Prosím o kontrolu logu - problémy pri startu. Vyřešeno

[seal.]

pokracovani


========== LOP Check ==========

[2006.08.06 17:54:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
[2009.12.10 19:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ashampoo
[2011.06.15 15:24:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2009.08.29 05:48:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Azureus
[2009.06.29 17:02:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BVRP Software
[2006.03.01 16:51:43 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2011.04.07 15:09:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2011.07.26 17:15:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2011.07.26 17:38:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2006.07.31 15:57:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SolidDocuments
[2011.12.06 09:23:40 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\Strazca systemu
[2011.12.06 09:23:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.01.21 16:10:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2008.01.12 12:52:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Vivendi Universal Games
[2007.12.08 13:50:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\vsosdk
[2011.01.21 16:10:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2006.08.06 17:55:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\ACD Systems
[2010.12.11 11:53:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Acronis
[2009.12.10 19:17:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Ashampoo
[2010.11.07 08:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Azureus
[2011.12.05 10:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Canon
[2010.03.18 16:43:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\CCleanup
[2007.12.08 13:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\DVDFab
[2007.01.13 09:40:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\EBookSys
[2010.11.07 08:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\esmska
[2007.01.28 11:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\FreeCall
[2008.06.15 06:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\GlarySoft
[2011.04.07 15:11:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\ICQ
[2007.12.22 08:26:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\ICQ Toolbar
[2005.06.24 17:25:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\ICQLite
[2008.12.28 14:33:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\JLC's Software
[2005.04.02 21:21:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Leadertech
[2007.03.01 18:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\mentio
[2011.07.26 17:40:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\PC Suite
[2010.11.07 08:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\ProfiCAD
[2003.11.12 16:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Sachy
[2006.11.03 17:41:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Simply Super Software
[2006.09.27 17:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\SlySoft
[2006.07.31 17:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\SolidDocuments
[2006.11.03 18:19:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\TrojanHunter
[2006.12.31 22:18:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\TuneUp Software
[2011.02.21 10:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Vso
[2006.07.08 20:36:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\VSO_HWE
[2010.12.31 17:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rosťa\Data aplikací\Zoner
[2011.12.08 18:40:13 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009.09.19 13:04:22 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2002.09.23 13:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2003.07.06 12:23:32 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2003.07.06 12:23:32 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004.09.26 17:41:14 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008.08.28 21:06:27 | 000,250,576 | RHS- | M] () -- C:\ntldr
[2007.10.08 15:10:53 | 000,000,579 | -H-- | M] () -- C:\os282379.bin
[2011.12.08 18:30:57 | 805,306,368 | -HS- | M] () -- C:\pagefile.sys
[2008.01.14 16:07:09 | 000,110,209 | -H-- | M] () -- C:\treeinfo.wc

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2004.09.25 18:20:55 | 000,315,392 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2004.09.25 16:16:30 | 000,262,144 | ---- | M] () -- C:\WINDOWS\System32\config\security.sav
[2004.09.25 18:20:55 | 017,301,504 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2004.09.25 18:20:57 | 004,718,592 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\drivers\*.sys /90 >
[2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aavmker4.sys
[2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys
[2011.11.28 18:51:59 | 000,105,176 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswmon.sys
[2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswmon2.sys
[2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys
[2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSnx.sys
[2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSP.sys
[2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys
[2011.11.27 08:09:11 | 000,024,064 | ---- | M] (Eltima Software) -- C:\WINDOWS\system32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys
[2011.09.17 08:48:21 | 000,752,128 | ---- | M] (Acronis) -- C:\WINDOWS\system32\drivers\tdrpm273.sys
[2011.09.17 08:48:17 | 000,600,928 | ---- | M] (Acronis) -- C:\WINDOWS\system32\drivers\timntr.sys

========== Files - Unicode (All) ==========
[2003.08.04 17:56:51 | 000,000,966 | ---- | M] ()(C:\WINDOWS\System32\??E) -- C:\WINDOWS\System32\៦矵E
[2003.07.16 20:49:22 | 000,000,966 | ---- | C] ()(C:\WINDOWS\System32\??E) -- C:\WINDOWS\System32\៦矵E

========== Alternate Data Streams ==========

@Alternate Data Stream - 179 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0295CBF7
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:264A9BB7

< End of report >

[Reklama]

[jaro3]

Odinstaluj:
TrojanHunter --pokud najdeš...

