Prosím o kontrolu Logu ... PC ztrácí výkon Vyřešeno

[x18]

========== Files/Folders - Created Within 14 Days ==========

[2010.01.18 16:18:05 | 00,547,328 | ---- | C] (OldTimer Tools) -- C:\Users\bobek\Desktop\OTL.exe
[2010.01.17 12:50:46 | 00,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010.01.17 12:30:09 | 00,000,000 | ---D | C] -- C:\Users\bobek\AppData\Local\temp
[2010.01.16 23:34:03 | 00,000,000 | ---D | C] -- C:\Users\bobek\Desktop\I
[2010.01.15 23:49:31 | 00,000,000 | -H-D | C] -- C:\Users\bobek\Desktop\_vti_pvt
[2010.01.15 23:49:31 | 00,000,000 | -H-D | C] -- C:\Users\bobek\Desktop\_vti_cnf
[2010.01.15 23:34:46 | 00,000,000 | ---D | C] -- C:\Users\bobek\Desktop\Images
[2010.01.15 22:17:50 | 00,000,000 | --SD | C] -- C:\Users\bobek\Desktop\WEB - grass background
[2010.01.14 17:30:40 | 00,000,000 | ---D | C] -- C:\Users\bobek\AppData\Roaming\Malwarebytes
[2010.01.14 17:30:33 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.01.14 17:30:30 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.01.14 17:30:29 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.01.14 17:30:29 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.01.14 17:29:05 | 05,115,832 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\bobek\Desktop\mbam-setup.exe
[2010.01.13 19:41:56 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2010.01.13 17:28:44 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010.01.13 17:28:43 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010.01.13 17:22:14 | 00,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2010.01.13 17:22:11 | 03,023,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2010.01.13 17:22:11 | 01,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2010.01.13 17:21:24 | 00,369,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2010.01.13 17:21:21 | 00,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2010.01.13 17:21:17 | 00,829,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2010.01.13 17:21:17 | 00,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2010.01.13 17:21:17 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2010.01.13 17:21:16 | 00,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2010.01.13 17:21:16 | 00,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2010.01.13 17:21:16 | 00,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2010.01.13 17:21:16 | 00,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2010.01.13 17:21:16 | 00,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2010.01.13 17:21:15 | 00,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2010.01.13 17:21:15 | 00,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2010.01.13 17:21:15 | 00,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2010.01.13 17:21:15 | 00,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2010.01.13 17:21:15 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe
[2010.01.13 17:21:14 | 01,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2010.01.13 17:21:14 | 01,064,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2010.01.13 17:21:14 | 00,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2010.01.13 17:21:14 | 00,486,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2010.01.13 17:21:14 | 00,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2010.01.13 17:21:13 | 01,030,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2010.01.13 17:21:13 | 00,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2010.01.13 17:21:13 | 00,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2010.01.13 17:21:13 | 00,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2010.01.13 17:21:13 | 00,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2010.01.13 17:20:29 | 00,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe
[2010.01.13 17:20:28 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll
[2010.01.13 17:20:17 | 00,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll
[2010.01.13 17:20:09 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll
[2010.01.13 17:20:09 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdConns.dll
[2010.01.13 17:20:07 | 00,546,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2010.01.13 17:20:07 | 00,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll
[2010.01.13 17:20:07 | 00,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
[2010.01.13 17:20:06 | 00,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2010.01.13 17:20:06 | 00,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2010.01.13 17:20:06 | 00,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll
[2010.01.13 17:20:06 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
[2010.01.13 17:18:09 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
[2010.01.13 17:18:08 | 00,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
