0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name: BECKER.EXE
Submission date: 2010-08-11 09:27:33 (UTC)
Current status: finished
Result: 3/ 39 (7.7%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.10 -
Avast5 5.0.332.0 2010.08.10 -
AVG 9.0.0.851 2010.08.10 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5712 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 Riskware.Keygen.Becker!IK
eSafe 7.0.17.0 2010.08.09 -
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
F-Secure 9.0.15370.0 2010.08.11 Suspicious:W32/Malware!Gemini
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.87.0 2010.08.11 not-a-virus.Keygen.Becker
Jiangmin 13.0.900 2010.08.10 -
McAfee 5.400.0.1158 2010.08.11 -
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5357 2010.08.11 -
Norman 6.05.11 2010.08.11 -
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6716 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
Symantec 20101.1.1.7 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 -
VBA32 3.12.12.8 2010.08.10 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.10 -
Additional informationShow all
MD5 : 4c826a3f0bf9ac4dff2c888b40978565
SHA1 : ef9bcda1abf0a3bab79dd3ea33d9dd4144857d17
SHA256: 83282cbf7aded592b4423754b814799250f5e107e462793d6fb170a6ea0032cf
Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé RAM Vyřešeno
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
0 VT společenství uživatel (ů) s celkem 0 pověst úvěru (s) říkat (s) Tento vzorek je goodware. 0 VT společenství uživatel (ů) s celkem 0 pověst úvěru (s) říkat (s) Tento vzorek je malware.
Název souboru: BP KÓD calc.exe
Datum podání žádosti: 11.08.2010 12:31:34 (UTC)
Současný stav: hotový
Výsledek: 3/ 41 (7.3%)
VT Společenství
Nezkontrolovali
Bezpečnost skóre: -
Kompaktní
Tisk výsledků
Antivirus Verze Poslední aktualizace Výsledek
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 -
eSafe 7.0.17.0 2010.08.09 -
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
F-Secure 9.0.15370.0 2010.08.11 Suspicious:W32/Malware!Gemini
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.87.0 2010.08.11 -
Jiangmin 13.0.900 2010.08.10 -
Kaspersky 7.0.0.125 2010.08.11 -
McAfee 5.400.0.1158 2010.08.11 Suspect-D!977B7255DA09
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5357 2010.08.11 -
Norman 6.05.11 2010.08.11 W32/Suspicious_Gen.FWBA
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
Symantec 20101.1.1.7 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro 9.120.0.1004 2010.08.11 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.10 -
Další informaceZobrazit všechny
MD5 : 977b7255da0992a6a43d91492452a0b9
SHA1 : c566c9a519e9c7fb3a23533977e5c448161ba2ee
SHA256: d763771ee40c088f71d6ea5ca94052c48bf8740950fb923c8ad81154c943aaa6
Název souboru: BP KÓD calc.exe
Datum podání žádosti: 11.08.2010 12:31:34 (UTC)
Současný stav: hotový
Výsledek: 3/ 41 (7.3%)
VT Společenství
Nezkontrolovali
Bezpečnost skóre: -
Kompaktní
Tisk výsledků
Antivirus Verze Poslední aktualizace Výsledek
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 -
eSafe 7.0.17.0 2010.08.09 -
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
F-Secure 9.0.15370.0 2010.08.11 Suspicious:W32/Malware!Gemini
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.87.0 2010.08.11 -
Jiangmin 13.0.900 2010.08.10 -
Kaspersky 7.0.0.125 2010.08.11 -
McAfee 5.400.0.1158 2010.08.11 Suspect-D!977B7255DA09
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5357 2010.08.11 -
Norman 6.05.11 2010.08.11 W32/Suspicious_Gen.FWBA
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
Symantec 20101.1.1.7 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro 9.120.0.1004 2010.08.11 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.10 -
Další informaceZobrazit všechny
MD5 : 977b7255da0992a6a43d91492452a0b9
SHA1 : c566c9a519e9c7fb3a23533977e5c448161ba2ee
SHA256: d763771ee40c088f71d6ea5ca94052c48bf8740950fb923c8ad81154c943aaa6
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name: CC22.EXE
Submission date: 2010-08-11 14:10:42 (UTC)
Current status: finished
Result: 5/ 39 (12.8%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 Win32.SuspectCrc!IK
eSafe 7.0.17.0 2010.08.11 Win32.Banker
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.88.0 2010.08.11 Win32.SuspectCrc
Jiangmin 13.0.900 2010.08.10 -
McAfee 5.400.0.1158 2010.08.11 -
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5358 2010.08.11 -
Norman 6.05.11 2010.08.11 -
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Prevx 3.0 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro 9.120.0.1004 2010.08.11 TROJ_Generic.ADV
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 TROJ_Generic.ADV
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.11 -
Additional informationShow all
MD5 : 4e1d6f54f7c512443d6f288a0d28159e
SHA1 : 67991e5da7f815149cb6c6231fee8dee7406fe44
SHA256: 1d2045ebc291ec5a2c7a2aeef103eeaf8b9c662b263ee40dc00ba0e51950c155
VT Community
File name: CC22.EXE
Submission date: 2010-08-11 14:10:42 (UTC)
Current status: finished
Result: 5/ 39 (12.8%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 Win32.SuspectCrc!IK
eSafe 7.0.17.0 2010.08.11 Win32.Banker
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.88.0 2010.08.11 Win32.SuspectCrc
Jiangmin 13.0.900 2010.08.10 -
McAfee 5.400.0.1158 2010.08.11 -
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5358 2010.08.11 -
Norman 6.05.11 2010.08.11 -
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Prevx 3.0 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro 9.120.0.1004 2010.08.11 TROJ_Generic.ADV
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 TROJ_Generic.ADV
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.11 -
Additional informationShow all
MD5 : 4e1d6f54f7c512443d6f288a0d28159e
SHA1 : 67991e5da7f815149cb6c6231fee8dee7406fe44
SHA256: 1d2045ebc291ec5a2c7a2aeef103eeaf8b9c662b263ee40dc00ba0e51950c155
VT Community
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
File name: BECKER3.EXE
Submission date: 2010-08-11 14:29:55 (UTC)
Current status: finished
Result: 3/ 40 (7.5%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 Riskware.Keygen.Becker!IK
eSafe 7.0.17.0 2010.08.11 -
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
F-Secure 9.0.15370.0 2010.08.11 Suspicious:W32/Malware!Gemini
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.88.0 2010.08.11 not-a-virus.Keygen.Becker
Jiangmin 13.0.900 2010.08.10 -
McAfee 5.400.0.1158 2010.08.11 -
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5358 2010.08.11 -
Norman 6.05.11 2010.08.11 -
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Prevx 3.0 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