Ufff , těch nákaz , jak si k tomu přišel???

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (getPlusHelper) getPlus(R)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll File not found
[2008.08.30 06:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Extensions
[2011.11.29 09:41:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions
[2011.11.29 09:41:18 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.04.07 15:09:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions
[2011.04.07 15:09:43 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.08.29 05:49:02 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\searchplugins\ask.xml
[2011.12.07 20:02:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/C ... 4109837963 (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
[2002.09.23 13:00:00 | 000,430,360 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002.09.23 13:00:00 | 000,427,110 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002.09.23 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002.09.23 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002.09.23 13:00:00 | 000,088,058 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002.09.23 13:00:00 | 000,074,050 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002.09.23 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002.09.23 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2002.09.23 13:00:00 | 000,430,360 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002.09.23 13:00:00 | 000,427,110 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002.09.23 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002.09.23 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002.09.23 13:00:00 | 000,088,058 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002.09.23 13:00:00 | 000,074,050 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002.09.23 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002.09.23 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
@Alternate Data Stream - 179 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0295CBF7
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:264A9BB7

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\WINDOWS\System32\BALORVJ
C:\WINDOWS\hlistHMFAxCore46691b2fe72383a3b643d95081ef1d95
C:\WINDOWS\XXLGSC
C:\WINDOWS\Strsys.dll
C:\WINDOWS\System32\sscnc620.dll
C:\WINDOWS\VcncDll.INI
C:\WINDOWS\System32\amsiq19a.sys
C:\WINDOWS\System32\zipyakw.dll
C:\WINDOWS\System32\mlfcache.dat
C:\WINDOWS\System32\veolx32n.dll
C:\WINDOWS\System32\tscp_7a.ini
C:\Documents and Settings\Rosťa\Data aplikací\ezpinst.exe
C:\WINDOWS\A5W.INI
C:\WINDOWS\System32\haspdos.sys
C:\WINDOWS\as456.ini
C:\WINDOWS\SETUPACT.INI
C:\WINDOWS\System32\tscp_4a.ini
C:\WINDOWS\System32\tscp_0a.ini
C:\WINDOWS\im32st.dat
C:\WINDOWS\System32\tscp_0b.ini
C:\WINDOWS\System32\sav80231.sys
C:\WINDOWS\System32\d3d8caps.dat
C:\WINDOWS\UN160405.EXE
C:\WINDOWS\System32\tscpsnd.ini
C:\WINDOWS\System32\d3d9caps.dat
C:\WINDOWS\SETUPZ1.EXE
C:\WINDOWS\SETUPGB.INI
C:\WINDOWS\System32\ThriXXX010205PNG.dll
C:\WINDOWS\System32\ThriXXX010104Z.dll
C:\WINDOWS\System32\ThriXXX015003JP2.dll
C:\Documents and Settings\Rosťa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Documents and Settings\Rosťa\Data aplikací\ICQ Toolbar
c:\windows\strs.exe

:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\WINDOWS\HkMgrMM.dll
C:\WINDOWS\ELJ0102.dat
C:\WINDOWS\cgolfvr.ini
C:\WINDOWS\liskulka.ini
C:\WINDOWS\INSTALL.DAT
C:\WINDOWS\headache.ini
C:\WINDOWS\System32\UNWISE.EXE
C:\WINDOWS\System32\SETBROWS.EXE
C:\WINDOWS\ActiveSkin.INI
C:\WINDOWS\System32\streamhlp.dll
C:\WINDOWS\System32\៦矵E---pokud je to složka , podívej se do ní
C:\WINDOWS\System32\៦矵E---pokud je to složka , podívej se do ní

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(9).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(8).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(7).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(6).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(5).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(4).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(3).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(24).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(23).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(22).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(21).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(20).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(2).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(19).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(18).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(17).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(16).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(15).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(14).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(13).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(12).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(11).exe
[2003.06.02 21:30:18 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx(10).exe
Zbytečně mnoho stejných souborů pro ATI GK , můžeš nechat jen jednu..ostatní smaž..