[2010.01.12 01:01:43 | 00,000,000 | ---D | C] -- C:\Windows\System32\vi-VN
[2010.01.12 01:01:43 | 00,000,000 | ---D | C] -- C:\Windows\System32\eu-ES
[2010.01.12 01:01:43 | 00,000,000 | ---D | C] -- C:\Windows\System32\ca-ES
[2010.01.11 18:58:16 | 00,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2010.01.11 17:08:42 | 00,000,000 | ---D | C] -- C:\Program Files\HijackThis
[2010.01.08 01:21:23 | 00,000,000 | ---D | C] -- C:\Users\bobek\Documents\Corel User Files
[2010.01.08 01:01:52 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Protexis
[2010.01.08 01:01:51 | 00,000,000 | ---D | C] -- C:\ProgramData\Corel
[2010.01.08 00:57:39 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Corel
[2010.01.08 00:56:47 | 00,000,000 | ---D | C] -- C:\Program Files\Corel
[2010.01.07 23:38:12 | 00,000,000 | ---D | C] -- C:\Program Files\Audacity 1.3 Beta (Unicode)
[2010.01.05 23:05:50 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010.01.18 16:18:41 | 07,077,888 | ---- | M] () -- C:\Users\bobek\ntuser.dat
[2010.01.18 16:18:08 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Users\bobek\Desktop\OTL.exe
[2010.01.18 16:16:49 | 01,402,426 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.01.18 16:16:49 | 00,602,086 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2010.01.18 16:16:49 | 00,590,082 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.01.18 16:16:49 | 00,116,182 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2010.01.18 16:16:49 | 00,102,094 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.01.18 16:13:36 | 00,100,864 | ---- | M] () -- C:\Users\bobek\Desktop\T-Cleaner.exe
[2010.01.18 16:10:59 | 00,190,515 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010.01.18 16:10:43 | 00,190,515 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010.01.18 16:10:33 | 00,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2010.01.18 16:10:17 | 00,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.01.18 16:10:17 | 00,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.01.18 16:10:11 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.01.18 16:09:56 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.01.18 16:09:52 | 32,195,78880 | -HS- | M] () -- C:\hiberfil.sys
[2010.01.18 16:09:21 | 00,524,288 | -HS- | M] () -- C:\Users\bobek\ntuser.dat{bf6b2a5e-6558-11de-ad9b-00a0d1a754c9}.TMContainer00000000000000000001.regtrans-ms
[2010.01.18 16:09:21 | 00,065,536 | -HS- | M] () -- C:\Users\bobek\ntuser.dat{bf6b2a5e-6558-11de-ad9b-00a0d1a754c9}.TM.blf
[2010.01.18 16:09:18 | 00,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010.01.18 16:09:15 | 02,486,152 | -H-- | M] () -- C:\Users\bobek\AppData\Local\IconCache.db
[2010.01.18 12:22:19 | 00,232,960 | ---- | M] () -- C:\Users\bobek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.01.18 08:31:02 | 00,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{4CC60630-8408-4B18-87AB-03C4558529D6}.job
[2010.01.17 16:56:13 | 99,654,2464 | ---- | M] () -- C:\Users\bobek\Desktop\škola svádění super komedie cz dabing dvdrip.avi
[2010.01.17 15:13:45 | 00,002,687 | ---- | M] () -- C:\Users\bobek\Desktop\SharePoint Designer 2007.lnk
[2010.01.17 14:23:07 | 00,105,930 | ---- | M] () -- C:\Users\bobek\.recently-used.xbel
[2010.01.17 12:32:22 | 00,000,259 | ---- | M] () -- C:\Windows\system.ini
[2010.01.17 12:31:30 | 00,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2010.01.17 12:05:35 | 00,135,920 | ---- | M] () -- C:\Windows\System32\GDIPFONTCACHEV1.DAT
[2010.01.17 12:05:15 | 00,458,296 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.01.14 17:30:35 | 00,000,822 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.01.14 17:29:36 | 05,115,832 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\bobek\Desktop\mbam-setup.exe
[2010.01.14 10:48:48 | 00,000,038 | ---- | M] () -- C:\Windows\avisplitter.INI
[2010.01.13 19:41:42 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2010.01.13 19:41:17 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010.01.12 18:29:25 | 02,720,206 | ---- | M] () -- C:\Users\bobek\Desktop\Right_Said_Fred_-_I'm_Too_Sexy.mp3
[2010.01.11 17:08:42 | 00,001,706 | ---- | M] () -- C:\Users\bobek\Desktop\HijackThis.lnk
[2010.01.08 01:19:03 | 00,054,385 | ---- | M] () -- C:\Windows\FontData.fdb
[2010.01.08 01:04:43 | 00,002,699 | ---- | M] () -- C:\Users\bobek\Desktop\CorelDRAW X4.lnk
[2010.01.08 00:48:36 | 00,001,873 | ---- | M] () -- C:\Users\bobek\Desktop\TuneUp Utilities.lnk
[2010.01.08 00:27:07 | 00,000,416 | ---- | M] () -- C:\Users\bobek\Desktop\Dokumenty.lnk
[2010.01.07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.01.07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.01.18 16:13:30 | 00,100,864 | ---- | C] () -- C:\Users\bobek\Desktop\T-Cleaner.exe
