Prosím kontrolu logu. Vyřešeno

[Seky97]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:02:09, on 3.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Java Runtime Enviornment] C:\DOCUME~1\JOSEF\LOCALS~1\Temp\C:\DOCUME~1\JOSEF\LOCALS~1\Temp\Update.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\RunOnce: [NSSInstallation] C:\WINDOWS\system32\Macromed\Shockwave 10\nssstub.exe /runonce
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra 'Tools' menuitem: Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

--
End of file - 6182 bytes

[Reklama]

[Damned]

Odinstaluj si Search Settings. To je malware jak vyšitý.

Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Java Runtime Enviornment] C:\DOCUME~1\JOSEF\LOCALS~1\Temp\C:\DOCUME~1\JOSEF\LOCALS~1\Temp\Update.exe
O4 - HKLM\..\RunOnce: [NSSInstallation] C:\WINDOWS\system32\Macromed\Shockwave 10\nssstub.exe /runonce
*****************************************************************************************************************************************
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[jaro3]

Odinstaluj:
Search Settings

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe


Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[Seky97]

Malwarebytes' Anti-Malware 1.44
Verze databáze: 3796
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18241

3.3.2010 17:19:50
mbam-log-2010-03-03 (17-19-46).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 164285
Uplynulý čas: 4 minute(s), 20 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 4
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 3

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CLASSES_ROOT\CLSID\{fd501041-8ebe-11ce-8183-00aa00577da1} (Malware.Packer.Gen) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{8b498502-1218-11cf-adc4-00a0d100041b} (Malware.Packer.Gen) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{d877b48a-8972-4653-91e2-445cd4e12fc2} (Malware.Packer.Gen) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\F5JMWNZTHI (Trojan.FakeAlert) -> No action taken.

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\WINDOWS\system32\cpwiuy.dll (Malware.Packer.Gen) -> No action taken.
C:\WINDOWS\system32\t5rdv.dll (Malware.Packer.Gen) -> No action taken.
C:\WINDOWS\system32\ecesq.dll (Malware.Packer.Gen) -> No action taken.

[Damned]

Takže spusť znovu MbAM a dej Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Konec

Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[Seky97]

Ten log z MbAM se mi podařilo nějak odkliknout, takže ho sem nemůžu zkopírovat, snad to nevadí.

Tady je ten log z Cobofixu

ComboFix 10-03-02.08 - JOSEF 03.03.2010 17:40:21.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.616 [GMT 1:00]
Spuštěný z: c:\documents and settings\JOSEF\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Kerio Personal Firewall *enabled* {E659E0EE-10E6-49B7-8696-60F38D0EB174}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr1.dat
c:\documents and settings\JOSEF\Dokumenty\cc_20100226_1525.reg
C:\LOG.TXT
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\FF\components\config.ini
c:\program files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
c:\program files\Dealio Toolbar\FF\components\IFBHOHelperWidgiToolbar.xpt
c:\program files\Dealio Toolbar\FF\components\IFBHOWidgiToolbar.xpt
c:\program files\Dealio Toolbar\FF\chrome.manifest
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.xul
c:\program files\Dealio Toolbar\FF\chrome\content\login.js
c:\program files\Dealio Toolbar\FF\chrome\content\login.xul
c:\program files\Dealio Toolbar\FF\chrome\content\parser.js
c:\program files\Dealio Toolbar\FF\chrome\content\RssTickerWidget.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.xul
c:\program files\Dealio Toolbar\FF\chrome\content\widgicomm.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgihandling.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgichevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgilisteners.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\program files\Dealio Toolbar\FF\chrome\content\widgiui.js
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\yahoo-search.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\apple.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\barnes.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\bestbuy.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\icon_settings.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\macys.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\newegg.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\overstock.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_dealio.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_yahoo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\searchbox.css
c:\program files\Dealio Toolbar\FF\chrome\skin\separator.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\target.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\walmart.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\program files\Dealio Toolbar\FF\install.rdf
c:\program files\Dealio Toolbar\IE\4.0.2\config.ini
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\Search Settings
c:\program files\Search Settings\FF\components\IFBHOSearch.xpt
c:\program files\Search Settings\FF\components\IFBHOSearchHelperEngine.xpt
c:\program files\Search Settings\FF\components\IFHelperPreferences.xpt
c:\program files\Search Settings\FF\components\SearchSettingsFF.dll
c:\program files\Search Settings\FF\chrome.manifest
c:\program files\Search Settings\FF\chrome\content\plugin.js
c:\program files\Search Settings\FF\chrome\content\plugin.xul
c:\program files\Search Settings\FF\chrome\content\protection.js
c:\program files\Search Settings\FF\chrome\content\utils.js
c:\program files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
c:\program files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.properties
c:\program files\Search Settings\FF\install.rdf
c:\program files\Search Settings\SearchSettings.exe
c:\program files\Search Settings\SearchSettingsRes409.dll

----- BITS: Možné infikované stránky -----

hxxp://armmf.adobe.com
hxxp://grabyourphone.com
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-03 do 2010-03-03 )))))))))))))))))))))))))))))))
.

