Zdravím, nainstaloval jsem Operu 10.50 a když ji spustím jednou jede po druhý ne. Hlavně po vypnutí a zapnutí PC. Nejde načíst žádná stránka (neodpovídá). Ve správci úloh dám ukončit proces a z neodpovídá se to změní na spuštěno. Přitom nikde ju nevidím. Tenhle proces už nejde ukončit. Kliknu znovu na Operu a ukáže se okno s textem:
Another user is running this copy of opera. You should install opera with individual profiles to allow multiple users to run the same copy independently.
Asi běží dvakrát, nevím. Zkoušel jsem odinstalovat a znovu nainstalovat nepomáhá.
Dal jsem scan Iobit Security 360 našel hrozbu Trojan.Win32/Agent umístění C:\Windows\system32\~.tmp.
Jestli to má souvislost netuším. Prosím o pomoc v PC se nevyznám. Přikládám Rsit log předem děkuji.
Logfile of random's system information tool 1.06 (written by random/random)
Run by JARA_2 at 2010-03-04 07:05:38
Microsoft Windows 7 Home Premium Service Pack 3
System drive C: has 158 GB (66%) free of 238 GB
Total RAM: 3071 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:05:47, on 4.3.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\IObit\IObit Security 360\is360tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Opera\opera.exe
C:\Windows\System32\perfmon.exe
C:\Users\JARA_2\Desktop\RSIT.exe
C:\Program Files\trend micro\JARA_2.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: DVM Meta Data Export Service (MDES) - DeviceVM - C:\ASUS.SYS\DVMExportService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 6928 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Scheduled scanning task.job
C:\Windows\tasks\User_Feed_Synchronization-{98EEE44C-6E55-4FD8-900C-1E4FAB2CF1F0}.job
C:\Windows\tasks\Wise Registry Cleaner 4.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-03-01 279664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-03-01 812528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-30 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-03-01 279664]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-11-30 149280]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"F-Secure Manager"=C:\Program Files\F-Secure\Common\FSM32.EXE [2008-12-04 182936]
"F-Secure TNB"=C:\Program Files\F-Secure\FSGUI\TNBUtil.exe [2008-12-04 957024]
"IObit Security 360"=C:\Program Files\IObit\IObit Security 360\IS360tray.exe [2009-12-24 1280272]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2009-07-14 144384]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-08-05 39408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-08-05 47672]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSTPE]
C:\Windows\system32\ASUSTPE.exe [2007-10-12 106496]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-08-19 170624]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2008-07-16 6253088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Windows\Skytel.exe [2008-07-16 1833504]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-08-05 39408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2008-07-30 752168]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2010-01-02 12862]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticetext"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 months======
2010-03-04 07:02:21 ----HD---- C:\dvmexp
2010-03-04 06:54:21 ----D---- C:\Users\JARA_2\AppData\Roaming\Opera
2010-03-04 06:53:52 ----D---- C:\Program Files\Opera
2010-03-04 05:36:18 ----D---- C:\Program Files\trend micro
2010-03-02 18:13:54 ----A---- C:\ComboFix.txt
2010-03-02 18:08:30 ----SHD---- C:\$RECYCLE.BIN
2010-03-02 17:55:30 ----A---- C:\Windows\zip.exe
2010-03-02 17:55:30 ----A---- C:\Windows\SWSC.exe
2010-03-02 17:55:30 ----A---- C:\Windows\SWREG.exe
2010-03-02 17:55:30 ----A---- C:\Windows\sed.exe
2010-03-02 17:55:30 ----A---- C:\Windows\PEV.exe
2010-03-02 17:55:30 ----A---- C:\Windows\NIRCMD.exe
2010-03-02 17:55:30 ----A---- C:\Windows\MBR.exe
2010-03-02 17:55:30 ----A---- C:\Windows\grep.exe
2010-03-02 17:55:17 ----D---- C:\Windows\ERDNT
2010-03-02 17:53:04 ----D---- C:\Qoobox
2010-03-02 17:52:48 ----A---- C:\Windows\SWXCACLS.exe
2010-03-01 16:31:06 ----D---- C:\Users\JARA_2\AppData\Roaming\skypePM
2010-03-01 16:01:09 ----D---- C:\Users\JARA_2\AppData\Roaming\Skype
2010-03-01 16:00:28 ----D---- C:\Program Files\Common Files\Skype
2010-03-01 16:00:22 ----RD---- C:\Program Files\Skype
2010-03-01 16:00:16 ----D---- C:\ProgramData\Skype
2010-03-01 13:39:09 ----D---- C:\ProgramData\IObit
2010-03-01 12:13:31 ----D---- C:\Users\JARA_2\AppData\Roaming\IObit
2010-03-01 12:13:31 ----D---- C:\Program Files\IObit
2010-03-01 05:59:15 ----D---- C:\Program Files\Lavalys
2010-02-27 23:49:21 ----D---- C:\inetpub
2010-02-27 11:42:49 ----D---- C:\Config.Msi
2010-02-27 00:01:50 ----D---- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