Symantec 20101.1.1.7 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.11 -
Additional informationShow all
MD5 : 4c826a3f0bf9ac4dff2c888b40978565
SHA1 : ef9bcda1abf0a3bab79dd3ea33d9dd4144857d17
SHA256: 83282cbf7aded592b4423754b814799250f5e107e462793d6fb170a6ea0032cf
Submission date: 2010-08-11 14:29:55 (UTC)
Current status: finished
Result: 3/ 40 (7.5%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.11.02 2010.08.11 -
AntiVir 8.2.4.34 2010.08.11 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.11 -
Avast 4.8.1351.0 2010.08.11 -
Avast5 5.0.332.0 2010.08.11 -
AVG 9.0.0.851 2010.08.11 -
BitDefender 7.2 2010.08.11 -
CAT-QuickHeal 11.00 2010.08.11 -
ClamAV 0.96.0.3-git 2010.08.11 -
Comodo 5713 2010.08.11 -
DrWeb 5.0.2.03300 2010.08.11 -
Emsisoft 5.0.0.37 2010.08.11 Riskware.Keygen.Becker!IK
eSafe 7.0.17.0 2010.08.11 -
eTrust-Vet 36.1.7781 2010.08.11 -
F-Prot 4.6.1.107 2010.08.10 -
F-Secure 9.0.15370.0 2010.08.11 Suspicious:W32/Malware!Gemini
Fortinet 4.1.143.0 2010.08.11 -
GData 21 2010.08.11 -
Ikarus T3.1.1.88.0 2010.08.11 not-a-virus.Keygen.Becker
Jiangmin 13.0.900 2010.08.10 -
McAfee 5.400.0.1158 2010.08.11 -
McAfee-GW-Edition 2010.1 2010.08.11 -
Microsoft 1.6004 2010.08.11 -
NOD32 5358 2010.08.11 -
Norman 6.05.11 2010.08.11 -
nProtect 2010-08-11.02 2010.08.11 -
Panda 10.0.2.7 2010.08.10 -
PCTools 7.0.3.5 2010.08.11 -
Prevx 3.0 2010.08.11 -
Rising 22.60.02.04 2010.08.11 -
Sophos 4.56.0 2010.08.11 -
Sunbelt 6717 2010.08.11 -
SUPERAntiSpyware 4.40.0.1006 2010.08.11 -
Symantec 20101.1.1.7 2010.08.11 -
TheHacker 6.5.2.1.342 2010.08.11 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.11 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.11 -
VirusBuster 5.0.27.0 2010.08.11 -
Additional informationShow all
MD5 : 4c826a3f0bf9ac4dff2c888b40978565
SHA1 : ef9bcda1abf0a3bab79dd3ea33d9dd4144857d17
SHA256: 83282cbf7aded592b4423754b814799250f5e107e462793d6fb170a6ea0032cf
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
Pokud jsou tyto složky prázdné , smaž:
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\3948
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\1820
Složky nenalezeny
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\3948
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\1820
Složky nenalezeny
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
OK.
Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:
Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.
+
Poklepej znovu na ikonu OTL by OldTimer, pod Vlastní skenování/opravy (Custom Scans/Fixes) vlož následující text , zeleně zbarvený:
Neměň nastavení, jen klikni na Prohledat (Run Scan), nech sken dokončit. Až se se objeví textový soubor , tak sem vlož prosím jeho celý obsah.
Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:
Kód: Vybrat vše
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\system32\SET*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
c:\windows\temp\httba.tmp
C:\Documents and Settings\Sulcar\Local Settings\Temporary Internet Files\Content.IE5\UBQXWTSJ\CA2BABQH.htm
C:\AUTORADIA\MORE BECKER\BECKER.EXE
C:\AUTORADIA\BLAUPUNKT\BP CODE CALC.EXE
C:\AUTORADIA\BLAUPUNKT\BLAUPUNKT\CC22.EXE
C:\AUTORADIA\BECKER\BECKER3.EXE
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\3948
C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\1820
:Reg
:Commands
[resethosts]
[purity]
[emptytemp]
[EMPTYFLASH]
[start explorer]
[Reboot]
Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.
+
Poklepej znovu na ikonu OTL by OldTimer, pod Vlastní skenování/opravy (Custom Scans/Fixes) vlož následující text , zeleně zbarvený:
Kód: Vybrat vše
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT
Neměň nastavení, jen klikni na Prohledat (Run Scan), nech sken dokončit. Až se se objeví textový soubor , tak sem vlož prosím jeho celý obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder c:\windows\Tasks\*.job not found.
File\Folder C:\*.tmp not found.
File\Folder c:\windows\temp\httba.tmp not found.
File\Folder C:\Documents and Settings\Sulcar\Local Settings\Temporary Internet Files\Content.IE5\UBQXWTSJ\CA2BABQH.htm not found.
C:\AUTORADIA\MORE BECKER\becker.exe moved successfully.
C:\AUTORADIA\BLAUPUNKT\BP code calc.exe moved successfully.
C:\AUTORADIA\BLAUPUNKT\BLAUPUNKT\CC22.exe moved successfully.
C:\AUTORADIA\BECKER\becker3.exe moved successfully.
File\Folder C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\3948 not found.
File\Folder C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\1820 not found.
========== REGISTRY ==========
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Sulcar
->Temp folder emptied: 369867861 bytes
->Temporary Internet Files folder emptied: 2754485 bytes
->Java cache emptied: 29626 bytes
->FireFox cache emptied: 62608211 bytes
->Google Chrome cache emptied: 90202048 bytes
->Flash cache emptied: 1785 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41215 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 501,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: Sulcar
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.9.1 log created on 08112010_185719
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot.
Registry entries deleted on Reboot...
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder c:\windows\Tasks\*.job not found.
File\Folder C:\*.tmp not found.
File\Folder c:\windows\temp\httba.tmp not found.
File\Folder C:\Documents and Settings\Sulcar\Local Settings\Temporary Internet Files\Content.IE5\UBQXWTSJ\CA2BABQH.htm not found.
C:\AUTORADIA\MORE BECKER\becker.exe moved successfully.
C:\AUTORADIA\BLAUPUNKT\BP code calc.exe moved successfully.
C:\AUTORADIA\BLAUPUNKT\BLAUPUNKT\CC22.exe moved successfully.
C:\AUTORADIA\BECKER\becker3.exe moved successfully.
File\Folder C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\3948 not found.
File\Folder C:\DOCUMENTS AND SETTINGS\SULCAR\LOCAL SETTINGS\TEMP\HSPERFDATA_SULCAR\1820 not found.
========== REGISTRY ==========
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Sulcar
->Temp folder emptied: 369867861 bytes
->Temporary Internet Files folder emptied: 2754485 bytes
->Java cache emptied: 29626 bytes
->FireFox cache emptied: 62608211 bytes
->Google Chrome cache emptied: 90202048 bytes
->Flash cache emptied: 1785 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41215 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 501,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: Sulcar
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.9.1 log created on 08112010_185719
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot.
Registry entries deleted on Reboot...