2010-03-03 16:08 . 2010-03-03 16:08 -------- d-----w- c:\program files\ESET
2010-03-02 17:13 . 2010-03-02 17:13 -------- d-----w- c:\program files\NortonInstaller
2010-03-02 12:09 . 2010-03-02 12:09 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-02-27 11:21 . 2010-02-27 11:41 -------- d-----w- c:\program files\FlashGet
2010-02-27 11:17 . 2010-02-27 11:36 -------- d-----w- C:\Downloads
2010-02-27 11:16 . 2010-02-27 11:41 -------- d-----w- c:\program files\Free Download Manager
2010-02-27 10:31 . 2007-11-06 09:01 1000744 ----a-w- c:\windows\system32\ShellManager10E2D762.dll
2010-02-20 20:01 . 2010-02-20 20:04 -------- d-----w- C:\hej
2010-02-19 19:59 . 2010-02-19 20:04 -------- d-----w- c:\program files\Logon Loader
2010-02-15 13:12 . 2010-02-15 13:12 -------- d-----w- c:\program files\Intelore
2010-02-15 13:11 . 2010-02-15 13:11 -------- d-----w- C:\PRAVOPIS
2010-02-11 17:06 . 2010-02-11 17:06 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 16:41 . 2010-03-03 11:38 -------- d-----w- c:\program files\Avidemux 2.5
2010-02-10 15:23 . 2010-02-10 15:23 -------- d-----w- c:\program files\VideoReDoTVSuite
2010-02-09 13:17 . 2010-02-09 13:17 -------- d-----w- C:\My Music
2010-02-09 13:16 . 2010-02-09 13:18 5 ----a-w- c:\windows\system32\SySMP3Cut.dat
2010-02-09 13:16 . 2010-02-09 13:16 -------- d-----w- c:\program files\Crystal Software
2010-02-09 13:16 . 2004-12-01 13:43 315392 ----a-w- c:\windows\system32\NCTAudioPlayer2.dll
2010-02-09 13:12 . 2010-02-09 13:12 -------- d-----w- c:\program files\Application Updater
2010-02-09 13:12 . 2010-02-09 13:12 -------- d-----w- c:\program files\Mp3 Knife
2010-02-07 14:43 . 2010-02-07 14:51 -------- d-----w- c:\program files\Peretek
2010-02-07 14:41 . 2010-02-07 14:41 -------- d-----w- c:\program files\FnoWare
2010-02-06 10:52 . 2010-02-06 10:52 -------- d-----w- c:\program files\MedianSoft
2010-02-06 10:16 . 2010-02-06 10:25 -------- d-----w- c:\program files\Ultra Video Joiner
2010-02-06 10:02 . 2010-02-06 10:02 -------- d-----w- c:\program files\DVD Shrink
2010-02-06 09:46 . 2010-02-06 09:48 49283072 ----a-w- C:\java_ee_sdk-5_01-windows.exe
2010-02-06 09:39 . 2010-02-06 09:39 -------- d-----w- c:\program files\Common Files\Java
2010-02-05 21:29 . 2010-02-06 09:39 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-02-05 21:23 . 2010-02-06 09:48 -------- d-----w- c:\documents and settings\JOSEF\.SunDownloadManager
2010-02-05 17:38 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-05 17:38 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-05 17:38 . 2010-02-05 17:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-05 14:36 . 2010-02-05 14:36 -------- d-----w- c:\documents and settings\JOSEF\DoctorWeb
2010-02-05 12:40 . 2010-02-05 12:40 -------- d-----w- c:\program files\Trend Micro
2010-02-05 09:23 . 2003-08-03 23:34 40960 ----a-w- c:\windows\system32\FXDV1to2.dll
2010-02-05 09:23 . 2005-01-12 18:34 36734 ----a-w- c:\windows\system32\OggDSuninst.exe
2010-02-05 09:23 . 2002-10-06 11:42 237568 ----a-w- c:\windows\system32\OggDS.dll
2010-02-05 09:18 . 1998-04-24 00:00 368912 ----a-w- c:\windows\system32\vbar332.dll
2010-02-05 09:18 . 2010-02-05 14:24 -------- d-----w- c:\program files\Fx Joiner and Splitter
2010-02-04 16:40 . 2010-02-04 16:46 -------- d-----w- c:\program files\BackupManager
2010-02-03 14:56 . 2008-03-31 13:08 140288 ----a-w- c:\windows\system32\viscomqtde.dll
2010-02-03 14:56 . 2004-02-10 18:15 128512 ----a-w- c:\windows\system32\xvid.dll
2010-02-03 14:54 . 2010-02-03 14:54 -------- d-----w- c:\program files\MediaInfo
2010-02-03 14:41 . 2010-02-05 14:24 -------- d-----w- c:\program files\AoA Video Joiner
2010-02-02 16:49 . 2010-02-02 17:36 -------- d-----w- c:\program files\XVideoConverter
2010-02-02 15:01 . 2010-02-02 17:37 -------- d-----w- c:\program files\Gabest
2010-02-02 14:05 . 2010-02-02 14:05 -------- d-----w- c:\program files\VideoReDoPlus
2010-02-02 13:44 . 2010-02-02 13:53 -------- d-----w- c:\program files\Womble Multimedia
2010-02-01 19:02 . 2010-03-03 14:30 -------- d-----w- c:\windows\system32\Adobe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-03 16:38 . 2010-03-01 14:49 0 ---ha-w- c:\windows\system32\BIT105.tmp
2010-03-03 16:38 . 2010-03-01 14:48 0 ---ha-w- c:\windows\system32\BITEF.tmp
2010-03-03 13:48 . 2007-09-02 09:37 -------- d-----w- c:\program files\Norton Security Scan
2010-03-03 13:48 . 2009-04-09 07:18 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-02 12:10 . 2008-01-23 09:21 -------- d-----w- c:\program files\DivX
2010-03-01 14:49 . 2009-08-24 20:16 -------- d-----w- c:\program files\Guitar Pro 5
2010-02-27 10:57 . 2006-12-09 19:33 -------- d-----w- c:\program files\CyberLink
2010-02-27 10:55 . 2006-12-09 19:17 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-27 10:41 . 2006-12-09 19:36 -------- d-----w- c:\program files\Common Files\Ahead
2010-02-27 10:40 . 2009-07-06 15:43 -------- d-----w- c:\program files\Nero
2010-02-26 14:38 . 2008-10-27 14:40 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-02-26 14:38 . 2007-01-28 10:11 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-02-17 16:13 . 2009-12-02 20:03 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2010-02-17 13:01 . 2006-12-09 19:32 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-11 17:06 . 2009-09-19 15:40 -------- d-----w- c:\program files\QuickTime
2010-02-06 19:47 . 2007-09-21 13:56 -------- d-----w- c:\program files\Google
2010-02-06 15:47 . 2008-03-26 19:15 -------- d-----w- c:\program files\TVUPlayer
2010-02-06 15:11 . 2009-05-19 14:23 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-06 14:37 . 2009-08-16 12:36 -------- d-----w- c:\program files\Veetle
2010-02-06 10:37 . 2010-02-06 10:37 -------- d-----w- c:\program files\AliveMedia
2010-02-06 09:39 . 2006-12-09 19:40 -------- d-----w- c:\program files\Java
2010-02-05 14:10 . 2006-12-23 16:21 520588 -c--a-w- c:\windows\system32\drivers\fwdrv.err
2010-02-03 14:56 . 2009-12-21 09:46 -------- d-----w- c:\program files\Zealot Software
2010-02-02 17:37 . 2010-01-13 18:54 -------- d-----w- c:\program files\Total Video Converter
2010-02-02 17:36 . 2009-08-18 11:50 -------- d-----w- c:\program files\Plato Video Joiner
2010-01-30 20:19 . 2010-01-21 19:15 -------- d-----w- c:\program files\Rapid Express
2010-01-30 20:16 . 2009-08-23 10:28 -------- d-----w- c:\program files\TrueCrypt
2010-01-30 20:15 . 2009-01-17 17:48 -------- d-----w- c:\program files\TuneUp Utilities 2009
2010-01-30 20:14 . 2008-04-14 13:56 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-30 20:03 . 2007-12-06 17:04 -------- d-----w- c:\program files\Oberon Media
2010-01-30 19:54 . 2009-03-04 16:21 -------- d-----w- c:\program files\Miranda IM
2010-01-30 19:50 . 2009-05-28 14:31 -------- d-----w- c:\program files\Graffiti Studio 2.0
2010-01-30 15:14 . 2010-01-30 15:14 -------- d-----w- c:\program files\eRightSoft
2010-01-30 14:58 . 2010-01-24 11:14 -------- d-----w- c:\program files\3d Dialing
2010-01-30 14:38 . 2010-01-30 14:38 -------- d-----w- c:\program files\Aiseesoft Studio
2010-01-29 08:54 . 2010-01-29 07:47 -------- d-----w- c:\program files\Terasoft
2010-01-25 16:41 . 2004-10-01 23:32 4952 --sha-r- C:\bootfont.bin
2010-01-25 15:45 . 2010-01-25 14:46 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2010-01-25 13:36 . 2010-01-25 13:36 -------- d-----w- c:\program files\Paragon Software
2010-01-24 10:40 . 2010-01-22 21:04 -------- d-----w- c:\program files\sgc_3d_sim
2010-01-14 19:41 . 2010-01-14 19:41 -------- d-----w- c:\program files\AviSynth 2.5
2009-12-20 10:01 . 2009-12-20 10:01 82432 ----a-w- c:\windows\system32\drivers\start.sys
2009-12-07 20:21 . 2009-12-07 20:21 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-05 11:58 . 2004-10-01 23:33 83652 ----a-w- c:\windows\system32\perfc005.dat
2009-12-05 11:58 . 2004-10-01 23:33 440316 ----a-w- c:\windows\system32\perfh005.dat
2007-03-17 06:00 . 2008-04-18 16:48 35979 ----a-w- c:\program files\Photoshop CS3 Read Me.html
2006-05-03 10:06 . 2010-01-30 15:20 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2010-01-30 15:20 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-30 15:20 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-11-24 198160]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2008-12-03 10:47 1205760 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"g:\\HRY\\Counter-Strike Source\\cstrike.exe"=
"g:\\HRY\\Counter-Strike Source\\srcds.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"g:\\HRY\\EA GAMES\\Battlefield 2\\BF2.exe"=
"g:\\HRY\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"g:\\HRY\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"23817:TCP"= 23817:TCP:BitComet 23817 TCP
"23817:UDP"= 23817:UDP:BitComet 23817 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [6.12.2005 16:11 35328]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [18.7.2006 12:02 284184]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [18.7.2006 12:02 91672]
R1 SafDskNT;SafeHouse;c:\windows\system32\drivers\SafDskNT.sys [4.3.2009 23:03 77824]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [16.12.2009 17:38 375296]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.1.2007 11:11 691696]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [24.1.2010 11:26 135664]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-23 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 12:42]

2010-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-24 10:25]

2010-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-24 10:25]

2010-03-03 c:\windows\Tasks\Install_NSS.job
- c:\windows\system32\Macromed\Shockwave 10\nssstub.exe [2010-03-03 14:30]

2010-03-01 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2009-12-19 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyServer = 127.0.0.1:9666
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{230D1201-7607-4CF6-A11F-9E4BF0A333E0} - {0DB13731-CEFD-43CF-A8FD-B61DCBC4D5B8} - c:\program files\Eurotran XP\etnxp.dll
IE: {{2C73F784-D2DE-4422-B070-2E3332FE5744} - {0320AC26-52C8-4316-B2C4-24BB6FA73C9A} - c:\program files\Eurotran XP\etnxp.dll
FF - ProfilePath - c:\documents and settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll
FF - plugin: g:\install\Google\Picasa3\npPicasa3.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
FF - user.js: network.proxy.http_port - 0
FF - user.js: network.proxy.ssl -
FF - user.js: network.proxy.ssl_port - 0
FF - user.js: network.proxy.ftp -
FF - user.js: network.proxy.ftp_port - 0
FF - user.js: network.proxy.gopher -
FF - user.js: network.proxy.gopher_port - 0
FF - user.js: network.proxy.socks_version - 5
FF - user.js: network.proxy.socks -
FF - user.js: network.proxy.socks_port - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-03 17:50
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c2,7a,4d,79,89,7e,b9,1b,84,84,e0,f1,76,2c,57,93,56,5f,b3,ee,8d,58,63,
ac,c9,44,5e,c4,38,e1,37,db,1b,f2,17,6a,ae,11,08,1c,39,94,b0,7e,1a,e0,be,60,\
"??"=hex:2f,b6,6f,45,ee,e2,ec,0a,29,d5,69,d3,55,fd,2c,18

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:a1,50,1b,b6,5f,a8,e2,88,81,ad,af,90,a1,13,0c,d8,63,68,c0,99,e5,
dd,c0,72,07,8f,fb,e3,4a,cc,84,be,b4,c5,00,17,81,41,8b,f9,c3,7f,5c,3c,e8,0a,\
"rkeysecu"=hex:79,3f,91,db,a7,fa,d0,0c,8c,23,06,95,b0,b8,8c,7b
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(984)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-03 17:53:27
ComboFix-quarantined-files.txt 2010-03-03 16:53

Před spuštěním: 9 775 779 840
Po spuštění: 9 795 395 584

Current=4 Default=4 Failed=3 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 801AFF96552FA1F3AB3C1A01B0A335E2

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\system32\SySMP3Cut.dat
c:\windows\system32\BIT105.tmp
c:\windows\system32\BITEF.tmp
c:\windows\Tasks\Install_NSS.job
c:\windows\system32\Macromed\Shockwave 10\nssstub.exe

Folder::
c:\program files\NortonInstaller
c:\program files\Norton Security Scan
c:\program files\Common Files\Symantec Shared




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

[Seky97]

ComboFix 10-03-02.08 - JOSEF 03.03.2010 18:23:31.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.560 [GMT 1:00]
Spuštěný z: c:\documents and settings\JOSEF\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\JOSEF\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Kerio Personal Firewall *enabled* {E659E0EE-10E6-49B7-8696-60F38D0EB174}

FILE ::
"c:\windows\system32\BIT105.tmp"
"c:\windows\system32\BITEF.tmp"
"c:\windows\system32\Macromed\Shockwave 10\nssstub.exe"
"c:\windows\system32\SySMP3Cut.dat"
"c:\windows\Tasks\Install_NSS.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Common Files\Symantec Shared
c:\program files\Norton Security Scan
c:\program files\Norton Security Scan\BilBDRes.dll
c:\program files\Norton Security Scan\symbos.exe
c:\program files\NortonInstaller
c:\windows\system32\BIT105.tmp
c:\windows\system32\BITEF.tmp
c:\windows\system32\Macromed\Shockwave 10\nssstub.exe
c:\windows\system32\MSIMRT.DLL
c:\windows\system32\MSIMRT32.DLL
c:\windows\system32\MSIMUSIC.DLL
c:\windows\system32\SySMP3Cut.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-03 do 2010-03-03 )))))))))))))))))))))))))))))))
.