[seal.]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Service HidServ stopped successfully!
Service HidServ deleted successfully!
Error: No service named getPlusHelper) getPlus(R was found to stop!
Service\Driver key getPlusHelper) getPlus(R not found.
Service AppMgmt stopped successfully!
Service AppMgmt deleted successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "Ask" removed from browser.search.order.1
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Prefs.js: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Prefs.js: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1\ deleted successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Extensions folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\META-INF folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome\content folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}\defaults folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}\components folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}\chrome folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions folder moved successfully.
Folder C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\ not found.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions folder moved successfully.
Folder C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\k0w4fgkx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\ not found.
C:\Documents and Settings\Rosťa\Data aplikací\Mozilla\Firefox\Profiles\29quvcp7.default\searchplugins\ask.xml moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\locale folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xportovat do aplikace Microsoft Excel\ deleted successfully.
Starting removal of ActiveX control {9F1C11AA-197B-4942-BA54-47A8489BB47F}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9F1C11AA-197B-4942-BA54-47A8489BB47F}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9F1C11AA-197B-4942-BA54-47A8489BB47F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1C11AA-197B-4942-BA54-47A8489BB47F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9F1C11AA-197B-4942-BA54-47A8489BB47F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1C11AA-197B-4942-BA54-47A8489BB47F}\ not found.
File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
Starting removal of ActiveX control DirectAnimation Java Classes
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
C:\WINDOWS\system32\perfh009.dat moved successfully.
C:\WINDOWS\system32\perfh005.dat moved successfully.
C:\WINDOWS\system32\perfi009.dat moved successfully.
C:\WINDOWS\system32\perfi005.dat moved successfully.
C:\WINDOWS\system32\perfc005.dat moved successfully.
C:\WINDOWS\system32\perfc009.dat moved successfully.
C:\WINDOWS\system32\perfd005.dat moved successfully.
C:\WINDOWS\system32\perfd009.dat moved successfully.
File C:\WINDOWS\System32\perfh009.dat not found.
File C:\WINDOWS\System32\perfh005.dat not found.
File C:\WINDOWS\System32\perfi009.dat not found.
File C:\WINDOWS\System32\perfi005.dat not found.
File C:\WINDOWS\System32\perfc005.dat not found.
File C:\WINDOWS\System32\perfc009.dat not found.
File C:\WINDOWS\System32\perfd005.dat not found.
File C:\WINDOWS\System32\perfd009.dat not found.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:0295CBF7 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:264A9BB7 deleted successfully.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.31.0 log created on 12082011_225056

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...



http://www.virustotal.com/file-scan/rep ... 1323382041
http://www.virustotal.com/file-scan/rep ... 1323382251
http://www.virustotal.com/file-scan/rep ... 1323382564
http://www.virustotal.com/file-scan/rep ... 1323382662
http://www.virustotal.com/file-scan/rep ... 1323382617
http://www.virustotal.com/file-scan/rep ... 1323382894
http://www.virustotal.com/file-scan/rep ... 1323382976
http://www.virustotal.com/file-scan/rep ... 1323383151
http://www.virustotal.com/file-scan/rep ... 1323383248
http://www.virustotal.com/file-scan/rep ... 1323383395

[jaro3]

Vypni rez.ochrany a firewall.

Spusť F-Secure Online Scanner

Tento skener je možno použít jen v prohlížeči Internet Explorer! Postupuj podle instrukcí na stránce F-Secure pro správnou instalaci. Akceptuj licenci. Po instalaci ActiveX, klikni na Full System Scan. Když stahování skončeno, automaticky začne sken . Vyčkej konce skenu, po jeho dobu neprováděj jiné operace ani neklikej myší. Když skončí sken klikni na tlačítko Automatic clearing (recommended). Poté klikni na tlačítko Show Report a zkopíruj a vlož sem .

[seal.]

