B}" = lport=445 | protocol=6 | dir=in | app=system |
"{E2D3C6B0-7E19-48E5-BC96-2B8B21D6E8BA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{E4E8F719-6F82-4C88-A955-2ACFE8C26CEA}" = rport=137 | protocol=17 | dir=out | app=system |
"{E906A73B-EB6B-450C-A032-78904D1F08B7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{EE94C79D-0B87-4333-A350-CA4688DD536E}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{F5F50C12-6AF1-41C9-A8E8-B7F52567F141}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F822AC96-574B-4D1F-A5E5-E8D8632BDADF}" = lport=137 | protocol=17 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0551E807-C18E-430F-B130-E0FC7B43EA59}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\backgammon.exe |
"{06BC0DF8-7B19-4707-9606-675E3FD25954}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0959215D-BD37-436B-8095-AF3781189D0C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{0ADE86AC-B001-4C94-8D3B-33B1395FC602}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{0D4473C3-6F32-40C1-AFB1-2162455FAD08}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{0EF3405F-FD95-4E41-ABAE-002DFA5427DC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{15059755-ED3E-49F5-A26D-1C6770400263}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{18B58671-3173-4D78-B1C8-6CAD60944BF3}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\rescue.exe |
"{1F7C9F63-E758-42FE-B0BC-314770B4A479}" = protocol=6 | dir=out | app=system |
"{1FD5F5F8-56E7-43BB-9FFC-926A5032CA0F}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{209BF9D5-CEDB-4DFA-B6C1-C96B7D278F73}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{246F9A10-3FD7-418E-B03C-108D2387EF1A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{35BB2EC0-EBD5-46F5-A53A-48F76D553AE9}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{3783D972-E673-4E1D-BBEB-F6C4596D66F2}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\discovery.exe |
"{3BC448C5-C1CF-4662-BCE4-D326BBD21129}" = protocol=17 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{4345B66D-ED8C-4F3C-8AC0-30282B57547E}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe |
"{47392B2A-B534-4E69-A148-2EB41B4C1491}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{48429D73-1061-4B78-90C5-0B58911913C4}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\rescue.exe |
"{4C7A15A9-0D40-4631-86EC-2BBC488A71EF}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{508960E1-4A40-4C12-8CBF-7A91358ED85D}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{52291E79-3ABC-48E9-8689-638DBEA0D6D0}" = protocol=17 | dir=in | app=c:\users\akem\appdata\roaming\dropbox\bin\dropbox.exe |
"{579FBB1B-49C6-425B-A096-7098D7C9A36B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{58EB7745-F7D1-46B2-AACC-72E8A3A63431}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{67AB6745-4D2F-4218-987A-68DD8CEF192C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{67FABB20-5CCE-4429-A224-9CB88A27F068}" = dir=in | app=c:\users\akem\appdata\local\microsoft\skydrive\skydrive.exe |
"{681956AB-DC27-45AF-A78B-F401A648F198}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe |
"{68E3B671-63E7-42B5-9A55-2B6AE82F9FA1}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\seabattle.exe |
"{750637F4-6D31-4AED-B60E-E3A599CB6679}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7C99E4C2-D045-4D4F-BAB9-7141EDA5A1A3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{9661B7FA-405E-4E38-A8FB-B8DFEAC7C4E1}" = protocol=6 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{98970A0E-1BA3-4134-8407-2669F42C6FC0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A7C4B8E9-F696-4D6C-9B25-0283927EA957}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{AA5627DD-2512-44F0-BA82-79B274776587}" = protocol=17 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{AFE0B402-466B-4BF2-9DEB-B6224F2E8E88}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\easychat.exe |
"{B662806F-FC4F-4D2C-B271-D3F8D089FBB2}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B9DD55B1-F581-4D81-B4C4-C9CD070912DA}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\chess.exe |
"{BDB0E890-6D7C-4AC6-9F25-30005A043483}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\tictactoe.exe |
"{BF6F3974-944F-49AA-81FE-7043B452C114}" = protocol=6 | dir=in | app=c:\program files (x86)\lenovo\system update\uncserver.exe |
"{C44CF89A-7636-486D-9903-20D444CE6DE6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{C65AA4A7-8487-4667-A361-255210F0F9F8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{CFCE6D30-B2E1-4880-A417-2CC2A14A0C05}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D3776968-196E-40E2-9564-2C3E0577E38F}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{D949D0B7-80F9-4BCD-845C-12E53C8895FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{D9A0C771-232F-4936-91F6-563211F775B4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DA6E3B45-B190-48F6-B1F4-A9E05866C972}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DF2E22B3-B7FC-493C-B1A7-273063FF1215}" = protocol=6 | dir=in | app=c:\users\akem\appdata\roaming\dropbox\bin\dropbox.exe |
"{E253C4FE-6C65-4CFE-8805-54997D2C362E}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\checkers.exe |
"{E369663F-22D8-4413-9511-224BCE3AFC07}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{E8860F16-2259-455A-A340-9A0EC9D1701A}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\discovery.exe |
"{EB13B7BC-8925-4AD5-A7F4-C48BFCFF7CF5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{F0EC5D5E-7DB1-4480-9EEB-A29E274A54FE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{FE7292B1-0DAB-41F8-98EA-A6D1AFC5B479}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{175C3A37-FBD7-4775-828B-2012E7ECB4E9}C:\users\akem\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\akem\appdata\local\akamai\netsession_win.exe |
"TCP Query User{5CB01C3D-1C7A-46BB-9249-560B543910EB}C:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe |
"TCP Query User{D14ED318-C265-461C-A166-8E0BA81EB8D6}C:\users\akem\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\akem\appdata\local\akamai\netsession_win.exe |
"UDP Query User{1313A1DD-4BF4-44E0-B4DF-5ACEAEFFB13C}C:\users\akem\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\akem\appdata\local\akamai\netsession_win.exe |
"UDP Query User{7EDA8C5A-61E0-4924-AE04-7BD073A711C1}C:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-n65u wireless router utilities\qiswizard.exe |
"UDP Query User{F0BF9D9A-06F8-4B9E-A452-906E60877918}C:\users\akem\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\akem\appdata\local\akamai\netsession_win.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0369F866-2CE0-4EB9-B426-88FA122C6E82}" = Lenovo Patch Utility 64 bit
"{1374CC63-B520-4f3f-98E8-E9020BF01CFF}" = Prostředí Windows XP Mode
"{26DE7BAD-453E-4C96-979F-1C288ECAA159}" = Intel(R) Network Connections 16.7.166.0
"{39A04221-294E-4D90-A0F2-CCB1EF15CB56}" = Lenovo Patch Utility 64 bit
"{3FD730D4-755F-439B-8082-B55E00924A44}" = Client Security - Password Manager
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System
"{479016BF-5B8D-445F-BE15-A187F25D81C8}" = ThinkVantage Fingerprint Software
"{57DD35E9-D9BB-4089-BB05-EF933C586CB3}" = Broadcom InConcert Maestro
"{6E5159B4-A519-41EF-80EF-AD58371515DF}" = Eraser 6.0.10.2620
"{717F5741-5C2E-4469-BDA0-B5EC2243646F}_is1" = TPFanControl v0.62
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}" = Lenovo Bluetooth with Enhanced Data Rate Software
"{D61E4101-9E15-4D0E-ABD1-1ABD36B43330}" = Software Intel(R) PROSet/Wireless WiFi
"{DD00F699-6861-4DCF-A19F-8CF61E5E28ED}" = Lenovo Solution Center
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"3BA80AB4C7E9F8497C115C844953A3D4BEB84D21" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588" = ThinkPad Modem
"DE7217D2A8B057F15EC6E52329FDAB84231521E8" = Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430)
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"LENOVO.SMIIF" = Lenovo System Interface Driver
"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"OnScreenDisplay" = On Screen Display
"Power Management Driver" = ThinkPad Power Management Driver
"ProInst" = Intel PROSet Wireless
"PROSetDX" = Intel(R) Network Connections 16.7.166.0
"STORMWARE PDF Printer_is1" = STORMWARE PDF Printer 8.2.0.1406
"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"TrackPoint" = ThinkPad TrackPoint Driver
"WhoCrashed_is1" = WhoCrashed 3.01
"WinRAR archiver" = WinRAR
"ZonerPhotoStudio14_CZ_is1" = Zoner Photo Studio 14