[2010.01.17 14:41:15 | 99,654,2464 | ---- | C] () -- C:\Users\bobek\Desktop\škola svádění super komedie cz dabing dvdrip.avi
[2010.01.17 14:23:07 | 00,105,930 | ---- | C] () -- C:\Users\bobek\.recently-used.xbel
[2010.01.16 19:39:17 | 00,229,752 | ---- | C] () -- C:\Users\bobek\Desktop\SteelTongs.ttf
[2010.01.16 19:39:17 | 00,198,704 | ---- | C] () -- C:\Users\bobek\Desktop\SteelTongsItalic.ttf
[2010.01.14 17:30:35 | 00,000,822 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.01.13 19:41:42 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2010.01.13 19:41:17 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010.01.12 18:29:01 | 02,720,206 | ---- | C] () -- C:\Users\bobek\Desktop\Right_Said_Fred_-_I'm_Too_Sexy.mp3
[2010.01.11 17:08:42 | 00,001,706 | ---- | C] () -- C:\Users\bobek\Desktop\HijackThis.lnk
[2010.01.08 01:19:02 | 00,054,385 | ---- | C] () -- C:\Windows\FontData.fdb
[2010.01.08 01:04:40 | 00,002,699 | ---- | C] () -- C:\Users\bobek\Desktop\CorelDRAW X4.lnk
[2010.01.08 00:48:36 | 00,001,873 | ---- | C] () -- C:\Users\bobek\Desktop\TuneUp Utilities.lnk
[2009.11.02 19:26:23 | 00,020,865 | ---- | C] () -- C:\Users\bobek\AppData\Roaming\UserTile.png
[2009.11.02 19:15:43 | 00,000,000 | ---- | C] () -- C:\Users\bobek\AppData\Roaming\wklnhst.dat
[2009.11.02 18:44:07 | 00,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{ad2cbefd-c7c6-11de-8b62-00a0d1a754c9}.TMContainer00000000000000000002.regtrans-ms
[2009.11.02 18:44:07 | 00,262,144 | ---- | C] () -- C:\ProgramData\ntuser.dat
[2009.11.02 18:44:07 | 00,065,536 | -HS- | C] () -- C:\ProgramData\ntuser.dat{ad2cbefd-c7c6-11de-8b62-00a0d1a754c9}.TM.blf
[2009.11.02 18:44:07 | 00,005,120 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG1
[2009.11.02 18:44:07 | 00,000,000 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG2
[2009.09.24 18:06:58 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.07.09 14:26:09 | 00,142,592 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2009.06.05 12:17:22 | 00,000,783 | ---- | C] () -- C:\Windows\NTIWVEDT.INI
[2009.04.28 19:27:55 | 00,000,384 | ---- | C] () -- C:\Windows\ODBC.INI
[2008.11.22 17:09:13 | 00,000,270 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2008.11.04 18:18:13 | 00,006,605 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008.10.26 10:43:01 | 00,000,000 | ---- | C] () -- C:\Windows\JCMKR32.INI
[2008.10.03 04:43:58 | 00,121,562 | ---- | C] () -- C:\Windows\System32\PicFormat32.dll
[2008.09.12 00:30:26 | 00,138,184 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2008.08.03 00:23:56 | 00,000,038 | ---- | C] () -- C:\Windows\avisplitter.INI
[2008.08.02 21:58:14 | 00,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008.08.02 21:58:04 | 00,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008.08.02 21:58:04 | 00,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008.08.02 21:58:03 | 03,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008.08.02 21:58:02 | 00,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008.08.02 21:58:02 | 00,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2008.07.30 22:28:49 | 00,232,960 | ---- | C] () -- C:\Users\bobek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.07.30 21:47:44 | 00,626,688 | ---- | C] () -- C:\Windows\Image.dll
[2008.07.30 21:47:44 | 00,000,036 | ---- | C] () -- C:\Windows\PidList.ini
[2008.07.30 21:43:56 | 01,548,099 | ---- | C] () -- C:\Windows\System32\VMC3KAPI.dll
[2008.07.30 21:40:13 | 00,190,515 | ---- | C] () -- C:\ProgramData\nvModes.001
[2008.07.30 21:38:58 | 00,190,515 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2008.04.25 07:15:33 | 00,001,024 | RH-- | C] () -- C:\Windows\System32\NTIOFM4.dll
[2008.04.25 07:15:33 | 00,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN5.dll
[2008.04.25 06:30:06 | 00,204,800 | ---- | C] () -- C:\Windows\System32\SysHook.dll
[2008.04.25 06:23:25 | 00,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll
[2008.04.25 06:18:28 | 00,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2008.04.24 23:52:48 | 01,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2007.11.14 15:17:34 | 00,204,800 | ---- | C] () -- C:\Windows\System32\CogentBioSDK.dll
[2007.04.24 17:32:56 | 00,389,120 | ---- | C] () -- C:\Windows\System32\btwhidcs.dll
[2006.11.02 13:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 08:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2001.12.26 15:12:30 | 00,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll
[2001.11.14 12:56:00 | 01,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
[2001.09.03 22:46:38 | 00,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll
[2001.07.30 15:33:56 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll
[2001.07.23 21:04:36 | 00,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll

