prosím o vyčištění pc,problém s připojením Vyřešeno

[jaro3]

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\WINNT\System32\mstask.dll
C:\WINNT\System32\extmgr.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

[Reklama]

[lugr]

tak jsem to projel tím skenerem,jen u te ho posledního odkazu to cosi našlo , tady jsou odkazy (zkusil jsem obě adresy):

https://www.virustotal.com/file/09f3f86 ... 355148511/
https://www.virustotal.com/file/47b601e ... 355148779/

http://r.virscan.org/report/f1a39926b31 ... 0e150.html
http://r.virscan.org/report/b7dd3325fcc ... a57ea.html

[jaro3]

Myslím , že je to čistý , jeden málo známý antivir to nezachrání.

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

MWAV má hodně falešných hlášek.

[lugr]

pořád to asi neni dobré ,spojení mi občas vypadává(sice mám nastavené automatické obnovení ale to neni ono ) a rychlost uploadu taky občas spadne skoro na nulu

dnes jsem se díval do reportu avastu a našel jsem tam tyto záznamy:

10. 12. 2012 19:49:28 C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\UVK9GZC1\hcnyy[1].jpg [L] Win32:Evo-gen [Susp] (0)
Nelze soubor přesunout do truhly: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces
Nelze smazat soubor: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces
10. 12. 2012 19:49:33 C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\UVK9GZC1\hcnyy[1].jpg [L] Win32:Confi [Wrm] (0)
Soubor byl úspěšně přesunut do truhly...
10. 12. 2012 20:03:39 C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ETS9UR4L\rnlg[1].png [L] Win32:Rootkit-gen [Rtk] (0)
Nelze soubor přesunout do truhly: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces
Nelze smazat soubor: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces
10. 12. 2012 20:03:42 C:\WINNT\system32\x [L] Win32:Rootkit-gen [Rtk] (0)
Soubor byl úspěšně přesunut do truhly...
10. 12. 2012 21:02:59 C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Local Settings\Temporary Internet Files\Content.IE5\ETS9UR4L\rnlg[1].png [L] Win32:Rootkit-gen [Rtk] (0)
Soubor byl úspěšně přesunut do truhly...
*
* Report testu rezidentního štítu avast!
* Tento soubor je generován automaticky
*
* Čas spuštění: 10. prosinec 2012 21:18:18
*

*
* Report testu rezidentního štítu avast!
* Tento soubor je generován automaticky
*
* Čas spuštění: 10. prosinec 2012 21:20:30
*


to asi neni dobře?

[jaro3]

ten jeden , v tempu to jde i CCleanerem.

Stáhni si OTH
na svojí plochu( pokud používáš Firefox , pravým klikni na OTH link a vyber uložit jako (Save as..).

Stáhni si OTL
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Stáhni si soubor Scan.txt
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Poklepej na soubor OTH na ploše , po spuštění programu klikni na Kill All Processes.Poté klikni na Start OTL .Poklepej Do prázdného okna pod Vlastní skenování /opravy ( Custom Scans box). Objeví se zpráva: Kliknutím na OK vyberete cestu k souboru, kliknutím na Zrušit zrušíte výběr.
Klikni na OK. Objeví se okno průzkumníku , zde klikneš na plochu a najdeš na ní soubor Scan.txt .Klikni na Otevřít.
Poté klikni na Rychle prohledat (Quick Scan). Neměň žádná jiná nastavení . Sken může trvat dlouho.
Kdy sken skončí , objeví se na ploše dva logy:
OTL.Txt a Extras.Txt , jsou uloženy ve stejném místě jako OTL.
Zkopíruj sem prosím celý obsah obou logů.

[lugr]

OTL logfile created on: 11.12.2012 18:45:07 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\skrcek\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,66 Gb Available Physical Memory | 82,98% Memory free
3,85 Gb Paging File | 3,68 Gb Available in Paging File | 95,64% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 10,10 Gb Free Space | 51,70% Space Free | Partition Type: NTFS
Drive D: | 54,99 Gb Total Space | 17,10 Gb Free Space | 31,10% Space Free | Partition Type: NTFS
Drive E: | 465,76 Gb Total Space | 131,05 Gb Free Space | 28,14% Space Free | Partition Type: NTFS

Computer Name: SKRCEK-5DE342BF | User Name: skrcek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.12.11 18:37:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTL.exe
PRC - [2012.12.11 18:37:39 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTH.scr
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST\AvastSvc.exe


========== Modules (No Company Name) ==========

MOD - [2012.12.10 08:49:03 | 002,038,272 | ---- | M] () -- C:\Program Files\AVAST\defs\12121000\algo.dll


========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012.11.30 14:27:23 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.09.29 19:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.09.29 19:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) [Auto | Stopped] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- (SPF4)
SRV - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) [Auto | Stopped] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe -- (SbPF.Launcher)
SRV - [2004.12.13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2004.08.17 15:49:28 | 000,050,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINNT\system32\utilman.exe -- (UtilMan)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | System | Stopped] -- -- (tga)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012.12.04 20:58:29 | 000,299,424 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2012.12.03 20:07:34 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINNT\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012.10.30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINNT\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.10.30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINNT\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.10.30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINNT\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.10.30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINNT\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2012.10.30 23:51:57 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINNT\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012.10.30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINNT\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012.10.30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINNT\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.09.29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINNT\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2008.10.31 07:09:06 | 000,270,888 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINNT\system32\drivers\SbFw.sys -- (SbFw)
DRV - [2008.06.21 04:54:54 | 000,066,600 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINNT\system32\drivers\sbhips.sys -- (sbhips)
DRV - [2008.06.21 04:54:54 | 000,065,576 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV - [2007.09.19 13:37:58 | 000,031,744 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- C:\WINNT\system32\drivers\wfcxatun.sys -- (wfcxatun)
DRV - [2007.09.19 11:12:52 | 000,021,248 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\wfcxdtun.sys -- (wfcxdtun)
DRV - [2007.09.19 11:10:32 | 000,167,040 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- C:\WINNT\system32\drivers\wfcxvcap.sys -- (WFCXVCAP)
DRV - [2007.09.19 11:09:52 | 000,010,496 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\wfcxxbar.sys -- (wfcxxbar)
DRV - [2007.09.19 11:09:42 | 000,015,872 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\wfcxtcap.sys -- (wfcxtcap)
DRV - [2007.09.19 11:09:32 | 000,009,856 | ---- | M] (Leadtek Research Inc.) [Kernel | System | Running] -- C:\WINNT\system32\drivers\wfcxacap.sys -- (wfcxacap)
DRV - [2007.06.06 15:52:00 | 002,155,520 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.12.28 05:44:00 | 000,084,992 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\AtiHdAud.sys -- (HdAudAddService)
DRV - [2006.07.01 22:42:58 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINNT\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.03.17 11:18:58 | 000,392,960 | R--- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2005.12.22 03:22:18 | 000,005,685 | R--- | M] () [Kernel | System | Running] -- C:\WINNT\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2005.01.06 16:55:38 | 000,009,446 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Running] -- C:\Program Files\WinFast\WFDTV\WFIOCTL.sys -- (WFIOCTL)
DRV - [2004.08.13 03:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004.08.03 23:10:14 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\MPE.sys -- (MPE)
DRV - [2004.08.03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2004.04.13 13:14:12 | 000,070,144 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2003.06.19 12:05:04 | 000,049,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\usbhub20.sys -- (usbhub20)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINNT\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll File not found



========== Chrome ==========

CHR - homepage: http://www.seznam.cz/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\grebi\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\grebi\Local Settings\Data aplikac\u00ED\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: DivX OVS Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\p\u0159ehr\u00E1va\u010De\DivX\DivX Player\npDivxPlayerPlugin.dll