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
OTL logfile created on: 11.8.2010 19:03:44 - Run 2
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Sulcar\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 153,38 Gb Total Space | 54,59 Gb Free Space | 35,59% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KANCELAR
Current User Name: Sulcar
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Sulcar\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\TECDOC_CD\3_2010\db\tbmux32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\eTECH\OrganiserDBServer.exe (Acresso)
PRC - C:\Program Files\eTECH\jre\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)
PRC - C:\WINDOWS\system32\Crypserv.exe (CrypKey (Canada) Ltd.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbkern32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbmux32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Tomcat\bin\tomcat6.exe (Apache Software Foundation)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Sulcar\Plocha\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (Transbase TECDOC CD 3_2010 Service) -- C:\TECDOC_CD\3_2010\db\tbmux32.exe (Transaction Software, D 81829 Munich)
SRV - (WorkshopDBService) -- C:\Program Files\eTECH\OrganiserDBServer.exe (Acresso)
SRV - (Autodata Limited License Service) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)
SRV - (Crypkey License) -- C:\WINDOWS\System32\Crypserv.exe (CrypKey (Canada) Ltd.)
SRV - (SBS_GM_TRANSBASE) -- C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbmux32.exe (Transaction Software, D 81829 Munich)
SRV - (SBS_GM_TOMCAT6) -- C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Tomcat\bin\tomcat6.exe (Apache Software Foundation)
SRV - (TOSHIBA Bluetooth Service) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
========== Driver Services (SafeList) ==========
DRV - (epfwtdir) -- C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (LgBttPort) -- C:\WINDOWS\system32\drivers\lgbtport.sys (LG Electronics Inc.)
DRV - (LGVMODEM) -- C:\WINDOWS\system32\drivers\lgvmodem.sys (LG Electronics Inc.)
DRV - (lgbusenum) -- C:\WINDOWS\system32\drivers\lgbtbus.sys (LG Electronics Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (NSHE) -- C:\WINDOWS\system32\drivers\NSHE.SYS (T0r0 & Tecar Forum 2009)
DRV - (USBModem) -- C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (UsbDiag) -- C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (usbbus) -- C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (NetworkX) -- C:\WINDOWS\system32\ckldrv.sys ()
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (hlemu) -- C:\WINDOWS\System32\drivers\hlemu.SYS (T0r0)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (tosrfusb) -- C:\WINDOWS\system32\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV - (tosrfbd) -- C:\WINDOWS\system32\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV - (Axtmvprt) -- C:\WINDOWS\system32\drivers\axtmvprt.sys (Axesstel)
DRV - (Axtmvmdm) -- C:\WINDOWS\system32\drivers\axtmvmdm.sys (Axesstel)
DRV - (Axtmvflt) -- C:\WINDOWS\system32\drivers\axtmvflt.sys (Axesstel)
DRV - (Tosrfhid) -- C:\WINDOWS\system32\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV - (TosRfSnd) -- C:\WINDOWS\system32\drivers\TosRfSnd.sys (TOSHIBA Corporation)
DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - (tosrfbnp) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV - (tosporte) -- C:\WINDOWS\system32\drivers\tosporte.sys (TOSHIBA Corporation)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Tosrfcom) -- C:\WINDOWS\system32\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV - (tosrfnds) -- C:\WINDOWS\system32\drivers\tosrfnds.sys (TOSHIBA Corporation.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.08.02 09:14:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.08.02 09:14:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.08.03 13:15:53 | 000,000,000 | ---D | M]
[2010.04.12 11:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Extensions
[2010.08.10 07:24:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Firefox\Profiles\0cohzxm4.default\extensions
[2010.04.16 10:07:59 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Firefox\Profiles\0cohzxm4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.08.10 07:24:51 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010.04.26 08:50:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.04.01 18:51:34 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.04.01 18:51:34 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.04.01 18:51:34 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.04.01 18:51:34 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.04.01 18:51:34 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2010.08.11 18:57:22 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
O4 - HKLM..\Run: [pdfFactory Pro Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll ()
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.07.20 15:11:25 | 000,000,000 | ---D | M] - C:\Autoradia -- [ NTFS ]
O32 - AutoRun File - [2010.04.19 08:20:09 | 000,000,000 | ---D | M] - C:\AUTOSERVIS -- [ NTFS ]
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
CREATERESTOREPOINT
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
========== Files/Folders - Created Within 30 Days ==========
[2010.08.11 08:03:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\F-Secure
[2010.08.09 16:47:53 | 000,000,000 | ---D | C] -- C:\RootRepeal
[2010.08.09 11:21:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Plocha\Nová složka
[2010.08.09 10:35:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\QuickScan
[2010.08.07 17:52:34 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.08.07 17:52:02 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sulcar\Plocha\OTL.exe
[2010.08.07 12:14:41 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.08.07 12:14:40 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Sulcar\Recent
[2010.08.06 09:06:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Plocha\xxx
[2010.08.04 08:16:43 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2010.08.03 15:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\TrendMicro
[2010.08.03 13:15:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2010.08.03 08:35:44 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.08.03 08:08:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\Malwarebytes
[2010.08.03 08:08:30 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.08.03 08:08:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2010.08.03 08:08:28 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.08.03 08:08:28 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.08.03 07:57:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010.08.02 09:26:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\Apple Computer
[2010.08.02 09:12:49 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.08.02 09:12:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.08.02 09:11:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.08.02 09:10:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Apple
[2010.08.02 09:10:37 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010.08.02 09:10:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2010.08.02 09:10:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Apple Computer
[2010.07.27 17:48:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Dokumenty\Bluetooth
[2010.07.27 17:45:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Toshiba
[2010.07.27 17:40:17 | 000,113,920 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfbd.sys
[2010.07.27 17:40:17 | 000,041,856 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfusb.sys
[2010.07.27 17:40:16 | 000,073,728 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\Tosrfhid.sys
[2010.07.27 17:40:16 | 000,036,480 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfbnp.sys
[2010.07.27 17:40:15 | 000,064,896 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfcom.sys
[2010.07.27 17:40:15 | 000,053,376 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\TosRfSnd.sys
[2010.07.27 17:40:15 | 000,018,612 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\tosrfnds.sys
[2010.07.27 17:40:06 | 000,041,600 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosporte.sys
