Počítač se restartuje a programy neodpovídají Vyřešeno

[Pajzl]

OTL Extras logfile created on: 25.3.2012 14:57:21 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Káťa\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 83,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 11,37 Gb Free Space | 7,63% Space Free | Partition Type: NTFS

Computer Name: TERMITARIUM | User Name: Káťa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 14 Days

========== Extra Registry (All) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation)
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\WINDOWS\System32\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\WINDOWS\System32\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.inf [@ = inffile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\WINDOWS\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.reg [@ = regfile] -- C:\WINDOWS\regedit.exe ()
.txt [@ = txtfile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1078081533-926492609-1801674531-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "C:\WINDOWS\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- winhlp32.exe %1 (Microsoft Corporation)
hlpfile [open] -- %SystemRoot%\System32\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\WINDOWS\system32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" ()
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
vbsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
wsffile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
wsffile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
wsffile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
wshfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\WINDOWS\system32\LEXPPS.EXE" = C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE -- (Lexmark International, Inc.)
"C:\Game Files\Ubisoft\Splinter Cell Pandora Tomorrow\pandora.exe" = C:\Game Files\Ubisoft\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:pandora
"C:\Game Files\Sierra Entertainment\Empire Earth III\EE3.exe" = C:\Game Files\Sierra Entertainment\Empire Earth III\EE3.exe:*:Enabled:Empire Earth III -- (Mad Doc Software)
"C:\Game Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = C:\Game Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB
"C:\Game Files\Ubisoft\World in Conflict\wic.exe" = C:\Game Files\Ubisoft\World in Conflict\wic.exe:*:Enabled:World in Conflict -- (Massive Entertainment AB)
"C:\Game Files\Ubisoft\World in Conflict\wic_online.exe" = C:\Game Files\Ubisoft\World in Conflict\wic_online.exe:*:Enabled:World in Conflict - Online Only -- (Massive Entertainment AB)
"C:\Game Files\Ubisoft\World in Conflict\wic_ds.exe" = C:\Game Files\Ubisoft\World in Conflict\wic_ds.exe:*:Enabled:World in Conflict - Dedicated Server -- ()
"C:\Game Files\Joint Task Force\jtf.exe" = C:\Game Files\Joint Task Force\jtf.exe:*:Enabled:jtf -- ()
"C:\Game Files\Electronic Arts\Battlefield 2142 Deluxe Edition\BF2142.exe" = C:\Game Files\Electronic Arts\Battlefield 2142 Deluxe Edition\BF2142.exe:*:Enabled:Battlefield 2142
"C:\Game Files\Ubisoft\Related Designs\ANNO 1404\tools\Anno4Web.exe" = C:\Game Files\Ubisoft\Related Designs\ANNO 1404\tools\Anno4Web.exe:*:Enabled:Anno4Web
"E:\Hry\Age of Empires II\empires2.exe" = E:\Hry\Age of Empires II\empires2.exe:*:Enabled:Age of Empires II
"E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" = E:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club
"C:\Game Files\Rockstar Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe" = C:\Game Files\Rockstar Games\GTA4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club
"C:\Game Files\Rockstar Games\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe" = C:\Game Files\Rockstar Games\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV
"C:\Game Files\Rockstar Games\GTA4\Grand Theft Auto IV\GTAIV.exe" = C:\Game Files\Rockstar Games\GTA4\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV
"C:\Game Files\Imperivm III- Las Grandes Batallas de Roma\gbr.exe" = C:\Game Files\Imperivm III- Las Grandes Batallas de Roma\gbr.exe:*:Enabled:gbr -- ()
"C:\Game Files\Star Wars Battlefront\GameData\Battlefront.exe" = C:\Game Files\Star Wars Battlefront\GameData\Battlefront.exe:*:Enabled:Battlefront -- ()
"C:\Game Files\MOHPA\mohpa.exe" = C:\Game Files\MOHPA\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)
"C:\Game Files\EA GAMES\Battlefield 2\BF2.exe" = C:\Game Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2
"C:\Program Files\HS ChatPhone\chatphone.exe" = C:\Program Files\HS ChatPhone\chatphone.exe:*:Enabled:chatphone