O1 HOSTS File: ([2012.12.06 20:29:31 | 000,000,027 | ---- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe (Leadtek Research Inc.)
O4 - HKLM..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe (Leadtek Research Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 475
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 475
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINNT\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: DirectAnimation Java Classes file://C:\WINNT\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINNT\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0BF8ED30-64D6-460C-A4FD-B2F74156DECA}: NameServer = 217.112.162.34 217.112.160.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINNT\system32\userinit.exe) - C:\WINNT\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINNT\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\wzcnotif: DllName - (wzcdlg.dll) - C:\WINNT\System32\wzcdlg.dll (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012.12.11 18:37:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTL.exe
[2012.12.11 18:37:39 | 000,259,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTH.scr
[2012.12.10 21:42:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\XnView
[2012.12.10 21:41:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\XnView
[2012.12.10 21:41:32 | 000,000,000 | ---D | C] -- C:\Program Files\XnView
[2012.12.10 21:19:21 | 000,270,888 | R--- | C] (Sunbelt Software, Inc.) -- C:\WINNT\System32\drivers\SbFw.sys
[2012.12.10 21:19:21 | 000,065,576 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINNT\System32\drivers\SbFwIm.sys
[2012.12.10 21:19:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Sunbelt Software
[2012.12.10 21:17:04 | 000,000,000 | ---D | C] -- C:\WINNT\System32\appmgmt
[2012.12.10 19:08:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\skrcek\Recent
[2012.12.10 17:09:58 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2012.12.10 17:09:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\7-Zip
[2012.12.10 17:05:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Mp3tag
[2012.12.09 18:18:58 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2012.12.09 17:36:44 | 000,000,000 | ---D | C] -- C:\WINNT\rundll16.exe
[2012.12.09 17:36:44 | 000,000,000 | ---D | C] -- C:\WINNT\logo1_.exe
[2012.12.07 19:25:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Webteh
[2012.12.07 19:25:34 | 000,000,000 | ---D | C] -- C:\Program Files\prehravace
[2012.12.07 19:15:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Media Player Classic
[2012.12.07 16:11:24 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.12.06 20:28:10 | 000,000,000 | ---D | C] -- C:\WINNT\temp
[2012.12.06 15:58:39 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.12.05 19:54:40 | 000,000,000 | R--D | C] -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Nástroje pro správu
[2012.12.05 16:11:57 | 000,000,000 | R--D | C] -- E:\DOKUMENTY\Hudba
[2012.12.05 15:36:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Help
[2012.12.04 21:09:03 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.12.03 20:07:34 | 000,242,240 | ---- | C] (DT Soft Ltd) -- C:\WINNT\System32\drivers\dtsoftbus01.sys
[2012.12.03 20:07:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\DAEMON Tools Lite
[2012.12.03 20:07:27 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2012.12.03 20:06:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2012.12.03 19:33:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Macromedia
[2012.12.03 14:58:00 | 000,000,000 | ---D | C] -- C:\WINNT\VDLL.DLL
[2012.12.03 14:58:00 | 000,000,000 | ---D | C] -- C:\WINNT\System32\runouce.exe
[2012.12.03 14:58:00 | 000,000,000 | ---D | C] -- C:\WINNT\RUNDL132.EXE
[2012.12.03 14:58:00 | 000,000,000 | ---D | C] -- C:\WINNT\logo_1.exe
[2012.12.03 14:53:12 | 000,034,048 | ---- | C] (MicroWorld Technologies Inc.) -- C:\WINNT\System32\eEmpty.exe
[2012.12.03 14:53:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MicroWorld
[2012.12.03 14:52:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
[2012.12.02 11:39:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\AdobeUM
[2012.12.01 19:50:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Malwarebytes
[2012.12.01 19:49:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2012.12.01 19:49:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2012.12.01 19:49:56 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINNT\System32\drivers\mbam.sys
[2012.12.01 19:49:56 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.12.01 10:52:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Nástroje sady Microsoft Office
[2012.12.01 10:52:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Designer
[2012.12.01 10:52:26 | 000,000,000 | ---D | C] -- C:\WINNT\ShellNew
[2012.12.01 10:51:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Microsoft Web Folders
[2012.12.01 10:51:40 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012.11.30 20:23:11 | 000,000,000 | ---D | C] -- C:\WINNT\Logs
[2012.11.30 20:22:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2012.11.30 19:36:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\2K Games
[2012.11.30 19:31:12 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\save hry
[2012.11.30 17:25:29 | 000,021,256 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswFsBlk.sys
[2012.11.30 17:25:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
[2012.11.30 17:25:28 | 000,361,032 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswSP.sys
[2012.11.30 17:25:27 | 000,054,232 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswTdi.sys
[2012.11.30 17:25:27 | 000,035,928 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswRdr.sys
[2012.11.30 17:25:26 | 000,738,504 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswSnx.sys
[2012.11.30 17:25:25 | 000,097,608 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswmon2.sys
[2012.11.30 17:25:25 | 000,089,752 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aswmon.sys
[2012.11.30 17:25:25 | 000,025,256 | ---- | C] (AVAST Software) -- C:\WINNT\System32\drivers\aavmker4.sys
[2012.11.30 17:25:12 | 000,041,224 | ---- | C] (AVAST Software) -- C:\WINNT\avastSS.scr
[2012.11.30 17:25:11 | 000,227,648 | ---- | C] (AVAST Software) -- C:\WINNT\System32\aswBoot.exe
[2012.11.30 17:24:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.11.30 17:24:56 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST
[2012.11.30 16:57:18 | 000,000,000 | -H-D | C] -- C:\WINNT\PIF
[2012.11.30 16:14:42 | 000,000,000 | R--D | C] -- E:\DOKUMENTY\word
[2012.11.30 16:14:42 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\webkamera
[2012.11.30 16:13:18 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\Oberon Media
[2012.11.30 16:13:17 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\NeroVision
[2012.11.30 16:10:29 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\KNIHY
[2012.11.30 16:10:29 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\ICQ Lite
[2012.11.30 16:10:27 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\ICQ
[2012.11.30 16:10:17 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\filmy
[2012.11.30 16:09:53 | 000,000,000 | ---D | C] -- E:\DOKUMENTY\CyberLink
[2012.11.30 14:27:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Sun
[2012.11.30 14:27:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Sun
[2012.11.30 14:27:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.11.30 14:27:20 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012.11.30 14:26:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Sun
[2012.11.30 11:32:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\SoundMAX
[2012.11.30 11:10:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\K-Lite Codec Pack
[2012.11.30 11:10:44 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINNT\System32\pncrt.dll
[2012.11.30 11:10:43 | 000,749,056 | ---- | C] (http://www.mp3dev.org/) -- C:\WINNT\System32\lameACM.acm
[2012.11.30 11:10:42 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINNT\System32\yv12vfw.dll
[2012.11.30 11:10:42 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINNT\System32\ac3acm.acm
[2012.11.30 11:10:42 | 000,090,112 | ---- | C] (DivX, Inc.) -- C:\WINNT\System32\dpl100.dll
[2012.11.30 11:10:41 | 000,685,056 | ---- | C] (DivX, Inc.) -- C:\WINNT\System32\divx.dll
[2012.11.30 11:10:39 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2012.11.30 10:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems
[2012.11.30 10:54:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\WinFast PVR2
[2012.11.30 10:54:48 | 000,000,000 | ---D | C] -- C:\Program Files\WinFast
[2012.11.30 10:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Adobe
[2012.11.30 10:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Adobe
[2012.11.30 10:49:19 | 000,167,040 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxvcap.sys
[2012.11.30 10:49:19 | 000,031,744 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxatun.sys
[2012.11.30 10:49:19 | 000,021,248 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxdtun.sys
[2012.11.30 10:49:19 | 000,015,872 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxtcap.sys
[2012.11.30 10:49:19 | 000,010,496 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxxbar.sys
[2012.11.30 10:49:19 | 000,009,856 | ---- | C] (Leadtek Research Inc.) -- C:\WINNT\System32\drivers\wfcxacap.sys
[2012.11.30 10:48:42 | 000,000,000 | ---D | C] -- C:\WINNT\System32\WinFast
[2012.11.30 10:42:56 | 000,000,000 | R--D | C] -- E:\DOKUMENTY\Obrázky
[2012.11.30 09:42:38 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2012.11.29 15:58:00 | 000,000,000 | ---D | C] -- C:\Program Files\ASUS
[2012.11.29 15:57:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ASUS
[2012.11.29 15:56:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012.11.29 15:56:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Adobe
[2012.11.29 15:56:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Marvell
[2012.11.29 15:55:41 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2012.11.29 15:55:39 | 000,000,000 | ---D | C] -- C:\WINNT\System32\DRVSTORE
[2012.11.29 15:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012.11.29 15:52:16 | 000,000,000 | ---D | C] -- C:\WINNT\Cache
[2012.11.29 15:48:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Identities
[2012.11.29 15:46:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\ATI
[2012.11.29 15:46:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\ATI
[2012.11.29 15:43:01 | 000,084,992 | R--- | C] (ATI Research Inc.) -- C:\WINNT\System32\drivers\AtiHdAud.sys
[2012.11.29 15:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Catalyst Control Center
[2012.11.29 15:39:05 | 000,000,000 | R-SD | C] -- C:\WINNT\assembly
[2012.11.29 15:38:47 | 000,000,000 | ---D | C] -- C:\WINNT\Microsoft.NET
[2012.11.29 15:37:23 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012.11.29 15:06:35 | 000,065,536 | ---- | C] (Khronos Group) -- C:\WINNT\System32\OpenCL.dll
[2012.11.29 15:06:06 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2012.11.29 15:05:51 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA
[2012.11.29 14:23:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
[2012.11.29 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012.11.29 14:22:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Google
[2012.11.29 13:57:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Ahead
[2012.11.29 13:56:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe
[2012.11.29 13:55:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Nero 7 Essentials
[2012.11.29 13:54:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Ahead
[2012.11.29 13:52:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Nero
[2012.11.29 13:52:40 | 000,000,000 | ---D | C] -- C:\Program Files\Nero
[2012.11.29 13:52:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2012.11.29 13:52:15 | 000,000,000 | ---D | C] -- C:\WINNT\RegisteredPackages
[2012.11.29 13:43:18 | 000,000,000 | -H-D | C] -- C:\WINNT\$hf_mig$
[2012.11.29 13:41:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Filmy
[2012.11.29 13:40:31 | 000,000,000 | ---D | C] -- C:\WINNT\SoftwareDistribution
[2012.11.29 13:40:28 | 000,000,000 | ---D | C] -- C:\WINNT\Prefetch
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\WinSxS
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\usmt
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\Resources
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\oobe
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\mui