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06E34C00-0446-4176-81C8-A5DAFE53CA36}" = Acronis Disk Director
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
"{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}" = Star Wars Jedi Knight Jedi Academy
"{23BE4DF2-293D-4077-82F4-1FD8C269277C}" = TuneUp Utilities Language Pack (en-US)
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{24E92E7A-6848-4747-A3EA-3AAC0576BE52}" = Lenovo Patch Utility
"{25C64847-B900-48AD-A164-1B4F9B774650}" = Lenovo System Update
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{279C8532-7E37-4C11-A98B-5EF492034CB6}" = ASUS RT-N65U Wireless Router Utilities
"{42267A4D-9BDD-4B06-9FB7-2A7D7D5D6D6F}" = Windows Driver Frameworks Update Packages
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6E6E7725-C7BC-4C39-8B3F-14B67331A120}" = Lenovo Patch Utility
"{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{8A4DB1CA-8206-4ADC-805C-66ACF1611DA3}" = System Migration Assistant
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C551D9B-5D36-46A2-9414-F658D934B129}" = ThinkVantage Access Connections
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Czech
"{BBB21AB1-2C45-435D-A05A-B563072E7B9B}" = Xirrus Wi-Fi Inspector
"{BDB3E73F-5ECA-441D-96E1-F1CFCF3D427D}" = Rescue and Recovery
"{C2FBB88A-65AA-6751-25EC-6A9046FA5F3B}" = Windows Driver Kit
"{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = Power Manager
"{E14DDED2-919B-FCCB-84AC-5ABB6D182D46}" = Kits Configuration Installer
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F1ED5BD7-4770-4037-9CBD-5DF9A5BEC408}" = Plus Pack pro Acronis True Image Home 2011
"{f65530f7-1696-4fcd-8876-37cdcacdbd4c}" = Windows Driver Kit
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2011-11-11
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ffdshow_is1" = ffdshow [rev 1524] [2007-10-09]
"HeavyLoad_is1" = HeavyLoad V3.1
"InstallShield_{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"IrfanView" = IrfanView (remove only)
"Mozilla Sunbird (0.9)" = Mozilla Sunbird (0.9)
"Mozilla Thunderbird 16.0.2 (x86 cs)" = Mozilla Thunderbird 16.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NIS" = Norton Internet Security
"ProInst" = Intel PROSet Wireless
"Star Wars: Jedi Knight - Jedi Academy CZ" = Star Wars: Jedi Knight - Jedi Academy CZ
"TeamViewer 7" = TeamViewer 7
"The KMPlayer" = The KMPlayer (remove only)
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"SkyDriveSetup.exe" = Microsoft SkyDrive