"C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Civilization4.exe" = C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4 Complete
"C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe" = C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe:*:Enabled:Sid Meier's Civilization 4: Warlords
"C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe" = C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe:*:Enabled:Sid Meier's Civilization 4: Beyond the Sword
"C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Colonization.exe" = C:\Game Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Colonization.exe:*:Enabled:Sid Meier's Civilization IV Colonization
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe" = C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s -- ()
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club
"{09CF6AF5-9206-4FD7-9B08-BA6819FB47E3}" = Anno 1404
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{16D919E6-F019-4E15-BFBE-4A85EF19DA57}" = Oblivion - Spell Tomes
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{259A8A5E-2886-4BED-9EF1-D5485282CCC3}" = Overlord
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 24
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}" = Sid Meier's Civilization 4 Complete
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3DB0E77E-7F00-0AE3-35ED-2D1B1C048E4A}" = ATI Catalyst Install Manager
"{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}" = SimCity 4 Deluxe
"{41B3E7D3-591B-4627-A86C-4532035C8E2C}" = Gothic 3 - Forsaken Gods
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B1AF68B-4606-4152-9991-1E9D4FF5F0FA}" = Microsoft Antimalware Service CS-CZ Language Pack
"{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}" = Zune Desktop Theme
"{888C6BAB-729D-FF8A-1856-F2A58A702C1C}" = ATI Problem Report Wizard
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9AFFF2F6-527F-4B76-821D-839298C070F9}" = Commandos Strike Force
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A07B2C21-863B-47AB-AE7E-20BB00BD7D33}" = ANNO 1404 - Venice
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.3 - Czech
"{B17E235C-7A3B-4482-B650-21FFDE1D452E}" = Empire Earth III
"{B69F28DF-CBB1-41B7-008A-210E4D0518FC}" = Harry Potter a Fénixův řád™
"{BC2C6B8D-73A6-4540-8212-906527D43553}_is1" = City Life Super Deluxe
"{BCB9DF93-537D-433D-AF3B-36025DEF5798}" = Joint Task Force
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C9E270CC-AE42-4BD8-B9C6-1EB3A8657FF5}" = Just Cause 1.00.0000
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E914A24F-2412-4374-B420-86D21D6D444A}" = LEGO Star Wars
"{EB90C44A-9A8F-40BB-A7F4-4A0B4D769552}" = Europa Universalis III
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{ED50ECE9-EC54-4C05-B5ED-EE4741A9F2EC}" = Battlefield 2142 Deluxe Edition
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{EF36A836-BF89-4A4F-B079-057B0C68C1E0}" = Sid Meier's Civilization IV Colonization
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F11ADC64-C89E-47F4-A0B3-3665FF859397}" = World in Conflict
"{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX
"{FFFFFD17-B460-41EB-93F1-C48ABAD63828}" = Oblivion - Thieves Den
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AGEIA PhysX v2.5.1" = AGEIA PhysX v2.5.1
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.80
"ATI Display Driver" = ATI Display Driver
"CoD 2 čeština_is1" = CoD 2 čeština 1.1
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.56
"DAEMON Tools Lite" = DAEMON Tools Lite
"Defraggler" = Defraggler
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"gBurner" = gBurner
"ie8" = Windows Internet Explorer 8
"InstallShield_{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"InstallShield_{E914A24F-2412-4374-B420-86D21D6D444A}" = LEGO Star Wars
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.6.6
"Lexmark X1100 Series" = Lexmark X1100 Series
"lgooblivionshiveringislesczech_is1" = Lightning Oblivion Shivering Isles Czech
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.15)" = Mozilla Firefox (3.6.15)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Drivers" = NVIDIA Drivers
"OpenAL" = OpenAL
"PhotoFiltre" = PhotoFiltre
"Startup Delayer" = Startup Delayer 2.0.4
"The KMPlayer" = The KMPlayer (remove only)
"Thoosje Windows XP Quick Optimizer" = Thoosje Windows XP Quick Optimizer
"uTorrent" = µTorrent
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1078081533-926492609-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 24.3.2012 2:00:40 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000afb90.

