Svchost.exe velkej problem (500-xxx) processu Vyřešeno

Vše ostatní o bezpečnosti…

Moderátoři: memphisto, Mods_senior, Security team

Zamčeno
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 14:29

vymnenil jsem protoze avast je na nic tak jsem si vybral AVG internet security

--- Doplnění předchozího příspěvku (08 Dub 2012 14:40) ---

https://www.virustotal.com/file/fea78fd ... 333888396/

--- Doplnění předchozího příspěvku (08 Dub 2012 14:49) ---

pockej udelam este jeden nejsem si jistej jestli se mne to neviplo

--- Doplnění předchozího příspěvku (08 Dub 2012 14:52) ---

https://www.virustotal.com/file/fea78fd ... 333889310/
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43287
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod jaro3 » 08 dub 2012 14:55

c:\windows\polop.exe--odmažeme v OTL


Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 15:06

toto je z OTL.txt :





OTL logfile created on: 8.4.2012 14:59:26 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\Perda\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 74,53% Memory free
3,84 Gb Paging File | 3,39 Gb Available in Paging File | 88,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 29,72 Gb Free Space | 39,88% Space Free | Partition Type: NTFS

Computer Name: BLODHBLAKA | User Name: Perda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Perda\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgfws.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\CaledosLAB\Caledos Automatic Wallpaper Changer\CaledosWallpaper6.exe (CaledosLAB)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\WindowsBase.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\PresentationUI.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationUI.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Deployment.resources.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()


========== Win32 Services (SafeList) ==========

SRV - (Update Server) -- C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe File not found
SRV - (SafeBox) -- C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe File not found
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (avgfws) -- C:\Program Files\AVG\AVG2012\avgfws.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)


========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (RSCOMP) -- C:\WINDOWS\system32\drivers\RSCOMP.sys (RATOC Systems,Inc.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (ti21sony) -- C:\WINDOWS\system32\drivers\ti21sony.sys (Texas Instruments)
DRV - (avchv) -- C:\WINDOWS\system32\drivers\avchv.sys (BitDefender)
DRV - (bdsandbox) -- C:\WINDOWS\system32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgrkx86) -- C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSEH) -- C:\WINDOWS\system32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (Avgfwfd) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (thdudf) -- C:\WINDOWS\system32\drivers\thdudf.sys (TOSHIBA Corporation)
DRV - (RTL2832UUSB) -- C:\WINDOWS\system32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UBDA) -- C:\WINDOWS\system32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (OAfilt) -- C:\WINDOWS\system32\drivers\OAfilt.sys (Creative Technology Ltd.)
DRV - (vmm) -- C:\WINDOWS\system32\drivers\VMM.sys (Microsoft Corporation)
DRV - (VPCNetS2) -- C:\WINDOWS\system32\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\MPE.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = 94A2AE90-7B04-4CE9-92A8-E74303397600
IE - HKCU\..\SearchScopes\94A2AE90-7B04-4CE9-92A8-E74303397600: "URL" = http://searchya.com/?chnl=dcom-100&s=1& ... DtAtDyC&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..network.proxy.gopher: ""
FF - prefs.js..network.proxy.gopher_port: 0
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Perda\Local Settings\Data aplikací\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Perda\Local Settings\Data aplikací\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012.03.03 12:23:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.03.21 21:15:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012.04.08 12:47:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.04.08 10:12:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.03.21 21:15:11 | 000,000,000 | ---D | M]

[2012.03.08 16:55:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Extensions
[2012.03.11 21:54:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2012.04.07 12:20:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Firefox\Profiles\tzgd2f0l.default\extensions
[2012.03.10 17:36:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.04.08 10:12:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PERDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\TZGD2F0L.DEFAULT\EXTENSIONS\SUPPORT@SUPER-HIDE-IP.COM.XPI
[2012.04.08 10:12:06 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.16 13:40:34 | 000,002,364 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2012.02.16 14:28:19 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.02.16 14:28:19 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.02.16 14:28:19 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.02.16 14:28:19 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.02.16 14:28:19 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2012.04.08 10:26:09 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll File not found
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Odkazy) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O3 - HKCU\..\Toolbar\WebBrowser: (&Odkazy) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Caledos Wallpaper (startup).lnk = C:\WINDOWS\Installer\{0368A580-9FA9-4495-AC56-7B11EE6B24C8}\_3F792AE6AFFFF40E55DB8B.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableregistrytools = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01915321-C7E1-4020-A7C8-48002A6AC2E3}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\wbsys.dll) - C:\WINDOWS\system32\wbsys.dll (Stardock.Net, Inc)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WB: DllName - (C:\Program Files\AlienGUIse\fastload.dll) - C:\Program Files\AlienGUIse\fastload.dll (Stardock)
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Proces mezipaměti kategorií součástí - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012.04.08 14:56:34 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Perda\Plocha\OTL.exe
[2012.04.08 14:14:38 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012.04.08 13:02:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\AVG
[2012.04.08 13:01:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\AVG PC Tuneup 2011
[2012.04.08 12:48:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\AVG2012
[2012.04.08 12:47:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\AVG 2012
[2012.04.08 12:46:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVG2012
[2012.04.08 12:46:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\AVG
[2012.04.08 12:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012.04.08 12:42:37 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2012.04.08 12:42:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2012.04.08 11:06:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.04.08 10:15:30 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.04.07 17:15:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Oblivion
[2012.04.07 13:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\BDLogging
[2012.04.07 13:09:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Bitdefender 2012
[2012.04.07 13:02:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\QuickScan
[2012.04.07 12:56:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\CoD 4
[2012.04.07 12:10:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012.04.07 11:51:11 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Nástroje pro správu
[2012.04.07 09:41:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012.04.07 09:40:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Malwarebytes
[2012.04.07 09:40:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2012.04.05 20:10:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012.04.05 17:30:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2012.04.05 17:30:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\PunkBuster
[2012.04.05 16:35:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Activision
[2012.04.05 16:20:37 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2012.04.05 16:18:48 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2012.04.05 12:14:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\morrowind
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Program Files\Software Informer
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Software Informer
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Software Informer
[2012.04.05 11:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\lightning group shared files
[2012.04.05 11:10:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Bethesda Softworks
[2012.04.05 11:10:50 | 000,000,000 | ---D | C] -- C:\Program Files\Bethesda Softworks
[2012.04.04 23:49:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Skyrim
[2012.04.04 23:49:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\My Games
[2012.04.04 23:47:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Razor 1911
[2012.04.04 23:28:36 | 000,000,000 | ---D | C] -- C:\Program Files\The Elder Scrolls V Skyrim
[2012.04.04 23:23:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Picasa 3
[2012.04.04 23:21:26 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012.04.04 23:13:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\PhotoScape
[2012.04.03 14:22:16 | 005,610,638 | ---- | C] (Adobe Systems, Inc.) -- C:\Documents and Settings\Perda\Plocha\Transformice.exe
[2012.03.31 17:07:40 | 001,467,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr100d.dll
[2012.03.31 14:34:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Seven Remix XP
[2012.03.31 14:29:13 | 000,000,000 | -H-D | C] -- C:\WINDOWS\NiwradSoft Shell Pack
[2012.03.31 13:25:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Cross Fire
[2012.03.31 13:12:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Crossfire Europe
[2012.03.31 13:05:25 | 000,000,000 | ---D | C] -- C:\SG Interactive
[2012.03.31 12:57:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\PMB Files
[2012.03.31 12:57:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2012.03.31 12:56:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikac
[2012.03.31 12:56:44 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2012.03.30 21:39:29 | 000,000,000 | ---D | C] -- C:\Program Files\Aoao Video to Picture Converter
[2012.03.30 21:19:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\MOVAVI
[2012.03.30 21:12:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\K-Lite Codec Pack
[2012.03.30 21:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2012.03.30 20:38:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Adobe
[2012.03.30 20:38:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012.03.30 20:38:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Adobe
[2012.03.30 20:38:15 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2012.03.28 22:19:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\PowerISO
[2012.03.28 19:04:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Sun
[2012.03.27 22:09:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\CaledosLAB
[2012.03.27 22:08:54 | 000,000,000 | ---D | C] -- C:\Program Files\CaledosLAB
[2012.03.27 21:51:23 | 000,000,000 | ---D | C] -- C:\Program Files\American Civil War Gettysburg
[2012.03.26 21:57:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\KOLA MAMA
[2012.03.25 00:12:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Identities
[2012.03.23 23:31:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Stardock
[2012.03.23 19:20:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Media Player Classic
[2012.03.23 18:06:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Electronic Arts
[2012.03.23 17:59:14 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\System32\vp6vfw.dll
[2012.03.23 17:59:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE
[2012.03.23 17:15:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Dynamic Auto-Painter
[2012.03.23 17:14:53 | 000,000,000 | ---D | C] -- C:\Program Files\DAPainter
[2012.03.23 14:57:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.03.23 14:56:42 | 000,637,848 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012.03.23 14:56:42 | 000,224,136 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012.03.23 14:56:42 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012.03.23 14:56:42 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012.03.22 16:57:38 | 000,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcmtr.exe
[2012.03.22 16:23:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\SMS Bomber 1.6
[2012.03.21 23:36:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\BricoPacks
[2012.03.21 22:53:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\AlienGUIse