Scanning Report
Friday, December 9, 2011 14:57:42 - 15:34:56

Computer name: HOFER
Scanning type: Scan system for malware, spyware and rootkits
Target: C:\ D:\ E:\
1 malware found
Suspicious:W32/Malware!Gemini (spyware)

System (Disinfected)

Statistics
Scanned:

Files: 37492
System: 3721
Not scanned: 8

Actions:

Disinfected: 1
Renamed: 0
Deleted: 0
Not cleaned: 0
Submitted: 0

Files not scanned:

C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\DOCUMENTS AND SETTINGS\ROSŤA\LOCAL SETTINGS\TEMP\HSPERFDATA_ROSŤA\2240
C:\DOCUMENTS AND SETTINGS\ROSŤA\LOCAL SETTINGS\TEMP\HSPERFDATA_ROSŤA\3744

Options
Scanning engines:

Scanning options:

Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML XXX ANI AVB BAT CMD JOB LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
Use advanced heuristics

Copyright © 1998-2009 Product support | Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publicatio

[seal.]

#
# A fatal error has been detected by the Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6d9c5f85, pid=3744, tid=2324
#
# JRE version: 7.0-b147
# Java VM: Java HotSpot(TM) Client VM (21.0-b17 mixed mode, sharing windows-x86 )
# Problematic frame:
# V [jvm.dll+0x85f85]
#
# Failed to write core dump. Minidumps are not enabled by default on client versions of Windows
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0x02cc6400): VMThread [stack: 0x02d70000,0x02dc0000] [id=2324]

siginfo: ExceptionCode=0xc0000005, reading address 0x00000068

Registers:
EAX=0x00000000, EBX=0x2fa5a224, ECX=0x00000000, EDX=0x00000000
ESP=0x02dbfb04, EBP=0x02dbfb20, ESI=0x2fa5a270, EDI=0x2aa70030
EIP=0x6d9c5f85, EFLAGS=0x00010293

Top of Stack: (sp=0x02dbfb04)
0x02dbfb04: 6dc131a8 0087bd50 2fa5a210 2f474178
0x02dbfb14: 2fa5a270 00000003 2f474170 02dbfb38
0x02dbfb24: 6d9cb56f 2fa5a210 6dc131a8 2fa59568
0x02dbfb34: 0087bd50 02dbfb58 6daa8712 2fa5a210
0x02dbfb44: 6dc131a8 2fa59568 0087bd50 02dbfb64
0x02dbfb54: 6daa8b0b 02dbfb64 6daa8b11 6dc131a8
0x02dbfb64: 02dbfb78 6d9b1236 00000003 6dc131a8
0x02dbfb74: 0087bd50 02dbfb94 6d9ad574 6dc131a8

Instructions: (pc=0x6d9c5f85)
0x6d9c5f65: 80 3d 77 6e c0 6d 00 75 0a 8b d0 80 e2 07 80 fa
0x6d9c5f75: 01 eb 1b 8b c8 83 e1 07 83 f9 05 74 24 8b 57 04
0x6d9c5f85: 8b 52 68 83 e2 07 80 fa 05 74 0c 83 f9 01 75 07
0x6d9c5f95: a9 80 ff ff ff 74 0a 50 57 e8 0d 24 0e 00 83 c4


Register to memory mapping:

EAX=0x00000000 is an unknown value
EBX=0x2fa5a224 is an oop
java.lang.Class
- klass: 'java/lang/Class'
ECX=0x00000000 is an unknown value
EDX=0x00000000 is an unknown value
ESP=0x02dbfb04 is an unknown value
EBP=0x02dbfb20 is an unknown value
ESI=0x2fa5a270 is an oop
java.lang.Class
- klass: 'java/lang/Class'
EDI=
[error occurred during error reporting (printing register info), id 0xc0000005]

Stack: [0x02d70000,0x02dc0000], sp=0x02dbfb04, free space=318k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [jvm.dll+0x85f85]
V [jvm.dll+0x8b56f]
V [jvm.dll+0x168712]
V [jvm.dll+0x168b11]
V [jvm.dll+0x71236]
V [jvm.dll+0x6d574]
V [jvm.dll+0x6778f]
V [jvm.dll+0x6965f]
V [jvm.dll+0x69b10]
V [jvm.dll+0x68627]
V [jvm.dll+0x6fc93]
V [jvm.dll+0x671d6]
V [jvm.dll+0x675be]
V [jvm.dll+0x16b1ec]
V [jvm.dll+0x148f35]
V [jvm.dll+0x14816e]
V [jvm.dll+0x14849c]
V [jvm.dll+0x148912]
V [jvm.dll+0x171549]
C [msvcr100.dll+0x5c6de] endthreadex+0x3a
C [msvcr100.dll+0x5c788] endthreadex+0xe4
C [kernel32.dll+0xb729] GetModuleFileNameA+0x1ba