Error - 24.3.2012 2:00:55 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace SearchIndexer.exe, verze 7.0.6001.16503, chybující
modul tquery.dll, verze 7.0.6001.16503, adresa chyby 0x000136e6.

Error - 24.3.2012 2:09:29 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace grep.exe, verze 0.0.0.0, chybující modul grep.exe,
verze 0.0.0.0, adresa chyby 0x00009216.

Error - 24.3.2012 2:11:03 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:09 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:10 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:11 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000a5b90.

Error - 24.3.2012 2:11:12 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000b8b90.

Error - 24.3.2012 2:14:59 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul ntdll.dll,
verze 5.1.2600.6055, adresa chyby 0x00010a19.

Error - 24.3.2012 2:15:05 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace SearchIndexer.exe, verze 7.0.6001.16503, chybující
modul tquery.dll, verze 7.0.6001.16503, adresa chyby 0x000136e6.

[ Application Events ]
Error - 24.3.2012 2:00:40 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000afb90.

Error - 24.3.2012 2:00:55 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace SearchIndexer.exe, verze 7.0.6001.16503, chybující
modul tquery.dll, verze 7.0.6001.16503, adresa chyby 0x000136e6.

Error - 24.3.2012 2:09:29 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace grep.exe, verze 0.0.0.0, chybující modul grep.exe,
verze 0.0.0.0, adresa chyby 0x00009216.

Error - 24.3.2012 2:11:03 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:09 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:10 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000ce040.

Error - 24.3.2012 2:11:11 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000a5b90.

Error - 24.3.2012 2:11:12 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul pev.cfxxe,
verze 0.0.0.0, adresa chyby 0x000b8b90.

Error - 24.3.2012 2:14:59 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace pev.cfxxe, verze 0.0.0.0, chybující modul ntdll.dll,
verze 5.1.2600.6055, adresa chyby 0x00010a19.

Error - 24.3.2012 2:15:05 | Computer Name = TERMITARIUM | Source = Application Error | ID = 1000
Description = Chybující aplikace SearchIndexer.exe, verze 7.0.6001.16503, chybující
modul tquery.dll, verze 7.0.6001.16503, adresa chyby 0x000136e6.

[ OSession Events ]
Error - 1.1.2002 5:28:31 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 83
seconds with 0 seconds of active time. This session ended with a crash.

Error - 1.1.2002 5:30:29 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 105
seconds with 0 seconds of active time. This session ended with a crash.

Error - 1.1.2002 5:31:40 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12
seconds with 0 seconds of active time. This session ended with a crash.

Error - 1.1.2002 5:31:48 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5
seconds with 0 seconds of active time. This session ended with a crash.

Error - 1.1.2002 5:31:53 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.

Error - 1.1.2002 5:31:56 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25.3.2012 8:53:40 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 0
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25.3.2012 8:54:14 | Computer Name = TERMITARIUM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 23.3.2012 13:03:39 | Computer Name = TERMITARIUM | Source = System Error | ID = 1003
Description = Kód chyby 1000008e, parametr1 c0000005, parametr2 bf01fbb4, parametr3
a4722f14, parametr4 00000000.

Error - 23.3.2012 14:16:59 | Computer Name = TERMITARIUM | Source = System Error | ID = 1003
Description = Kód chyby 00000024, parametr1 001902fe, parametr2 ba4e7aa8, parametr3
ba4e77a4, parametr4 8052d4c9.

Error - 23.3.2012 14:47:39 | Computer Name = TERMITARIUM | Source = sptd | ID = 262148
Description = Ovladač zjistil interní chybu ve vlastní struktuře dat u .

Error - 23.3.2012 14:47:39 | Computer Name = TERMITARIUM | Source = sfsync02 | ID = 262156
Description =

Error - 23.3.2012 14:47:58 | Computer Name = TERMITARIUM | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 23.3.2012 14:49:05 | Computer Name = TERMITARIUM | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: AmdPPM Fips sptd

Error - 23.3.2012 14:50:38 | Computer Name = TERMITARIUM | Source = sptd | ID = 262148
Description = Ovladač zjistil interní chybu ve vlastní struktuře dat u .

Error - 23.3.2012 14:50:38 | Computer Name = TERMITARIUM | Source = sfsync02 | ID = 262156
Description =

Error - 23.3.2012 14:50:52 | Computer Name = TERMITARIUM | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 23.3.2012 14:52:05 | Computer Name = TERMITARIUM | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: AmdPPM Fips sptd

< End of report >

Ale s Dr. Cureltem si nevím rady, po zmáčknutí aktualizace mě to hodí na zdrojovou ruskou stránku. Mám něco udělat tam?

[Reklama]

[Damned]

Mělo by tam být tlačítko "Update". Pokud je stažen dnes, měl by být aktuální. Tak ho spusť, je možný, že jim jen bylbne server. Já se mrknu zatím na logy.