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\java
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\IME
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\icsxml
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\3com_dmi
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\3076
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\2052
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1054
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1042
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1041
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1037
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1033
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1031
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1029
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1028
[2012.11.29 13:36:25 | 000,000,000 | ---D | C] -- C:\WINNT\System32\1025
[2012.11.29 13:35:39 | 000,000,000 | ---D | C] -- C:\WINNT\peernet
[2012.11.29 13:35:38 | 000,000,000 | ---D | C] -- C:\WINNT\provisioning
[2012.11.29 13:34:58 | 000,000,000 | ---D | C] -- C:\WINNT\ServicePackFiles
[2012.11.29 13:33:27 | 000,000,000 | ---D | C] -- C:\WINNT\System32\ReinstallBackups
[2012.11.29 13:32:22 | 000,000,000 | -H-D | C] -- C:\WINNT\$NtServicePackUninstall$
[2012.11.29 13:32:20 | 000,000,000 | ---D | C] -- C:\WINNT\EHome
[2012.11.29 13:11:44 | 000,000,000 | R-SD | C] -- C:\WINNT\Fonts
[2012.11.29 13:11:44 | 000,000,000 | RHSD | C] -- C:\WINNT\System32\dllcache
[2012.11.29 13:11:44 | 000,000,000 | R--D | C] -- C:\WINNT\Web
[2012.11.29 13:11:44 | 000,000,000 | -H-D | C] -- C:\WINNT\inf
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\wins
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\wbem
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\twain_32
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\system32
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\system
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\spool
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\ShellExt
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\Setup
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\security
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\repair
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\ras
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\os2
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\npp
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\mui
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\msapps
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\msagent
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Media
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\ie_de
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\ias
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Help
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\export
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\drivers\etc
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\drivers
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Driver Cache
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\drivers\disdn
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\dhcp
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Debug
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Cursors
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Connection Wizard
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\System32\config
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\Config
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\AppPatch
[2012.11.29 13:11:44 | 000,000,000 | ---D | C] -- C:\WINNT\addins
[2012.11.29 13:09:16 | 000,000,000 | ---D | C] -- C:\Program Files\Marvell
[2012.11.29 13:02:20 | 000,000,000 | ---D | C] -- C:\Program Files\Analog Devices
[2012.11.29 13:02:19 | 000,045,056 | ---- | C] (adi) -- C:\WINNT\System32\CleanUp.exe
[2012.11.29 13:02:18 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2012.11.29 13:01:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012.11.29 12:52:29 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2012.11.29 12:52:10 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2012.11.29 12:52:10 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2012.11.29 12:52:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2012.11.29 12:52:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2012.11.29 12:50:36 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINNT\System32\dllcache\rwia330.dll
[2012.11.29 12:50:35 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINNT\System32\dllcache\rwia001.dll
[2012.11.29 12:50:35 | 000,026,624 | ---- | C] (RICOH Co., Ltd.) -- C:\WINNT\System32\dllcache\rw330ext.dll
[2012.11.29 12:49:40 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINNT\System32\dllcache\cap7146.sys
[2012.11.29 12:49:24 | 000,000,000 | ---D | C] -- C:\WINNT\System32\xircom
[2012.11.29 12:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2012.11.29 12:48:13 | 000,000,000 | ---D | C] -- C:\WINNT\System32\DirectX
[2012.11.29 12:47:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2012.11.29 12:47:32 | 000,000,000 | ---D | C] -- C:\WINNT\srchasst
[2012.11.29 12:47:31 | 000,000,000 | ---D | C] -- C:\WINNT\System32\Macromed
[2012.11.29 12:47:30 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2012.11.29 12:47:26 | 000,000,000 | ---D | C] -- C:\WINNT\System32\Restore
[2012.11.29 12:47:26 | 000,000,000 | ---D | C] -- C:\WINNT\PCHealth
[2012.11.29 12:47:12 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Obrázky
[2012.11.29 12:47:12 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Hudba
[2012.11.29 12:46:56 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Hry
[2012.11.29 12:46:34 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2012.11.29 12:46:31 | 000,000,000 | ---D | C] -- C:\WINNT\System32\FxsTmp
[2012.11.29 12:46:16 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2012.11.29 12:45:57 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
[2012.11.29 12:45:54 | 000,000,000 | ---D | C] -- C:\WINNT\System32\MsDtc
[2012.11.29 12:42:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2012.11.29 12:42:00 | 000,000,000 | ---D | C] -- C:\WINNT\System32\CatRoot2
[2012.11.29 12:34:27 | 000,000,000 | ---D | C] -- C:\WINNT\setup.pss
[2012.11.29 12:29:23 | 000,000,000 | ---D | C] -- C:\WINNT\System32\NtmsData
[2012.11.29 12:29:16 | 000,000,000 | -HSD | C] -- C:\WINNT\Installer
[2012.11.29 12:29:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Data aplikací\Identities
[2012.11.29 12:29:14 | 000,000,000 | --SD | C] -- C:\Documents and Settings\skrcek\Data aplikací\Microsoft
[2012.11.29 12:29:14 | 000,000,000 | --SD | C] -- C:\Documents and Settings\skrcek\Cookies
[2012.11.29 12:29:14 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\skrcek\SendTo
[2012.11.29 12:29:14 | 000,000,000 | R--D | C] -- C:\Documents and Settings\skrcek\Oblíbené položky
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\skrcek\Šablony
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\skrcek\Okolní tiskárny
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\skrcek\Okolní síť
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\skrcek\Local Settings
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\WINNT\System32\GroupPolicy
[2012.11.29 12:29:14 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\skrcek\Data aplikací
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Příslušenství
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Po spuštění
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Plocha
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Nabídka Start
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\Microsoft
[2012.11.29 12:29:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\skrcek\Dokumenty
[2012.11.29 12:29:13 | 000,000,000 | -HSD | C] -- C:\WINNT\CSC
[2012.11.29 12:28:40 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2012.11.29 12:28:39 | 000,000,000 | ---D | C] -- C:\WINNT\System32\Microsoft
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\WINNT\System32\rpcproxy
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\WINNT\System32\rocket
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\WINNT\mww32
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\WINNT\System32\inetsrv
[2012.11.29 12:26:20 | 000,000,000 | ---D | C] -- C:\WINNT\ime
[2012.11.29 12:25:38 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2012.11.29 12:25:37 | 000,000,000 | --SD | C] -- C:\WINNT\Downloaded Program Files
[2012.11.29 12:25:37 | 000,000,000 | R--D | C] -- C:\WINNT\Offline Web Pages
[2012.11.29 12:25:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2012.11.29 12:25:25 | 000,000,000 | --SD | C] -- C:\WINNT\Tasks
[2012.11.29 12:25:18 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2012.11.29 12:25:13 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2012.11.29 12:25:13 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2012.11.29 12:25:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2012.11.29 12:25:01 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2012.11.29 12:24:37 | 000,000,000 | ---D | C] -- C:\WINNT\Registration
[2012.11.29 12:24:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Nástroje pro správu
[2012.11.29 12:24:23 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2012.11.29 12:24:23 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2012.11.29 12:24:01 | 000,118,544 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgscan.ocx
[2012.11.29 12:24:01 | 000,000,000 | ---D | C] -- C:\Program Files\Příslušenství
[2012.11.29 12:24:00 | 000,641,808 | ---- | C] (Scansoft) -- C:\WINNT\System32\xiffr3_0.dll
[2012.11.29 12:24:00 | 000,108,304 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgthumb.ocx
[2012.11.29 12:24:00 | 000,103,184 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgadmin.ocx
[2012.11.29 12:24:00 | 000,038,160 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\jpeg2x32.dll
[2012.11.29 12:24:00 | 000,033,552 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\tifflt.dll
[2012.11.29 12:24:00 | 000,027,920 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\jpeg1x32.dll
[2012.11.29 12:24:00 | 000,025,872 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oitwa400.dll
[2012.11.29 12:24:00 | 000,021,776 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oislb400.dll
[2012.11.29 12:24:00 | 000,013,584 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgshl.dll
[2012.11.29 12:24:00 | 000,013,072 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oissq400.dll
[2012.11.29 12:24:00 | 000,013,072 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oiprt400.dll
[2012.11.29 12:23:59 | 000,061,712 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgcmn.dll
[2012.11.29 12:23:56 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2012.11.29 12:23:54 | 000,444,176 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oieng400.dll
[2012.11.29 12:23:54 | 000,306,448 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\imgedit.ocx
[2012.11.29 12:23:54 | 000,062,224 | ---- | C] (Eastman Software, Inc., A Kodak Business) -- C:\WINNT\System32\oiui400.dll
[2012.11.29 12:23:51 | 000,000,000 | ---D | C] -- C:\WINNT\System32\Com
[2012.11.29 12:23:28 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Příslušenství
[2012.11.29 12:23:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Microsoft
[2012.11.29 12:23:00 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Dokumenty\Faxové zprávy
[2012.11.29 12:16:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2012.11.29 12:16:31 | 000,000,000 | ---D | C] -- C:\WINNT\Speech
[2012.11.29 12:16:29 | 000,000,000 | R--D | C] -- C:\Program Files
[2012.11.29 12:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2012.11.29 12:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2012.11.29 12:16:20 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Data aplikací
[2012.11.29 12:16:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
[2012.11.29 12:16:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Nabídka Start
[2012.11.29 12:16:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty
[2012.11.29 12:16:20 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Šablony
[2012.11.29 12:16:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Plocha
[2012.11.29 12:16:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Oblíbené položky
[2012.11.29 12:16:16 | 000,000,000 | ---D | C] -- C:\WINNT\System32\CatRoot
[2012.11.29 12:16:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]