2010-02-27 00:01:49 ----D---- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2010-02-27 00:01:49 ----D---- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
2010-02-26 23:53:32 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-02-26 23:35:12 ----D---- C:\Users\JARA_2\AppData\Roaming\GetRightToGo
2010-02-24 12:17:06 ----D---- C:\Users\JARA_2\AppData\Roaming\Thinstall
2010-02-24 02:31:30 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 02:31:27 ----A---- C:\Windows\system32\CPFilters.dll
2010-02-24 02:31:26 ----A---- C:\Windows\system32\psisdecd.dll
2010-02-24 02:31:26 ----A---- C:\Windows\system32\msdri.dll
2010-02-24 02:31:22 ----A---- C:\Windows\system32\tzres.dll
2010-02-21 09:51:14 ----D---- C:\Program Files\Ashampoo
2010-02-20 18:16:55 ----D---- C:\Program Files\Gabest
2010-02-20 18:16:08 ----D---- C:\Program Files\Xvid
2010-02-20 18:16:08 ----A---- C:\Windows\system32\xvidvfw.dll
2010-02-20 18:16:08 ----A---- C:\Windows\system32\xvidcore.dll
2010-02-20 18:15:06 ----D---- C:\Program Files\AviSynth 2.5
2010-02-20 18:13:39 ----D---- C:\Program Files\AVI ReComp
2010-02-20 18:08:32 ----D---- C:\Program Files\JockerSoft
2010-02-12 12:10:20 ----A---- C:\Windows\WTRDCTM.INI
2010-02-12 12:06:28 ----D---- C:\TRANSLAT
2010-02-12 12:06:01 ----D---- C:\ProgramData\LangSoft
2010-02-12 12:04:39 ----D---- C:\Users\JARA_2\AppData\Roaming\LangSoft
2010-02-10 03:17:00 ----A---- C:\Windows\system32\quartz.dll
2010-02-10 03:17:00 ----A---- C:\Windows\system32\msvidc32.dll
2010-02-10 03:17:00 ----A---- C:\Windows\system32\mciavi32.dll
2010-02-10 03:17:00 ----A---- C:\Windows\system32\avifil32.dll
2010-02-10 03:16:59 ----A---- C:\Windows\system32\tsbyuv.dll
2010-02-10 03:16:59 ----A---- C:\Windows\system32\msyuv.dll
2010-02-10 03:16:59 ----A---- C:\Windows\system32\msrle32.dll
2010-02-10 03:16:59 ----A---- C:\Windows\system32\iyuv_32.dll
2010-02-10 03:16:57 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-02-10 03:16:57 ----A---- C:\Windows\system32\kernel32.dll
2010-02-10 03:16:56 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-02-10 03:16:56 ----A---- C:\Windows\system32\apphelp.dll
2010-02-10 03:16:54 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-10 03:16:54 ----A---- C:\Windows\system32\secproc.dll
2010-02-10 03:16:54 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-10 03:16:53 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-10 03:16:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-10 03:16:53 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-10 03:16:53 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-10 03:16:53 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-07 13:49:48 ----D---- C:\ProgramData\ChessBase
2010-02-07 13:36:46 ----D---- C:\Program Files\ChessBase
2010-02-07 09:46:26 ----A---- C:\Windows\system32\sipr3260.dll
2010-02-07 07:34:22 ----D---- C:\ProgramData\vsosdk
2010-02-07 06:56:19 ----D---- C:\Users\JARA_2\AppData\Roaming\Vso
2010-02-07 06:56:13 ----A---- C:\Windows\system32\Pncrt.dll
2010-02-07 06:56:13 ----A---- C:\Windows\system32\drv43260.dll
2010-02-07 06:56:13 ----A---- C:\Windows\system32\drv33260.dll
2010-02-07 06:56:13 ----A---- C:\Windows\system32\drv23260.dll
2010-02-07 06:56:13 ----A---- C:\Windows\system32\cook3260.dll
2010-02-07 06:56:10 ----D---- C:\Program Files\VSO
======List of files/folders modified in the last 1 months======
2010-03-04 07:05:40 ----D---- C:\Windows\Temp
2010-03-04 07:02:41 ----D---- C:\Windows\system32\config
2010-03-04 07:02:21 ----D---- C:\temp
2010-03-04 07:02:17 ----D---- C:\Windows
2010-03-04 06:54:15 ----SHD---- C:\Windows\Installer
2010-03-04 06:53:52 ----RD---- C:\Program Files
2010-03-04 06:53:30 ----SHD---- C:\System Volume Information
2010-03-04 05:38:08 ----D---- C:\rsit
2010-03-04 05:24:21 ----D---- C:\Windows\System32
2010-03-04 05:00:36 ----D---- C:\Program Files\F-Secure
2010-03-03 20:28:40 ----D---- C:\Windows\system32\NDF
2010-03-03 18:42:53 ----D---- C:\Windows\Prefetch
2010-03-03 17:30:09 ----RD---- C:\Users
2010-03-03 16:18:02 ----D---- C:\Windows\inf
2010-03-03 16:18:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-03 06:13:06 ----D---- C:\Windows\system32\Tasks
2010-03-03 06:13:05 ----D---- C:\Windows\Tasks
2010-03-02 18:13:56 ----D---- C:\Windows\system32\drivers
2010-03-02 18:08:24 ----A---- C:\Windows\system.ini
2010-03-02 18:04:07 ----D---- C:\Boot
2010-03-02 18:00:11 ----D---- C:\Windows\AppPatch
2010-03-02 18:00:10 ----D---- C:\Program Files\Common Files
2010-03-01 16:31:06 ----D---- C:\ProgramData
2010-02-28 22:27:42 ----A---- C:\Windows\ChssBase.ini
2010-02-28 06:49:10 ----D---- C:\Windows\rescache
2010-02-28 05:53:44 ----RSD---- C:\Windows\assembly
2010-02-28 05:53:44 ----D---- C:\Windows\Microsoft.NET