--- Doplnění předchozího příspěvku (08 Dub 2012 15:08) ---

pokracivani :




[2012.03.21 22:52:49 | 000,036,864 | ---- | C] (Stardock.Net, Inc) -- C:\WINDOWS\System32\wbsys.dll
[2012.03.21 22:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Stardock
[2012.03.21 22:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\AlienGUIse
[2012.03.21 21:16:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\DDMSettings
[2012.03.21 21:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\DivX Plus
[2012.03.21 21:14:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2012.03.21 21:14:26 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2012.03.21 21:13:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\DivX
[2012.03.20 22:44:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\flash
[2012.03.20 22:23:44 | 000,000,000 | ---D | C] -- C:\Program Files\Nasser Professional
[2012.03.20 22:23:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Nasser Professional
[2012.03.20 22:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Blender Foundation
[2012.03.20 22:07:57 | 000,000,000 | ---D | C] -- C:\Program Files\Blender Foundation
[2012.03.19 17:52:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\FlashPlayer
[2012.03.19 17:25:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\3D Rad
[2012.03.19 17:25:05 | 000,000,000 | ---D | C] -- C:\3D Rad
[2012.03.16 14:44:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\3D
[2012.03.15 21:37:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Executable File Icons Changer
[2012.03.15 21:37:07 | 000,000,000 | ---D | C] -- C:\Program Files\ExeIco
[2012.03.15 21:24:20 | 000,421,376 | ---- | C] (Softuarium) -- C:\WINDOWS\System32\WebPicLib.ocx

--- Doplnění předchozího příspěvku (08 Dub 2012 15:16) ---

Kód: Vybrat vše

[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012.04.08 13:01:46 | 000,000,795 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\AVG PC Tuneup 2011.lnk
[2012.04.08 12:55:07 | 000,623,705 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2012.04.08 12:49:23 | 060,277,199 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012.04.08 12:47:14 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\AVG 2012.lnk
[2012.04.08 11:11:22 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\WebpageIcons.db
[2012.04.08 10:15:37 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012.04.08 10:15:33 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2012.04.07 17:46:48 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2012.04.07 17:34:58 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI
[2012.04.07 17:24:42 | 000,001,805 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Oblivion.lnk
[2012.04.07 13:11:58 | 000,206,902 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796777.bdinstall.bin
[2012.04.07 13:10:20 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012.04.07 13:10:18 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012.04.07 13:03:27 | 000,018,596 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796597.bdinstall.bin
[2012.04.07 13:03:05 | 000,114,702 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796539.bdinstall.bin
[2012.04.07 13:03:03 | 000,018,430 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796579.bdinstall.bin
[2012.04.05 17:30:29 | 000,138,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.04.05 17:30:18 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012.04.05 17:30:18 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2012.04.05 17:30:14 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2012.04.05 17:30:07 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012.04.05 16:35:46 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2012.04.05 11:10:56 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Morrowind.lnk
[2012.04.04 23:24:58 | 000,000,759 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2012.04.04 11:47:43 | 000,063,543 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha 890 kč.jpg
[2012.04.04 11:45:56 | 000,060,221 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha,cz 780 kč.jpg
[2012.04.01 20:53:52 | 005,693,590 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Sequence 01.avi
[2012.03.31 15:44:11 | 000,050,474 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Electric.wav
[2012.03.31 14:34:01 | 000,001,803 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Send Feedback.lnk
[2012.03.31 14:34:01 | 000,001,769 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\NiwradSoft.lnk
[2012.03.31 14:34:01 | 000,001,767 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\NS Welcome Center.lnk
[2012.03.31 14:14:35 | 000,001,498 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\¨ů-ú§.gif
[2012.03.30 21:27:26 | 000,005,089 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ctonhhte.rgb
[2012.03.30 21:19:45 | 000,004,910 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\qjaxlkio.dss
[2012.03.30 21:12:18 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.03.28 21:12:37 | 000,107,378 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Killer_bee.png
[2012.03.27 22:08:55 | 000,002,699 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Caledos Wallpaper (startup).lnk
[2012.03.27 22:08:55 | 000,002,599 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Caledos Automatic Wallpaper Changer.lnk
[2012.03.26 22:04:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Maxbike Cavalla 2010 AXIT.htm
[2012.03.26 21:57:05 | 000,030,709 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\window.jpg
[2012.03.26 15:40:23 | 000,011,342 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\hermiona.jpg
[2012.03.25 20:52:14 | 000,092,579 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Angelina Jolie.jpg
[2012.03.23 23:31:03 | 005,760,054 | ---- | C] () -- C:\WINDOWS\AW_XenoMorph1600.bmp
[2012.03.23 19:10:23 | 015,280,324 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\-a id='watch-headline-show-title' href='artistMichel_Teló.mp4
[2012.03.23 18:43:00 | 001,325,722 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Ja kresleni.jpg
[2012.03.23 18:23:53 | 004,719,938 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\100_0798.JPG
[2012.03.23 17:58:31 | 000,001,723 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\The Sims™ 3.lnk
[2012.03.23 17:15:08 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Dynamic Auto-Painter.lnk
[2012.03.22 17:41:54 | 003,932,214 | ---- | C] () -- C:\WINDOWS\InvaderDark1280.bmp
[2012.03.22 11:47:58 | 000,032,867 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\425914_2683705583998_1597137965_1921336_1810545353_n.jpg
[2012.03.21 23:51:48 | 005,760,054 | ---- | C] () -- C:\WINDOWS\ALX_1600x1200.bmp
[2012.03.21 23:39:36 | 000,064,419 | ---- | C] () -- C:\WINDOWS\BricoPackUninst.cmd
[2012.03.21 23:39:18 | 000,960,118 | ---- | C] () -- C:\WINDOWS\BricoPack Wallpaper.bmp
[2012.03.21 23:36:46 | 000,006,114 | ---- | C] () -- C:\WINDOWS\BricoPackFoldersDelete.cmd
[2012.03.21 23:08:17 | 005,760,054 | ---- | C] () -- C:\WINDOWS\AW_1600x1200.bmp
[2012.03.21 22:55:34 | 005,760,056 | ---- | C] () -- C:\WINDOWS\Darkstar.bmp
[2012.03.21 22:53:08 | 000,001,542 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\AlienGUIse.lnk
[2012.03.21 22:52:50 | 000,000,056 | ---- | C] () -- C:\WINDOWS\wb.ini
[2012.03.21 21:15:18 | 000,001,436 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\DivX Movies.lnk
[2012.03.20 22:23:44 | 000,000,753 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Launch Nasser Exe2swf.lnk
[2012.03.20 22:08:29 | 000,001,745 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Blender.lnk
[2012.03.19 17:25:54 | 000,000,538 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\3D Rad Compiler.lnk
[2012.03.19 17:25:54 | 000,000,489 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\3D Rad - The Empty Space.lnk
[2012.03.15 21:37:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tellei34.sys
[2012.03.15 21:37:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\sysaddei34.dll
[2012.03.15 21:37:09 | 000,001,530 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Executable File Icons Changer.lnk
[2012.03.15 19:20:47 | 000,002,645 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\Global.sw2
[2012.03.15 16:35:45 | 000,000,688 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Audacity.lnk
[2012.03.12 20:27:23 | 000,025,495 | ---- | C] () -- C:\WINDOWS\System32\ctOA.ini
[2012.03.12 20:27:15 | 000,076,288 | ---- | C] () -- C:\WINDOWS\System32\ctmmactl.DLL
[2012.03.12 20:27:15 | 000,000,319 | RH-- | C] () -- C:\WINDOWS\ctfile.rfc
[2012.03.12 01:34:11 | 000,004,096 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\20120312_0034_CH6_CT 1_.mpg
[2012.03.11 23:58:58 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2012.03.11 23:58:58 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2012.03.11 23:58:58 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\MSDvbNP.ax
[2012.03.11 23:58:58 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2012.03.11 23:58:57 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\PsisRndr.ax
[2012.03.11 23:58:57 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2012.03.11 21:43:20 | 000,002,329 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\OSCAR Mouse Script Editor.lnk
[2012.03.11 05:57:34 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2012.03.08 18:59:28 | 000,011,264 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.05 18:32:05 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\fusioncache.dat
[2012.03.05 18:14:35 | 000,011,328 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.03.03 20:58:39 | 002,579,464 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.03.03 12:06:06 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012.03.03 11:54:46 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll
[2012.03.03 11:51:08 | 001,498,560 | ---- | C] () -- C:\WINDOWS\System32\igkrng400.bin
[2012.03.03 10:58:03 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.03.03 00:09:13 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.03.03 00:08:00 | 000,118,152 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.02 23:29:10 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.03.02 23:19:26 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012.03.03 10:59:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2012.04.08 12:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVG2012
[2012.03.05 20:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2012.04.07 13:11:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BDLogging
[2012.03.08 18:11:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
[2012.03.12 09:27:19 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2012.04.08 12:42:37 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2012.03.05 18:54:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Gibraltar
[2012.04.08 12:55:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2012.03.31 12:57:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2012.03.03 17:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SuperHideIP
[2012.04.08 14:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2012.03.06 15:32:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TubeBlasterPro
[2012.03.11 10:34:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WinZip
[2012.03.10 17:52:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.03.05 18:08:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{BECCA440-C137-43CD-BA7B-AE580F9F6D17}
[2012.03.11 22:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\.minecraft
[2012.03.15 16:38:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Audacity
[2012.04.08 13:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\AVG
[2012.04.08 12:48:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\AVG2012
[2012.03.05 20:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Babylon
[2012.03.21 21:16:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\DDMSettings
[2012.03.03 17:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Digiarty
[2012.03.15 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\GameMaker
[2012.03.20 22:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\GetRightToGo
[2012.03.12 00:06:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\KWorld Multimedia
[2012.03.10 17:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Media Finder
[2012.04.07 09:26:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\MediaFire Express
[2012.03.05 20:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Mount&Blade Warband
[2012.03.03 17:09:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Mount&Blade With Fire and Sword
[2012.03.30 21:19:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\MOVAVI
[2012.04.04 23:14:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\PhotoScape
[2012.04.07 13:02:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\QuickScan
[2012.04.05 12:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Software Informer
[2012.03.03 17:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\SuperHideIP
[2012.03.05 17:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\ubot
[2012.04.08 12:02:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\uTorrent
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 48 bytes -> C:\Documents and Settings\All Users\DRM:احتضان
@Alternate Data Stream - 181 bytes -> C:\Documents and Settings\All Users\Data aplikací\Temp:0B4227B4