[2010.07.27 17:39:21 | 000,000,000 | ---D | C] -- C:\Program Files\Toshiba
[2010.07.14 06:00:28 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010.07.13 08:27:54 | 000,258,048 | ---- | C] (LG Electronics Inc.) -- C:\Documents and Settings\Sulcar\Dokumenty\esn.dll
[2010.07.13 08:27:54 | 000,180,224 | ---- | C] (LG Electronics) -- C:\Documents and Settings\Sulcar\Dokumenty\AuthDll.dll
[2010.07.13 08:27:54 | 000,090,112 | ---- | C] (LG Electronics) -- C:\Documents and Settings\Sulcar\Dokumenty\LGMobileDL.dll
========== Files - Modified Within 30 Days ==========
[2010.08.11 19:04:11 | 003,670,016 | -H-- | M] () -- C:\Documents and Settings\Sulcar\NTUSER.DAT
[2010.08.11 19:00:16 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.08.11 19:00:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.08.11 18:58:03 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Sulcar\ntuser.ini
[2010.08.11 18:57:22 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010.08.11 10:47:52 | 000,153,095 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Plná moc Trefný.jpg
[2010.08.11 10:47:02 | 000,206,461 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000085 - Trefný.jpg
[2010.08.11 07:35:23 | 000,002,266 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Google Chrome.lnk
[2010.08.11 07:30:19 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.08.10 18:08:50 | 000,000,924 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.08.09 18:29:03 | 000,056,834 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB-delete nad 2004.pdf
[2010.08.09 18:27:51 | 000,046,416 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB - servis delete.TIF
[2010.08.09 16:27:56 | 000,028,667 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Dopis Paroulková_3.docx
[2010.08.09 16:13:53 | 000,027,128 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000083.TIF
[2010.08.09 12:13:14 | 000,015,106 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_R28.TIF
[2010.08.09 11:21:02 | 000,030,738 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\ELIT eCat2 Faktura č. 1016118521.TIF
[2010.08.06 10:40:33 | 000,003,360 | ---- | M] () -- C:\WINDOWS\System32\esnecil.ind
[2010.08.06 10:40:33 | 000,000,004 | ---- | M] () -- C:\WINDOWS\vx86036.dat
[2010.08.06 10:37:09 | 000,014,854 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS0001.tif
[2010.08.06 10:34:42 | 000,040,282 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS.tif
[2010.08.05 18:30:23 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sulcar\Plocha\OTL.exe
[2010.08.04 16:13:00 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.08.04 15:42:42 | 000,015,448 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_x.TIF
[2010.08.04 12:51:10 | 000,729,959 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\a4_skoda_octaviatour_autoradio_symphonycd_navod_k_obsluze.pdf
[2010.08.04 09:49:37 | 000,174,671 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_2.jpg
[2010.08.04 08:16:45 | 000,001,512 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Recuva.lnk
[2010.08.03 16:29:26 | 000,250,071 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP4.jpg
[2010.08.03 16:28:45 | 000,295,835 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP3.jpg
[2010.08.03 16:28:00 | 000,284,257 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP2.jpg
[2010.08.03 16:27:06 | 000,251,132 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP1.jpg
[2010.08.03 16:24:27 | 000,469,191 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_3.jpg
[2010.08.03 16:16:59 | 000,948,702 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6.jpg
[2010.08.03 15:33:04 | 000,002,941 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\LOG-PC.zip
[2010.08.03 15:30:45 | 000,002,437 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\HiJackThis.lnk
[2010.08.03 12:31:03 | 000,018,950 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VR6_Aleš.TIF
[2010.08.03 08:35:54 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.08.03 08:08:33 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.08.02 13:38:28 | 001,102,397 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis živnostenský rejstřík Lukáš.jpg
[2010.08.02 09:35:30 | 000,016,122 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Polo_Aleš.TIF
[2010.08.02 08:45:35 | 001,117,693 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Hlášení pojistné události.jpg
[2010.08.02 08:44:39 | 000,226,497 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný_1.jpg
[2010.08.02 08:43:43 | 000,247,000 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný.jpg
[2010.07.29 11:32:25 | 000,010,136 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Rozpočet Renault Kangoo.xlsx
[2010.07.28 16:38:40 | 000,015,362 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_xxxxx.TIF
[2010.07.27 20:08:16 | 000,000,000 | ---- | M] () -- C:\WINDOWS\tosOBEX.INI
[2010.07.27 18:21:59 | 000,003,039 | ---- | M] () -- C:\WINDOWS\RbSystem.ini
[2010.07.27 17:45:23 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk
[2010.07.27 08:30:31 | 008,466,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2010.07.26 19:39:38 | 000,397,312 | ---- | M] () -- C:\WINDOWS\esi_kl01.dat
[2010.07.26 13:20:41 | 000,015,986 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_3.TIF
[2010.07.23 13:45:27 | 000,010,677 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Corpo.xlsx
[2010.07.23 12:14:17 | 000,151,756 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Spojka klima Opel.pdf
[2010.07.22 18:24:28 | 000,016,116 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Golf_IV_JAN.TIF
[2010.07.22 13:07:21 | 000,030,650 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.pdf
[2010.07.21 18:39:36 | 000,084,608 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.TIF
[2010.07.21 14:40:42 | 000,022,997 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Podnikatelský záměr.docx
[2010.07.21 09:58:51 | 000,015,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_2.TIF
[2010.07.21 07:39:43 | 000,056,329 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02069.JPG
[2010.07.20 19:44:13 | 000,015,548 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_Aleš.TIF
[2010.07.20 16:00:17 | 000,029,684 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000065.TIF
[2010.07.20 07:11:24 | 000,047,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068(2).JPG
[2010.07.20 07:10:46 | 000,047,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068.JPG
[2010.07.19 14:57:25 | 000,028,206 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Provozovna.docx
[2010.07.19 14:45:14 | 000,010,617 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Pracovní doba.docx
[2010.07.16 12:32:43 | 000,010,663 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\JSME NA OBĚDĚ.docx
[2010.07.14 14:38:57 | 000,017,548 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Octavia.TIF
[2010.07.13 10:27:15 | 000,031,019 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000064.pdf
[2010.07.13 08:33:53 | 005,708,491 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Motor RS Fabia.zip
========== Files Created - No Company Name ==========
[2010.08.11 10:47:51 | 000,153,095 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Plná moc Trefný.jpg
[2010.08.11 10:47:01 | 000,206,461 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000085 - Trefný.jpg
[2010.08.09 18:29:03 | 000,056,834 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB-delete nad 2004.pdf
[2010.08.09 18:27:51 | 000,046,416 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB - servis delete.TIF
[2010.08.09 16:27:56 | 000,028,667 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Dopis Paroulková_3.docx
[2010.08.09 16:13:52 | 000,027,128 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000083.TIF
[2010.08.09 12:13:14 | 000,015,106 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_R28.TIF
[2010.08.09 11:21:02 | 000,030,738 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\ELIT eCat2 Faktura č. 1016118521.TIF
[2010.08.06 10:37:09 | 000,014,854 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS0001.tif
[2010.08.06 10:34:42 | 000,040,282 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS.tif