2010-03-03 16:08 . 2010-03-03 16:08 -------- d-----w- c:\program files\ESET
2010-03-02 12:09 . 2010-03-02 12:09 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-02-27 11:21 . 2010-02-27 11:41 -------- d-----w- c:\program files\FlashGet
2010-02-27 11:17 . 2010-02-27 11:36 -------- d-----w- C:\Downloads
2010-02-27 11:16 . 2010-02-27 11:41 -------- d-----w- c:\program files\Free Download Manager
2010-02-27 10:31 . 2007-11-06 09:01 1000744 ----a-w- c:\windows\system32\ShellManager10E2D762.dll
2010-02-20 20:01 . 2010-02-20 20:04 -------- d-----w- C:\hej
2010-02-19 19:59 . 2010-02-19 20:04 -------- d-----w- c:\program files\Logon Loader
2010-02-15 13:12 . 2010-02-15 13:12 -------- d-----w- c:\program files\Intelore
2010-02-15 13:11 . 2010-02-15 13:11 -------- d-----w- C:\PRAVOPIS
2010-02-11 17:06 . 2010-02-11 17:06 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 16:41 . 2010-03-03 11:38 -------- d-----w- c:\program files\Avidemux 2.5
2010-02-10 15:23 . 2010-02-10 15:23 -------- d-----w- c:\program files\VideoReDoTVSuite
2010-02-09 13:17 . 2010-02-09 13:17 -------- d-----w- C:\My Music
2010-02-09 13:16 . 2010-02-09 13:16 -------- d-----w- c:\program files\Crystal Software
2010-02-09 13:16 . 2004-12-01 13:43 315392 ----a-w- c:\windows\system32\NCTAudioPlayer2.dll
2010-02-09 13:12 . 2010-02-09 13:12 -------- d-----w- c:\program files\Application Updater
2010-02-09 13:12 . 2010-02-09 13:12 -------- d-----w- c:\program files\Mp3 Knife
2010-02-07 14:43 . 2010-02-07 14:51 -------- d-----w- c:\program files\Peretek
2010-02-07 14:41 . 2010-02-07 14:41 -------- d-----w- c:\program files\FnoWare
2010-02-06 10:52 . 2010-02-06 10:52 -------- d-----w- c:\program files\MedianSoft
2010-02-06 10:16 . 2010-02-06 10:25 -------- d-----w- c:\program files\Ultra Video Joiner
2010-02-06 10:02 . 2010-02-06 10:02 -------- d-----w- c:\program files\DVD Shrink
2010-02-06 09:46 . 2010-02-06 09:48 49283072 ----a-w- C:\java_ee_sdk-5_01-windows.exe
2010-02-06 09:39 . 2010-02-06 09:39 -------- d-----w- c:\program files\Common Files\Java
2010-02-05 21:29 . 2010-02-06 09:39 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-02-05 21:23 . 2010-02-06 09:48 -------- d-----w- c:\documents and settings\JOSEF\.SunDownloadManager
2010-02-05 17:38 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-05 17:38 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-05 17:38 . 2010-02-05 17:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-05 14:36 . 2010-02-05 14:36 -------- d-----w- c:\documents and settings\JOSEF\DoctorWeb
2010-02-05 12:40 . 2010-02-05 12:40 -------- d-----w- c:\program files\Trend Micro
2010-02-05 09:23 . 2003-08-03 23:34 40960 ----a-w- c:\windows\system32\FXDV1to2.dll
2010-02-05 09:23 . 2005-01-12 18:34 36734 ----a-w- c:\windows\system32\OggDSuninst.exe
2010-02-05 09:23 . 2002-10-06 11:42 237568 ----a-w- c:\windows\system32\OggDS.dll
2010-02-05 09:18 . 1998-04-24 00:00 368912 ----a-w- c:\windows\system32\vbar332.dll
2010-02-05 09:18 . 2010-02-05 14:24 -------- d-----w- c:\program files\Fx Joiner and Splitter
2010-02-04 16:40 . 2010-02-04 16:46 -------- d-----w- c:\program files\BackupManager
2010-02-03 14:56 . 2008-03-31 13:08 140288 ----a-w- c:\windows\system32\viscomqtde.dll
2010-02-03 14:56 . 2004-02-10 18:15 128512 ----a-w- c:\windows\system32\xvid.dll
2010-02-03 14:54 . 2010-02-03 14:54 -------- d-----w- c:\program files\MediaInfo
2010-02-03 14:41 . 2010-02-05 14:24 -------- d-----w- c:\program files\AoA Video Joiner
2010-02-02 16:49 . 2010-02-02 17:36 -------- d-----w- c:\program files\XVideoConverter
2010-02-02 15:01 . 2010-02-02 17:37 -------- d-----w- c:\program files\Gabest
2010-02-02 14:05 . 2010-02-02 14:05 -------- d-----w- c:\program files\VideoReDoPlus
2010-02-02 13:44 . 2010-02-02 13:53 -------- d-----w- c:\program files\Womble Multimedia
2010-02-01 19:02 . 2010-03-03 14:30 -------- d-----w- c:\windows\system32\Adobe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-02 12:10 . 2008-01-23 09:21 -------- d-----w- c:\program files\DivX
2010-03-01 14:49 . 2009-08-24 20:16 -------- d-----w- c:\program files\Guitar Pro 5
2010-02-27 10:57 . 2006-12-09 19:33 -------- d-----w- c:\program files\CyberLink
2010-02-27 10:55 . 2006-12-09 19:17 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-27 10:41 . 2006-12-09 19:36 -------- d-----w- c:\program files\Common Files\Ahead
2010-02-27 10:40 . 2009-07-06 15:43 -------- d-----w- c:\program files\Nero
2010-02-26 14:38 . 2008-10-27 14:40 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-02-26 14:38 . 2007-01-28 10:11 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-02-17 16:13 . 2009-12-02 20:03 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2010-02-17 13:01 . 2006-12-09 19:32 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-11 17:06 . 2009-09-19 15:40 -------- d-----w- c:\program files\QuickTime
2010-02-06 19:47 . 2007-09-21 13:56 -------- d-----w- c:\program files\Google
2010-02-06 15:47 . 2008-03-26 19:15 -------- d-----w- c:\program files\TVUPlayer
2010-02-06 15:11 . 2009-05-19 14:23 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-06 14:37 . 2009-08-16 12:36 -------- d-----w- c:\program files\Veetle
2010-02-06 10:37 . 2010-02-06 10:37 -------- d-----w- c:\program files\AliveMedia
2010-02-06 09:39 . 2006-12-09 19:40 -------- d-----w- c:\program files\Java
2010-02-05 14:10 . 2006-12-23 16:21 520588 -c--a-w- c:\windows\system32\drivers\fwdrv.err
2010-02-03 14:56 . 2009-12-21 09:46 -------- d-----w- c:\program files\Zealot Software
2010-02-02 17:37 . 2010-01-13 18:54 -------- d-----w- c:\program files\Total Video Converter
2010-02-02 17:36 . 2009-08-18 11:50 -------- d-----w- c:\program files\Plato Video Joiner
2010-01-30 20:19 . 2010-01-21 19:15 -------- d-----w- c:\program files\Rapid Express
2010-01-30 20:16 . 2009-08-23 10:28 -------- d-----w- c:\program files\TrueCrypt
2010-01-30 20:15 . 2009-01-17 17:48 -------- d-----w- c:\program files\TuneUp Utilities 2009
2010-01-30 20:14 . 2008-04-14 13:56 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-30 20:03 . 2007-12-06 17:04 -------- d-----w- c:\program files\Oberon Media
2010-01-30 19:54 . 2009-03-04 16:21 -------- d-----w- c:\program files\Miranda IM
2010-01-30 19:50 . 2009-05-28 14:31 -------- d-----w- c:\program files\Graffiti Studio 2.0
2010-01-30 15:14 . 2010-01-30 15:14 -------- d-----w- c:\program files\eRightSoft
2010-01-30 14:58 . 2010-01-24 11:14 -------- d-----w- c:\program files\3d Dialing
2010-01-30 14:38 . 2010-01-30 14:38 -------- d-----w- c:\program files\Aiseesoft Studio
2010-01-29 08:54 . 2010-01-29 07:47 -------- d-----w- c:\program files\Terasoft
2010-01-25 16:41 . 2004-10-01 23:32 4952 --sha-r- C:\bootfont.bin
2010-01-25 15:45 . 2010-01-25 14:46 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2010-01-25 13:36 . 2010-01-25 13:36 -------- d-----w- c:\program files\Paragon Software
2010-01-24 10:40 . 2010-01-22 21:04 -------- d-----w- c:\program files\sgc_3d_sim
2010-01-14 19:41 . 2010-01-14 19:41 -------- d-----w- c:\program files\AviSynth 2.5
2009-12-20 10:01 . 2009-12-20 10:01 82432 ----a-w- c:\windows\system32\drivers\start.sys
2009-12-07 20:21 . 2009-12-07 20:21 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-05 11:58 . 2004-10-01 23:33 83652 ----a-w- c:\windows\system32\perfc005.dat
2009-12-05 11:58 . 2004-10-01 23:33 440316 ----a-w- c:\windows\system32\perfh005.dat
2007-03-17 06:00 . 2008-04-18 16:48 35979 ----a-w- c:\program files\Photoshop CS3 Read Me.html
2006-05-03 10:06 . 2010-01-30 15:20 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2010-01-30 15:20 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-30 15:20 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-11-24 198160]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2008-12-03 10:47 1205760 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"g:\\HRY\\Counter-Strike Source\\cstrike.exe"=
"g:\\HRY\\Counter-Strike Source\\srcds.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"g:\\HRY\\EA GAMES\\Battlefield 2\\BF2.exe"=
"g:\\HRY\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"g:\\HRY\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"23817:TCP"= 23817:TCP:BitComet 23817 TCP
"23817:UDP"= 23817:UDP:BitComet 23817 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [6.12.2005 16:11 35328]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [18.7.2006 12:02 284184]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [18.7.2006 12:02 91672]
R1 SafDskNT;SafeHouse;c:\windows\system32\drivers\SafDskNT.sys [4.3.2009 23:03 77824]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [16.12.2009 17:38 375296]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.1.2007 11:11 691696]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [24.1.2010 11:26 135664]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-23 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 12:42]