[lugr]

pokračování:


========== Files - Modified Within 30 Days ==========

[2012.12.11 18:45:44 | 000,397,692 | ---- | M] () -- C:\WINNT\System32\perfh009.dat
[2012.12.11 18:45:44 | 000,395,890 | ---- | M] () -- C:\WINNT\System32\perfh005.dat
[2012.12.11 18:45:44 | 000,070,358 | ---- | M] () -- C:\WINNT\System32\perfc005.dat
[2012.12.11 18:45:44 | 000,060,522 | ---- | M] () -- C:\WINNT\System32\perfc009.dat
[2012.12.11 18:42:08 | 000,000,286 | -H-- | M] () -- C:\WINNT\tasks\avast! Emergency Update.job
[2012.12.11 18:41:34 | 000,002,048 | --S- | M] () -- C:\WINNT\bootstat.dat
[2012.12.11 18:41:31 | 2146,750,464 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.11 18:37:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTL.exe
[2012.12.11 18:37:39 | 000,259,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\skrcek\Plocha\OTH.scr
[2012.12.10 21:51:22 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.12.10 21:41:39 | 000,001,464 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\XnView.lnk
[2012.12.10 17:05:01 | 000,000,785 | ---- | M] () -- C:\WINNT\APDFPRP.INI
[2012.12.10 15:46:13 | 000,002,543 | ---- | M] () -- C:\WINNT\System32\CONFIG.NT
[2012.12.10 14:51:37 | 000,000,002 | ---- | M] () -- C:\WINNT\System32\Dvbpws.dll
[2012.12.09 19:27:54 | 000,000,530 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avonet.lnk
[2012.12.09 18:16:38 | 000,023,680 | ---- | M] () -- E:\DOKUMENTY\pinfect.zip
[2012.12.09 17:35:38 | 000,000,056 | ---- | M] () -- C:\WINNT\Lic.xxx
[2012.12.09 17:30:27 | 000,000,765 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\MWAVSCAN.lnk
[2012.12.07 19:25:36 | 000,000,805 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\BSplayer.lnk
[2012.12.07 19:16:00 | 000,000,069 | ---- | M] () -- C:\WINNT\NeroDigital.ini
[2012.12.06 20:29:31 | 000,000,027 | ---- | M] () -- C:\WINNT\System32\drivers\etc\hosts
[2012.12.06 15:58:42 | 000,000,335 | RHS- | M] () -- C:\boot.ini
[2012.12.05 17:09:08 | 000,000,664 | ---- | M] () -- C:\WINNT\System32\d3d9caps.dat
[2012.12.04 23:25:20 | 000,002,548 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012.12.04 21:08:20 | 000,003,415 | ---- | M] () -- C:\WINNT\WTRAN32.INI
[2012.12.04 20:58:29 | 000,299,424 | ---- | M] (Marvell) -- C:\WINNT\System32\drivers\yk51x86.sys
[2012.12.03 20:07:34 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\WINNT\System32\drivers\dtsoftbus01.sys
[2012.12.03 14:53:11 | 000,034,048 | ---- | M] (MicroWorld Technologies Inc.) -- C:\WINNT\System32\eEmpty.exe
[2012.12.02 18:45:39 | 000,020,137 | ---- | M] () -- C:\WINNT\Ascd_tmp.ini
[2012.12.01 19:49:58 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.12.01 11:20:55 | 000,110,992 | ---- | M] () -- C:\WINNT\System32\FNTCACHE.DAT
[2012.12.01 10:54:59 | 000,000,913 | ---- | M] () -- C:\WINNT\ODBC.INI
[2012.12.01 10:53:35 | 000,000,734 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - WINWORD.lnk
[2012.11.30 20:22:51 | 000,000,219 | ---- | M] () -- C:\Boot.bak
[2012.11.30 10:14:52 | 000,001,141 | ---- | M] () -- C:\WINNT\WDICT32.INI
[2012.11.29 15:50:37 | 000,000,206 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Jednotka CD-ROM.lnk
[2012.11.29 15:48:10 | 000,000,275 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Místní disk (E).lnk
[2012.11.29 15:48:05 | 000,000,275 | ---- | M] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Místní disk (D).lnk
[2012.11.29 13:55:58 | 000,002,369 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Nero StartSmart Essentials.lnk
[2012.11.29 13:52:22 | 000,316,640 | ---- | M] () -- C:\WINNT\WMSysPr9.prx
[2012.11.29 13:40:47 | 000,002,206 | ---- | M] () -- C:\WINNT\System32\wpa.dbl
[2012.11.29 13:34:01 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2012.11.29 13:34:01 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2012.11.29 12:52:31 | 000,025,065 | ---- | M] () -- C:\WINNT\System32\wmpscheme.xml
[2012.11.29 12:50:57 | 000,014,142 | ---- | M] () -- C:\WINNT\System32\$winnt$.inf
[2012.11.29 12:49:19 | 000,299,552 | ---- | M] () -- C:\WINNT\WMSysPrx.prx
[2012.11.29 12:49:19 | 000,023,392 | ---- | M] () -- C:\WINNT\System32\nscompat.tlb
[2012.11.29 12:49:19 | 000,016,832 | ---- | M] () -- C:\WINNT\System32\amcompat.tlb
[2012.11.29 12:49:11 | 000,004,351 | ---- | M] () -- C:\WINNT\ODBCINST.INI
[2012.11.29 12:46:51 | 000,022,364 | ---- | M] () -- C:\WINNT\System32\emptyregdb.dat
[2012.11.29 12:46:30 | 000,000,595 | ---- | M] () -- C:\WINNT\System32\mapisvc.inf
[2012.11.29 12:25:58 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012.11.29 12:25:58 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012.11.29 12:25:58 | 000,000,000 | -H-- | M] () -- C:\CONFIG.SYS
[2012.11.29 12:25:37 | 000,022,034 | -H-- | M] () -- C:\Program Files\folder.htt
[2012.11.29 12:25:37 | 000,021,770 | -H-- | M] () -- C:\WINNT\System32\folder.htt
[2012.11.29 12:25:37 | 000,021,770 | -H-- | M] () -- C:\WINNT\folder.htt
[2 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.12.10 21:41:39 | 000,001,464 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\XnView.lnk
[2012.12.10 17:04:59 | 000,000,785 | ---- | C] () -- C:\WINNT\APDFPRP.INI
[2012.12.10 14:51:37 | 000,000,002 | ---- | C] () -- C:\WINNT\System32\Dvbpws.dll
[2012.12.09 19:03:04 | 000,000,530 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avonet.lnk
[2012.12.09 17:31:36 | 000,000,056 | ---- | C] () -- C:\WINNT\Lic.xxx
[2012.12.09 17:30:27 | 000,000,765 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\MWAVSCAN.lnk
[2012.12.07 19:25:36 | 000,000,805 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\BSplayer.lnk
