Prosím kontrolu logu. Vyřešeno

[Damned]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=661003"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
[2009.07.01 13:22:12 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\conduit.xml
[2008.10.27 15:40:25 | 000,000,523 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\daemon-search.xml
[2010.02.27 18:05:52 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-1.xml
[2008.07.02 12:25:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-10.xml
[2008.07.16 20:30:59 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-11.xml
[2008.08.09 18:24:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-12.xml
[2008.08.10 10:00:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-13.xml
[2008.12.09 20:16:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-14.xml
[2008.12.17 14:56:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-15.xml
[2009.02.06 13:09:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-16.xml
[2009.03.05 19:56:06 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-17.xml
[2009.03.28 14:52:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-18.xml
[2009.04.22 20:45:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-19.xml
[2007.10.21 10:27:55 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-2.xml
[2009.04.22 20:46:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-20.xml
[2009.04.29 07:01:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-21.xml
[2009.06.13 01:04:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-22.xml
[2009.07.22 12:35:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-23.xml
[2009.08.04 19:15:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-24.xml
[2009.08.05 15:52:51 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-25.xml
[2009.08.29 17:02:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-26.xml
[2009.08.29 17:14:23 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-27.xml
[2009.11.28 18:06:23 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-28.xml
[2009.11.05 19:05:21 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-29.xml
[2007.11.02 20:23:45 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-3.xml
[2009.11.05 19:05:35 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-30.xml
[2009.11.05 19:05:51 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-31.xml
[2009.12.05 09:55:15 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-32.xml
[2010.01.06 16:09:25 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-33.xml
[2010.01.18 18:14:42 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-34.xml
[2007.11.27 18:56:58 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-4.xml
[2007.12.02 08:55:20 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-5.xml
[2008.02.08 15:10:14 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-6.xml
[2008.03.26 19:15:45 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-7.xml
[2008.04.17 18:54:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-8.xml
[2008.06.18 18:33:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-9.xml
[2008.07.10 13:07:28 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin.xml
[2010.03.02 18:41:33 | 000,001,012 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\itekcz.xml
[2009.05.09 00:45:37 | 000,002,061 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\qipsearch.xml
[2009.05.16 20:53:38 | 000,001,692 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\sfd.xml
[2008.01.08 14:39:27 | 000,005,402 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\warez-svetnet.xml
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mvadvd.cab (Reg Error: Key error.)
@Alternate Data Stream - 362 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:05EE1EEF
@Alternate Data Stream - 211 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:66633281
@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:3B71D0B4
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0888F409
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:34D5AA26
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8AB6C1D7
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:91EA783C
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0F8F5844

:Files
C:\Windows\*.tmp
C:\Windows\System32\*.tmp
C:\Documents and Settings\JOSEF\Plocha\*.tmp
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)
C:\Documents and Settings\JOSEF\Dokumenty\Norton internet security 2006 serial.exe
C:\Documents and Settings\JOSEF\Plocha\Install_NSS.lnk
C:\Windows\tasks\SA.DAT
C:\Documents and Settings\JOSEF\Dokumenty\s03e07.rar
C:\Documents and Settings\JOSEF\Dokumenty\Miscellaneous_1961.zip
C:\Documents and Settings\JOSEF\Dokumenty\LogonLoaderSetup3.exe
C:\Documents and Settings\JOSEF\Data aplikací\Search Settings

:Reg

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[Reklama]

[Seky97]