[Pajzl]

Píše buď toto:

[Virová databáze] C:\Documents and Settings\Káťa\Local Settings\temp\4442D6DD-83C8AC09-EBE4024A-4905DBA4\f5fc23e3 - chyba

Nebo, pokud se přes to dostanu - že platnost už vypršela a není možné pokračovat.

(Jinak je prý už 366 dní neaktuální )

[Damned]

Stáhl si určitě soubor launch.exe? Ten by měl být free.

[Damned]

Červený soubor zkontroluj na VirusTotalu a vlož mi sem odkaz s výsledkem.
C:\WINDOWS\System32\drivers\ypmwi.sys
Vymaž obsah složky:
C:\WINDOWS\CSC
*************************************************************************************************************************************************************************
Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/Opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
[2011.03.11 17:29:15 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Káťa\Data aplikací\Mozilla\Firefox\Profiles\t8bvwhl6.default\searchplugins\daemon-search.xml
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)

:Services
SRV - (PEVSystemStart)

:Files
C:\WINDOWS\SWXCACLS.exe
C:\WINDOWS\SWREG.exe
C:\WINDOWS\SWSC.exe
C:\ComboFix
C:\Qoobox
C:\found.001
C:\found.000
C:\WINDOWS\System32\d3d9caps.dat
C:\WINDOWS\System32\emptyregdb.dat
C:\WINDOWS\d3dx.dat
C:\WINDOWS\System32\drivers\ypmwi.sys
C:\WINDOWS\PEV.exe
C:\WINDOWS\sed.exe
C:\WINDOWS\MBR.exe
C:\WINDOWS\grep.exe
C:\WINDOWS\zip.exe
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\tasks\SA.DAT
C:\WINDOWS\system32\SET*.tmp
C:\Recycler
C:\$RECYCLE.BIN
C:\RECYCLER
C:\Windows\tasks\*.job

:Reg

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]

Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[Pajzl]

Ano, jmenuje se to "launch (1).exe"

Zde odkaz na zkontrolovaný ypmwi.sys:
http://www.virustotal.com/file-scan/rea ... 1301092220

Složku CSC jsem v adresáři nenašel (ani skrytou) tak jsem ji nechal smazat přes příkazový řádek, ten neměl námitky, takže je dost možné, že se tak stalo.

A tady log od OTL (na konci procesu sice vyhodil x tabulek, že to není platná aplikace win a tak všelijak, ale také to vypadá, že úkol splnil):

All processes killed
========== OTL ==========
Process explorer.exe killed successfully!
C:\Documents and Settings\Káťa\Data aplikací\Mozilla\Firefox\Profiles\t8bvwhl6.default\searchplugins\daemon-search.xml moved successfully.
File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
Starting removal of ActiveX control DirectAnimation Java Classes
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
========== SERVICES/DRIVERS ==========
Error: No service named SRV - (PEVSystemStart) was found to stop!
Service\Driver key SRV - (PEVSystemStart) not found.
========== FILES ==========
C:\WINDOWS\SWXCACLS.exe moved successfully.
C:\WINDOWS\SWREG.exe moved successfully.
C:\WINDOWS\SWSC.exe moved successfully.
C:\ComboFix\N_ folder moved successfully.
C:\ComboFix folder moved successfully.
C:\Qoobox\TestC folder moved successfully.
C:\Qoobox\Test folder moved successfully.
C:\Qoobox\Quarantine\Registry_backups folder moved successfully.
C:\Qoobox\Quarantine\C folder moved successfully.
C:\Qoobox\Quarantine folder moved successfully.
C:\Qoobox\LastRun folder moved successfully.
C:\Qoobox\BackEnv folder moved successfully.
C:\Qoobox folder moved successfully.
C:\found.001\dir0000.chk folder moved successfully.
C:\found.001 folder moved successfully.
C:\found.000 folder moved successfully.
C:\WINDOWS\System32\d3d9caps.dat moved successfully.
C:\WINDOWS\System32\emptyregdb.dat moved successfully.
C:\WINDOWS\d3dx.dat moved successfully.
C:\WINDOWS\System32\drivers\ypmwi.sys moved successfully.
C:\WINDOWS\PEV.exe moved successfully.
C:\WINDOWS\sed.exe moved successfully.
C:\WINDOWS\MBR.exe moved successfully.
C:\WINDOWS\grep.exe moved successfully.
C:\WINDOWS\zip.exe moved successfully.
C:\WINDOWS\msdownld.tmp folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SETA.tmp moved successfully.
C:\WINDOWS\System32\CONFIG.TMP moved successfully.
C:\WINDOWS\System32\OLD23.tmp moved successfully.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\tasks\SA.DAT moved successfully.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\RECYCLER\S-1-5-21-776561741-682003330-1644491937-1003 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-500 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc9.cz_soubory folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc7 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc44 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc42\pyv_watch_request_ad_data folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc42 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc40 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc4 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc38 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc36\like_data folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc36 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc30 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc27 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc25 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc23 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc21\a_data folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc21 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc11 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005\Dc1.0 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1005 folder moved successfully.
C:\RECYCLER\S-1-5-21-1078081533-926492609-1801674531-1003 folder moved successfully.
C:\RECYCLER folder moved successfully.
File\Folder C:\$RECYCLE.BIN not found.
File\Folder C:\RECYCLER not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-926492609-1801674531-1003Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-926492609-1801674531-1003UA.job moved successfully.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 72 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 11525045 bytes
->Flash cache emptied: 456 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: K