2010-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-24 10:25]

2010-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-24 10:25]

2010-03-03 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2009-12-19 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyServer = 127.0.0.1:9666
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{230D1201-7607-4CF6-A11F-9E4BF0A333E0} - {0DB13731-CEFD-43CF-A8FD-B61DCBC4D5B8} - c:\program files\Eurotran XP\etnxp.dll
IE: {{2C73F784-D2DE-4422-B070-2E3332FE5744} - {0320AC26-52C8-4316-B2C4-24BB6FA73C9A} - c:\program files\Eurotran XP\etnxp.dll
FF - ProfilePath - c:\documents and settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll
FF - plugin: g:\install\Google\Picasa3\npPicasa3.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
FF - user.js: network.proxy.http_port - 0
FF - user.js: network.proxy.ssl -
FF - user.js: network.proxy.ssl_port - 0
FF - user.js: network.proxy.ftp -
FF - user.js: network.proxy.ftp_port - 0
FF - user.js: network.proxy.gopher -
FF - user.js: network.proxy.gopher_port - 0
FF - user.js: network.proxy.socks_version - 5
FF - user.js: network.proxy.socks -
FF - user.js: network.proxy.socks_port - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-03 18:32
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c2,7a,4d,79,89,7e,b9,1b,84,84,e0,f1,76,2c,57,93,56,5f,b3,ee,8d,58,63,
ac,c9,44,5e,c4,38,e1,37,db,1b,f2,17,6a,ae,11,08,1c,39,94,b0,7e,1a,e0,be,60,\
"??"=hex:2f,b6,6f,45,ee,e2,ec,0a,29,d5,69,d3,55,fd,2c,18

[HKEY_USERS\S-1-5-21-1644491937-630328440-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:a1,50,1b,b6,5f,a8,e2,88,81,ad,af,90,a1,13,0c,d8,63,68,c0,99,e5,
dd,c0,72,07,8f,fb,e3,4a,cc,84,be,b4,c5,00,17,81,41,8b,f9,c3,7f,5c,3c,e8,0a,\
"rkeysecu"=hex:79,3f,91,db,a7,fa,d0,0c,8c,23,06,95,b0,b8,8c,7b
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(984)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-03 18:35:12
ComboFix-quarantined-files.txt 2010-03-03 17:35
ComboFix2.txt 2010-03-03 16:53

Před spuštěním: 9 745 395 712
Po spuštění: 9 725 607 936

Current=4 Default=4 Failed=3 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 5EDB96B15D7B87C98D023CC4CE87410F

[Damned]

Odinstaluj ComboFix ( nutné ) .
ComboFix se odinstaluje takto:
Start-Spustit a zadej Combofix[mezera]/uninstall

Stáhni si T-Cleaner ( nutné - smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš)

(pozn.Pokud máš AVG nebo Aviru, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG i Aviru (i rezidenty), následně T-Cleaner smaž a zapni si AVG, Aviru.)
*****************************************************************************************************************************************
Stáhni si OTL na Plochu.
Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Output klikni na minimal Output.Pod Standard Registry změň na All. Zatrhni LOP Check a Purity Check. File age změň na 14 days. Všechny ostatní nastavení ponech jak jsou. Klikni na Run Scan. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj

[Seky97]

1. log 1. část

OTL logfile created on: 3.3.2010 19:20:18 - Run 1
OTL by OldTimer - Version 3.1.32.0 Folder = C:\Documents and Settings\JOSEF\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18241)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1 023,00 Mb Total Physical Memory | 561,00 Mb Available Physical Memory | 55,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 11,59 Gb Free Space | 14,84% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 154,76 Gb Total Space | 18,05 Gb Free Space | 11,66% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MASINKA
Current User Name: JOSEF
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 14 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\JOSEF\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe (Sunbelt Software)
PRC - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe (Sunbelt Software)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\JOSEF\Plocha\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (NetTcpPortSharing) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NMSAccessU) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
SRV - (Microsoft Office Groove Audit Service) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (ATI Smart) -- C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (KPF4) -- C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe (Sunbelt Software)
SRV - (BlueSoleil Hid Service) -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe ()
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)


========== Driver Services (SafeList) ==========

DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (epfwtdir) -- C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (GEARAspiWDM) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (SafDskNT) -- C:\WINDOWS\system32\drivers\SafDskNT.sys (PC Dynamics, Inc.)
DRV - (PxHelp20) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (hamachi) -- C:\WINDOWS\system32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (khips) -- C:\WINDOWS\system32\drivers\khips.sys (Sunbelt Software)
DRV - (fwdrv) -- C:\WINDOWS\system32\drivers\fwdrv.sys (Sunbelt Software)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.)
DRV - (nvata) -- C:\WINDOWS\system32\DRIVERS\nvata.sys (NVIDIA Corporation)
DRV - (HPZid412) -- C:\WINDOWS\system32\drivers\HPZid412.sys (HP)
DRV - (HPZius12) -- C:\WINDOWS\system32\drivers\HPZius12.sys (HP)
DRV - (HPZipr12) -- C:\WINDOWS\system32\drivers\HPZipr12.sys (HP)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (sfsync03) StarForce Protection Synchronization Driver (version 3.x) -- C:\WINDOWS\System32\drivers\sfsync03.sys (Protection Technology)
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (BlueletAudio) -- C:\WINDOWS\system32\drivers\blueletaudio.sys (IVT Corporation)
DRV - (Btcsrusb) -- C:\WINDOWS\system32\drivers\btcusb.sys (IVT Corporation)
DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology)
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (BTHidEnum) -- C:\WINDOWS\system32\drivers\vbtenum.sys ()
DRV - (BTHidMgr) -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys (IVT Corporation)
DRV - (BT) -- C:\WINDOWS\system32\drivers\BtNetDrv.sys (IVT Corporation)
DRV - (VcommMgr) -- C:\WINDOWS\system32\drivers\VcommMgr.sys (IVT Corporation)
DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (VComm) -- C:\WINDOWS\system32\drivers\VComm.sys (IVT Corporation)
DRV - (UimBus) -- C:\WINDOWS\system32\drivers\UimBus.sys (Windows (R) 2000 DDK provider)
DRV - (ROOTMODEM) -- C:\WINDOWS\system32\drivers\rootmdm.sys (Microsoft Corporation)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (Uim_IM) -- C:\WINDOWS\system32\drivers\Uim_IM.sys ()
DRV - (irsir) -- C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:9666

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
FF - prefs.js..browser.search.order.1: "Yahoo"
FF - prefs.js..browser.search.order.2: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=661003"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://seznam.cz/"
FF - prefs.js..extensions.enabledItems: en-GB@dictionaries.addons.mozilla.org:1.19
FF - prefs.js..extensions.enabledItems: {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}:3.0.1
FF - prefs.js..extensions.enabledItems: cs@dictionaries.addons.mozilla.org:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18
FF - prefs.js..extensions.enabledItems: dave2x@download:0.5.9
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8

FF - user.js..network.proxy.type: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port: 0
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.socks: ""
FF - user.js..network.proxy.socks_port: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.04.14 18:09:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: c:\program files\real\realplayer\browserrecord\firefox\ext [2009.11.24 13:52:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009.12.02 21:02:13 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2010.02.06 10:39:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.02.20 09:53:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.03.02 13:10:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.03.03 17:08:43 | 000,000,000 | ---D | M]