< End of report >


--- Doplnění předchozího příspěvku (08 Dub 2012 15:19) ---

ok tak este jednou tohle je z OTL.txt

http://uloz.to/xUfrFz2/otl-txt

a tohle je z extras.txt

(nevejde se to do 60000znaku)

--- Doplnění předchozího příspěvku (08 Dub 2012 15:20) ---

http://uloz.to/xM14eGg/extras-txt
Nahoru
Uživatelský avatar
Damned
Tvůrce článků
Master Level 9
Master Level 9
Příspěvky: 8353
Registrován: prosinec 06
Bydliště: Rokycany
Pohlaví: Muž
Stav:
Offline
Kontakt:
Kontaktovat uživatele Damned

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod Damned » 08 dub 2012 15:22

Nedávej logy "code", ani jako přílohu, dej to do dalšího příspěvku, že jich bude 5 nevadí, lépe se to pak kontroluje (kontrolujeme každý řádek!). Jaký AVG? Když v hlavičce logu Combofixu se píše "Bit Defender" ) log z 08.04.2012 10:19:29.2.1)?

Combofix píše:ComboFix 12-04-07.02 - Perda 08.04.2012 10:19:29.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2038.1490 [GMT 2:00]
Spuštěný z: c:\documents and settings\Perda\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Perda\Plocha\CFScript.txt
AV: Bitdefender Antivirus *Disabled/Outdated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: Bitdefender Firewall *Enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
Nic není nemožné, proto tam, kde jsme s rozumem v koncích, neváháme použít kladivo.
Chceš-li vědět, co je nového, podívej se do starých knih.
Damnedovy češtiny - překlady programů pro údržbu PC
HiJackThis 2+návod FCleaner+čeština Wise Registry Cleaner
Nahoru
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 15:24

bit defender u nej nesel zapnout firewall. (asi protoze byl cracknutej)

--- Doplnění předchozího příspěvku (08 Dub 2012 15:24) ---

teda antivirus nesel zapnout

--- Doplnění předchozího příspěvku (08 Dub 2012 15:25) ---

mam teda ti to dat jeste jednou nebo sis sto stahnul?
Nahoru
Uživatelský avatar
Damned
Tvůrce článků
Master Level 9
Master Level 9
Příspěvky: 8353
Registrován: prosinec 06
Bydliště: Rokycany
Pohlaví: Muž
Stav:
Offline
Kontakt:
Kontaktovat uživatele Damned

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod Damned » 08 dub 2012 15:58

Dej to do příspěvku.
Naco to děláme, když v půlce si tam stáhneš další crack?
Nic není nemožné, proto tam, kde jsme s rozumem v koncích, neváháme použít kladivo.
Chceš-li vědět, co je nového, podívej se do starých knih.
Damnedovy češtiny - překlady programů pro údržbu PC
HiJackThis 2+návod FCleaner+čeština Wise Registry Cleaner
Nahoru
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 16:02

OTL logfile created on: 8.4.2012 14:59:26 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\Perda\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 74,53% Memory free
3,84 Gb Paging File | 3,39 Gb Available in Paging File | 88,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 29,72 Gb Free Space | 39,88% Space Free | Partition Type: NTFS

Computer Name: BLODHBLAKA | User Name: Perda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Perda\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgfws.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\CaledosLAB\Caledos Automatic Wallpaper Changer\CaledosWallpaper6.exe (CaledosLAB)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\WindowsBase.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\PresentationUI.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationUI.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Deployment.resources.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()


========== Win32 Services (SafeList) ==========

SRV - (Update Server) -- C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe File not found
SRV - (SafeBox) -- C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe File not found
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (avgfws) -- C:\Program Files\AVG\AVG2012\avgfws.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)


========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (RSCOMP) -- C:\WINDOWS\system32\drivers\RSCOMP.sys (RATOC Systems,Inc.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (ti21sony) -- C:\WINDOWS\system32\drivers\ti21sony.sys (Texas Instruments)
DRV - (avchv) -- C:\WINDOWS\system32\drivers\avchv.sys (BitDefender)
DRV - (bdsandbox) -- C:\WINDOWS\system32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgrkx86) -- C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSEH) -- C:\WINDOWS\system32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (Avgfwfd) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (thdudf) -- C:\WINDOWS\system32\drivers\thdudf.sys (TOSHIBA Corporation)
DRV - (RTL2832UUSB) -- C:\WINDOWS\system32\drivers\RTL2832UUSB.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (RTL2832UBDA) -- C:\WINDOWS\system32\drivers\RTL2832UBDA.sys (REALTEK SEMICONDUCTOR Corp.)
DRV - (OAfilt) -- C:\WINDOWS\system32\drivers\OAfilt.sys (Creative Technology Ltd.)
DRV - (vmm) -- C:\WINDOWS\system32\drivers\VMM.sys (Microsoft Corporation)
DRV - (VPCNetS2) -- C:\WINDOWS\system32\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\MPE.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = 94A2AE90-7B04-4CE9-92A8-E74303397600
IE - HKCU\..\SearchScopes\94A2AE90-7B04-4CE9-92A8-E74303397600: "URL" = http://searchya.com/?chnl=dcom-100&s=1& ... DtAtDyC&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..network.proxy.gopher: ""
FF - prefs.js..network.proxy.gopher_port: 0
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Perda\Local Settings\Data aplikací\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Perda\Local Settings\Data aplikací\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012.03.03 12:23:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.03.21 21:15:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012.04.08 12:47:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.04.08 10:12:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.03.21 21:15:11 | 000,000,000 | ---D | M]