2010-02-27 23:50:42 ----D---- C:\Windows\winsxs
2010-02-27 23:49:27 ----D---- C:\Windows\system32\migration
2010-02-27 23:49:27 ----D---- C:\Windows\system32\cs-CZ
2010-02-27 23:49:26 ----D---- C:\Windows\system32\inetsrv
2010-02-27 23:49:07 ----D---- C:\Windows\system32\catroot2
2010-02-27 23:03:48 ----D---- C:\Windows\system32\wfp
2010-02-27 23:03:45 ----D---- C:\Windows\system32\wbem
2010-02-27 23:02:37 ----D---- C:\Windows\system32\DriverStore
2010-02-27 23:02:37 ----D---- C:\Windows\AppCompat
2010-02-27 23:02:33 ----D---- C:\Users\JARA_2\AppData\Roaming\PDFCreator
2010-02-27 23:02:33 ----D---- C:\Users\JARA_2\AppData\Roaming\OpenOffice.org2
2010-02-27 23:02:31 ----SD---- C:\Users\JARA_2\AppData\Roaming\Microsoft
2010-02-27 23:02:31 ----D---- C:\Users\JARA_2\AppData\Roaming\GHISLER
2010-02-27 23:02:22 ----D---- C:\ProgramData\P4G
2010-02-27 23:02:10 ----D---- C:\Windows\registration
2010-02-27 23:01:14 ----D---- C:\Users\JARA_2\AppData\Roaming\OpenOffice.org
2010-02-27 23:01:13 ----D---- C:\Users\JARA_2\AppData\Roaming\Mozilla
2010-02-27 23:01:07 ----D---- C:\Users\JARA_2\AppData\Roaming\ChessBase
2010-02-27 23:01:07 ----D---- C:\Users\JARA_2\AppData\Roaming\Adobe
2010-02-26 05:20:39 ----D---- C:\Users\JARA_2\AppData\Roaming\F-Secure
2010-02-24 09:59:14 ----D---- C:\Windows\Logs
2010-02-24 09:16:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-24 02:34:30 ----D---- C:\Windows\system32\catroot
2010-02-24 02:34:05 ----D---- C:\Windows\ehome
2010-02-21 11:18:15 ----D---- C:\Windows\debug
2010-02-18 12:01:32 ----D---- C:\Program Files\Mozilla Firefox
2010-02-15 04:57:51 ----D---- C:\Program Files\QuickMediaConverter
2010-02-15 03:50:29 ----D---- C:\Windows\system32\FxsTmp
2010-02-10 08:06:42 ----D---- C:\Windows\system32\wdi
2010-02-10 03:28:30 ----D---- C:\ProgramData\Microsoft Help
2010-02-07 13:37:03 ----RSD---- C:\Windows\Fonts
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [2009-07-14 35328]
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys [2009-07-14 78336]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2009-07-14 32256]
R1 F-Secure HIPS;F-Secure HIPS Driver; \??\C:\Program Files\F-Secure\HIPS\drivers\fshs.sys [2008-12-04 67808]
R1 FSES;F-Secure Email Scanning Driver; C:\Windows\System32\drivers\fses.sys [2008-12-04 35552]
R1 FSFW;F-Secure Firewall Driver; C:\Windows\System32\drivers\fsdfw.sys [2008-12-04 70944]
R1 fsvista;F-Secure Vista Support Driver; \??\C:\Program Files\F-Secure\Anti-Virus\minifilter\fsvista.sys [2008-12-04 12384]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2009-07-14 16896]
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2007-08-07 33052]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2009-07-14 74240]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2009-07-14 63488]
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys [2009-07-14 9728]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys [2009-07-14 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2009-07-14 86528]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys [2009-07-14 60928]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2009-07-14 34816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2009-07-14 69632]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2009-07-14 14080]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys [2009-07-14 31232]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2009-10-02 728648]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys [2010-01-31 107104]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-07-14 304128]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys [2009-07-14 108544]
R3 HidUsb;Ovladač třídy standardu HID Microsoft; C:\Windows\system32\DRIVERS\hidusb.sys [2009-07-14 24064]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-07-16 2156312]
R3 intelppm;Ovladač procesoru Intel; C:\Windows\system32\DRIVERS\intelppm.sys [2009-07-14 53760]
R3 kbdhid;Ovladač klávesnice standardu HID; C:\Windows\system32\DRIVERS\kbdhid.sys [2009-07-14 28160]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2009-07-14 23552]
R3 mouhid;Ovladač myši standardu HID; C:\Windows\system32\DRIVERS\mouhid.sys [2009-07-14 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2009-07-14 60416]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2010-01-08 221184]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2009-07-14 95744]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2009-05-13 14392]
R3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys [2009-07-14 267264]