[2010.08.04 15:42:42 | 000,015,448 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_x.TIF
[2010.08.04 12:51:10 | 000,729,959 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\a4_skoda_octaviatour_autoradio_symphonycd_navod_k_obsluze.pdf
[2010.08.04 08:16:45 | 000,001,512 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Recuva.lnk
[2010.08.03 16:29:25 | 000,250,071 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP4.jpg
[2010.08.03 16:28:43 | 000,295,835 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP3.jpg
[2010.08.03 16:27:58 | 000,284,257 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP2.jpg
[2010.08.03 16:26:59 | 000,251,132 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP1.jpg
[2010.08.03 16:24:25 | 000,469,191 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_3.jpg
[2010.08.03 16:17:22 | 000,174,671 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_2.jpg
[2010.08.03 16:15:27 | 000,948,702 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6.jpg
[2010.08.03 15:33:04 | 000,002,941 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\LOG-PC.zip
[2010.08.03 15:30:25 | 000,002,437 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\HiJackThis.lnk
[2010.08.03 11:57:50 | 000,018,950 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VR6_Aleš.TIF
[2010.08.03 08:35:54 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.08.03 08:35:49 | 000,261,312 | ---- | C] () -- C:\cmldr
[2010.08.03 08:08:33 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.08.02 13:38:27 | 001,102,397 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis živnostenský rejstřík Lukáš.jpg
[2010.08.02 09:35:30 | 000,016,122 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Polo_Aleš.TIF
[2010.08.02 08:45:32 | 001,117,693 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Hlášení pojistné události.jpg
[2010.08.02 08:44:38 | 000,226,497 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný_1.jpg
[2010.08.02 08:43:42 | 000,247,000 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný.jpg
[2010.07.29 10:27:14 | 000,010,136 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Rozpočet Renault Kangoo.xlsx
[2010.07.28 16:38:39 | 000,015,362 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_xxxxx.TIF
[2010.07.27 20:08:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2010.07.27 17:41:44 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk
[2010.07.26 13:20:41 | 000,015,986 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_3.TIF
[2010.07.23 13:45:26 | 000,010,677 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Corpo.xlsx
[2010.07.23 12:14:15 | 000,151,756 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Spojka klima Opel.pdf
[2010.07.22 18:24:28 | 000,016,116 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Golf_IV_JAN.TIF
[2010.07.21 18:41:29 | 000,030,650 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.pdf
[2010.07.21 18:39:35 | 000,084,608 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.TIF
[2010.07.21 14:08:12 | 000,022,997 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\Podnikatelský záměr.docx
[2010.07.21 09:58:50 | 000,015,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_2.TIF
[2010.07.21 07:39:42 | 000,056,329 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02069.JPG
[2010.07.20 19:44:13 | 000,015,548 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_Aleš.TIF
[2010.07.20 16:00:17 | 000,029,684 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000065.TIF
[2010.07.20 07:11:23 | 000,047,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068(2).JPG
[2010.07.20 07:10:44 | 000,047,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068.JPG
[2010.07.19 14:40:37 | 000,028,206 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Provozovna.docx
[2010.07.14 14:38:57 | 000,017,548 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Octavia.TIF
[2010.07.13 10:27:15 | 000,031,019 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000064.pdf
[2010.07.13 08:31:25 | 005,708,491 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\Motor RS Fabia.zip
[2010.07.13 08:27:54 | 000,221,291 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Imei_dll.dll
[2010.07.13 08:27:54 | 000,040,960 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Sublock.dll
[2010.07.12 14:53:12 | 000,000,140 | ---- | C] () -- C:\WINDOWS\parport.ini
[2010.05.17 18:55:27 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\CommonDL.dll
[2010.05.17 18:55:27 | 000,002,395 | ---- | C] () -- C:\WINDOWS\System32\lgAxconfig.ini
[2010.05.12 20:05:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2010.04.22 15:55:09 | 000,221,291 | ---- | C] () -- C:\WINDOWS\Imei_dll.dll
[2010.04.22 15:55:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\Sublock.dll
[2010.04.13 14:55:33 | 000,000,155 | ---- | C] () -- C:\WINDOWS\Crypkey.ini
[2010.04.13 14:55:29 | 000,021,638 | ---- | C] () -- C:\WINDOWS\System32\Ckldrv.sys
[2010.04.13 14:55:29 | 000,018,432 | ---- | C] () -- C:\WINDOWS\Setup_ck.dll
[2010.04.13 08:41:56 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\VSHP1018.DLL
[2010.04.12 13:57:05 | 000,003,039 | ---- | C] () -- C:\WINDOWS\RbSystem.ini
[2010.04.12 13:55:59 | 000,012,800 | ---- | C] () -- C:\WINDOWS\System32\PWUtility.dll
[2010.04.12 13:55:59 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\dtctrace.dll
[2010.04.12 13:55:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\xcd73532.dll
[2010.04.12 13:55:42 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\dslang32.dll
[2010.04.12 13:55:42 | 000,327,680 | ---- | C] () -- C:\WINDOWS\System32\ldf251.dll
[2010.04.12 13:19:04 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\fppent3a.dll
[2010.04.12 09:42:47 | 000,000,518 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010.04.12 01:29:15 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2010.01.30 09:06:31 | 000,000,226 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2010.01.30 09:06:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll
[2010.01.30 09:06:05 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL
[2010.01.30 09:05:36 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini
[2009.09.07 00:00:02 | 001,481,728 | ---- | C] () -- C:\WINDOWS\System32\LegitCheckControl.dll
[2009.09.07 00:00:02 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2009.08.12 11:58:56 | 000,235,520 | ---- | C] () -- C:\WINDOWS\System32\libjcc.dll
[2006.12.05 13:05:06 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2005.07.22 21:30:20 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 15:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: NETLOGON.DLL >
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2004.08.17 15:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2004.08.17 15:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< %systemroot%\*. /mp /s >
< End of report >
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Sulcar\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 153,38 Gb Total Space | 54,59 Gb Free Space | 35,59% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KANCELAR
Current User Name: Sulcar
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Sulcar\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\TECDOC_CD\3_2010\db\tbmux32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\eTECH\OrganiserDBServer.exe (Acresso)
PRC - C:\Program Files\eTECH\jre\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)
PRC - C:\WINDOWS\system32\Crypserv.exe (CrypKey (Canada) Ltd.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbkern32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbmux32.exe (Transaction Software, D 81829 Munich)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Tomcat\bin\tomcat6.exe (Apache Software Foundation)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Sulcar\Plocha\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (Transbase TECDOC CD 3_2010 Service) -- C:\TECDOC_CD\3_2010\db\tbmux32.exe (Transaction Software, D 81829 Munich)
SRV - (WorkshopDBService) -- C:\Program Files\eTECH\OrganiserDBServer.exe (Acresso)
SRV - (Autodata Limited License Service) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodata Limited)
SRV - (Crypkey License) -- C:\WINDOWS\System32\Crypserv.exe (CrypKey (Canada) Ltd.)