[2008.08.10 14:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Extensions
[2008.08.10 14:46:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2010.03.03 18:46:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions
[2008.08.10 14:27:25 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(2)
[2008.08.10 14:25:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{991A772A-BA13-4c1d-A9EF-F897F31DEC7D}(2)
[2010.02.01 15:29:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}
[2008.08.10 14:29:08 | 000,000,000 | ---D | M] (Mininova Toolbar) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}(2)
[2008.08.10 14:23:52 | 000,000,000 | ---D | M] (CustomizeGoogle) -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}(2)
[2008.09.28 09:12:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\cs@dictionaries.addons.mozilla.org
[2009.12.29 10:28:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\dave2x@download
[2009.07.11 13:52:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\en-GB@dictionaries.addons.mozilla.org
[2010.02.06 17:08:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\extensions\firefox@tvunetworks.com
[2009.07.01 13:22:12 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\conduit.xml
[2008.10.27 15:40:25 | 000,000,523 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\daemon-search.xml
[2010.02.27 18:05:52 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-1.xml
[2008.07.02 12:25:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-10.xml
[2008.07.16 20:30:59 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-11.xml
[2008.08.09 18:24:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-12.xml
[2008.08.10 10:00:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-13.xml
[2008.12.09 20:16:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-14.xml
[2008.12.17 14:56:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-15.xml
[2009.02.06 13:09:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-16.xml
[2009.03.05 19:56:06 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-17.xml
[2009.03.28 14:52:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-18.xml
[2009.04.22 20:45:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-19.xml
[2007.10.21 10:27:55 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-2.xml
[2009.04.22 20:46:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-20.xml
[2009.04.29 07:01:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-21.xml
[2009.06.13 01:04:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-22.xml
[2009.07.22 12:35:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-23.xml
[2009.08.04 19:15:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-24.xml
[2009.08.05 15:52:51 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-25.xml
[2009.08.29 17:02:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-26.xml
[2009.08.29 17:14:23 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-27.xml
[2009.11.28 18:06:23 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-28.xml
[2009.11.05 19:05:21 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-29.xml
[2007.11.02 20:23:45 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-3.xml
[2009.11.05 19:05:35 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-30.xml
[2009.11.05 19:05:51 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-31.xml
[2009.12.05 09:55:15 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-32.xml
[2010.01.06 16:09:25 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-33.xml
[2010.01.18 18:14:42 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-34.xml
[2007.11.27 18:56:58 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-4.xml
[2007.12.02 08:55:20 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-5.xml
[2008.02.08 15:10:14 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-6.xml
[2008.03.26 19:15:45 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-7.xml
[2008.04.17 18:54:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-8.xml
[2008.06.18 18:33:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin-9.xml
[2008.07.10 13:07:28 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\icqplugin.xml
[2010.03.02 18:41:33 | 000,001,012 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\itekcz.xml
[2009.05.09 00:45:37 | 000,002,061 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\qipsearch.xml
[2009.05.16 20:53:38 | 000,001,692 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\sfd.xml
[2008.01.08 14:39:27 | 000,005,402 | ---- | M] () -- C:\Documents and Settings\JOSEF\Data aplikací\Mozilla\Firefox\Profiles\7pyrkzw7.default\searchplugins\warez-svetnet.xml
[2010.03.03 18:46:45 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010.02.20 09:53:37 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2010.02.06 10:39:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
[2009.11.05 19:04:46 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\seznam@partners.mozilla.com
[2010.02.20 09:53:22 | 000,023,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
[2010.02.20 09:53:22 | 000,137,176 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
[2007.04.10 16:21:08 | 000,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
[2008.01.23 07:20:30 | 000,491,520 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010.02.06 10:39:14 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
[2009.11.14 01:47:38 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
[2010.02.20 09:53:27 | 000,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[2006.10.26 20:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
[2009.12.21 18:34:06 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[2009.11.24 13:52:50 | 000,140,864 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[2010.02.11 18:06:49 | 000,131,072 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
[2009.11.24 13:52:58 | 000,008,192 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
[2009.11.24 13:52:45 | 000,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
[2010.02.20 09:53:30 | 000,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml
[2010.02.20 09:53:30 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.02.20 09:53:30 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.02.20 09:53:32 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.02.20 09:53:32 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.02.20 09:53:32 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
[2010.02.09 14:12:36 | 000,000,780 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml

[Seky97]

1. log 2. část

O1 HOSTS File: ([2010.02.05 21:26:07 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&S-Rank) - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll (Seznam.cz a.s.)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mvadvd.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (LogonUI.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Proces mezipaměti kategorií součástí - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 14 Days ==========