All processes killed
========== OTL ==========
Process explorer.exe killed successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "BS Player Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "chr-greentree_ff&type=661003" removed from browser.search.param.yahoo-fr
Prefs.js: "megaup" removed from browser.search.param.yahoo-fr-cjkt
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\conduit.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\daemon-search.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-10.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-11.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-12.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-13.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-14.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-15.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-16.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-17.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-18.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-19.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-20.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-21.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-22.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-23.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-24.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-25.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-26.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-27.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-28.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-29.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-30.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-31.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-32.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-33.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-34.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-9.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\itekcz.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\qipsearch.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\sfd.xml moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\warez-svetnet.xml moved successfully.
Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Starting removal of ActiveX control {41564D57-9980-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\wmvadvd.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{41564D57-9980-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{41564D57-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{41564D57-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{41564D57-9980-0010-8000-00AA00389B71}\ not found.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:05EE1EEF deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:66633281 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:3B71D0B4 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:0888F409 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:34D5AA26 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:8AB6C1D7 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:91EA783C deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:0F8F5844 deleted successfully.
========== FILES ==========
C:\Windows\NV1724940.TMP folder moved successfully.
C:\Windows\SET3.tmp moved successfully.
C:\Windows\SET4.tmp moved successfully.
C:\Windows\SET8.tmp moved successfully.
C:\Windows\~GLC0000.TMP moved successfully.
C:\Windows\System32\CONFIG.TMP moved successfully.
C:\Windows\System32\setb6.tmp moved successfully.
C:\Documents and Settings\JOSEF\Plocha\~WRL0002.tmp moved successfully.
C:\Documents and Settings\JOSEF\Plocha\~WRL3597.tmp moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)\searchplugin(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)\META-INF(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)\defaults(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)\components(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)\chrome(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2) folder moved successfully.
C:\Documents and Settings\JOSEF\Dokumenty\Norton internet security 2006 serial.exe moved successfully.
File\Folder C:\Documents and Settings\JOSEF\Plocha\Install_NSS.lnk not found.
C:\Windows\tasks\SA.DAT moved successfully.
C:\Documents and Settings\JOSEF\Dokumenty\s03e07.rar moved successfully.
C:\Documents and Settings\JOSEF\Dokumenty\Miscellaneous_1961.zip moved successfully.
C:\Documents and Settings\JOSEF\Dokumenty\LogonLoaderSetup3.exe moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Search Settings\kb130\temp folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Search Settings\kb130 folder moved successfully.
C:\Documents and Settings\JOSEF\Data aplikací\Search Settings folder moved successfully.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Honza
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 21012 bytes

User: HONZA.MASINKA
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 44754139 bytes
->Opera cache emptied: 1316403 bytes
->Flash cache emptied: 1480 bytes

User: JOSEF
->Temp folder emptied: 57741 bytes
->Temporary Internet Files folder emptied: 350610 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 32538858 bytes
->Google Chrome cache emptied: 20842287 bytes
->Apple Safari cache emptied: 43965556 bytes
->Opera cache emptied: 26310221 bytes
->Flash cache emptied: 1420 bytes

User: learning
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67463 bytes
->FireFox cache emptied: 11742229 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Seky
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 126950 bytes
->FireFox cache emptied: 32155318 bytes
->Opera cache emptied: 379790 bytes
->Flash cache emptied: 1423 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 67 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 205,00 mb


OTL by OldTimer - Version 3.1.32.0 log created on 03042010_175108

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Damned]

Smaž složku C:\_OTL

Stáhni si ToolsCleaner2 (by de A.Rothstein & Dj Quiou) na Plochu a spusť ho.

Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.

Vlož mi sem ještě nový log z Hijackthis

[Seky97]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:01:28, on 4.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\JOSEF\Dokumenty\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra 'Tools' menuitem: Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

--
End of file - 6079 bytes

[Damned]

Pořád máš spuštěný proces wscntfy.exe.
Co ti v tray liště oznamuje ?

[Seky97]

tray lišta??? co to je

[Seky97]

Už vím. Je to "Centrum zabezpečení systému Windows"

[Damned]

V pravo vedle hodin je červený štíst s bílým křížkem. Když na něj klikneš, co t i oznámí?

[Seky97]

Že mám vypnuté automatické aktualizace.

[Damned]

Aha.
Tak to je vše. Měl by si to mít OK.

Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"



Kdyby se něco zase objevilo, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.