[2012.03.08 16:55:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Extensions
[2012.03.11 21:54:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2012.04.07 12:20:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Perda\Data aplikací\Mozilla\Firefox\Profiles\tzgd2f0l.default\extensions
[2012.03.10 17:36:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.04.08 10:12:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PERDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\TZGD2F0L.DEFAULT\EXTENSIONS\SUPPORT@SUPER-HIDE-IP.COM.XPI
[2012.04.08 10:12:06 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.16 13:40:34 | 000,002,364 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2012.02.16 14:28:19 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.02.16 14:28:19 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.02.16 14:28:19 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.02.16 14:28:19 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.02.16 14:28:19 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2012.04.08 10:26:09 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll File not found
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Odkazy) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O3 - HKCU\..\Toolbar\WebBrowser: (&Odkazy) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Caledos Wallpaper (startup).lnk = C:\WINDOWS\Installer\{0368A580-9FA9-4495-AC56-7B11EE6B24C8}\_3F792AE6AFFFF40E55DB8B.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableregistrytools = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01915321-C7E1-4020-A7C8-48002A6AC2E3}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\wbsys.dll) - C:\WINDOWS\system32\wbsys.dll (Stardock.Net, Inc)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WB: DllName - (C:\Program Files\AlienGUIse\fastload.dll) - C:\Program Files\AlienGUIse\fastload.dll (Stardock)
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Proces mezipaměti kategorií součástí - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012.04.08 14:56:34 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Perda\Plocha\OTL.exe
[2012.04.08 14:14:38 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012.04.08 13:02:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\AVG
[2012.04.08 13:01:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\AVG PC Tuneup 2011
[2012.04.08 12:48:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\AVG2012
[2012.04.08 12:47:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\AVG 2012
[2012.04.08 12:46:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVG2012
[2012.04.08 12:46:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\AVG
[2012.04.08 12:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012.04.08 12:42:37 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2012.04.08 12:42:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2012.04.08 11:06:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.04.08 10:15:30 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.04.07 17:15:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Oblivion
[2012.04.07 13:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\BDLogging
[2012.04.07 13:09:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Bitdefender 2012
[2012.04.07 13:02:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\QuickScan
[2012.04.07 12:56:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\CoD 4
[2012.04.07 12:10:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012.04.07 11:51:11 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Nástroje pro správu
[2012.04.07 09:41:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012.04.07 09:40:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Malwarebytes
[2012.04.07 09:40:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2012.04.05 20:10:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012.04.05 17:30:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2012.04.05 17:30:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\PunkBuster
[2012.04.05 16:35:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Activision
[2012.04.05 16:20:37 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2012.04.05 16:18:48 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2012.04.05 12:14:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\morrowind
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Program Files\Software Informer
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Software Informer
[2012.04.05 12:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Software Informer
[2012.04.05 11:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\lightning group shared files
[2012.04.05 11:10:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Bethesda Softworks
[2012.04.05 11:10:50 | 000,000,000 | ---D | C] -- C:\Program Files\Bethesda Softworks
[2012.04.04 23:49:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Skyrim
[2012.04.04 23:49:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\My Games
[2012.04.04 23:47:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Razor 1911
[2012.04.04 23:28:36 | 000,000,000 | ---D | C] -- C:\Program Files\The Elder Scrolls V Skyrim
[2012.04.04 23:23:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Picasa 3
[2012.04.04 23:21:26 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012.04.04 23:13:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\PhotoScape
[2012.04.03 14:22:16 | 005,610,638 | ---- | C] (Adobe Systems, Inc.) -- C:\Documents and Settings\Perda\Plocha\Transformice.exe
[2012.03.31 17:07:40 | 001,467,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr100d.dll
[2012.03.31 14:34:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Seven Remix XP
[2012.03.31 14:29:13 | 000,000,000 | -H-D | C] -- C:\WINDOWS\NiwradSoft Shell Pack
[2012.03.31 13:25:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Cross Fire
[2012.03.31 13:12:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Crossfire Europe
[2012.03.31 13:05:25 | 000,000,000 | ---D | C] -- C:\SG Interactive
[2012.03.31 12:57:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\PMB Files
[2012.03.31 12:57:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2012.03.31 12:56:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikac
[2012.03.31 12:56:44 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2012.03.30 21:39:29 | 000,000,000 | ---D | C] -- C:\Program Files\Aoao Video to Picture Converter
[2012.03.30 21:19:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\MOVAVI
[2012.03.30 21:12:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\K-Lite Codec Pack
[2012.03.30 21:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2012.03.30 20:38:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Adobe
[2012.03.30 20:38:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012.03.30 20:38:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Adobe
[2012.03.30 20:38:15 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2012.03.28 22:19:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\PowerISO
[2012.03.28 19:04:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Sun
[2012.03.27 22:09:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\CaledosLAB
[2012.03.27 22:08:54 | 000,000,000 | ---D | C] -- C:\Program Files\CaledosLAB
[2012.03.27 21:51:23 | 000,000,000 | ---D | C] -- C:\Program Files\American Civil War Gettysburg
[2012.03.26 21:57:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\KOLA MAMA
[2012.03.25 00:12:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Identities
[2012.03.23 23:31:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\Stardock
[2012.03.23 19:20:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Media Player Classic
[2012.03.23 18:06:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Dokumenty\Electronic Arts
[2012.03.23 17:59:14 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\System32\vp6vfw.dll
[2012.03.23 17:59:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE
[2012.03.23 17:15:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Dynamic Auto-Painter
[2012.03.23 17:14:53 | 000,000,000 | ---D | C] -- C:\Program Files\DAPainter
[2012.03.23 14:57:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.03.23 14:56:42 | 000,637,848 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012.03.23 14:56:42 | 000,224,136 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012.03.23 14:56:42 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012.03.23 14:56:42 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012.03.22 16:57:38 | 000,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcmtr.exe
[2012.03.22 16:23:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\SMS Bomber 1.6
[2012.03.21 23:36:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\BricoPacks
[2012.03.21 22:53:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\AlienGUIse
[2012.03.21 22:52:49 | 000,036,864 | ---- | C] (Stardock.Net, Inc) -- C:\WINDOWS\System32\wbsys.dll
[2012.03.21 22:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Stardock
[2012.03.21 22:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\AlienGUIse
[2012.03.21 21:16:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\DDMSettings
[2012.03.21 21:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\DivX Plus
[2012.03.21 21:14:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2012.03.21 21:14:26 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2012.03.21 21:13:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\DivX
[2012.03.20 22:44:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\flash
[2012.03.20 22:23:44 | 000,000,000 | ---D | C] -- C:\Program Files\Nasser Professional
[2012.03.20 22:23:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Nasser Professional
[2012.03.20 22:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Blender Foundation
[2012.03.20 22:07:57 | 000,000,000 | ---D | C] -- C:\Program Files\Blender Foundation
[2012.03.19 17:52:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\FlashPlayer
[2012.03.19 17:25:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\3D Rad
[2012.03.19 17:25:05 | 000,000,000 | ---D | C] -- C:\3D Rad
[2012.03.16 14:44:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\3D
[2012.03.15 21:37:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Executable File Icons Changer
[2012.03.15 21:37:07 | 000,000,000 | ---D | C] -- C:\Program Files\ExeIco
[2012.03.15 21:24:20 | 000,421,376 | ---- | C] (Softuarium) -- C:\WINDOWS\System32\WebPicLib.ocx