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 49152]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2009-07-14 75264]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 SiSGbeLH;SiS191/SiS190 – ovladač NDIS 6.0 zařízení sítě Ethernet; C:\Windows\system32\DRIVERS\SiSGB6.sys [2009-07-13 48128]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1766592]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2009-07-14 306688]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2009-12-08 113664]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2009-07-14 108544]
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys [2009-07-14 39936]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\Windows\system32\DRIVERS\usbccgp.sys [2009-07-14 75264]
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\system32\DRIVERS\usbehci.sys [2009-07-14 41472]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\Windows\system32\DRIVERS\usbhub.sys [2009-07-14 258560]
R3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbohci.sys [2009-07-14 20480]
R3 vwifibus;Ovladač sběrnice Virtual WiFi; C:\Windows\system32\DRIVERS\vwifibus.sys [2009-07-14 19968]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
S3 1394ohci;1394 OHCI Compliant Host Controller; C:\Windows\system32\DRIVERS\1394ohci.sys [2009-07-14 163328]
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys [2009-07-14 9728]
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [2009-07-14 146512]
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys [2009-07-14 53312]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys [2009-07-14 14912]
S3 AmdK8;AMD K8 Processor Driver; C:\Windows\system32\DRIVERS\amdk8.sys [2009-07-14 55296]
S3 AmdPPM;AMD Processor Driver; C:\Windows\system32\DRIVERS\amdppm.sys [2009-07-14 52736]
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys [2009-07-14 79952]
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2009-07-14 50176]
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys [2009-07-14 76368]
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbdx.sys [2009-07-13 430080]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys [2009-07-13 13568]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys [2009-07-13 5248]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys [2009-07-13 62336]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys [2009-07-13 12160]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys [2009-07-13 11904]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\Windows\system32\DRIVERS\bthmodem.sys [2009-07-14 56320]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-07-09 81960]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-05-13 100392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-05-13 17320]
S3 catchme;catchme; \??\C:\Users\JARA_2\AppData\Local\Temp\catchme.sys []
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys [2009-07-14 37888]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbdx.sys [2009-07-13 3100160]
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys [2009-07-14 7168]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2009-07-14 142336]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2009-07-14 28160]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2009-07-14 46160]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 55264]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 57936]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys [2009-07-13 26624]
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys [2009-07-14 21504]
S3 HidBth;Miniport Microsoft Bluetooth HID; C:\Windows\system32\DRIVERS\hidbth.sys [2009-07-14 91136]
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys [2009-07-14 37888]
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys [2009-07-14 332352]
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [2009-07-14 41040]
S3 intelide;intelide; C:\Windows\system32\DRIVERS\intelide.sys [2009-07-14 15424]
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys [2009-07-14 65536]
S3 isapnp;isapnp; C:\Windows\system32\DRIVERS\isapnp.sys [2009-07-14 46656]
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys [2009-07-14 186960]
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [2009-07-14 235584]
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys [2009-07-14 130624]
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys [2009-07-14 27712]
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys [2009-07-14 115792]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2009-07-14 4096]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2009-07-14 162896]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2009-07-14 6144]
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys [2009-07-14 12288]
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys [2009-07-14 27136]
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys [2009-07-14 105024]
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys [2009-07-14 117312]