VM_Operation (0x037afb44): GenCollectFull, mode: safepoint, requested by thread 0x03227000


--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x02cdec00 JavaThread "TimerQueue" daemon [_thread_blocked, id=2572, stack(0x03800000,0x03850000)]
0x03227000 JavaThread "thread applet-com.fsecure.launchpoint.LaunchPoint.class-1" [_thread_blocked, id=160, stack(0x03760000,0x037b0000)]
0x03201800 JavaThread "AWT-EventQueue-1" [_thread_blocked, id=1952, stack(0x03710000,0x03760000)]
0x031fd800 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3428, stack(0x03490000,0x034e0000)]
0x031ef800 JavaThread "AWT-EventQueue-2" [_thread_blocked, id=3816, stack(0x036c0000,0x03710000)]
0x031eac00 JavaThread "AWT-Shutdown" [_thread_blocked, id=4080, stack(0x03670000,0x036c0000)]
0x031e8c00 JavaThread "JVM[id=1]-Heartbeat" daemon [_thread_blocked, id=2604, stack(0x034e0000,0x03530000)]
0x031db800 JavaThread "Browser Side Object Cleanup Thread" [_thread_blocked, id=3820, stack(0x03620000,0x03670000)]
0x031d1c00 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=1116, stack(0x035d0000,0x03620000)]
0x03176800 JavaThread "CacheMemoryCleanUpThread" daemon [_thread_blocked, id=3152, stack(0x03580000,0x035d0000)]
0x0313e000 JavaThread "SysExecutionTheadCreator" daemon [_thread_blocked, id=3464, stack(0x03350000,0x033a0000)]
0x0315a400 JavaThread "AWT-Windows" daemon [_thread_in_native, id=196, stack(0x009a0000,0x00aa0000)]
0x03157800 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3160, stack(0x033f0000,0x03440000)]
0x0314c800 JavaThread "Java Plug-In Pipe Worker Thread (Client-Side)" daemon [_thread_in_native, id=3232, stack(0x033a0000,0x033f0000)]
0x03138400 JavaThread "Timer-0" [_thread_blocked, id=1140, stack(0x03300000,0x03350000)]
0x02cf7800 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3336, stack(0x03070000,0x030c0000)]
0x02cc3800 JavaThread "Service Thread" daemon [_thread_blocked, id=1696, stack(0x02fd0000,0x03020000)]
0x02cbd800 JavaThread "C1 CompilerThread0" daemon [_thread_blocked, id=1940, stack(0x02f80000,0x02fd0000)]
0x02cbbc00 JavaThread "Attach Listener" daemon [_thread_blocked, id=752, stack(0x02eb0000,0x02f00000)]
0x02cba400 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3752, stack(0x02e60000,0x02eb0000)]
0x02cb8800 JavaThread "Finalizer" daemon [_thread_blocked, id=596, stack(0x02e10000,0x02e60000)]
0x02ca6800 JavaThread "Reference Handler" daemon [_thread_blocked, id=1532, stack(0x02dc0000,0x02e10000)]
0x00878400 JavaThread "main" [_thread_blocked, id=2708, stack(0x00920000,0x00970000)]

Other Threads:
=>0x02cc6400 VMThread [stack: 0x02d70000,0x02dc0000] [id=2324]
0x02ce2400 WatcherThread [stack: 0x03020000,0x03070000] [id=2136]

VM state:at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: ([mutex/lock_event])
[0x00877420] Threads_lock - owner thread: 0x02cc6400
[0x00877830] Heap_lock - owner thread: 0x03227000