========== LOP Check ==========

[2009.07.23 22:53:56 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\2K Sports
[2009.08.16 15:37:53 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\360desktop
[2008.07.30 22:04:09 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Acer
[2008.04.25 06:46:32 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Acer GameZone Console
[2009.10.20 18:28:25 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Ashampoo
[2010.01.07 23:49:13 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Audacity
[2009.02.14 22:15:02 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Autodesk
[2008.08.12 22:39:25 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\BSplayer
[2009.04.12 23:57:02 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Bump Technologies, Inc
[2009.02.24 15:06:46 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\DAEMON Tools
[2008.07.30 23:06:38 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\eSobi
[2010.01.17 14:20:59 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\gtk-2.0
[2009.07.02 08:20:17 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\ICQ
[2009.07.18 06:52:05 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Jpeg Resampler
[2009.01.16 16:01:10 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Kingston
[2009.01.09 12:37:53 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Leadertech
[2009.11.02 19:26:23 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\PeerNetworking
[2008.07.30 23:42:43 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Sports Interactive
[2010.01.18 16:12:07 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Spyware Terminator
[2009.11.02 19:15:49 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Template
[2009.12.04 15:08:04 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Trillian
[2008.11.12 17:31:09 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\TuneUp Software
[2009.10.01 20:15:04 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\uTorrent
[2008.07.30 21:43:20 | 00,000,000 | ---D | M] -- C:\Users\bobek\AppData\Roaming\Validity
[2010.01.18 16:09:18 | 00,032,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.01.18 08:31:02 | 00,000,418 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{4CC60630-8408-4B18-87AB-03C4558529D6}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:FEBEC560
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:302A9871
< End of report >

[Reklama]

[Damned]

Omlouvám se, včera jsem měl jiné starosti.