[2012.12.06 15:49:11 | 2146,750,464 | -HS- | C] () -- C:\hiberfil.sys
[2012.12.05 19:55:50 | 000,000,219 | ---- | C] () -- C:\Boot.bak
[2012.12.05 19:55:48 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2012.12.03 15:11:28 | 000,023,680 | ---- | C] () -- E:\DOKUMENTY\pinfect.zip
[2012.12.02 18:45:33 | 000,020,137 | ---- | C] () -- C:\WINNT\Ascd_tmp.ini
[2012.12.01 19:49:58 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.12.01 10:54:53 | 000,002,042 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Excel.lnk
[2012.12.01 10:53:35 | 000,000,734 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - WINWORD.lnk
[2012.12.01 10:52:54 | 000,000,913 | ---- | C] () -- C:\WINNT\ODBC.INI
[2012.12.01 10:52:47 | 000,002,084 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Word.lnk
[2012.11.30 17:25:26 | 000,000,286 | -H-- | C] () -- C:\WINNT\tasks\avast! Emergency Update.job
[2012.11.30 11:10:43 | 000,165,376 | ---- | C] () -- C:\WINNT\System32\unrar.dll
[2012.11.30 11:10:43 | 000,000,414 | ---- | C] () -- C:\WINNT\System32\lame_acm.xml
[2012.11.30 11:10:42 | 003,596,288 | ---- | C] () -- C:\WINNT\System32\qt-dx331.dll
[2012.11.30 11:10:42 | 000,881,664 | ---- | C] () -- C:\WINNT\System32\xvidcore.dll
[2012.11.30 11:10:42 | 000,205,824 | ---- | C] () -- C:\WINNT\System32\xvidvfw.dll
[2012.11.30 11:10:40 | 000,085,504 | ---- | C] () -- C:\WINNT\System32\ff_vfw.dll
[2012.11.30 11:05:33 | 000,000,069 | ---- | C] () -- C:\WINNT\NeroDigital.ini
[2012.11.30 10:50:12 | 000,363,520 | ---- | C] () -- C:\WINNT\System32\PsisDecd.dll
[2012.11.30 10:50:12 | 000,363,520 | ---- | C] () -- C:\WINNT\System32\dllcache\psisdecd.dll
[2012.11.30 10:50:12 | 000,056,832 | ---- | C] () -- C:\WINNT\System32\MSDvbNP.ax
[2012.11.30 10:50:12 | 000,056,832 | ---- | C] () -- C:\WINNT\System32\dllcache\msdvbnp.ax
[2012.11.30 10:50:11 | 000,033,280 | ---- | C] () -- C:\WINNT\System32\PsisRndr.ax
[2012.11.30 10:50:11 | 000,033,280 | ---- | C] () -- C:\WINNT\System32\dllcache\psisrndr.ax
[2012.11.30 10:14:27 | 000,001,141 | ---- | C] () -- C:\WINNT\WDICT32.INI
[2012.11.30 10:14:16 | 000,003,415 | ---- | C] () -- C:\WINNT\WTRAN32.INI
[2012.11.29 15:58:02 | 000,024,576 | R--- | C] () -- C:\WINNT\System32\AsIO.dll
[2012.11.29 15:58:02 | 000,005,685 | R--- | C] () -- C:\WINNT\System32\drivers\AsIO.sys
[2012.11.29 15:58:00 | 000,005,120 | ---- | C] () -- C:\WINNT\System32\drivers\AsInsHelp64.sys
[2012.11.29 15:58:00 | 000,003,328 | ---- | C] () -- C:\WINNT\System32\drivers\AsInsHelp32.sys
[2012.11.29 15:56:57 | 000,001,806 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader 7.0.lnk
[2012.11.29 15:50:37 | 000,000,206 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Jednotka CD-ROM.lnk
[2012.11.29 15:48:10 | 000,000,275 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Místní disk (E).lnk
[2012.11.29 15:48:05 | 000,000,275 | ---- | C] () -- C:\Documents and Settings\skrcek\Plocha\Zástupce - Místní disk (D).lnk
[2012.11.29 15:37:59 | 000,520,192 | ---- | C] () -- C:\WINNT\System32\ati2sgag.exe
[2012.11.29 15:37:56 | 000,011,557 | R--- | C] () -- C:\WINNT\atiogl.xml
[2012.11.29 15:37:55 | 000,007,069 | R--- | C] () -- C:\WINNT\System32\atifglpf.xml
[2012.11.29 15:37:54 | 000,972,072 | R--- | C] () -- C:\WINNT\System32\ativva6x.dat
[2012.11.29 15:37:49 | 003,107,788 | R--- | C] () -- C:\WINNT\System32\ativva5x.dat
[2012.11.29 15:37:47 | 003,107,788 | R--- | C] () -- C:\WINNT\System32\ativvaxx.dat
[2012.11.29 15:37:47 | 000,144,357 | R--- | C] () -- C:\WINNT\System32\atiicdxx.dat
[2012.11.29 15:37:44 | 001,311,202 | R--- | C] () -- C:\WINNT\System32\drivers\ativcaxx.cpa
[2012.11.29 15:37:44 | 000,002,096 | R--- | C] () -- C:\WINNT\System32\drivers\ativdkxx.vp
[2012.11.29 15:37:43 | 000,043,152 | R--- | C] () -- C:\WINNT\System32\drivers\ativvpxx.vp
[2012.11.29 15:37:43 | 000,002,096 | R--- | C] () -- C:\WINNT\System32\drivers\ativckxx.vp
[2012.11.29 15:37:43 | 000,000,929 | R--- | C] () -- C:\WINNT\System32\drivers\ativcaxx.vp
[2012.11.29 14:23:29 | 000,000,664 | ---- | C] () -- C:\WINNT\System32\d3d9caps.dat
[2012.11.29 13:55:58 | 000,002,369 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Nero StartSmart Essentials.lnk
[2012.11.29 13:42:04 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Internet Explorer.lnk
[2012.11.29 13:36:07 | 000,316,640 | ---- | C] () -- C:\WINNT\WMSysPr9.prx
[2012.11.29 13:35:48 | 000,239,616 | ---- | C] () -- C:\WINNT\System32\wstrenderer.ax
[2012.11.29 13:35:48 | 000,164,352 | ---- | C] () -- C:\WINNT\System32\wstpager.ax
[2012.11.29 13:35:48 | 000,053,248 | ---- | C] () -- C:\WINNT\System32\vbicodec.ax
[2012.11.29 13:35:45 | 000,129,045 | ---- | C] () -- C:\WINNT\System32\drivers\cxthsfs2.cty
[2012.11.29 13:35:45 | 000,067,866 | ---- | C] () -- C:\WINNT\System32\drivers\netwlan5.img
[2012.11.29 13:35:45 | 000,064,352 | ---- | C] () -- C:\WINNT\System32\drivers\ativmc20.cod
[2012.11.29 13:35:43 | 000,081,920 | ---- | C] () -- C:\WINNT\System32\ieencode.dll
[2012.11.29 13:35:42 | 000,118,272 | ---- | C] () -- C:\WINNT\System32\mpeg2data.ax
[2012.11.29 13:13:59 | 000,000,335 | RHS- | C] () -- C:\boot.ini
[2012.11.29 13:13:56 | 000,014,142 | ---- | C] () -- C:\WINNT\System32\$winnt$.inf
[2012.11.29 13:04:00 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\skrcek\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.11.29 13:00:38 | 000,005,810 | R--- | C] () -- C:\WINNT\System32\drivers\ASACPI.sys
[2012.11.29 13:00:21 | 000,005,824 | ---- | C] () -- C:\WINNT\System32\drivers\ASUSHWIO.SYS
[2012.11.29 12:52:24 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\skrcek\Nabídka Start\Programy\Windows Media Player.lnk