S3 nvstor;nvstor; C:\Windows\system32\DRIVERS\nvstor.sys [2009-07-14 142416]
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys [2009-07-14 62464]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-02-07 47360]
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2009-07-14 31744]
S3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s816mdm.sys [2007-06-19 107304]
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys [2009-07-14 85568]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2009-07-14 26624]
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys [2009-07-14 19968]
S3 sffdisk;SFF Storage Class Driver; C:\Windows\system32\DRIVERS\sffdisk.sys [2009-07-14 11264]
S3 sffp_mmc;SFF Storage Protocol Driver for MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys [2009-07-14 12288]
S3 sffp_sd;SFF Storage Protocol Driver for SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys [2009-07-14 12800]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 40016]
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys [2009-07-14 71168]
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2009-07-14 1285712]
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys [2009-07-14 30208]
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys [2009-07-14 55888]
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys [2009-07-14 57424]
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2009-07-14 8192]
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys [2009-07-14 86016]
S3 usbprint;Microsoft USB PRINTER Class; C:\Windows\system32\DRIVERS\usbprint.sys [2009-07-14 19968]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS [2009-07-14 74752]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\system32\DRIVERS\usbuhci.sys [2009-07-14 24064]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2009-07-14 146176]
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys [2009-07-14 26112]
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys [2009-07-14 159824]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys [2009-07-14 21632]
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2009-07-14 11264]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys [2009-07-14 22096]
S4 F-Secure Filter;F-Secure File System Filter; \??\C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys [2008-12-04 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer; \??\C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys [2008-12-04 25184]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys [2009-07-14 16384]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-07-30 522792]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe [2010-01-31 215648]
R2 FSMA;F-Secure Management Agent; C:\Program Files\F-Secure\Common\FSMA32.EXE [2008-12-04 117400]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 IS360service;IS360service; C:\Program Files\IObit\IObit Security 360\IS360srv.exe [2009-12-24 311568]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 MDES;DVM Meta Data Export Service; C:\ASUS.SYS\DVMExportService.exe [2008-10-21 307200]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2009-07-14 3179520]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files\Windows Media Player\wmpnetwk.exe [2009-07-14 1121280]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 FSAUA;F-Secure Automatic Update Agent; C:\Program Files\F-Secure\FSAUA\program\fsaua.exe [2008-12-04 490080]
R3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe [2008-12-04 510560]
R3 FSORSPClient;F-Secure ORSP Client; C:\Program Files\F-Secure\ORSP Client\fsorsp.exe [2008-12-04 55904]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2009-07-14 22528]
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 204800]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2009-07-14 22528]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2009-07-14 557056]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 94720]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2009-07-14 522752]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42856]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 878416]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2009-07-14 35840]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2009-07-14 452608]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2009-07-14 1202688]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
S4 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2009-07-14 12800]
S4 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problém s Operou
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
1. V IS na zkoušku vypněte firewall a zkuste spustit operu.
2. 2.3. jste dělal sken Combofix. Dejte z něj log.