SRV - (SBS_GM_TRANSBASE) -- C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Transbase\tbmux32.exe (Transaction Software, D 81829 Munich)
SRV - (SBS_GM_TOMCAT6) -- C:\Program Files\Snap-on Business Solutions\Global EPC\GM\Tomcat\bin\tomcat6.exe (Apache Software Foundation)
SRV - (TOSHIBA Bluetooth Service) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
========== Driver Services (SafeList) ==========
DRV - (epfwtdir) -- C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (LgBttPort) -- C:\WINDOWS\system32\drivers\lgbtport.sys (LG Electronics Inc.)
DRV - (LGVMODEM) -- C:\WINDOWS\system32\drivers\lgvmodem.sys (LG Electronics Inc.)
DRV - (lgbusenum) -- C:\WINDOWS\system32\drivers\lgbtbus.sys (LG Electronics Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (NSHE) -- C:\WINDOWS\system32\drivers\NSHE.SYS (T0r0 & Tecar Forum 2009)
DRV - (USBModem) -- C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (UsbDiag) -- C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (usbbus) -- C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (NetworkX) -- C:\WINDOWS\system32\ckldrv.sys ()
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (hlemu) -- C:\WINDOWS\System32\drivers\hlemu.SYS (T0r0)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (tosrfusb) -- C:\WINDOWS\system32\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV - (tosrfbd) -- C:\WINDOWS\system32\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV - (Axtmvprt) -- C:\WINDOWS\system32\drivers\axtmvprt.sys (Axesstel)
DRV - (Axtmvmdm) -- C:\WINDOWS\system32\drivers\axtmvmdm.sys (Axesstel)
DRV - (Axtmvflt) -- C:\WINDOWS\system32\drivers\axtmvflt.sys (Axesstel)
DRV - (Tosrfhid) -- C:\WINDOWS\system32\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV - (TosRfSnd) -- C:\WINDOWS\system32\drivers\TosRfSnd.sys (TOSHIBA Corporation)
DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - (tosrfbnp) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV - (tosporte) -- C:\WINDOWS\system32\drivers\tosporte.sys (TOSHIBA Corporation)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Tosrfcom) -- C:\WINDOWS\system32\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV - (tosrfnds) -- C:\WINDOWS\system32\drivers\tosrfnds.sys (TOSHIBA Corporation.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.08.02 09:14:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.08.02 09:14:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.08.03 13:15:53 | 000,000,000 | ---D | M]
[2010.04.12 11:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Extensions
[2010.08.10 07:24:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Firefox\Profiles\0cohzxm4.default\extensions
[2010.04.16 10:07:59 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Sulcar\Data aplikací\Mozilla\Firefox\Profiles\0cohzxm4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.08.10 07:24:51 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010.04.26 08:50:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.04.01 18:51:34 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.04.01 18:51:34 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.04.01 18:51:34 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.04.01 18:51:34 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.04.01 18:51:34 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2010.08.11 18:57:22 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
O4 - HKLM..\Run: [pdfFactory Pro Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll ()
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.07.20 15:11:25 | 000,000,000 | ---D | M] - C:\Autoradia -- [ NTFS ]
O32 - AutoRun File - [2010.04.19 08:20:09 | 000,000,000 | ---D | M] - C:\AUTOSERVIS -- [ NTFS ]
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
CREATERESTOREPOINT
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
========== Files/Folders - Created Within 30 Days ==========
[2010.08.11 08:03:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\F-Secure
[2010.08.09 16:47:53 | 000,000,000 | ---D | C] -- C:\RootRepeal
[2010.08.09 11:21:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Plocha\Nová složka
[2010.08.09 10:35:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\QuickScan
[2010.08.07 17:52:34 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.08.07 17:52:02 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sulcar\Plocha\OTL.exe
[2010.08.07 12:14:41 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.08.07 12:14:40 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Sulcar\Recent
[2010.08.06 09:06:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Plocha\xxx
[2010.08.04 08:16:43 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2010.08.03 15:30:24 | 000,000,000 | ---D | C] -- C:\Program Files\TrendMicro
[2010.08.03 13:15:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2010.08.03 08:35:44 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.08.03 08:08:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\Malwarebytes
[2010.08.03 08:08:30 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.08.03 08:08:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2010.08.03 08:08:28 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.08.03 08:08:28 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.08.03 07:57:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010.08.02 09:26:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Data aplikací\Apple Computer
[2010.08.02 09:12:49 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.08.02 09:12:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.08.02 09:11:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.08.02 09:10:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Apple
[2010.08.02 09:10:37 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010.08.02 09:10:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2010.08.02 09:10:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Apple Computer
[2010.07.27 17:48:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Dokumenty\Bluetooth
[2010.07.27 17:45:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sulcar\Local Settings\Data aplikací\Toshiba
[2010.07.27 17:40:17 | 000,113,920 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfbd.sys
[2010.07.27 17:40:17 | 000,041,856 | ---- | C] (TOSHIBA CORPORATION) -- C:\WINDOWS\System32\drivers\tosrfusb.sys
[2010.07.27 17:40:16 | 000,073,728 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\Tosrfhid.sys
[2010.07.27 17:40:16 | 000,036,480 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfbnp.sys
[2010.07.27 17:40:15 | 000,064,896 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosrfcom.sys
[2010.07.27 17:40:15 | 000,053,376 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\TosRfSnd.sys
[2010.07.27 17:40:15 | 000,018,612 | ---- | C] (TOSHIBA Corporation.) -- C:\WINDOWS\System32\drivers\tosrfnds.sys
[2010.07.27 17:40:06 | 000,041,600 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\tosporte.sys
[2010.07.27 17:39:21 | 000,000,000 | ---D | C] -- C:\Program Files\Toshiba
[2010.07.14 06:00:28 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010.07.13 08:27:54 | 000,258,048 | ---- | C] (LG Electronics Inc.) -- C:\Documents and Settings\Sulcar\Dokumenty\esn.dll
[2010.07.13 08:27:54 | 000,180,224 | ---- | C] (LG Electronics) -- C:\Documents and Settings\Sulcar\Dokumenty\AuthDll.dll
[2010.07.13 08:27:54 | 000,090,112 | ---- | C] (LG Electronics) -- C:\Documents and Settings\Sulcar\Dokumenty\LGMobileDL.dll
========== Files - Modified Within 30 Days ==========
[2010.08.11 19:04:11 | 003,670,016 | -H-- | M] () -- C:\Documents and Settings\Sulcar\NTUSER.DAT
[2010.08.11 19:00:16 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.08.11 19:00:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.08.11 18:58:03 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Sulcar\ntuser.ini
[2010.08.11 18:57:22 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010.08.11 10:47:52 | 000,153,095 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Plná moc Trefný.jpg
[2010.08.11 10:47:02 | 000,206,461 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000085 - Trefný.jpg