[2012.11.29 12:50:53 | 000,002,048 | --S- | C] () -- C:\WINNT\bootstat.dat
[2012.11.29 12:50:32 | 000,175,104 | ---- | C] () -- C:\WINNT\System32\dllcache\pintlcsa.dll
[2012.11.29 12:50:20 | 001,158,818 | ---- | C] () -- C:\WINNT\System32\dllcache\korwbrkr.lex
[2012.11.29 12:50:15 | 000,059,392 | ---- | C] () -- C:\WINNT\System32\dllcache\imscinst.exe
[2012.11.29 12:50:14 | 000,196,665 | ---- | C] () -- C:\WINNT\System32\dllcache\imjpinst.exe
[2012.11.29 12:50:12 | 000,134,339 | ---- | C] () -- C:\WINNT\System32\dllcache\imekr.lex
[2012.11.29 12:49:58 | 013,463,552 | ---- | C] () -- C:\WINNT\System32\dllcache\hwxjpn.dll
[2012.11.29 12:49:51 | 000,108,827 | ---- | C] () -- C:\WINNT\System32\dllcache\hanja.lex
[2012.11.29 12:49:43 | 000,173,568 | ---- | C] () -- C:\WINNT\System32\dllcache\chtskf.dll
[2012.11.29 12:49:20 | 000,025,065 | ---- | C] () -- C:\WINNT\System32\wmpscheme.xml
[2012.11.29 12:49:19 | 000,299,552 | ---- | C] () -- C:\WINNT\WMSysPrx.prx
[2012.11.29 12:48:19 | 004,399,505 | ---- | C] () -- C:\WINNT\System32\dllcache\nls302en.lex
[2012.11.29 12:47:47 | 000,048,680 | -HS- | C] () -- C:\WINNT\winnt256.bmp
[2012.11.29 12:47:47 | 000,048,680 | -HS- | C] () -- C:\WINNT\winnt.bmp
[2012.11.29 12:47:42 | 000,000,984 | ---- | C] () -- C:\WINNT\System32\dllcache\srframe.mmf
[2012.11.29 12:46:12 | 000,001,161 | ---- | C] () -- C:\WINNT\System32\usrlogon.cmd
[2012.11.29 12:46:11 | 000,003,286 | ---- | C] () -- C:\WINNT\System32\tslabels.h
[2012.11.29 12:46:07 | 000,003,568 | ---- | C] () -- C:\WINNT\System32\fxsperf.ini
[2012.11.29 12:46:07 | 000,001,361 | ---- | C] () -- C:\WINNT\System32\fxscount.h
[2012.11.29 12:46:01 | 000,063,488 | ---- | C] () -- C:\WINNT\System32\wmimgmt.msc
[2012.11.29 12:42:28 | 001,685,606 | ---- | C] () -- C:\WINNT\System32\dllcache\sam.spd
[2012.11.29 12:42:28 | 000,605,050 | ---- | C] () -- C:\WINNT\System32\dllcache\r1033tts.lxa
[2012.11.29 12:42:28 | 000,000,888 | ---- | C] () -- C:\WINNT\System32\dllcache\sam.sdf
[2012.11.29 12:42:27 | 000,643,717 | ---- | C] () -- C:\WINNT\System32\dllcache\ltts1033.lxa
[2012.11.29 12:42:13 | 000,809,394 | ---- | C] () -- C:\WINNT\System32\dllcache\NT5IIS.CAT
[2012.11.29 12:42:13 | 000,657,548 | ---- | C] () -- C:\WINNT\System32\dllcache\CLASSES.CAT
[2012.11.29 12:42:13 | 000,399,670 | ---- | C] () -- C:\WINNT\System32\dllcache\MAPIMIG.CAT
[2012.11.29 12:42:13 | 000,390,168 | ---- | C] () -- C:\WINNT\System32\dllcache\WFC.CAT
[2012.11.29 12:42:13 | 000,056,081 | ---- | C] () -- C:\WINNT\System32\dllcache\DAJAVAC.CAT
[2012.11.29 12:42:13 | 000,052,311 | ---- | C] () -- C:\WINNT\System32\dllcache\DX3.CAT
[2012.11.29 12:42:13 | 000,037,509 | ---- | C] () -- C:\WINNT\System32\dllcache\MW770.CAT
[2012.11.29 12:42:13 | 000,022,151 | ---- | C] () -- C:\WINNT\System32\dllcache\TCLASSES.CAT
[2012.11.29 12:42:13 | 000,021,281 | ---- | C] () -- C:\WINNT\System32\dllcache\XMLDSOC.CAT
[2012.11.29 12:42:13 | 000,014,031 | ---- | C] () -- C:\WINNT\System32\dllcache\MSJDBC.CAT
[2012.11.29 12:42:13 | 000,013,497 | ---- | C] () -- C:\WINNT\System32\dllcache\HPCRDP.CAT
[2012.11.29 12:42:13 | 000,008,599 | ---- | C] () -- C:\WINNT\System32\dllcache\IASNT4.CAT
[2012.11.29 12:42:13 | 000,007,382 | ---- | C] () -- C:\WINNT\System32\dllcache\OEMBIOS.CAT
[2012.11.29 12:29:14 | 000,002,548 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012.11.29 12:25:58 | 000,023,392 | ---- | C] () -- C:\WINNT\System32\nscompat.tlb
[2012.11.29 12:25:58 | 000,016,832 | ---- | C] () -- C:\WINNT\System32\amcompat.tlb
[2012.11.29 12:25:58 | 000,002,543 | ---- | C] () -- C:\WINNT\System32\CONFIG.NT
[2012.11.29 12:25:58 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012.11.29 12:25:58 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2012.11.29 12:25:58 | 000,000,000 | -H-- | C] () -- C:\CONFIG.SYS
[2012.11.29 12:25:37 | 000,022,034 | -H-- | C] () -- C:\Program Files\folder.htt
[2012.11.29 12:25:37 | 000,021,770 | -H-- | C] () -- C:\WINNT\System32\folder.htt
[2012.11.29 12:25:37 | 000,021,770 | -H-- | C] () -- C:\WINNT\folder.htt
[2012.11.29 12:25:07 | 000,000,595 | ---- | C] () -- C:\WINNT\System32\mapisvc.inf
[2012.11.29 12:25:01 | 000,022,364 | ---- | C] () -- C:\WINNT\System32\emptyregdb.dat
[2012.11.29 12:24:12 | 000,002,048 | ---- | C] () -- C:\WINNT\System32\n2k.bmp
[2012.11.29 12:24:12 | 000,001,584 | ---- | C] () -- C:\WINNT\System32\tunes.bmp
[2012.11.29 12:24:04 | 000,009,522 | ---- | C] () -- C:\WINNT\Zapotec.bmp
[2012.11.29 12:24:03 | 000,065,978 | ---- | C] () -- C:\WINNT\Mýdlové bubliny.bmp
[2012.11.29 12:24:03 | 000,065,954 | ---- | C] () -- C:\WINNT\Prérijní vítr.bmp
[2012.11.29 12:24:03 | 000,065,832 | ---- | C] () -- C:\WINNT\Omítka Santa Fe.bmp
[2012.11.29 12:24:03 | 000,026,680 | ---- | C] () -- C:\WINNT\Řeka Sumida.bmp
[2012.11.29 12:24:03 | 000,026,582 | ---- | C] () -- C:\WINNT\Zelený kámen.bmp
[2012.11.29 12:24:03 | 000,017,362 | ---- | C] () -- C:\WINNT\Rododendron.bmp
[2012.11.29 12:24:03 | 000,017,336 | ---- | C] () -- C:\WINNT\Na rybách.bmp
[2012.11.29 12:24:03 | 000,017,062 | ---- | C] () -- C:\WINNT\Zrnko kávy.bmp
[2012.11.29 12:24:03 | 000,016,730 | ---- | C] () -- C:\WINNT\Textura peří.bmp
[2012.11.29 12:24:03 | 000,001,272 | ---- | C] () -- C:\WINNT\Modrá krajka 16.bmp
[2012.11.29 12:23:59 | 000,000,768 | ---- | C] () -- C:\WINNT\System32\msdtcprf.h
[2012.11.29 12:16:33 | 000,004,351 | ---- | C] () -- C:\WINNT\ODBCINST.INI
[2012.11.29 12:16:22 | 000,000,450 | ---- | C] () -- C:\WINNT\System32\AUTOEXEC.NT
[2012.11.29 12:16:02 | 000,110,992 | ---- | C] () -- C:\WINNT\System32\FNTCACHE.DAT