2. 2.3. jste dělal sken Combofix. Dejte z něj log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s Operou
Zdravím a děkuji za ujmutí se mému problému, vypl jsem firewal F-security od O2. tak jsem porozuměl Vaší radě. přikládám požadovaný log
ComboFix 10-03-01.04 - JARA_2 02.03.2010 17:56:18.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3071.2034 [GMT 1:00]
Spuštěný z: c:\users\JARA_2\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-1497842182-775629098-4108401540-1000
c:\program files\temp
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\JARA_2\AppData\Roaming\inst.exe
c:\windows\system32\~.inf
c:\windows\system32\sqlite3.dll
----- BITS: Možné infikované stránky -----
hxxp://armmf.adobe.com
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-02 do 2010-03-02 )))))))))))))))))))))))))))))))
.
2010-03-02 17:03 . 2010-03-02 17:08 -------- d-----w- c:\users\JARA_2\AppData\Local\temp
2010-03-02 17:03 . 2010-03-02 17:03 -------- d-----w- c:\users\Guest\AppData\Local\temp
2010-03-02 17:03 . 2010-03-02 17:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-02 03:35 . 2010-03-02 08:03 -------- d--h--w- c:\temp\dvmexp
2010-03-02 03:35 . 2010-03-02 03:35 -------- d-----w- C:\dvmexp
2010-03-01 15:31 . 2010-03-01 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\skypePM
2010-03-01 15:01 . 2010-03-02 03:36 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\program files\Common Files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----r- c:\program files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\programdata\Skype
2010-03-01 12:39 . 2010-03-02 16:20 -------- d-----w- c:\programdata\IObit
2010-03-01 11:13 . 2010-03-02 16:20 -------- d-----w- c:\program files\IObit
2010-03-01 11:13 . 2010-03-01 12:19 -------- d-----w- c:\users\JARA_2\AppData\Roaming\IObit
2010-03-01 04:59 . 2010-03-01 04:59 -------- d-----w- c:\program files\Lavalys
2010-02-27 22:49 . 2010-02-27 22:49 -------- d-----w- C:\inetpub
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2010-02-26 22:53 . 2010-02-27 07:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-02-26 22:35 . 2010-02-27 22:02 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GetRightToGo
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Thinstall
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Local\Thinstall
2010-02-24 01:31 . 2009-12-13 09:30 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-02-24 01:31 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2010-02-24 01:31 . 2009-12-13 09:29 417792 ----a-w- c:\windows\system32\msdri.dll
2010-02-24 01:31 . 2010-02-02 07:45 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 08:51 . 2010-02-21 08:54 -------- d-----w- c:\program files\Ashampoo
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Gabest
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Xvid
2010-02-20 17:16 . 2006-11-01 13:54 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-02-20 17:16 . 2006-11-01 13:52 765952 ----a-w- c:\windows\system32\xvidcore.dll
2010-02-20 17:15 . 2010-02-20 17:15 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-20 17:13 . 2010-02-21 06:20 -------- d-----w- c:\program files\AVI ReComp
2010-02-20 17:08 . 2010-02-20 17:08 -------- d-----w- c:\program files\JockerSoft
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- C:\TRANSLAT
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- c:\programdata\LangSoft
2010-02-12 11:04 . 2010-03-01 13:32 -------- d-----w- c:\users\JARA_2\AppData\Roaming\LangSoft
2010-02-10 02:17 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-02-10 02:17 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-02-10 02:17 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-02-10 02:17 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-02-07 19:36 . 2010-02-07 19:36 -------- d-----w- c:\users\JARA_2\AppData\Local\Apps
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:36 . 2010-02-07 12:37 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:46 . 2009-09-02 15:41 102439 ----a-w- c:\windows\system32\sipr3260.dll
2010-02-07 06:34 . 2010-02-07 06:34 -------- d-----w- c:\programdata\vsosdk
2010-02-07 05:56 . 2010-03-01 18:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Vso
2010-02-07 05:56 . 2010-02-07 05:56 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-02-07 05:56 . 2007-03-18 20:37 65602 ----a-w- c:\windows\system32\cook3260.dll