[2012.03.15 21:24:20 | 000,303,104 | ---- | C] (BUAA) -- C:\WINDOWS\System32\EasyIcon.ocx
[2012.03.15 21:24:20 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMDLG32.OCX
[2012.03.15 21:24:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\JPG to Icon Converter
[2012.03.15 21:24:19 | 000,000,000 | ---D | C] -- C:\Program Files\JPG to Icon Converter
[2012.03.15 19:20:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Softwrap
[2012.03.15 19:20:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Fonts
[2012.03.15 19:20:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Config
[2012.03.15 19:20:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Game Maker 8
[2012.03.15 19:20:10 | 000,000,000 | ---D | C] -- C:\Program Files\Game_Maker8
[2012.03.15 19:04:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\GameMaker8.1
[2012.03.15 19:01:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Game Maker 8.1
[2012.03.15 19:01:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\GameMaker
[2012.03.15 19:01:48 | 000,000,000 | ---D | C] -- C:\Program Files\Game Maker 8.1
[2012.03.15 16:35:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Audacity
[2012.03.15 16:35:34 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2012.03.13 16:56:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\ULUS10345SAVE00
[2012.03.13 15:33:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\Super Simple Wallhack v7.3
[2012.03.12 20:27:23 | 000,444,952 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2012.03.12 20:27:23 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2012.03.12 20:27:15 | 001,390,592 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\OAfilt.sys
[2012.03.12 20:27:15 | 000,809,496 | ---- | C] (Creative Labs Inc.) -- C:\WINDOWS\OALInst.exe
[2012.03.12 20:27:15 | 000,020,480 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\CBDef.exe
[2012.03.12 20:26:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Creative
[2012.03.12 20:26:46 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2012.03.12 09:30:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Registrace uživatele zařízení Canon iP1800 series
[2012.03.12 09:28:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon Utilities
[2012.03.12 09:27:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon iP1800 series Manual
[2012.03.12 09:27:19 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2012.03.12 09:27:03 | 000,198,656 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMLM8O.DLL
[2012.03.12 09:26:58 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\CanonIJ Uninstaller Information
[2012.03.12 09:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon iP1800 series
[2012.03.12 09:26:43 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2012.03.12 09:26:02 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2012.03.12 01:17:53 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys
[2012.03.12 01:13:54 | 000,000,000 | ---D | C] -- C:\Program Files\KWorld Multimedia
[2012.03.12 01:13:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\KWorld Multimedia
[2012.03.12 01:12:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\CyberLink PowerProducer
[2012.03.12 00:06:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\KWorld Multimedia
[2012.03.12 00:05:29 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2012.03.12 00:05:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2012.03.12 00:03:24 | 000,000,000 | ---D | C] -- C:\Program Files\GIGABYTE
[2012.03.11 23:59:55 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys
[2012.03.11 23:59:50 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MPE.sys
[2012.03.11 23:59:50 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys
[2012.03.11 23:59:44 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys
[2012.03.11 23:59:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2012.03.11 23:59:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax
[2012.03.11 23:59:40 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys
[2012.03.11 23:59:35 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys
[2012.03.11 23:59:31 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys
[2012.03.11 23:59:25 | 000,085,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2012.03.11 23:59:21 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys
[2012.03.11 23:59:18 | 000,090,213 | R--- | C] (Realtek) -- C:\WINDOWS\System32\SuperFrameSplitter.dll
[2012.03.11 23:59:17 | 000,352,335 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTKFM.dll
[2012.03.11 23:59:17 | 000,139,369 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTKDABSOURCE.dll
[2012.03.11 23:59:17 | 000,135,277 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTKFMSOURCE.dll
[2012.03.11 23:59:17 | 000,114,688 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTL283XACCESS.dll
[2012.03.11 23:59:17 | 000,069,632 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTKDABMWare.dll
[2012.03.11 23:59:15 | 004,698,216 | R--- | C] (Realtek) -- C:\WINDOWS\System32\RTKDAB.dll
[2012.03.11 23:59:00 | 000,143,264 | R--- | C] (REALTEK SEMICONDUCTOR Corp.) -- C:\WINDOWS\System32\drivers\RTL2832UBDA.sys
[2012.03.11 23:59:00 | 000,032,800 | R--- | C] (REALTEK SEMICONDUCTOR Corp.) -- C:\WINDOWS\System32\drivers\RTL2832UUSB.sys
[2012.03.11 23:58:59 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2012.03.11 23:58:59 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2012.03.11 23:58:59 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2012.03.11 23:58:59 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax
[2012.03.11 23:58:59 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2012.03.11 23:58:59 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax
[2012.03.11 23:58:58 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2012.03.11 23:58:58 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2012.03.11 23:58:57 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BdaSup.sys
[2012.03.11 23:58:57 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys
[2012.03.11 23:58:56 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2012.03.11 23:58:56 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax
[2012.03.11 23:58:56 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2012.03.11 23:58:56 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BdaPlgIn.ax
[2012.03.11 23:58:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\RTL
[2012.03.11 22:34:00 | 000,000,000 | ---D | C] -- C:\Program Files\Counter-Strike 1.6
[2012.03.11 22:21:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Minecraft Cracked
[2012.03.11 22:18:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Nabídka Start\Programy\Minecraft Beta Cracked
[2012.03.11 21:43:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Oscar Editor
[2012.03.11 21:43:14 | 000,000,000 | ---D | C] -- C:\Program Files\OSCAR Editor
[2012.03.11 21:42:33 | 000,000,000 | ---D | C] -- C:\Program Files\OscarX7
[2012.03.11 20:44:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\EXEKUCE
[2012.03.11 14:41:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Mozilla
[2012.03.11 10:34:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\WinZip
[2012.03.11 10:34:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\WinZip
[2012.03.11 10:31:55 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
[2012.03.11 10:30:27 | 000,000,000 | ---D | C] -- C:\WINZIP
[2012.03.11 10:30:25 | 000,000,000 | ---D | C] -- C:\TEMP
[2012.03.11 05:47:47 | 000,000,000 | ---D | C] -- C:\Program Files\Ussr
[2012.03.11 00:16:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\KOLA
[2012.03.10 20:44:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2012.03.10 17:52:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\iTunes
[2012.03.10 17:52:55 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\WINDOWS\System32\GEARAspi.dll
[2012.03.10 17:52:00 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.03.10 17:51:55 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.03.10 17:51:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2012.03.10 17:51:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.03.10 17:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Data aplikací\Apple Computer
[2012.03.10 17:51:29 | 004,547,944 | ---- | C] (Apple, Inc.) -- C:\WINDOWS\System32\usbaaplrc.dll
[2012.03.10 17:51:07 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012.03.10 17:47:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Plocha\I-Funbox
[2012.03.10 17:44:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll
[2012.03.10 17:44:09 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll
[2012.03.10 17:44:08 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2012.03.10 17:39:07 | 000,414,368 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.03.10 17:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.03.10 14:39:19 | 000,165,846 | ---- | C] (AppWork UG (haftungsbeschränkt)) -- C:\WINDOWS\vrtyi.exe
[2012.03.10 03:32:32 | 004,431,872 | ---- | C] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[2012.03.09 21:04:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Perda\Data aplikací\Media Finder
[2012.03.09 21:04:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Media Finder
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.04.08 14:56:35 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Perda\Plocha\OTL.exe
[2012.04.08 13:01:46 | 000,000,795 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\AVG PC Tuneup 2011.lnk
[2012.04.08 12:56:42 | 000,002,699 | ---- | M] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Caledos Wallpaper (startup).lnk
[2012.04.08 12:56:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.08 12:55:07 | 000,623,705 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2012.04.08 12:49:23 | 060,277,199 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012.04.08 12:47:14 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\AVG 2012.lnk
[2012.04.08 11:11:28 | 000,017,408 | ---- | M] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\WebpageIcons.db
[2012.04.08 11:10:54 | 000,502,504 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.04.08 11:10:54 | 000,498,264 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.04.08 11:10:54 | 000,103,044 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.04.08 11:10:54 | 000,088,284 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
Nahoru
blodhblka1
nováček
Příspěvky: 1
Registrován: duben 12
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblka1 » 08 dub 2012 16:10