User: Kaťa
->Temp folder emptied: 45384264 bytes
->Temporary Internet Files folder emptied: 27249794 bytes
->Java cache emptied: 1765883 bytes
->FireFox cache emptied: 44855635 bytes
->Flash cache emptied: 7113 bytes

User: Káťa
->Temp folder emptied: 167866101 bytes
->Temporary Internet Files folder emptied: 826410 bytes
->Java cache emptied: 641478 bytes
->FireFox cache emptied: 43677921 bytes
->Google Chrome cache emptied: 6248810 bytes
->Flash cache emptied: 11419 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 204800 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 56519 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 334,00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

User: K

User: Kaťa
->Flash cache emptied: 0 bytes

User: Káťa
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 03262012_000433

Files\Folders moved on Reboot...
C:\32788R22FWJFW.0.tmp folder moved successfully.

Registry entries deleted on Reboot...

[Damned]

Smaž složku C:\_OTL a vysypej Koš.

Stáhni si ToolsCleaner2 (by de A.Rothstein & Dj Quiou) na Plochu a spusť ho.

Klikni na Pt. Restauration (Obnova) a poté na OK.
Klikni na Corbeille (Koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.

Jak se chová PC?

Nainstaluj si antivir avast!, Avira.... jen ne AVG.
Po instalaci nech provést kontrolu po restartu a dej vědět.

[Pajzl]

V C:/_OTL zůstala jedna nesmazatelná/neotevřitelná složka. ToolsCleaner pracoval dobře, i když nějaké chybky byly hlášeny na konci procedury ale kupodivu se to trochu zlepšilo (i firefox už šel zapnout).
Vážný problém nastal s antivirem, avast nebyl schopen kontrolu po restartu zrealizovat (jen nastavit), Avira nešel ani nainstalovat, Nod32 žádnou nemá, tak jsem znovu nainstaloval ten avast - po nastavení kontroly spadl celý systém, ale při zapínání kontrola jela. Nicméně se následně zasekla, restartovala a od té doby "funguje" počítač na tomto principu:
1) http://postimage.org/image/zo429sf8/
2) http://postimage.org/image/31ok4crk4/
3) http://postimage.org/image/31p8xeyys/

[Damned]

Podle tý chyby se jedná pravděpodobně o poškození registru nebo zabezpečení se souborem Winlogom.exe.

Zkus restartovat do Nouzového režimu (F8) a z nabídky vyber poslední známou konfiguraci.

[Pajzl]

Bohužel žádná změna.

[Damned]

Start --> Spustit a do řádku napiš:

Kód: Vybrat vše

erase "C:_OTL" /R /S /H

.
Pokud by to nešlo, napiš mi název souboru, která nejde odstranit.

Podívej se do truhly avastu, jestli tam je nějaký soubor.

[Pajzl]

No, problém je, že přes tu modrou obrazovku se dál nedostanu, ani na výběr uživatelů - úplně kaput.
Zapoměl jsem zmínit, že toto už musím psát z jiného počítače.

Bude nutný reinstall systému, nebo je ještě nějaká naděje?