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 8.11.2012 8:09:22 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\systeminfo.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.11.2012 8:09:35 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\RecoveryExpert.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.11.2012 8:09:39 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\ManagementConsole.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.11.2012 8:09:42 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\mmsBundle.dll
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 8.11.2012 8:09:56 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Acronis\TrueImageHome\BartPE\Files\TrueImage.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 9.11.2012 4:58:52 | Computer Name = Akem-PC | Source = WinMgmt | ID = 10
Description =

Error - 9.11.2012 6:09:47 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\systeminfo.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 9.11.2012 6:10:00 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\RecoveryExpert.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 9.11.2012 6:10:03 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\ManagementConsole.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 9.11.2012 6:10:06 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\mmsBundle.dll
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 9.11.2012 6:10:19 | Computer Name = Akem-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Acronis\TrueImageHome\BartPE\Files\TrueImage.exe
se nezdařilo. Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 10.11.2012 5:33:19 | Computer Name = Akem-PC | Source = WinMgmt | ID = 10
Description =


< End of report >

[Reklama]

[jaro3]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
[2012.10.19 07:59:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Akem\AppData\Roaming\Mozilla\Extensions
O1 HOSTS File: ([2012.11.05 20:58:13 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O13 - gopher Prefix: missing
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2012.11.10 10:39:27 | 000,671,490 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.11.10 10:39:27 | 000,655,610 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.10 10:39:27 | 000,142,042 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.11.10 10:39:27 | 000,122,482 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:ECF54A0E

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Windows\SysNative\drivers\*.tmp
C:\Windows\SysWow64\drivers\*.tmp
C:\Program Files (x86)\*.tmp
C:\Windows\SysWow64\*.tmp
C:\Windows\SysNative\*.tmp
C:\Windows\SWREG.exe
C:\Windows\SWSC.exe
C:\Windows\NIRCMD.exe
C:\Qoobox
C:\Users\Akem\Desktop\ComboFix.exe
C:\Users\Akem\Desktop\TDSSKiller.exe
C:\Users\Akem\Desktop\tdsskiller.zip
C:\Windows\PEV.exe
C:\Windows\MBR.exe
C:\Windows\sed.exe
C:\Windows\grep.exe
C:\Windows\zip.exe
C:\Users\Akem\AppData\Local\Temp9.html
C:\Users\Akem\AppData\Local\Temp13.html
C:\Users\Akem\AppData\Local\Tempdetails.17.html

:Reg
HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
""=""%1" %*"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
""=""%1" %*"

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.