Heap
def new generation total 2752K, used 2149K [0x22a70000, 0x22d60000, 0x25510000)
eden space 2496K, 86% used [0x22a70000, 0x22c89540, 0x22ce0000)
from space 256K, 0% used [0x22ce0000, 0x22ce0000, 0x22d20000)
to space 256K, 0% used [0x22d20000, 0x22d20000, 0x22d60000)
tenured generation total 5848K, used 3276K [0x25510000, 0x25ac6000, 0x2aa70000)
the space 5848K, 56% used [0x25510000, 0x25843150, 0x25843200, 0x25ac6000)
compacting perm gen total 12288K, used 4646K [0x2aa70000, 0x2b670000, 0x2ea70000)
the space 12288K, 37% used [0x2aa70000, 0x2aef9960, 0x2aef9a00, 0x2b670000)
ro space 10240K, 42% used [0x2ea70000, 0x2eeac660, 0x2eeac800, 0x2f470000)
rw space 12288K, 53% used [0x2f470000, 0x2fae8180, 0x2fae8200, 0x30070000)

Code Cache [0x00aa0000, 0x00c28000, 0x02aa0000)
total_blobs=856 nmethods=611 adapters=178 free_code_cache=31217Kb largest_free_block=31966720

Dynamic libraries:
0x00400000 - 0x0042e000 C:\Program Files\Java\jre7\bin\java.exe
0x7c900000 - 0x7c9b1000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8f6000 C:\WINDOWS\system32\kernel32.dll
0x77dc0000 - 0x77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e70000 - 0x77f03000 C:\WINDOWS\system32\RPCRT4.dll
0x77fe0000 - 0x77ff1000 C:\WINDOWS\system32\Secur32.dll
0x7e360000 - 0x7e3f1000 C:\WINDOWS\system32\USER32.dll
0x77f10000 - 0x77f59000 C:\WINDOWS\system32\GDI32.dll
0x773c0000 - 0x774c3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll
0x77c00000 - 0x77c58000 C:\WINDOWS\system32\msvcrt.dll
0x77f60000 - 0x77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
0x76370000 - 0x7638d000 C:\WINDOWS\system32\IMM32.DLL
0x78aa0000 - 0x78b5e000 C:\Program Files\Java\jre7\bin\msvcr100.dll
0x6d940000 - 0x6dc61000 C:\Program Files\Java\jre7\bin\client\jvm.dll
0x71ab0000 - 0x71aba000 C:\WINDOWS\system32\WSOCK32.dll
0x71a90000 - 0x71aa7000 C:\WINDOWS\system32\WS2_32.dll
0x71a80000 - 0x71a88000 C:\WINDOWS\system32\WS2HELP.dll
0x76b30000 - 0x76b5d000 C:\WINDOWS\system32\WINMM.dll
0x76be0000 - 0x76beb000 C:\WINDOWS\system32\PSAPI.DLL
0x6bd00000 - 0x6bd0d000 C:\WINDOWS\system32\SYNCOR11.DLL
0x6d8d0000 - 0x6d8dc000 C:\Program Files\Java\jre7\bin\verify.dll
0x6d370000 - 0x6d390000 C:\Program Files\Java\jre7\bin\java.dll
0x6d000000 - 0x6d142000 C:\Program Files\Java\jre7\bin\awt.dll
0x77110000 - 0x7719b000 C:\WINDOWS\system32\OLEAUT32.dll
0x774d0000 - 0x7760e000 C:\WINDOWS\system32\ole32.dll
0x6d920000 - 0x6d933000 C:\Program Files\Java\jre7\bin\zip.dll
0x5b250000 - 0x5b288000 C:\WINDOWS\system32\uxtheme.dll
0x746f0000 - 0x7473c000 C:\WINDOWS\system32\MSCTF.dll
0x6d450000 - 0x6d456000 C:\Program Files\Java\jre7\bin\jp2native.dll
0x6d1b0000 - 0x6d1e3000 C:\Program Files\Java\jre7\bin\deploy.dll
0x77bf0000 - 0x77bf8000 C:\WINDOWS\system32\VERSION.dll
0x771a0000 - 0x7724a000 C:\WINDOWS\system32\WININET.dll
0x77a70000 - 0x77b06000 C:\WINDOWS\system32\CRYPT32.dll
0x77b10000 - 0x77b22000 C:\WINDOWS\system32\MSASN1.dll
0x7df10000 - 0x7dfb3000 C:\WINDOWS\system32\urlmon.dll
0x7c9c0000 - 0x7d1d8000 C:\WINDOWS\system32\SHELL32.dll
0x6d660000 - 0x6d674000 C:\Program Files\Java\jre7\bin\net.dll
0x71a30000 - 0x71a70000 C:\WINDOWS\system32\mswsock.dll
0x698b0000 - 0x69908000 C:\WINDOWS\system32\hnetcfg.dll
0x58ef0000 - 0x58ef7000 C:\WINDOWS\System32\wship6.dll
0x6d680000 - 0x6d68f000 C:\Program Files\Java\jre7\bin\nio.dll
0x751a0000 - 0x751ce000 C:\WINDOWS\system32\msctfime.ime
0x6d2c0000 - 0x6d2ea000 C:\Program Files\Java\jre7\bin\fontmanager.dll
0x76f10000 - 0x76f37000 C:\WINDOWS\system32\DNSAPI.dll
0x76fb0000 - 0x76fb6000 C:\WINDOWS\system32\rasadhlp.dll
0x71a70000 - 0x71a78000 C:\WINDOWS\System32\wshtcpip.dll
0x68000000 - 0x68036000 C:\WINDOWS\system32\rsaenh.dll
0x769b0000 - 0x76a65000 C:\WINDOWS\system32\USERENV.dll
0x67270000 - 0x672c5000 C:\WINDOWS\system32\netapi32.dll
0x76fa0000 - 0x76fa8000 C:\WINDOWS\System32\winrnr.dll
0x76f50000 - 0x76f7d000 C:\WINDOWS\system32\WLDAP32.dll
0x6d870000 - 0x6d8a1000 C:\Program Files\Java\jre7\bin\t2k.dll
0x76fc0000 - 0x7703f000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77040000 - 0x77109000 C:\WINDOWS\system32\COMRes.dll
0x77b30000 - 0x77b52000 C:\WINDOWS\system32\Apphelp.dll