[2010.03.03 19:17:26 | 000,551,424 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\JOSEF\Plocha\OTL.exe
[2010.03.03 17:08:42 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010.03.03 17:06:59 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\JOSEF\Recent
[2010.03.02 18:33:31 | 000,520,192 | ---- | C] (NIT Calicut) -- C:\Documents and Settings\JOSEF\Dokumenty\Norton internet security 2006 serial.exe
[2010.03.02 13:09:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2010.03.01 18:13:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Plocha\MICOŇ a Micka 22.11.2009
[2010.03.01 18:12:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Plocha\Micoň a MIcka 20.12.2009
[2010.02.28 11:06:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Plocha\NEHTY
[2010.02.27 12:43:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Dokumenty\FreeRapid-0.83u1
[2010.02.27 12:21:56 | 000,000,000 | ---D | C] -- C:\Program Files\FlashGet
[2010.02.27 12:18:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Dokumenty\Sta×enÚ soubory
[2010.02.27 12:17:01 | 000,000,000 | ---D | C] -- C:\Downloads
[2010.02.27 12:16:09 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager
[2010.02.27 11:31:11 | 001,000,744 | ---- | C] (Nero AG) -- C:\WINDOWS\System32\ShellManager10E2D762.dll
[2010.02.26 17:05:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Plocha\Jak napsat DP 2010 UJAK
[2010.02.26 15:42:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\DAEMON Tools Images
[2010.02.26 15:38:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Data aplikací\DAEMON Tools Lite
[2010.02.26 15:38:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.02.26 15:37:53 | 009,161,776 | ---- | C] (DT Soft Ltd.) -- C:\Documents and Settings\JOSEF\Dokumenty\DTLite4355-0068.exe
[2010.02.20 21:01:54 | 000,000,000 | ---D | C] -- C:\hej
[2010.02.20 20:10:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\Deployment
[2010.02.19 21:09:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Dokumenty\Miscellaneous_1961
[2010.02.19 20:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\Logon Loader
[2010.02.17 19:29:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\Temporary Projects
[2010.02.06 20:45:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2010.01.24 11:26:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2009.10.14 13:49:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Temp
[2009.03.07 10:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Google
[2009.03.06 21:27:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2009.01.25 10:09:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
[2009.01.21 12:02:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
[2006.12.09 20:08:15 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2006.12.09 20:08:15 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2004.11.24 20:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\JOSEF\Plocha\*.tmp files -> C:\Documents and Settings\JOSEF\Plocha\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010.03.03 19:17:26 | 000,551,424 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JOSEF\Plocha\OTL.exe
[2010.03.03 19:13:04 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.03.03 19:10:07 | 000,000,246 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.03.03 18:40:00 | 000,000,938 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.03 18:17:46 | 000,046,080 | ---- | M] () -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.03.03 18:17:46 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.03.03 18:00:00 | 000,000,442 | ---- | M] () -- C:\WINDOWS\tasks\ParetoLogic Registration.job
[2010.03.03 17:38:16 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.03.03 17:38:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.03.03 17:38:04 | 1073,139,712 | -HS- | M] () -- C:\hiberfil.sys
[2010.03.03 17:37:27 | 015,990,784 | ---- | M] () -- C:\Documents and Settings\JOSEF\NTUSER.DAT
[2010.03.03 15:30:11 | 000,001,759 | ---- | M] () -- C:\Documents and Settings\JOSEF\Plocha\Install_NSS.lnk
[2010.03.03 08:17:29 | 000,020,551 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\chuck-S03E08-hdtv-By-xtomas252-pegas9-maruxs-ravenhorst.zip
[2010.03.02 18:33:32 | 000,520,192 | ---- | M] (NIT Calicut) -- C:\Documents and Settings\JOSEF\Dokumenty\Norton internet security 2006 serial.exe
[2010.03.02 13:14:37 | 000,000,842 | ---- | M] () -- C:\Documents and Settings\JOSEF\Plocha\FreeRapid Downloader.lnk
[2010.03.02 12:35:04 | 000,025,145 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\griffinovi-s02e14-ropusi-problem-dvbt-xvid-cz-drtv.avi
[2010.03.02 12:09:49 | 000,000,038 | ---- | M] () -- C:\WINDOWS\AviSplitter.INI
[2010.03.01 18:57:52 | 000,000,560 | ---- | M] () -- C:\Documents and Settings\JOSEF\Plocha\Zástupce - Naše kočičí farma.lnk
[2010.03.01 17:57:53 | 000,001,759 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\QTSBandwidthCache
[2010.03.01 17:57:46 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.02.27 13:56:12 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010.02.27 11:42:02 | 000,002,367 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Nero StartSmart Essentials.lnk
[2010.02.26 15:45:57 | 002,472,013 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\001_File_Joiner___Splitter_4.0.rar
[2010.02.26 15:38:47 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys
[2010.02.26 15:37:58 | 009,161,776 | ---- | M] (DT Soft Ltd.) -- C:\Documents and Settings\JOSEF\Dokumenty\DTLite4355-0068.exe
[2010.02.24 15:26:07 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.02.23 17:01:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.02.22 19:49:46 | 000,000,883 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.02.20 21:26:04 | 003,177,712 | -H-- | M] () -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\IconCache.db
[2010.02.20 20:56:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\exploit.ini
[2010.02.20 17:39:35 | 000,057,459 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\s03e07.rar
[2010.02.19 21:09:05 | 002,165,415 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\Miscellaneous_1961.zip
[2010.02.19 20:59:13 | 000,320,016 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\LogonLoaderSetup3.exe
[2010.02.19 20:28:44 | 000,322,231 | ---- | M] () -- C:\Documents and Settings\JOSEF\Dokumenty\cia.jpg
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\JOSEF\Plocha\*.tmp files -> C:\Documents and Settings\JOSEF\Plocha\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.03.03 15:30:11 | 000,001,759 | ---- | C] () -- C:\Documents and Settings\JOSEF\Plocha\Install_NSS.lnk
[2010.03.03 08:17:29 | 000,020,551 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\chuck-S03E08-hdtv-By-xtomas252-pegas9-maruxs-ravenhorst.zip
[2010.03.02 12:35:00 | 000,025,145 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\griffinovi-s02e14-ropusi-problem-dvbt-xvid-cz-drtv.avi
[2010.03.01 18:57:52 | 000,000,560 | ---- | C] () -- C:\Documents and Settings\JOSEF\Plocha\Zástupce - Naše kočičí farma.lnk
[2010.02.27 13:56:12 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010.02.27 13:56:12 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010.02.27 11:42:02 | 000,002,367 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Nero StartSmart Essentials.lnk
[2010.02.26 15:45:54 | 002,472,013 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\001_File_Joiner___Splitter_4.0.rar
[2010.02.20 20:56:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\exploit.ini
[2010.02.20 17:39:34 | 000,057,459 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\s03e07.rar
[2010.02.19 21:09:02 | 002,165,415 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\Miscellaneous_1961.zip
[2010.02.19 20:59:13 | 000,320,016 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\LogonLoaderSetup3.exe
[2010.02.19 20:28:44 | 000,322,231 | ---- | C] () -- C:\Documents and Settings\JOSEF\Dokumenty\cia.jpg
[2010.02.06 11:37:10 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010.02.05 10:23:51 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2010.02.03 15:56:10 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2010.02.02 16:26:06 | 000,000,599 | ---- | C] () -- C:\Documents and Settings\JOSEF\Data aplikací\AutoGK.ini
[2010.01.25 14:41:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WinHDM.INI
[2010.01.25 14:36:44 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\UimExt.dll
[2010.01.25 14:36:44 | 000,120,483 | ---- | C] () -- C:\WINDOWS\System32\drivers\Uim_IM.sys
[2010.01.25 14:36:44 | 000,006,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\UimFIO.sys
[2010.01.25 14:36:37 | 000,006,656 | ---- | C] () -- C:\WINDOWS\System32\WnASPI32.dll
[2009.12.21 10:47:04 | 002,392,064 | ---- | C] () -- C:\WINDOWS\System32\videotrans.dll
[2009.12.21 10:47:01 | 000,215,040 | ---- | C] () -- C:\WINDOWS\System32\videoformat.dll
[2009.12.21 10:47:00 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\imgscaler.dll
[2009.12.21 10:46:59 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\img_utils.dll
[2009.12.20 11:01:49 | 000,082,432 | ---- | C] () -- C:\WINDOWS\System32\drivers\start.sys
[2009.12.14 16:26:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI
[2009.12.11 16:26:38 | 000,001,209 | ---- | C] () -- C:\Documents and Settings\JOSEF\Data aplikací\365dniError.log
[2009.12.11 16:26:29 | 000,001,149 | ---- | C] () -- C:\Documents and Settings\JOSEF\Data aplikací\365dni.log
[2009.12.02 21:08:53 | 000,109,464 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2009.09.05 14:55:04 | 000,000,024 | ---- | C] () -- C:\WINDOWS\LogonStudio.ini
[2009.08.29 10:11:56 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\pwlshell.dll
[2009.08.04 07:45:40 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.07.31 17:57:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\lgfwup.ini
[2009.07.28 13:54:50 | 000,000,160 | ---- | C] () -- C:\WINDOWS\MyDrivers.ini
[2009.07.09 09:38:50 | 000,000,188 | ---- | C] () -- C:\Documents and Settings\JOSEF\Data aplikací\default.rss
[2009.07.09 08:29:30 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2009.06.19 19:06:22 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2009.06.19 19:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2009.04.25 20:31:20 | 000,024,575 | ---- | C] () -- C:\WINDOWS\System32\Winsysmwappio55.dll
[2009.04.21 23:19:06 | 000,172,173 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009.04.04 18:48:58 | 000,000,062 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2009.03.04 19:13:02 | 000,001,759 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\QTSBandwidthCache
[2009.01.20 18:28:28 | 000,000,825 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009.01.03 10:45:43 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2008.12.24 11:37:26 | 000,013,250 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
[2008.11.01 10:10:46 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI
[2008.10.31 12:53:50 | 000,000,026 | ---- | C] () -- C:\WINDOWS\Viewer.INI
[2008.09.26 13:22:54 | 000,001,403 | ---- | C] () -- C:\WINDOWS\ARCHPR.INI
[2008.07.05 12:14:48 | 000,456,192 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2008.07.05 12:14:44 | 003,591,168 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2008.07.05 12:13:16 | 000,708,096 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2008.06.22 18:34:00 | 000,177,664 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2008.06.13 12:39:38 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2008.06.12 19:36:38 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008.06.04 19:23:10 | 000,000,400 | ---- | C] () -- C:\WINDOWS\T602.INI
[2008.04.18 17:48:22 | 000,035,979 | ---- | C] () -- C:\Program Files\Photoshop CS3 Read Me.html
[2008.04.12 09:36:29 | 000,000,499 | ---- | C] () -- C:\WINDOWS\ADStahovac.INI
[2008.04.03 16:46:30 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2008.03.30 19:58:52 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\fusioncache.dat
[2008.03.30 19:55:30 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\JOSEF\Data aplikací\PnkBstrK.sys
[2008.03.14 19:42:22 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008.02.24 12:47:16 | 000,000,013 | ---- | C] () -- C:\WINDOWS\msgtn.ini
[2008.01.14 13:40:02 | 000,000,026 | ---- | C] () -- C:\WINDOWS\neosetup.INI
[2007.09.18 13:13:58 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2007.09.18 13:13:58 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2007.09.09 15:31:26 | 000,144,384 | ---- | C] () -- C:\WINDOWS\System32\miccyhook.dll
[2007.08.17 17:11:08 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2007.07.10 17:10:12 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2007.03.29 22:00:40 | 000,203,264 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2007.02.08 18:41:04 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2007.02.08 18:41:04 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2007.01.21 17:26:21 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2006.12.22 17:17:51 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3w.DLL
[2006.12.21 19:54:46 | 000,046,080 | ---- | C] () -- C:\Documents and Settings\JOSEF\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.12.20 18:01:01 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006.12.09 20:46:41 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006.12.09 20:38:16 | 000,001,522 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2006.12.09 20:18:30 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2006.02.25 13:12:34 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2006.02.25 13:09:38 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.04.30 14:50:20 | 000,011,860 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys
[2004.12.16 16:32:54 | 000,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys
[2004.10.03 18:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2004.07.08 12:34:58 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\vorbisfile.dll
[2004.07.08 12:34:56 | 000,909,312 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2004.07.08 12:34:52 | 001,097,728 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2004.07.08 12:32:40 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2001.07.07 02:00:00 | 000,003,165 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[2001.01.12 10:49:38 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[1999.01.22 19:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1997.08.23 11:33:24 | 000,022,064 | ---- | C] () -- C:\WINDOWS\System32\tntlvr.dll