Tyto složky znáš?
C:\Users\bobek\Desktop\I
C:\Users\bobek\Desktop\_vti_pvt
C:\Users\bobek\Desktop\_vti_cnf

[x18]

ahoj ... v pohodě ... taky tady pořád nejsem...
C:\Users\bobek\Desktop\I ... znám
C:\Users\bobek\Desktop\_vti_pvt ... neznám ...je skrytá ...
C:\Users\bobek\Desktop\_vti_cnf ... neznám ...je skrytá... ale zobrazila se mi ve více složkách ... je v ní to co je ve na ploše ...( když je ve složkách tak v ní je to co je v té danné složce ) ale není to u všech

[x18]

taky jak jsem říkal už dříve tam mám nějaké new složky na C:\

[Damned]

Má to prý něco společné s připájením se a odesíláním dat na ftp server. Používáš něco takové jako Microsoft Frontpage?

[x18]

no frontpage jsem měl kdysi ... tedkom dělám v Sharepoint designer 2007 což je novější verze frontpage ... ale už to mám v PC tak půl roku a až tedkom se tu ukázaly ty složky ...

a jde se toho nějak zbavit ???

[Damned]

Ty složky zobrazil OTL, skrytí těchto složek (Config.msi atd) provedeš v Nástroje-->Možnosti složky.

Určitě je nepotřebuješ? Můžeme je smazat?

[x18]

no tak když dám Nezobrazovat skryté s systémové složky tak se nezobrazí pouze ty na ploše ... zbytek normálně pořád vidím ... i to config.msi

no já myslím že je k ničemu nepotřebuju ... se mi to udělalo i u věcích které z odesíláním na ftp server nic společného neměly...

[Damned]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: "http://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
O4 - HKLM..\Run: [combofix] C:\ComboFix\CF21043.cfx
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error.
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:FEBEC560
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:302A9871

:Files
C:\Windows\*.tmp
C:\Windows\System32\*.tmp
C:\Users\bobek\Desktop\_vti_pvt
C:\Users\bobek\Desktop\_vti_cnf
C:\Windows\tasks\SA.DAT

:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[x18]

All processes killed
========== OTL ==========
Prefs.js: "SweetIM Search" removed from browser.search.defaultenginename
Prefs.js: "http://search.sweetim.com/search.asp?src=2&q=" removed from browser.search.defaulturl
Prefs.js: "http://search.sweetim.com/search.asp?src=2&q=" removed from keyword.URL
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\combofix not found.
File C:\ComboFix\CF21043.cfx not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
File Reg Error: Key error. not found.
Unable to delete ADS C:\ProgramData\TEMP:FEBEC560 .
Unable to delete ADS C:\ProgramData\TEMP:302A9871 .
========== FILES ==========
File\Folder C:\Windows\*.tmp not found.
File\Folder C:\Windows\System32\*.tmp not found.
File\Folder C:\Users\bobek\Desktop\_vti_pvt not found.
File\Folder C:\Users\bobek\Desktop\_vti_cnf not found.
C:\Windows\tasks\SA.DAT moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\"EnableFirewall" | 0 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"EnableFirewall" | 0 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\\"EnableFirewall" | 0 /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: bobek
->Temp folder emptied: 1671153 bytes
->Temporary Internet Files folder emptied: 5245176 bytes
->Java cache emptied: 67122518 bytes
->FireFox cache emptied: 112470820 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 31131 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 199605803 bytes

Total Files Cleaned = 368,00 mb


OTL by OldTimer - Version 3.1.25.2 log created on 01212010_132805

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Damned]

Vlož mi sem ještě nový log z HJT a popiš chování PC.

[x18]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:34:43, on 23.1.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\bobek\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe

--
End of file - 8400 bytes