VM Arguments:
jvm_args: -D__jvm_launched=4203855523 -D__applet_launched=4203738367 -Xbootclasspath/a:C:\PROGRA~1\Java\jre7\lib\deploy.jar;C:\PROGRA~1\Java\jre7\lib\javaws.jar;C:\PROGRA~1\Java\jre7\lib\plugin.jar -Dsun.awt.warmup=true
java_command: sun.plugin2.main.client.PluginMain write_pipe_name=jpi2_pid2240_pipe3,read_pipe_name=jpi2_pid2240_pipe2
Launcher Type: SUN_STANDARD

Environment Variables:
PATH=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\PC Connectivity Solution;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Common Files\Acronis\SnapAPI
USERNAME=Rosťa
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD



--------------- S Y S T E M ---------------

OS: Windows XP Build 2600 Service Pack 3

CPU:total 1 (1 cores per cpu, 1 threads per core) family 6 model 8 stepping 1, cmov, cx8, fxsr, mmx, sse, mmxext, 3dnowpref

Memory: 4k page, physical 523808k(153672k free), swap 1280532k(740624k free)

vm_info: Java HotSpot(TM) Client VM (21.0-b17) for windows-x86 JRE (1.7.0-b147), built on Jun 27 2011 02:25:52 by "java_re" with unknown MS VC++:1600

time: Fri Dec 09 15:37:31 2011
elapsed time: 4272 seconds

[jaro3]

Spusť OTL a klikni na Vyčisti.

odinstaluj všechny javy....

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Nainstaluj javu:
Java SE Runtime Environment 7

Klikni na Accept License Agreement
Vyber si OS (Windows nebo Windows x64, Offline Installation)
jre-7-windows-i586-p.exe nebo
jre-7-windows-x64.exe
Stáhni ( download) a nainstaluj.
Ostatní javy odeber v přidat/odebrat programy.

Napiš , jak to vypadá.

[seal.]

Ted to moc nepoznam,snad to bude ok. Diky moc za trpelivost a pomoc.