aee
Nahoru
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 16:10

[2012.04.08 10:26:09 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.04.08 10:15:38 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012.04.08 09:56:57 | 000,000,023 | ---- | M] () -- C:\WINDOWS\BlendSettings.ini
[2012.04.07 17:34:58 | 000,000,032 | ---- | M] () -- C:\WINDOWS\CD_Start.INI
[2012.04.07 17:24:42 | 000,001,805 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Oblivion.lnk
[2012.04.07 14:17:29 | 000,138,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.04.07 14:17:17 | 000,271,200 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2012.04.07 13:34:09 | 000,271,200 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2012.04.07 13:11:58 | 000,206,902 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\1333796777.bdinstall.bin
[2012.04.07 13:10:20 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012.04.07 13:10:18 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012.04.07 13:03:27 | 000,018,596 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\1333796597.bdinstall.bin
[2012.04.07 13:03:05 | 000,114,702 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\1333796539.bdinstall.bin
[2012.04.07 13:03:03 | 000,018,430 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\1333796579.bdinstall.bin
[2012.04.07 12:52:45 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012.04.05 20:11:01 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2012.04.05 16:35:46 | 000,000,319 | ---- | M] () -- C:\WINDOWS\game.ini
[2012.04.05 11:10:56 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Morrowind.lnk
[2012.04.04 23:24:58 | 000,000,759 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2012.04.04 23:23:51 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.04.04 22:55:32 | 000,011,264 | ---- | M] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.04 11:47:23 | 000,063,543 | ---- | M] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha 890 kč.jpg
[2012.04.04 11:45:33 | 000,060,221 | ---- | M] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha,cz 780 kč.jpg
[2012.04.03 14:22:33 | 005,610,638 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\Perda\Plocha\Transformice.exe
[2012.04.01 20:53:55 | 005,693,590 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Sequence 01.avi
[2012.03.31 17:07:48 | 001,467,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr100d.dll
[2012.03.31 15:44:09 | 000,050,474 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Electric.wav
[2012.03.31 14:44:31 | 000,001,498 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\¨ů-ú§.gif
[2012.03.31 14:34:01 | 000,001,803 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Send Feedback.lnk
[2012.03.31 14:34:01 | 000,001,769 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\NiwradSoft.lnk
[2012.03.31 14:34:01 | 000,001,767 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\NS Welcome Center.lnk
[2012.03.31 14:29:41 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uxtheme.dll
[2012.03.30 21:27:26 | 000,005,089 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\ctonhhte.rgb
[2012.03.30 21:19:45 | 000,004,910 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\qjaxlkio.dss
[2012.03.28 22:19:05 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\PowerISO.lnk
[2012.03.28 21:12:31 | 000,107,378 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Killer_bee.png
[2012.03.26 22:03:54 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Maxbike Cavalla 2010 AXIT.htm
[2012.03.26 21:57:05 | 000,030,709 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\window.jpg
[2012.03.26 15:41:25 | 000,011,342 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\hermiona.jpg
[2012.03.25 20:58:33 | 000,092,579 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Angelina Jolie.jpg
[2012.03.23 23:31:47 | 005,760,054 | ---- | M] () -- C:\WINDOWS\AW_1600x1200.bmp
[2012.03.23 23:31:20 | 003,932,214 | ---- | M] () -- C:\WINDOWS\InvaderDark1280.bmp
[2012.03.23 23:31:03 | 005,760,054 | ---- | M] () -- C:\WINDOWS\AW_XenoMorph1600.bmp
[2012.03.23 19:25:00 | 004,719,938 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\100_0798.JPG
[2012.03.23 19:10:38 | 015,280,324 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\-a id='watch-headline-show-title' href='artistMichel_Teló.mp4
[2012.03.23 18:43:01 | 001,325,722 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Ja kresleni.jpg
[2012.03.23 17:58:32 | 000,001,723 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\The Sims™ 3.lnk
[2012.03.23 17:15:08 | 000,000,640 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Dynamic Auto-Painter.lnk
[2012.03.23 14:56:30 | 000,637,848 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012.03.23 14:56:30 | 000,567,696 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2012.03.23 14:56:30 | 000,224,136 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012.03.23 14:56:30 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012.03.23 14:56:30 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012.03.23 14:56:30 | 000,141,312 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2012.03.22 11:47:54 | 000,032,867 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\425914_2683705583998_1597137965_1921336_1810545353_n.jpg
[2012.03.21 23:51:48 | 005,760,054 | ---- | M] () -- C:\WINDOWS\ALX_1600x1200.bmp
[2012.03.21 23:39:37 | 000,006,114 | ---- | M] () -- C:\WINDOWS\BricoPackFoldersDelete.cmd
[2012.03.21 23:39:36 | 000,064,419 | ---- | M] () -- C:\WINDOWS\BricoPackUninst.cmd
[2012.03.21 23:39:18 | 000,960,118 | ---- | M] () -- C:\WINDOWS\BricoPack Wallpaper.bmp
[2012.03.21 22:53:08 | 000,001,542 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\AlienGUIse.lnk
[2012.03.21 22:52:50 | 000,000,056 | ---- | M] () -- C:\WINDOWS\wb.ini
[2012.03.21 21:15:18 | 000,001,436 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\DivX Movies.lnk
[2012.03.20 22:23:44 | 000,000,753 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Launch Nasser Exe2swf.lnk
[2012.03.20 22:08:29 | 000,001,745 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Blender.lnk
[2012.03.19 17:25:54 | 000,000,538 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\3D Rad Compiler.lnk
[2012.03.19 17:25:54 | 000,000,489 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\3D Rad - The Empty Space.lnk
[2012.03.17 19:28:00 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.03.15 21:37:09 | 000,001,530 | ---- | M] () -- C:\Documents and Settings\Perda\Plocha\Executable File Icons Changer.lnk
[2012.03.15 19:20:59 | 000,002,645 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\Global.sw2
[2012.03.13 16:15:54 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2012.03.13 16:15:54 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2012.03.13 16:15:54 | 000,000,319 | RH-- | M] () -- C:\WINDOWS\ctfile.rfc
[2012.03.12 22:14:37 | 000,002,329 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\OSCAR Mouse Script Editor.lnk
[2012.03.12 01:34:14 | 000,004,096 | ---- | M] () -- C:\Documents and Settings\Perda\Dokumenty\20120312_0034_CH6_CT 1_.mpg
[2012.03.12 01:16:12 | 000,118,152 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.11 05:57:36 | 000,000,754 | ---- | M] () -- C:\WINDOWS\WORDPAD.INI
[2012.03.10 17:39:07 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.03.10 14:39:20 | 000,165,846 | ---- | M] (AppWork UG (haftungsbeschränkt)) -- C:\WINDOWS\vrtyi.exe
[2012.03.10 03:32:32 | 004,431,872 | ---- | M] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.04.08 13:01:46 | 000,000,795 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\AVG PC Tuneup 2011.lnk
[2012.04.08 12:55:07 | 000,623,705 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2012.04.08 12:49:23 | 060,277,199 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012.04.08 12:47:14 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\AVG 2012.lnk
[2012.04.08 11:11:22 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\WebpageIcons.db
[2012.04.08 10:15:37 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012.04.08 10:15:33 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2012.04.07 17:46:48 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2012.04.07 17:34:58 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI
[2012.04.07 17:24:42 | 000,001,805 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Oblivion.lnk
[2012.04.07 13:11:58 | 000,206,902 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796777.bdinstall.bin
[2012.04.07 13:10:20 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012.04.07 13:10:18 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012.04.07 13:03:27 | 000,018,596 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796597.bdinstall.bin
[2012.04.07 13:03:05 | 000,114,702 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796539.bdinstall.bin
[2012.04.07 13:03:03 | 000,018,430 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\1333796579.bdinstall.bin
[2012.04.05 17:30:29 | 000,138,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.04.05 17:30:18 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012.04.05 17:30:18 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2012.04.05 17:30:14 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2012.04.05 17:30:07 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012.04.05 16:35:46 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2012.04.05 11:10:56 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Morrowind.lnk
[2012.04.04 23:24:58 | 000,000,759 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2012.04.04 11:47:43 | 000,063,543 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha 890 kč.jpg
[2012.04.04 11:45:56 | 000,060,221 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\kola-praha,cz 780 kč.jpg
[2012.04.01 20:53:52 | 005,693,590 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Sequence 01.avi
[2012.03.31 15:44:11 | 000,050,474 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Electric.wav
[2012.03.31 14:34:01 | 000,001,803 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Send Feedback.lnk
[2012.03.31 14:34:01 | 000,001,769 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\NiwradSoft.lnk
[2012.03.31 14:34:01 | 000,001,767 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\NS Welcome Center.lnk
[2012.03.31 14:14:35 | 000,001,498 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\¨ů-ú§.gif
[2012.03.30 21:27:26 | 000,005,089 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ctonhhte.rgb
[2012.03.30 21:19:45 | 000,004,910 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\qjaxlkio.dss
[2012.03.30 21:12:18 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.03.28 21:12:37 | 000,107,378 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Killer_bee.png
[2012.03.27 22:08:55 | 000,002,699 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Caledos Wallpaper (startup).lnk
[2012.03.27 22:08:55 | 000,002,599 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Caledos Automatic Wallpaper Changer.lnk
[2012.03.26 22:04:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Maxbike Cavalla 2010 AXIT.htm
[2012.03.26 21:57:05 | 000,030,709 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\window.jpg
[2012.03.26 15:40:23 | 000,011,342 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\hermiona.jpg
[2012.03.25 20:52:14 | 000,092,579 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Angelina Jolie.jpg
[2012.03.23 23:31:03 | 005,760,054 | ---- | C] () -- C:\WINDOWS\AW_XenoMorph1600.bmp
[2012.03.23 19:10:23 | 015,280,324 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\-a id='watch-headline-show-title' href='artistMichel_Teló.mp4
[2012.03.23 18:43:00 | 001,325,722 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Ja kresleni.jpg
[2012.03.23 18:23:53 | 004,719,938 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\100_0798.JPG
[2012.03.23 17:58:31 | 000,001,723 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\The Sims™ 3.lnk
[2012.03.23 17:15:08 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Dynamic Auto-Painter.lnk
[2012.03.22 17:41:54 | 003,932,214 | ---- | C] () -- C:\WINDOWS\InvaderDark1280.bmp
[2012.03.22 11:47:58 | 000,032,867 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\425914_2683705583998_1597137965_1921336_1810545353_n.jpg
[2012.03.21 23:51:48 | 005,760,054 | ---- | C] () -- C:\WINDOWS\ALX_1600x1200.bmp
[2012.03.21 23:39:36 | 000,064,419 | ---- | C] () -- C:\WINDOWS\BricoPackUninst.cmd
[2012.03.21 23:39:18 | 000,960,118 | ---- | C] () -- C:\WINDOWS\BricoPack Wallpaper.bmp
[2012.03.21 23:36:46 | 000,006,114 | ---- | C] () -- C:\WINDOWS\BricoPackFoldersDelete.cmd
[2012.03.21 23:08:17 | 005,760,054 | ---- | C] () -- C:\WINDOWS\AW_1600x1200.bmp
[2012.03.21 22:55:34 | 005,760,056 | ---- | C] () -- C:\WINDOWS\Darkstar.bmp
[2012.03.21 22:53:08 | 000,001,542 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\AlienGUIse.lnk
[2012.03.21 22:52:50 | 000,000,056 | ---- | C] () -- C:\WINDOWS\wb.ini
[2012.03.21 21:15:18 | 000,001,436 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\DivX Movies.lnk
[2012.03.20 22:23:44 | 000,000,753 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Launch Nasser Exe2swf.lnk
[2012.03.20 22:08:29 | 000,001,745 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Blender.lnk
[2012.03.19 17:25:54 | 000,000,538 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\3D Rad Compiler.lnk
[2012.03.19 17:25:54 | 000,000,489 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\3D Rad - The Empty Space.lnk
[2012.03.15 21:37:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tellei34.sys
[2012.03.15 21:37:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\sysaddei34.dll
[2012.03.15 21:37:09 | 000,001,530 | ---- | C] () -- C:\Documents and Settings\Perda\Plocha\Executable File Icons Changer.lnk
[2012.03.15 19:20:47 | 000,002,645 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\Global.sw2
[2012.03.15 16:35:45 | 000,000,688 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Audacity.lnk
[2012.03.12 20:27:23 | 000,025,495 | ---- | C] () -- C:\WINDOWS\System32\ctOA.ini
[2012.03.12 20:27:15 | 000,076,288 | ---- | C] () -- C:\WINDOWS\System32\ctmmactl.DLL
[2012.03.12 20:27:15 | 000,000,319 | RH-- | C] () -- C:\WINDOWS\ctfile.rfc
[2012.03.12 01:34:11 | 000,004,096 | ---- | C] () -- C:\Documents and Settings\Perda\Dokumenty\20120312_0034_CH6_CT 1_.mpg
[2012.03.11 23:58:58 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2012.03.11 23:58:58 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2012.03.11 23:58:58 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\MSDvbNP.ax
[2012.03.11 23:58:58 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2012.03.11 23:58:57 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\PsisRndr.ax
[2012.03.11 23:58:57 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2012.03.11 21:43:20 | 000,002,329 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\OSCAR Mouse Script Editor.lnk
[2012.03.11 05:57:34 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2012.03.08 18:59:28 | 000,011,264 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.05 18:32:05 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\Perda\Local Settings\Data aplikací\fusioncache.dat
[2012.03.05 18:14:35 | 000,011,328 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.03.03 20:58:39 | 002,579,464 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.03.03 12:06:06 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012.03.03 11:54:46 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll
[2012.03.03 11:51:08 | 001,498,560 | ---- | C] () -- C:\WINDOWS\System32\igkrng400.bin
[2012.03.03 10:58:03 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.03.03 00:09:13 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.03.03 00:08:00 | 000,118,152 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.02 23:29:10 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.03.02 23:19:26 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== LOP Check ==========