========== ZeroAccess Check ==========

[2012.11.29 15:39:05 | 000,000,227 | RHS- | M] () -- C:\WINNT\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2004.09.29 19:49:27 | 001,483,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2004.08.17 15:49:08 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2004.08.17 15:49:20 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.11.30 17:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.12.03 20:10:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2012.12.03 14:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
[2012.12.10 19:08:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\skrcek\Data aplikací\DAEMON Tools Lite
[2012.12.10 17:05:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\skrcek\Data aplikací\Mp3tag
[2012.12.10 21:51:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\skrcek\Data aplikací\XnView

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2012.11.30 20:22:51 | 000,000,219 | ---- | M] () -- C:\Boot.bak
[2012.12.06 15:58:42 | 000,000,335 | RHS- | M] () -- C:\boot.ini
[2001.10.25 12:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2004.08.03 23:00:04 | 000,261,312 | RHS- | M] () -- C:\cmldr
[2012.11.29 12:25:58 | 000,000,000 | -H-- | M] () -- C:\CONFIG.SYS
[2012.12.11 18:41:31 | 2146,750,464 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.29 12:25:58 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012.11.29 12:25:58 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012.11.29 13:34:01 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2012.11.29 13:34:01 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2012.12.11 18:41:31 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINNT\system32\*.tmp files -> C:\WINNT\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2012.11.29 13:40:48 | 000,262,144 | ---- | M] () -- C:\WINNT\System32\config\default.sav
[2012.11.29 12:29:18 | 000,020,480 | ---- | M] () -- C:\WINNT\System32\config\security.sav
[2012.11.29 13:40:48 | 006,291,456 | ---- | M] () -- C:\WINNT\System32\config\software.sav
[2012.11.29 13:40:50 | 002,359,296 | ---- | M] () -- C:\WINNT\System32\config\system.sav

< %systemroot%\system32\drivers\*.sys /90 >
[2012.10.30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aavmker4.sys
[2012.10.30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswFsBlk.sys
[2012.10.30 23:51:57 | 000,089,752 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswmon.sys
[2012.10.30 23:51:57 | 000,097,608 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswmon2.sys
[2012.10.30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswRdr.sys
[2012.10.30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswSnx.sys
[2012.10.30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswSP.sys
[2012.10.30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) -- C:\WINNT\system32\drivers\aswTdi.sys
[2012.12.03 20:07:34 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\WINNT\system32\drivers\dtsoftbus01.sys
[2012.09.29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\WINNT\system32\drivers\mbam.sys
[2012.09.23 15:28:00 | 012,557,728 | ---- | M] (NVIDIA Corporation) -- C:\WINNT\system32\drivers\nv4_mini.sys
[2012.12.04 20:58:29 | 000,299,424 | ---- | M] (Marvell) -- C:\WINNT\system32\drivers\yk51x86.sys

< End of report >

[lugr]

OTL Extras logfile created on: 11.12.2012 18:45:07 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\skrcek\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,66 Gb Available Physical Memory | 82,98% Memory free
3,85 Gb Paging File | 3,68 Gb Available in Paging File | 95,64% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 10,10 Gb Free Space | 51,70% Space Free | Partition Type: NTFS
Drive D: | 54,99 Gb Total Space | 17,10 Gb Free Space | 31,10% Space Free | Partition Type: NTFS
Drive E: | 465,76 Gb Total Space | 131,05 Gb Free Space | 28,14% Space Free | Partition Type: NTFS

Computer Name: SKRCEK-5DE342BF | User Name: skrcek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Java\jre7\bin\javaw.exe" = C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00110405-78E1-11D2-B60F-006097C998E7}" = Microsoft Excel 2000
"{00170405-78E1-11D2-B60F-006097C998E7}" = Microsoft Word 2000
"{05121C4B-19D3-4AB8-B275-FE4B60E0C4E1}" = WinFast DTV2000 H Driver
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07A2B037-650B-A461-75B9-E18053D64A91}" = Catalyst Control Center Graphics Full New
"{17359C81-34C3-F709-865F-638160B6619C}" = Catalyst Control Center Localization French
"{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}" = Cool & Quiet
"{1B7C82F3-573E-7412-8F2A-4CEE255A95E2}" = Catalyst Control Center Localization Dutch
"{1C00A3F1-6DA0-49F8-94E4-01AB6FC01029}" = Nero 7 Essentials
"{1E05A242-7CE4-095F-9954-223FE45F2099}" = Catalyst Control Center Graphics Full Existing
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands
"{25015AC3-29D9-61C7-C45D-1E70FCC4E722}" = CCC Help Japanese
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}" = NVIDIA PhysX
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{3924D5F3-A7B7-EC00-18F6-4A74281B1ED5}" = Catalyst Control Center Localization Finnish
"{394CA960-5F19-6874-F7A2-736200927B7C}" = Catalyst Control Center Localization Japanese
"{3D654496-9C3D-4565-858C-3E551ECDA4E2}" = Virtual Cable Tester
"{3DFAEA01-04E6-534F-681B-403F463B619B}" = CCC Help German
"{3E607825-C9C7-BE1C-D5AE-171DE32D1B14}" = CCC Help Chinese Traditional
"{416AA47D-D4E7-0A9E-0195-5003FC250FBC}" = CCC Help Danish
"{419B6A9F-E545-E006-C1E1-F21D9985B500}" = CCC Help Dutch
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB2CF2C-22A7-35A8-ED50-C03CD22C1E25}" = Catalyst Control Center Localization Chinese Standard
"{50235451-4864-670F-B796-6F3BCEC00DF2}" = CCC Help English
"{54C1F9C4-AA05-0F4A-5021-AFAECC08ED4A}" = ccc-core-preinstall
"{5AFB0771-41BA-BD25-0563-7C45034998A3}" = CCC Help Spanish
"{6F716DAC-398F-11D3-85E1-005004838609}" = WebFldrs
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{744A5A7C-BE94-A322-DBA2-F5AFD2D238DD}" = Catalyst Control Center Localization Italian
"{7A46C9B3-10DB-0B17-7EBA-E4E12A053459}" = Catalyst Control Center Localization German
"{82B1150E-9B37-49FC-83EB-D52197D900D0}" = Sunbelt Personal Firewall
"{897EE754-0C1E-B843-D033-16DB43990D66}" = Catalyst Control Center Localization Norwegian
"{98F1EF12-13AC-4292-FA6F-700E70CA0CEE}" = Catalyst Control Center Localization Chinese Traditional
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A8C15CF-AF92-95FC-2229-CEAA77E3D9B3}" = CCC Help Finnish
"{9D2CACFA-89B2-52AE-9570-5BE31561AE0E}" = CCC Help Swedish
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.12.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{C92C584E-C781-475E-A8E2-C67D993A6B95}" = WinFast PVR2
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{C9CC6EA7-6C0F-D7B0-B878-A461738A6817}" = ccc-utility
"{D1DEA031-3902-67E6-5778-D315CD037ECB}" = Catalyst Control Center Core Implementation
"{D78FA740-A26E-1C40-E1F8-E51182D5D8E6}" = Skins
"{D886EC4B-36CD-F37B-90B0-C071CA3B1A1A}" = CCC Help Chinese Standard
"{D9EFA162-2DE9-6345-89EE-9614B3D8199D}" = CCC Help Norwegian
"{DBA750B4-B243-1B0C-45B1-F79898E41B7C}" = CCC Help Italian
"{DCC1E6DA-28B8-9C23-F30C-B76408406074}" = Catalyst Control Center Localization Swedish
"{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe 1.4.124.1
"{E1CB2184-B0A7-B761-BD39-EE54481FAC59}" = Catalyst Control Center Localization Danish
"{E39041F7-6F24-439A-99BC-C2163BB1429B}" = Catalyst Control Center - Branding
"{E80478C9-E171-22FD-AFF4-44E25F065D98}" = Catalyst Control Center Localization Spanish
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F8616434-9594-D905-4CCD-5F89B00673EE}" = CCC Help French
"{F8955661-564D-C5B3-1FB0-BD17795E7EC4}" = ccc-core-static
"{FB3A14A0-217B-75F0-50B3-FCED5C21C30C}" = Catalyst Control Center Graphics Light
"3FA1705966809259F916AF817C59B4F389F4572C" = Balíček ovladače systému Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"avast" = avast! Free Antivirus
"BSPlayer1" = BSPlayer
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"Google Chrome" = Google Chrome
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.8.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.65.1.1000
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Recuva" = Recuva
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 2
"XnView_is1" = XnView 1.92

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 29.11.2012 10:07:04 | Computer Name = SKRCEK-5DE342BF | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
se nezdařilo. Chyba: Takové síťové připojení neexistuje.