========== LOP Check ==========

[2010.01.25 16:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Acronis
[2008.06.14 11:00:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Bluetooth
[2010.02.26 15:38:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.01.30 21:20:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DriverCure
[2009.10.04 14:20:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
[2009.01.20 18:08:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2010.01.18 18:14:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.04.15 13:15:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2008.01.31 17:44:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nokia
[2009.07.28 13:50:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ParetoLogic
[2008.01.31 13:20:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2009.05.10 19:24:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sports Interactive
[2010.03.03 12:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2009.01.17 18:48:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2009.10.04 14:09:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
[2009.01.17 18:48:16 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
[2009.08.16 09:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{5FBDCA6E-055E-4083-89AA-123FF33DCB7F}
[2009.09.19 16:42:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.08.15 14:45:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009.08.20 22:28:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{F14A989E-0102-460B-ADB5-BC208314A307}
[2009.12.14 19:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\365dni
[2010.02.11 17:50:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\avidemux
[2009.12.05 14:47:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\BSplayer
[2007.08.14 14:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\BSplayer Pro
[2008.01.24 18:02:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\cbg2
[2008.03.14 17:02:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\CDBurnerXP_Soft
[2009.05.01 17:51:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\COWON
[2010.02.02 14:29:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Cuttermaran
[2008.10.27 15:37:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\DAEMON Tools
[2010.02.26 15:43:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\DAEMON Tools Lite
[2010.02.09 14:38:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Dealio
[2009.07.28 13:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\DriverCure
[2008.08.10 14:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Dvc
[2008.03.06 13:37:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\FloodLightGames
[2007.12.06 18:05:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\funkitron
[2010.01.25 18:05:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\GameRanger
[2009.12.05 10:15:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Hide IP NG
[2010.01.19 20:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\ICQ
[2007.08.17 16:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\ICQ Toolbar
[2007.08.22 20:14:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\ICQLite
[2010.03.01 18:00:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Image Zone Express
[2009.04.05 13:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\IrfanView
[2007.12.05 19:04:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\jukebox
[2007.01.12 12:30:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\LANGMaster
[2008.02.18 16:48:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\LangSoft
[2008.10.03 14:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Leadertech
[2008.11.01 10:10:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Megaupload
[2009.07.09 07:48:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Miranda
[2008.04.14 15:09:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Moyea
[2009.11.05 19:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\MxBoost
[2009.03.19 19:38:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\MyProxy
[2009.04.15 13:07:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Nokia
[2008.01.31 17:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\NSeries
[2009.04.03 18:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Opera
[2009.12.05 10:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Panasonic
[2008.01.31 13:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\PC Suite
[2010.01.14 20:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Pegasys Inc
[2008.02.24 12:53:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\PPMate
[2009.04.18 19:32:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\ppstream
[2008.12.09 20:05:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\QIP
[2009.01.24 11:44:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Screaming Bee
[2010.02.09 14:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Search Settings
[2008.03.26 20:28:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Software602
[2009.05.10 19:14:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Sports Interactive
[2007.10.05 15:09:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\temp
[2009.01.17 18:48:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\TuneUp Software
[2010.01.26 16:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\uTorrent
[2010.03.02 08:41:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\VideoReDo-TVSuite
[2010.02.06 12:10:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\VideoReDoPlus
[2009.03.20 16:24:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\VitySoft
[2009.05.31 20:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JOSEF\Data aplikací\Zoner
[2010.03.03 18:00:00 | 000,000,442 | ---- | M] () -- C:\WINDOWS\Tasks\ParetoLogic Registration.job
[2009.12.20 00:33:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\ParetoLogic Update Version2.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 362 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:05EE1EEF
@Alternate Data Stream - 211 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:66633281
@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:3B71D0B4
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0888F409
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:34D5AA26
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8AB6C1D7
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:91EA783C
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0F8F5844
< End of report >

[Seky97]

2. log 1. část

OTL Extras logfile created on: 3.3.2010 19:20:18 - Run 1
OTL by OldTimer - Version 3.1.32.0 Folder = C:\Documents and Settings\JOSEF\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18241)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1 023,00 Mb Total Physical Memory | 561,00 Mb Available Physical Memory | 55,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 11,59 Gb Free Space | 14,84% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 154,76 Gb Total Space | 18,05 Gb Free Space | 11,66% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MASINKA
Current User Name: JOSEF
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 14 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"23817:TCP" = 23817:TCP:*:Enabled:BitComet 23817 TCP
"23817:UDP" = 23817:UDP:*:Enabled:BitComet 23817 UDP

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe" = C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe:*:Enabled:Sunbelt Kerio Firewall GUI -- (Sunbelt Software)
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe" = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil -- (IVT Corporation)
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\uTorrent\utorrent.exe" = C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"G:\HRY\Counter-Strike Source\cstrike.exe" = G:\HRY\Counter-Strike Source\cstrike.exe:*:Enabled:cstrike.exe -- (Bluntmann Utilities)
"G:\HRY\Counter-Strike Source\srcds.exe" = G:\HRY\Counter-Strike Source\srcds.exe:*:Enabled:Counter-Strike Source Server -- ()
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"G:\HRY\EA GAMES\Battlefield 2\BF2.exe" = G:\HRY\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2 -- ()
"G:\HRY\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe" = G:\HRY\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32 -- (Crytek GmbH)
"G:\HRY\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe" = G:\HRY\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32 -- (Crytek GmbH)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000405-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{000E79B7-E725-4F01-870A-C12942B7F8E4}" = Crysis(R)
"{044F9133-B8D7-4d11-BF39-803FA20F5C8B}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}" = Microsoft Games for Windows - LIVE Redistributable
"{05C56753-F144-44BC-BA67-83CC5DBF395C}" = F300
"{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION
"{0B0FABBA-6F8D-4087-B0FB-BF8AB57A0FEF}" = Backup Manager
"{0C19D563-5F25-4621-BF10-01F741BD283F}" = Microsoft SQL Server Compact 3.5 SP1 Design Tools English
"{0E0DF90C-D0BA-4C89-9262-AD78D1A3DE51}" = HP USB Disk Storage Format Tool
"{11202615-E557-4ECF-9B86-F59C81E52909}" = FIFA 10
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}" = Nokia Connectivity Cable Driver
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}" = Adobe ExtendScript Toolkit 2
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2EAF7E61-068E-11DF-953C-005056806466}" = Google Earth
"{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}" = SQL Server System CLR Types
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D243BA7-9AC4-46D1-90E5-EEB88974F501}" = Microsoft Games for Windows - LIVE
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57E4CE98-D911-4B8D-AB68-05DBE300943B}" = Governor of Poker
"{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}" = Nokia PC Suite
"{5BE1E709-30E4-3D6D-A708-96CE8D5E5E8D}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu
"{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard
"{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F05C28D-DEA9-4AD6-A73A-064175988EAB}" = Search Settings v1.2.3
"{621EB5F7-B871-47C0-AB53-E1376E71D858}" = ESET NOD32 Antivirus
"{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}" = Adobe Setup
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66B6D13A-9CC1-417D-B6F2-58AA539D1033}" = Nero 7 Essentials
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}" = Adobe Color Common Settings
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{74EC78BC-B379-4E29-9006-8F161DCAABA6}" = Apple Software Update
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{843B6370-4102-4FE9-9519-C0206A0A27DF}" = BlueSoleil
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}" = QuickTime
"{96E94E18-54D6-42C1-8FC4-24DACEDC3395}" = Nokia NSeries System Utilities
"{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
"{9B63540D-D942-4C38-B42E-A48AE0145970}" = Virtua Tennis(TM) 2009
"{9F9697D3-DCB6-4716-A643-DFEE792F8E10}_is1" = FWSplitter 1.3
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}" = Hitman Blood Money
"{A8C856AD-63CD-4613-AA29-E6C85607EA06}" = Nokia Software Launcher
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1029-7B44-A93000000001}" = Adobe Reader 9.3.1 - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}" = Adobe Setup
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}" = HP Software Update
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C878CD69-85DB-426B-81A3-E71175AAEB91}" = Dealio Toolbar v4.0.2
"{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}" = Safari
"{D99C322D-C21B-40C7-AE71-EE51AA096B6E}" = Nokia Flashing Cable Driver
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{DD622B1D-A78E-3FE8-9C8C-246F5764B0D0}" = Microsoft Visual Basic 2008 Express Edition with SP1 - ENU
"{DDB68A90-340C-42B9-B42B-D2CBED1B91DC}" = Heroes of Might and Magic V Collector Edition
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E1BBBAC5-2857-4155-82A6-54492CE88620}" = Opera 9.64
"{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
"{E5966E4C-0A93-4F59-A981-BD3173D4799F}" = F300_Help
"{E659E0EE-10E6-49B7-8696-60F38D0EB174}" = Sunbelt Kerio Personal Firewall
"{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}" = Need for Speed™ Undercover
"{E94603CA-2996-4154-8EE2-A5FCD4BFB500}" = Nokia Lifeblog 2.5
"{E9F19993-D0DD-4A4D-94ED-1F32B3CE2CE7}" = ATI Catalyst Control Center
"{EF4F620F-F295-41D7-92C0-6B635709C850}" = Nokia Software Updater
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{F4EE8763-EAA8-4BC1-8594-8501F5F00414}" = Nokia NSeries One Touch Access
"{F5E87B12-3C27-452F-8E78-21D42164FD83}" = Microsoft SQL Server 2008 Management Objects
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{F779EC8D-6703-4C4A-817C-37B07898E647}" = Nokia NSeries Content Copier
"{F89E5AD8-AE47-49B5-B9F9-C498791E6255}" = Nokia NSeries Music Manager
"{FA25FAF6-3097-43C9-BBB2-A77CE8AF1881}" = Nokia NSeries Multimedia Player
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"{FD349381-D79C-4E5C-8980-015DFFB962D5}" = Nokia NSeries Application Installer
"3FA1705966809259F916AF817C59B4F389F4572C" = Balíček ovladače systému Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"5986551A16FD8E9B1B4C89E7AAD17C1BB3196D28" = Balíček ovladače systému Windows - Nokia Modem (10/27/2008 7.01.0.1)
"6A630DCEC5EEC912115F2FF59D8C2C769798D930" = Balíček ovladače systému Windows - Nokia Modem (10/12/2007 3.6)
"6D296974BAB6CA8429D5E687B292A6DA3E9FBD4A" = Balíček ovladače systému Windows - Nokia Modem (10/27/2008 3.9)
"819D45A9F73817F5B6D7C71A33ADAB88C5DA1765" = Balíček ovladače systému Windows - Nokia Modem (08/03/2007 6.84.0.2)
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2
"Adobe_6c8e2cb4fd241c55406016127a6ab2e" = Adobe Color Common Settings
"Alive Video Joiner_is1" = Alive Video Joiner (version 1.2.8.9)
"All ATI Software" = Softarová utilita ATI - Odinstalovat
"ALZip_is1" = ALZip
"ATI Display Driver" = ATI Display Driver
"BSPlayerf" = BS.Player FREE
"Carom3D" = Carom3D
"CCleaner" = CCleaner (remove only)
"Codec_is1" = Codec 8.0
"Counter-Strike: Source" = Counter-Strike: Source
"Counter-Strike:Source čestina" = Counter-Strike:Source čestina
"Čeština" = Čeština
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Shrink_is1" = DVD Shrink 3.2
"ENTERPRISER" = Microsoft Office Enterprise 2007
"FLVPlayer" = FLV Player 1.3.3
"Fraps" = Fraps
"Free WMA to MP3 Converter_is1" = Free WMA to MP3 Converter 1.16
"Guitar Pro 5_is1" = Guitar Pro 5.0
"Hamachi" = Hamachi 1.0.3.0
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"HPOCR" = OCR Software by I.R.I.S 7.0
"ie8" = Windows Internet Explorer 8 Beta 2
"InstallShield_{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"IrfanView" = IrfanView (remove only)
"Logon Loader" = Logon Loader 3.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MediaInfo" = MediaInfo 0.7.27
"MedianSoft Joiner-Converter_is1" = MedianSoft Joiner-Converter 3.8
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Visual Basic 2008 Express Edition with SP1 - ENU" = Microsoft Visual Basic 2008 Express Edition with SP1 - ENU
"Mozilla Firefox (3.5." = Mozilla Firefox (3.5.
"MP3 Cutter Joiner_is1" = MP3 Cutter Joiner 1.00
"Mp3 Knife_is1" = Mp3 Knife 3.2
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Drivers" = NVIDIA Drivers
"Picasa 3" = Picasa 3
"POD-Bot 2.5" = POD-Bot 2.5
"PSPad editor_is1" = PSPad editor
"RealPlayer 12.0" = RealPlayer
"Rearview" = Rearview
"SafeHouseExplorer" = SafeHouse Explorer 3.00
"Sgc 3D Simulator_is1" = Sgc 3D Simulator 1.5
"slideshow" = Screensaver slideshow
"SopCast" = SopCast 3.0.3
"StarWraith3" = StarWraith3
"SUPER ©" = SUPER © Version 2010.bld.37 (Jan 2, 2010)
"SystemRequirementsLab" = System Requirements Lab
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TmNations_is1" = TrackMania Nations ESWC 0.1.7.9
"Totalcmd" = Total Commander (Remove or Repair)
"TS Český jazyk 4 (doporučená instalace)" = TS Český jazyk 4 (doporučená instalace)
"TS Český jazyk II (plná instalace)" = TS Český jazyk II (plná instalace)
"TS ČJ I DEMO" = TS ČJ I DEMO
"TS Diktáty (plná instalace)" = TS Diktáty (plná instalace)
"TS Matematika 1-4 DEMO" = TS Matematika 1-4 DEMO
"TVUPlayer" = TVUPlayer 2.4.9.1
"Veetle TV" = Veetle TV 0.9.16
"VideoReDo-Plus_is1" = VideoReDo/Plus Version 2.5.6.512
"VideoReDoTVSuite_is1" = VideoReDo TVSuite Version 3.1.4.549
"WIC" = Windows Imaging Component
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR
"WM Converter 2.0" = WM Converter 2.0
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
"xp-AntiSpy" = xp-AntiSpy 3.96-2
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Xvid_is1" = Xvid 1.2.1 final uninstall