[2012.03.03 10:59:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2012.04.08 12:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVG2012
[2012.03.05 20:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2012.04.07 13:11:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BDLogging
[2012.03.08 18:11:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
[2012.03.12 09:27:19 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2012.04.08 12:42:37 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2012.03.05 18:54:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Gibraltar
[2012.04.08 12:55:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2012.03.31 12:57:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2012.03.03 17:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SuperHideIP
[2012.04.08 14:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2012.03.06 15:32:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TubeBlasterPro
[2012.03.11 10:34:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WinZip
[2012.03.10 17:52:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.03.05 18:08:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{BECCA440-C137-43CD-BA7B-AE580F9F6D17}
[2012.03.11 22:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\.minecraft
[2012.03.15 16:38:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Audacity
[2012.04.08 13:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\AVG
[2012.04.08 12:48:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\AVG2012
[2012.03.05 20:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Babylon
[2012.03.21 21:16:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\DDMSettings
[2012.03.03 17:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Digiarty
[2012.03.15 19:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\GameMaker
[2012.03.20 22:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\GetRightToGo
[2012.03.12 00:06:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\KWorld Multimedia
[2012.03.10 17:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Media Finder
[2012.04.07 09:26:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\MediaFire Express
[2012.03.05 20:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Mount&Blade Warband
[2012.03.03 17:09:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Mount&Blade With Fire and Sword
[2012.03.30 21:19:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\MOVAVI
[2012.04.04 23:14:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\PhotoScape
[2012.04.07 13:02:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\QuickScan
[2012.04.05 12:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\Software Informer
[2012.03.03 17:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\SuperHideIP
[2012.03.05 17:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\ubot
[2012.04.08 12:02:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Perda\Data aplikací\uTorrent

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 48 bytes -> C:\Documents and Settings\All Users\DRM:احتضان
@Alternate Data Stream - 181 bytes -> C:\Documents and Settings\All Users\Data aplikací\Temp:0B4227B4

< End of report >

--- Doplnění předchozího příspěvku (08 Dub 2012 16:11) ---

a extras:


OTL Extras logfile created on: 8.4.2012 14:59:26 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\Perda\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,99 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 74,53% Memory free
3,84 Gb Paging File | 3,39 Gb Available in Paging File | 88,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 29,72 Gb Free Space | 39,88% Space Free | Partition Type: NTFS

Computer Name: BLODHBLAKA | User Name: Perda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"58580:TCP" = 58580:TCP:*:Enabled:Pando Media Booster
"58580:UDP" = 58580:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"58580:TCP" = 58580:TCP:*:Enabled:Pando Media Booster
"58580:UDP" = 58580:UDP:*:Enabled:Pando Media Booster

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Program Files\AVG\AVG2012\avgnsx.exe" = C:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2012\avgdiagex.exe" = C:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:AVG Diagnostika 2012 -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2012\avgmfapx.exe" = C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2012\avgemcx.exe" = C:\Program Files\AVG\AVG2012\avgemcx.exe:*:Enabled:Obecná kontrola pošty -- (AVG Technologies CZ, s.r.o.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0368A580-9FA9-4495-AC56-7B11EE6B24C8}" = Caledos Automatic Wallpaper Changer
"{069C1AD7-AC72-40E0-A156-7442EA6A48D7}" = AVG 2012
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1800_series" = Canon iP1800 series
"{129DDEC1-A6A3-3D60-AABE-76E6E5334922}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217003FF}" = Java(TM) 7 Update 3
"{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{3315B802-84C6-47BC-907A-9B77A4646197}_is1" = SWF to AVI 1.6
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EFC72DA-2314-4E5D-AC8E-1C954CDB8BBF}" = AVG 2012
"{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup
"{50ECE066-CD3E-4BFF-A28C-369AF6C37107}_is1" = Gif To Swf Converter 3.0
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{64E8B1C2-F425-485C-BC75-29E7CA8E616A}" = JumpStart
"{6C8D0421-2896-45E0-AFDA-960BC2E2E2EF}" = Sound Blaster Play!
"{6FE8B722-4D7E-3CD7-BB3A-3AD1684B1295}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74DCC43B-33C9-3389-BD0D-33EB37973657}" = Microsoft .NET Framework 3.5 Language Pack - csy
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8B92D97D-DB3D-4926-A8F7-718FE7C5EE18}" = iTunes
"{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}" = iLivid
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{A21CF3B9-FFCC-4CCA-9492-C9FF72CABF1B}" = Nasser Exe2Swf
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{AD483998-2E9A-4405-83FF-6E503AF49CBB}" = Microsoft Virtual PC 2007 SP1
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"{B93E815A-ED3F-436C-8175-C0BB1AD4AA36}" = OSCAR Editor
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C2}" = WinZip 15.5
"{D3B3B9B2-FE73-44CB-8C0A-F737D92F991B}" = Broadcom Gigabit Integrated Controller
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{FFFFFD17-B460-41EB-93F1-C48ABAD63828}" = Oblivion - Thieves Den
"3D Rad_is1" = 3D Rad v7.19
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AlienGUIse Theme Manager" = AlienGUIse Theme Manager
"Audacity_is1" = Audacity 2.0
"AVG" = AVG 2012
"Black_Chocobo" = Black Chocobo
"Blender" = Blender
"DivX Setup" = DivX Setup
"Easy-LayoutPrint" = Canon Utilities Easy-LayoutPrint
"Easy-PhotoPrint" = Canon Utilities Easy-PhotoPrint
"Easy-PrintToolBox" = Canon Utilities Easy-PrintToolBox
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Game Maker 8.0" = Game Maker 8.0
"GameMaker81" = GameMaker 8.1
"Cheat Engine 6.1_is1" = Cheat Engine 6.1
"iLivid" = iLivid
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"InstallShield_{B93E815A-ED3F-436C-8175-C0BB1AD4AA36}" = OSCAR Editor
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"Intelore - RAR Password Recovery" = RAR Password Recovery v1.1 RC16 (remove only)
"JPG to Icon Converter_is1" = JPG to Icon Converter 1.0
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.4.0 (Basic)
"LIMBO" = LIMBO
"MediafireToolbar" = MediaFireDownloader
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"Microsoft .NET Framework 3.5 Language Pack - csy" = Microsoft .NET Framework 3.5 Language Pack - CSY
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Minecraft Beta Cracked" = Minecraft Beta Cracked
"Minecraft Cracked" = Minecraft Cracked
"Mozilla Firefox 11.0 (x86 cs)" = Mozilla Firefox 11.0 (x86 cs)
"Picasa 3" = Picasa 3
"Pivot Stickfigure Animator_is1" = Pivot Stickfigure Animator version 2.2.6
"PowerISO" = PowerISO
"Registrace uživatele zařízení Canon iP1800 series" = Registrace uživatele zařízení Canon iP1800 series
"Seven Remix XP" = Seven Remix XP 2.41
"SuperHideIP" = Super Hide IP
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TVRTLDrv" = GIGABYTE U7300 BDA Device
"uTorrent" = µTorrent
"Video-AVI to GIF-JPEG" = Video-AVI to GIF-JPEG 3.1
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}" = HHD Software Free Hex Editor Neo 5.01
"ExeIco" = ExeIco (remove only)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7.4.2012 6:50:04 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace winzip32.exe, verze 25.0.9468.0, chybující modul
winzip32.exe, verze 25.0.9468.0, adresa chyby 0x0035203f.