Error - 29.11.2012 10:07:04 | Computer Name = SKRCEK-5DE342BF | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
se nezdařilo. Chyba: Takové síťové připojení neexistuje.

Error - 29.11.2012 10:11:33 | Computer Name = SKRCEK-5DE342BF | Source = Application Error | ID = 1000
Description = Chybující aplikace nvstereoutilityogl.exe, verze 1.0.0.1, chybující
modul unknown, verze 0.0.0.0, adresa chyby 0x00000000.

Error - 30.11.2012 11:57:18 | Computer Name = SKRCEK-5DE342BF | Source = ESENT | ID = 491
Description = svchost (828) Pokus o určení velikosti vstupně-výstupního bloku pro
svazek C:\ obsahující C:\WINNT\system32\CatRoot2\ se nezdařil. Došlo k systémové
chybě 5 (0x00000005): Přístup byl odepřen. . Operace se nezdaří a dojde k chybě
-1032 (0xfffffbf8).

Error - 30.11.2012 11:57:19 | Computer Name = SKRCEK-5DE342BF | Source = ESENT | ID = 491
Description = svchost (828) Pokus o určení velikosti vstupně-výstupního bloku pro
svazek C:\ obsahující C:\WINNT\system32\CatRoot2\ se nezdařil. Došlo k systémové
chybě 5 (0x00000005): Přístup byl odepřen. . Operace se nezdaří a dojde k chybě
-1032 (0xfffffbf8).

Error - 30.11.2012 15:22:48 | Computer Name = SKRCEK-5DE342BF | Source = MsiInstaller | ID = 1013
Description = Product: NVIDIA PhysX v8.10.29 -- Installation terminated

Error - 2.12.2012 6:43:27 | Computer Name = SKRCEK-5DE342BF | Source = Application Error | ID = 1000
Description = Chybující aplikace setup.exe, verze 11.0.0.379, chybující modul unknown,
verze 0.0.0.0, adresa chyby 0x00000047.

Error - 4.12.2012 15:34:11 | Computer Name = SKRCEK-5DE342BF | Source = EventSystem | ID = 4609
Description = Systém událostí modelu COM+ zjistil při vnitřním zpracovávání chybný
návratový kód. Hodnota HRESULT byla 800706BA z řádku 44 v d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.Obraťte
se na služby odborné pomoci společnosti Microsoft a informujte je o této chyb

Error - 5.12.2012 7:18:58 | Computer Name = SKRCEK-5DE342BF | Source = EventSystem | ID = 4609
Description = Systém událostí modelu COM+ zjistil při vnitřním zpracovávání chybný
návratový kód. Hodnota HRESULT byla 800706BF z řádku 44 v d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.Obraťte
se na služby odborné pomoci společnosti Microsoft a informujte je o této chyb

Error - 5.12.2012 17:06:56 | Computer Name = SKRCEK-5DE342BF | Source = Microsoft Fax | ID = 32045
Description = Inicializace služby Fax se nezdařila z důvodu chyby při inicializaci
zařízení TAPI. Zkontrolujte, zda je modem správně nainstalován a nakonfigurován.
Kód
chyby Win32: -2147483576. Tento kód chyby určuje její příčinu.

[ System Events ]
Error - 2.12.2012 16:43:18 | Computer Name = SKRCEK-5DE342BF | Source = DCOM | ID = 10010
Description = Server {BA126AE5-2166-11D1-B1D0-00805FC1270E} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 2.12.2012 16:43:48 | Computer Name = SKRCEK-5DE342BF | Source = DCOM | ID = 10010
Description = Server {BA126AE5-2166-11D1-B1D0-00805FC1270E} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 2.12.2012 16:44:18 | Computer Name = SKRCEK-5DE342BF | Source = DCOM | ID = 10010
Description = Server {BA126AE5-2166-11D1-B1D0-00805FC1270E} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC80.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC80.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\WINNT\system32\dpl100.dll se nezdařila.
Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC80.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC80.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .

Error - 3.12.2012 8:20:49 | Computer Name = SKRCEK-5DE342BF | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\WINNT\system32\dpl100.dll se nezdařila.
Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 3.12.2012 9:43:26 | Computer Name = SKRCEK-5DE342BF | Source = BROWSER | ID = 8032
Description = Službě Browser se při přenosu \Device\NetBT_Tcpip_{E7C7D36C-7AB8-4F57-A020-0EEF0A2D389D}
příliš často nezdařilo načíst záložní seznam. Záložní prohledávač bude ukončen.


< End of report >

[jaro3]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | System | Stopped] -- -- (tga)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll File not found
O1 HOSTS File: ([2012.12.06 20:29:31 | 000,000,027 | ---- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: DirectAnimation Java Classes file://C:\WINNT\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINNT\Java\classes\xmldso.cab (Reg Error: Key error.)
[2 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[2012.12.11 18:45:44 | 000,397,692 | ---- | M] () -- C:\WINNT\System32\perfh009.dat
[2012.12.11 18:45:44 | 000,395,890 | ---- | M] () -- C:\WINNT\System32\perfh005.dat
[2012.12.11 18:45:44 | 000,070,358 | ---- | M] () -- C:\WINNT\System32\perfc005.dat
[2012.12.11 18:45:44 | 000,060,522 | ---- | M] () -- C:\WINNT\System32\perfc009.dat
C:\Documents and Settings\skrcek\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\WINNT\system32\x
C:\WINNT\System32\d3d9caps.dat

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
""=""%1" %*"

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\WINNT\System32\Dvbpws.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Windows XP Professional Edition Service Pack 2---doinstaluj si SP3!

[lugr]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Service WDICA stopped successfully!
Service WDICA deleted successfully!
Service tga stopped successfully!
Service tga deleted successfully!
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
Service Changer stopped successfully!
Service Changer deleted successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
127.0.0.1 localhost removed from HOSTS file successfully
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
File Animation Java Classes file://C:\WINNT\Java\classes\dajava.cab not found.
Starting removal of ActiveX control DirectAnimation Java Classes
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
File oft XML Parser for Java file://C:\WINNT\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
C:\WINNT\002211_.tmp deleted successfully.
C:\WINNT\D56B0E274A3E46C9B5C1D93D580C099C.TMP\WiseCustomCalla.dll deleted successfully.
C:\WINNT\D56B0E274A3E46C9B5C1D93D580C099C.TMP folder deleted successfully.
C:\WINNT\System32\CONFIG.TMP deleted successfully.
C:\WINNT\system32\perfh009.dat moved successfully.
C:\WINNT\system32\perfh005.dat moved successfully.
C:\WINNT\system32\perfc005.dat moved successfully.
C:\WINNT\system32\perfc009.dat moved successfully.
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\system32\DUMP*.tmp not found.
File\Folder c:\windows\Tasks\*.job not found.
File\Folder C:\*.tmp not found.
File\Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File\Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
File\Folder C:\WINNT\system32\x not found.
C:\WINNT\System32\d3d9caps.dat moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command\\""|""%1" %*" /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2228626 bytes

User: skrcek
->Temp folder emptied: 1912961 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Google Chrome cache emptied: 206960073 bytes
->Flash cache emptied: 492 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 201,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12112012_210359

Files\Folders moved on Reboot...
File move failed. C:\WINNT\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...



https://www.virustotal.com/file/96a296d ... 355257223/

[jaro3]

Spusť OTL a klikni na Vyčisti.

čisto..

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[lugr]

děkuji všem za pomoc už mi kompík chodí jak má .DÍKY.