[2010.08.11 07:35:23 | 000,002,266 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Google Chrome.lnk
[2010.08.11 07:30:19 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.08.10 18:08:50 | 000,000,924 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.08.09 18:29:03 | 000,056,834 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB-delete nad 2004.pdf
[2010.08.09 18:27:51 | 000,046,416 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB - servis delete.TIF
[2010.08.09 16:27:56 | 000,028,667 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Dopis Paroulková_3.docx
[2010.08.09 16:13:53 | 000,027,128 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000083.TIF
[2010.08.09 12:13:14 | 000,015,106 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_R28.TIF
[2010.08.09 11:21:02 | 000,030,738 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\ELIT eCat2 Faktura č. 1016118521.TIF
[2010.08.06 10:40:33 | 000,003,360 | ---- | M] () -- C:\WINDOWS\System32\esnecil.ind
[2010.08.06 10:40:33 | 000,000,004 | ---- | M] () -- C:\WINDOWS\vx86036.dat
[2010.08.06 10:37:09 | 000,014,854 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS0001.tif
[2010.08.06 10:34:42 | 000,040,282 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS.tif
[2010.08.05 18:30:23 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sulcar\Plocha\OTL.exe
[2010.08.04 16:13:00 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.08.04 15:42:42 | 000,015,448 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_x.TIF
[2010.08.04 12:51:10 | 000,729,959 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\a4_skoda_octaviatour_autoradio_symphonycd_navod_k_obsluze.pdf
[2010.08.04 09:49:37 | 000,174,671 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_2.jpg
[2010.08.04 08:16:45 | 000,001,512 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Recuva.lnk
[2010.08.03 16:29:26 | 000,250,071 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP4.jpg
[2010.08.03 16:28:45 | 000,295,835 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP3.jpg
[2010.08.03 16:28:00 | 000,284,257 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP2.jpg
[2010.08.03 16:27:06 | 000,251,132 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP1.jpg
[2010.08.03 16:24:27 | 000,469,191 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_3.jpg
[2010.08.03 16:16:59 | 000,948,702 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6.jpg
[2010.08.03 15:33:04 | 000,002,941 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\LOG-PC.zip
[2010.08.03 15:30:45 | 000,002,437 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\HiJackThis.lnk
[2010.08.03 12:31:03 | 000,018,950 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\VR6_Aleš.TIF
[2010.08.03 08:35:54 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.08.03 08:08:33 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.08.02 13:38:28 | 001,102,397 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis živnostenský rejstřík Lukáš.jpg
[2010.08.02 09:35:30 | 000,016,122 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Polo_Aleš.TIF
[2010.08.02 08:45:35 | 001,117,693 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Hlášení pojistné události.jpg
[2010.08.02 08:44:39 | 000,226,497 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný_1.jpg
[2010.08.02 08:43:43 | 000,247,000 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný.jpg
[2010.07.29 11:32:25 | 000,010,136 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Rozpočet Renault Kangoo.xlsx
[2010.07.28 16:38:40 | 000,015,362 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_xxxxx.TIF
[2010.07.27 20:08:16 | 000,000,000 | ---- | M] () -- C:\WINDOWS\tosOBEX.INI
[2010.07.27 18:21:59 | 000,003,039 | ---- | M] () -- C:\WINDOWS\RbSystem.ini
[2010.07.27 17:45:23 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk
[2010.07.27 08:30:31 | 008,466,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2010.07.26 19:39:38 | 000,397,312 | ---- | M] () -- C:\WINDOWS\esi_kl01.dat
[2010.07.26 13:20:41 | 000,015,986 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_3.TIF
[2010.07.23 13:45:27 | 000,010,677 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Corpo.xlsx
[2010.07.23 12:14:17 | 000,151,756 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Spojka klima Opel.pdf
[2010.07.22 18:24:28 | 000,016,116 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Golf_IV_JAN.TIF
[2010.07.22 13:07:21 | 000,030,650 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.pdf
[2010.07.21 18:39:36 | 000,084,608 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.TIF
[2010.07.21 14:40:42 | 000,022,997 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Podnikatelský záměr.docx
[2010.07.21 09:58:51 | 000,015,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_2.TIF
[2010.07.21 07:39:43 | 000,056,329 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02069.JPG
[2010.07.20 19:44:13 | 000,015,548 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_Aleš.TIF
[2010.07.20 16:00:17 | 000,029,684 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000065.TIF
[2010.07.20 07:11:24 | 000,047,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068(2).JPG
[2010.07.20 07:10:46 | 000,047,946 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068.JPG
[2010.07.19 14:57:25 | 000,028,206 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Provozovna.docx
[2010.07.19 14:45:14 | 000,010,617 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Pracovní doba.docx
[2010.07.16 12:32:43 | 000,010,663 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\JSME NA OBĚDĚ.docx
[2010.07.14 14:38:57 | 000,017,548 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Octavia.TIF
[2010.07.13 10:27:15 | 000,031,019 | ---- | M] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000064.pdf
[2010.07.13 08:33:53 | 005,708,491 | ---- | M] () -- C:\Documents and Settings\Sulcar\Plocha\Motor RS Fabia.zip
========== Files Created - No Company Name ==========
[2010.08.11 10:47:51 | 000,153,095 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Plná moc Trefný.jpg
[2010.08.11 10:47:01 | 000,206,461 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000085 - Trefný.jpg
[2010.08.09 18:29:03 | 000,056,834 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB-delete nad 2004.pdf
[2010.08.09 18:27:51 | 000,046,416 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\MB - servis delete.TIF
[2010.08.09 16:27:56 | 000,028,667 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Dopis Paroulková_3.docx
[2010.08.09 16:13:52 | 000,027,128 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000083.TIF
[2010.08.09 12:13:14 | 000,015,106 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_R28.TIF
[2010.08.09 11:21:02 | 000,030,738 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\ELIT eCat2 Faktura č. 1016118521.TIF
[2010.08.06 10:37:09 | 000,014,854 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS0001.tif
[2010.08.06 10:34:42 | 000,040,282 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Diagnostika vozidla SIS-CAS.tif
[2010.08.04 15:42:42 | 000,015,448 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_x.TIF
[2010.08.04 12:51:10 | 000,729,959 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\a4_skoda_octaviatour_autoradio_symphonycd_navod_k_obsluze.pdf
[2010.08.04 08:16:45 | 000,001,512 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Recuva.lnk
[2010.08.03 16:29:25 | 000,250,071 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP4.jpg
[2010.08.03 16:28:43 | 000,295,835 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP3.jpg
[2010.08.03 16:27:58 | 000,284,257 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP2.jpg
[2010.08.03 16:26:59 | 000,251,132 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VTP1.jpg
[2010.08.03 16:24:25 | 000,469,191 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_3.jpg
[2010.08.03 16:17:22 | 000,174,671 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6_2.jpg
[2010.08.03 16:15:27 | 000,948,702 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis z účtu 6.jpg