Error - 7.4.2012 6:50:04 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace winzip32.exe, verze 25.0.9468.0, chybující modul
winzip32.exe, verze 25.0.9468.0, adresa chyby 0x0035203f.

Error - 7.4.2012 6:50:45 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace iw3mp.exe, verze 0.0.0.0, chybující modul iw3mp.exe,
verze 0.0.0.0, adresa chyby 0x0027782e.

Error - 7.4.2012 6:51:09 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace iw3mp.exe, verze 0.0.0.0, chybující modul iw3mp.exe,
verze 0.0.0.0, adresa chyby 0x0027782e.

Error - 7.4.2012 7:31:51 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace vsserv.exe, verze 15.0.38.1596, chybující modul
bssettingsal.dll, verze 15.0.38.1591, adresa chyby 0x00007870.

Error - 7.4.2012 13:39:05 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace oblivion.exe, verze 1.2.0.416, chybující modul
d3dx9_27.dll, verze 9.8.299.0, adresa chyby 0x001dffb0.

Error - 8.4.2012 5:19:56 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace svchost.exe, verze 5.1.2600.2180, chybující modul
svchost.exe, verze 5.1.2600.2180, adresa chyby 0x00001361.

Error - 8.4.2012 5:54:31 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace iw3mp.exe, verze 0.0.0.0, chybující modul iw3mp.exe,
verze 0.0.0.0, adresa chyby 0x0027782e.

Error - 8.4.2012 5:55:54 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace iw3mp.exe, verze 0.0.0.0, chybující modul iw3mp.exe,
verze 0.0.0.0, adresa chyby 0x0027782e.

Error - 8.4.2012 5:56:18 | Computer Name = BLODHBLAKA | Source = Application Error | ID = 1000
Description = Chybující aplikace iw3mp.exe, verze 0.0.0.0, chybující modul iw3mp.exe,
verze 0.0.0.0, adresa chyby 0x0027782e.

[ System Events ]
Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7001
Description = Služba Klient DNS závisí na službě Ovladač protokolu TCP/IP, která
neuspěla při spuštění v důsledku následující chyby: %%31

Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7001
Description = Služba Podpora rozhraní NetBIOS nad protokolem TCP/IP závisí na službě
AFD, která neuspěla při spuštění v důsledku následující chyby: %%31

Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7001
Description = Služba Apple Mobile Device závisí na službě Ovladač protokolu TCP/IP,
která neuspěla při spuštění v důsledku následující chyby: %%31

Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7001
Description = Služba Bonjour Service závisí na službě Ovladač protokolu TCP/IP,
která neuspěla při spuštění v důsledku následující chyby: %%31

Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7001
Description = Služba Služby IPSEC závisí na službě Ovladač IPSEC, která neuspěla
při spuštění v důsledku následující chyby: %%31

Error - 8.4.2012 4:45:21 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SCDEmu Tcpip vmm WS2IFSL

Error - 8.4.2012 5:00:49 | Computer Name = BLODHBLAKA | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby netman
s argumenty za účelem spuštění serveru: {BA126AE5-2166-11D1-B1D0-00805FC1270E}

Error - 8.4.2012 5:00:53 | Computer Name = BLODHBLAKA | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 8.4.2012 5:02:13 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7000
Description = Služba SafeBox neuspěla při spuštění v důsledku následující chyby:
%%3

Error - 8.4.2012 6:03:23 | Computer Name = BLODHBLAKA | Source = Service Control Manager | ID = 7000
Description = Služba SafeBox neuspěla při spuštění v důsledku následující chyby:
%%3


< End of report >
Nahoru
Uživatelský avatar
Damned
Tvůrce článků
Master Level 9
Master Level 9
Příspěvky: 8353
Registrován: prosinec 06
Bydliště: Rokycany
Pohlaví: Muž
Stav:
Offline
Kontakt:
Kontaktovat uživatele Damned

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod Damned » 08 dub 2012 16:16

Kolik tu chceš mít registrací?

Odinstaloval si ten BitDefender? Jsou tam vidět pořád jeho služby a ovladače
Nic není nemožné, proto tam, kde jsme s rozumem v koncích, neváháme použít kladivo.
Chceš-li vědět, co je nového, podívej se do starých knih.
Damnedovy češtiny - překlady programů pro údržbu PC
HiJackThis 2+návod FCleaner+čeština Wise Registry Cleaner
Nahoru
blodhblaka
Level 2
Level 2
Příspěvky: 169
Registrován: duben 12
Pohlaví: Muž
Stav:
Offline

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod blodhblaka » 08 dub 2012 16:20

odinstaloval
Nahoru
Uživatelský avatar
Damned
Tvůrce článků
Master Level 9
Master Level 9
Příspěvky: 8353
Registrován: prosinec 06
Bydliště: Rokycany
Pohlaví: Muž
Stav:
Offline
Kontakt:
Kontaktovat uživatele Damned

Re: Svchost.exe velkej problem (500-xxx) processu

Příspěvekod Damned » 08 dub 2012 16:41

Tyto dva soubory nechej zkontrolovat na Virustotalu a vlož mi sem odkaz na výsledek.

C:\WINDOWS\tellei34.sys
C:\WINDOWS\System32\sysaddei34.dll
Nic není nemožné, proto tam, kde jsme s rozumem v koncích, neváháme použít kladivo.
Chceš-li vědět, co je nového, podívej se do starých knih.
Damnedovy češtiny - překlady programů pro údržbu PC
HiJackThis 2+návod FCleaner+čeština Wise Registry Cleaner
Nahoru
Zamčeno
  • Mohlo by vás zajímat
    Odpovědi
    Zobrazení
    Poslední příspěvek
  • Problém s RAM
    od lukas222 » 04 lis 2024 13:52 » v Problémy s hardwarem
    4
    3379
    od lukas222 Zobrazit poslední příspěvek
    05 lis 2024 13:36
  • Problém s FPS
    od mcrakvar » 26 lis 2024 16:22 » v Vše ostatní (sw)
    4
    4006
    od petr22 Zobrazit poslední příspěvek
    28 lis 2024 10:06
  • Problém s fps v gta 5 online
    od Mladkov204 » 21 črc 2024 16:12 » v Hry
    3
    3585
    od Alferi Zobrazit poslední příspěvek
    22 črc 2024 08:09
  • Problém s monitorom
    od sloliv » 08 led 2025 04:55 » v Problémy s hardwarem
    8
    2349
    od sloliv Zobrazit poslední příspěvek
    08 led 2025 22:03
  • Problém se spuštěním PC
    od Viroxx » 27 led 2025 07:09 » v Problémy s hardwarem
    1
    2360
    od petr22 Zobrazit poslední příspěvek
    27 led 2025 07:19

Zpět na “Vše ostatní (bezp)”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 1 host