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Eurotran XP" = Překladač Eurotran XP
"Google Chrome" = Google Chrome
"QIP 2005" = QIP 2005 8092
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 11.2.2010 13:01:24 | Computer Name = MASINKA | Source = MsiInstaller | ID = 10005
Description = Product: QuickTime -- A newer version of QuickTime is already installed.
This installation cannot proceed while the newer version of QuickTime is installed.

Error - 12.2.2010 9:31:14 | Computer Name = MASINKA | Source = Google Update | ID = 20
Description =

Error - 13.2.2010 5:31:26 | Computer Name = MASINKA | Source = Google Update | ID = 20
Description =

Error - 20.2.2010 16:04:17 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace keyspy.exe, verze 0.0.0.0, chybující modul keyspy.exe,
verze 0.0.0.0, adresa chyby 0x00014e2e.

Error - 20.2.2010 16:04:24 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace keyspy.exe, verze 0.0.0.0, chybující modul keyspy.exe,
verze 0.0.0.0, adresa chyby 0x00014e2e.

Error - 22.2.2010 17:16:11 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace nerostartsmart.exe, verze 3.10.4.0, chybující modul
mfc71.dll, verze 7.10.3077.0, adresa chyby 0x000347b8.

Error - 2.3.2010 7:08:09 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace restoration.exe, verze 1.0.0.1, chybující modul
restoration.exe, verze 1.0.0.1, adresa chyby 0x0000348d.

Error - 3.3.2010 5:04:57 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

Error - 3.3.2010 5:06:05 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

Error - 3.3.2010 5:07:55 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

[ Application Events ]
Error - 11.2.2010 13:01:24 | Computer Name = MASINKA | Source = MsiInstaller | ID = 10005
Description = Product: QuickTime -- A newer version of QuickTime is already installed.
This installation cannot proceed while the newer version of QuickTime is installed.

Error - 12.2.2010 9:31:14 | Computer Name = MASINKA | Source = Google Update | ID = 20
Description =

Error - 13.2.2010 5:31:26 | Computer Name = MASINKA | Source = Google Update | ID = 20
Description =

Error - 20.2.2010 16:04:17 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace keyspy.exe, verze 0.0.0.0, chybující modul keyspy.exe,
verze 0.0.0.0, adresa chyby 0x00014e2e.

Error - 20.2.2010 16:04:24 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace keyspy.exe, verze 0.0.0.0, chybující modul keyspy.exe,
verze 0.0.0.0, adresa chyby 0x00014e2e.

Error - 22.2.2010 17:16:11 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace nerostartsmart.exe, verze 3.10.4.0, chybující modul
mfc71.dll, verze 7.10.3077.0, adresa chyby 0x000347b8.

Error - 2.3.2010 7:08:09 | Computer Name = MASINKA | Source = Application Error | ID = 1000
Description = Chybující aplikace restoration.exe, verze 1.0.0.1, chybující modul
restoration.exe, verze 1.0.0.1, adresa chyby 0x0000348d.

Error - 3.3.2010 5:04:57 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

Error - 3.3.2010 5:06:05 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

Error - 3.3.2010 5:07:55 | Computer Name = MASINKA | Source = Microsoft Office 12 | ID = 5000
Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3
ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

[ System Events ]
Error - 27.2.2010 7:12:34 | Computer Name = MASINKA | Source = LDMS | ID = 16780230
Description = Neošetřená výjimka, kód výjimky=6B

Error - 27.2.2010 11:17:13 | Computer Name = MASINKA | Source = Dhcp | ID = 1000
Description = Zapůjčení adresy IP počítače 5.220.64.24 pro síťovou kartu se síťovou
adresou 7A7905DC4018 byla ukončena.

Error - 28.2.2010 12:30:18 | Computer Name = MASINKA | Source = MRxSmb | ID = 8003
Description = Hlavní prohledávač přijal oznámení serveru od počítače MARIE-PC, který
se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{DA93451C-89DD-4D2B-.
Hlavní
prohledávač bude ukončen nebo bude vyvolána volba.

Error - 1.3.2010 5:47:24 | Computer Name = MASINKA | Source = Dhcp | ID = 1000
Description = Zapůjčení adresy IP počítače 5.220.64.24 pro síťovou kartu se síťovou
adresou 7A7905DC4018 byla ukončena.

Error - 2.3.2010 3:25:55 | Computer Name = MASINKA | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby NMIndexingService
s argumenty za účelem spuštění serveru: {C6A811AB-F8FF-45A4-93E5-FC5CCB650BE7}

Error - 2.3.2010 3:28:08 | Computer Name = MASINKA | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby NMIndexingService
s argumenty za účelem spuštění serveru: {C6A811AB-F8FF-45A4-93E5-FC5CCB650BE7}

Error - 2.3.2010 3:45:00 | Computer Name = MASINKA | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby NMIndexingService
s argumenty za účelem spuštění serveru: {C6A811AB-F8FF-45A4-93E5-FC5CCB650BE7}

Error - 3.3.2010 9:09:42 | Computer Name = MASINKA | Source = Dhcp | ID = 1000
Description = Zapůjčení adresy IP počítače 5.220.64.24 pro síťovou kartu se síťovou
adresou 7A7905DC4018 byla ukončena.

Error - 3.3.2010 11:41:38 | Computer Name = MASINKA | Source = Dhcp | ID = 1000
Description = Zapůjčení adresy IP počítače 5.220.64.24 pro síťovou kartu se síťovou
adresou 7A7905DC4018 byla ukončena.

Error - 3.3.2010 12:39:56 | Computer Name = MASINKA | Source = Service Control Manager | ID = 7034
Description = Služba BlueSoleil Hid Service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

[ TuneUp Events ]
Error - 22.6.2009 10:33:00 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 22.6.2009 10:33:06 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 24.7.2009 11:34:23 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 26.7.2009 12:14:54 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 11.8.2009 7:45:07 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.8.2009 4:20:12 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.8.2009 5:41:10 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.8.2009 11:00:34 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 30.8.2009 4:13:59 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 30.8.2009 13:16:18 | Computer Name = MASINKA | Source = TuneUp Program Statistics | ID = 131840
Description =


< End of report >