[2010.08.03 15:33:04 | 000,002,941 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\LOG-PC.zip
[2010.08.03 15:30:25 | 000,002,437 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\HiJackThis.lnk
[2010.08.03 11:57:50 | 000,018,950 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\VR6_Aleš.TIF
[2010.08.03 08:35:54 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.08.03 08:35:49 | 000,261,312 | ---- | C] () -- C:\cmldr
[2010.08.03 08:08:33 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.08.02 13:38:27 | 001,102,397 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Výpis živnostenský rejstřík Lukáš.jpg
[2010.08.02 09:35:30 | 000,016,122 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Polo_Aleš.TIF
[2010.08.02 08:45:32 | 001,117,693 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Hlášení pojistné události.jpg
[2010.08.02 08:44:38 | 000,226,497 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný_1.jpg
[2010.08.02 08:43:42 | 000,247,000 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Martin Trefný.jpg
[2010.07.29 10:27:14 | 000,010,136 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Rozpočet Renault Kangoo.xlsx
[2010.07.28 16:38:39 | 000,015,362 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_xxxxx.TIF
[2010.07.27 20:08:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2010.07.27 17:41:44 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk
[2010.07.26 13:20:41 | 000,015,986 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_3.TIF
[2010.07.23 13:45:26 | 000,010,677 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Corpo.xlsx
[2010.07.23 12:14:15 | 000,151,756 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Spojka klima Opel.pdf
[2010.07.22 18:24:28 | 000,016,116 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Golf_IV_JAN.TIF
[2010.07.21 18:41:29 | 000,030,650 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.pdf
[2010.07.21 18:39:35 | 000,084,608 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000066.TIF
[2010.07.21 14:08:12 | 000,022,997 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\Podnikatelský záměr.docx
[2010.07.21 09:58:50 | 000,015,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Aleš_2.TIF
[2010.07.21 07:39:42 | 000,056,329 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02069.JPG
[2010.07.20 19:44:13 | 000,015,548 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Leon_Aleš.TIF
[2010.07.20 16:00:17 | 000,029,684 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000065.TIF
[2010.07.20 07:11:23 | 000,047,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068(2).JPG
[2010.07.20 07:10:44 | 000,047,946 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\DSC02068.JPG
[2010.07.19 14:40:37 | 000,028,206 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Provozovna.docx
[2010.07.14 14:38:57 | 000,017,548 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Octavia.TIF
[2010.07.13 10:27:15 | 000,031,019 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Faktura 2010000064.pdf
[2010.07.13 08:31:25 | 005,708,491 | ---- | C] () -- C:\Documents and Settings\Sulcar\Plocha\Motor RS Fabia.zip
[2010.07.13 08:27:54 | 000,221,291 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Imei_dll.dll
[2010.07.13 08:27:54 | 000,040,960 | ---- | C] () -- C:\Documents and Settings\Sulcar\Dokumenty\Sublock.dll
[2010.07.12 14:53:12 | 000,000,140 | ---- | C] () -- C:\WINDOWS\parport.ini
[2010.05.17 18:55:27 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\CommonDL.dll
[2010.05.17 18:55:27 | 000,002,395 | ---- | C] () -- C:\WINDOWS\System32\lgAxconfig.ini
[2010.05.12 20:05:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2010.04.22 15:55:09 | 000,221,291 | ---- | C] () -- C:\WINDOWS\Imei_dll.dll
[2010.04.22 15:55:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\Sublock.dll
[2010.04.13 14:55:33 | 000,000,155 | ---- | C] () -- C:\WINDOWS\Crypkey.ini
[2010.04.13 14:55:29 | 000,021,638 | ---- | C] () -- C:\WINDOWS\System32\Ckldrv.sys
[2010.04.13 14:55:29 | 000,018,432 | ---- | C] () -- C:\WINDOWS\Setup_ck.dll
[2010.04.13 08:41:56 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\VSHP1018.DLL
[2010.04.12 13:57:05 | 000,003,039 | ---- | C] () -- C:\WINDOWS\RbSystem.ini
[2010.04.12 13:55:59 | 000,012,800 | ---- | C] () -- C:\WINDOWS\System32\PWUtility.dll
[2010.04.12 13:55:59 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\dtctrace.dll
[2010.04.12 13:55:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\xcd73532.dll
[2010.04.12 13:55:42 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\dslang32.dll
[2010.04.12 13:55:42 | 000,327,680 | ---- | C] () -- C:\WINDOWS\System32\ldf251.dll
[2010.04.12 13:19:04 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\fppent3a.dll
[2010.04.12 09:42:47 | 000,000,518 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010.04.12 01:29:15 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2010.01.30 09:06:31 | 000,000,226 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2010.01.30 09:06:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll
[2010.01.30 09:06:05 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL
[2010.01.30 09:05:36 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini
[2009.09.07 00:00:02 | 001,481,728 | ---- | C] () -- C:\WINDOWS\System32\LegitCheckControl.dll
[2009.09.07 00:00:02 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2009.08.12 11:58:56 | 000,235,520 | ---- | C] () -- C:\WINDOWS\System32\libjcc.dll
[2006.12.05 13:05:06 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2005.07.22 21:30:20 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010.06.07 16:46:10 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 15:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: NETLOGON.DLL >
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2004.08.17 15:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2004.08.17 15:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< %systemroot%\*. /mp /s >
< End of report >
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
CREATERESTOREPOINT
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
Proč máš vypnutou obnovu systému?
Odinstaluj:
(BitDefender) QuickScan
F-Secure
Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:
Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.
+
Poté:
Stáhni si ToolsCleaner2( by de A.Rothstein & Dj Quiou )
na plochu a spusť ho.
Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění)a odstraň nalezené.
Zavři program.
Program maže i všechny nástroje na odvirování a vytváření logů , které se zde používají (HJT, Combofix, OTM, OTL, OTS atd.)
Nákazy tam již nejsou , pokud problémy přetrvávají , bude chyba jinde ( HW?).
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
Proč máš vypnutou obnovu systému?
Odinstaluj:
(BitDefender) QuickScan
F-Secure
Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:
Kód: Vybrat vše
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
:Files
C:\Documents and Settings\All Users\Data aplikací\F-Secure
C:\Documents and Settings\Sulcar\Data aplikací\QuickScan
:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.
+
Poté:
Stáhni si ToolsCleaner2( by de A.Rothstein & Dj Quiou )
na plochu a spusť ho.
Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění)a odstraň nalezené.
Zavři program.
Program maže i všechny nástroje na odvirování a vytváření logů , které se zde používají (HJT, Combofix, OTM, OTL, OTS atd.)
Nákazy tam již nejsou , pokud problémy přetrvávají , bude chyba jinde ( HW?).
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
Nevím proč mám vyplou obnovu systému a ty dva programy nemůžu najít abych je odinstaloval. V program files nejsou a v přidat odebrat programy taky nejsou.
-
- nováček
- Příspěvky: 44
- Registrován: srpen 10
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
Už jsem Quick scan našel
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Pomalá rychlost počítače - kouše se zvuk, nevyužívá celé
pokud nenajdeš to druhý , postupuj normálně dál.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 6 hostů