2010-02-07 05:56 . 2006-09-29 12:26 176165 ----a-w- c:\windows\system32\drv23260.dll
2010-02-07 05:56 . 2006-09-29 12:25 208935 ----a-w- c:\windows\system32\drv33260.dll
2010-02-07 05:56 . 2006-09-29 12:24 217127 ----a-w- c:\windows\system32\drv43260.dll
2010-02-07 05:56 . 2010-02-07 08:56 -------- d-----w- c:\program files\VSO
2010-01-31 21:28 . 2010-02-26 04:20 -------- d-----w- c:\users\JARA_2\AppData\Roaming\F-Secure
2010-01-31 21:21 . 2010-01-31 21:35 33920 ----a-w- c:\windows\system32\drivers\fsbts.sys
2010-01-31 21:21 . 2008-12-04 13:57 35552 ----a-w- c:\windows\system32\drivers\fses.sys
2010-01-31 21:21 . 2008-12-04 13:57 70944 ----a-w- c:\windows\system32\drivers\fsdfw.sys
2010-01-31 21:21 . 2008-12-04 14:03 572512 ----a-w- c:\windows\system32\msvcp50.dll
2010-01-31 21:19 . 2010-03-02 16:05 -------- d-----w- c:\program files\F-Secure
2010-01-31 21:15 . 2010-01-31 21:19 -------- d-----w- c:\programdata\fssg
2010-01-31 21:13 . 2010-01-31 21:20 -------- d-----w- c:\programdata\f-secure
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-02 07:57 . 2009-08-26 09:31 661510 ----a-w- c:\windows\system32\perfh005.dat
2010-03-02 07:57 . 2009-08-26 09:31 138088 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 15:31 . 2010-03-01 15:31 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-03-01 14:00 . 2010-02-12 11:07 299008 ----a-w- c:\programdata\LangSoft\TrnWord.dll
2010-03-01 14:00 . 2010-02-12 11:07 798771 ----a-w- c:\programdata\LangSoft\WebIE.dll
2010-03-01 14:00 . 2010-02-12 11:07 356352 ----a-w- c:\programdata\LangSoft\TrnOutl.dll
2010-03-01 08:57 . 2010-03-01 08:58 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb6D29.tmp.exe
2010-02-27 22:02 . 2010-01-06 08:39 -------- d-----w- c:\users\JARA_2\AppData\Roaming\PDFCreator
2010-02-27 22:02 . 2009-10-23 03:41 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org2
2010-02-27 22:02 . 2009-10-31 18:58 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GHISLER
2010-02-27 22:02 . 2009-08-05 20:52 -------- d-----w- c:\programdata\P4G
2010-02-27 22:01 . 2009-11-25 19:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org
2010-02-27 22:01 . 2009-11-24 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ChessBase
2010-02-24 08:16 . 2009-10-31 16:15 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-15 03:57 . 2009-12-02 17:12 -------- d-----w- c:\program files\QuickMediaConverter
2010-02-10 02:28 . 2009-08-05 19:43 -------- d-----w- c:\programdata\Microsoft Help
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:37 . 2010-01-02 01:24 126496 ----a-w- c:\users\JARA_2\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-07 12:37 . 2010-02-07 12:36 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:55 . 2010-02-07 05:56 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-02-07 08:55 . 2010-02-07 05:56 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-01-31 04:26 . 2010-01-31 04:26 -------- d-----w- c:\program files\CCleaner
2010-01-30 20:36 . 2010-01-30 20:36 -------- d-----w- c:\programdata\Agnitum
2010-01-30 14:54 . 2010-01-30 14:53 -------- d-----w- c:\program files\Ultimate Process Manager
2010-01-21 03:04 . 2009-11-24 19:36 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-18 23:29 . 2010-02-10 02:16 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 02:16 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 02:16 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 02:16 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 03:30 . 2009-10-22 09:27 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 11:33 . 2010-01-13 11:33 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Actecom
2010-01-08 03:18 . 2010-02-10 02:16 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 02:16 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-01-07 06:53 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-01-06 07:46 . 2010-01-06 07:46 -------- d-----w- c:\program files\PDFCreator
2010-01-06 07:24 . 2010-01-03 03:06 353609 ----a-w- c:\windows\system32\~.tmp
2010-01-05 19:20 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-01-02 17:04 . 2009-08-05 19:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-02 17:04 . 2009-08-05 19:57 -------- d-----w- c:\programdata\CyberLink
2010-01-02 17:02 . 2009-08-05 19:57 36864 ----a-w- c:\programdata\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe
2010-01-02 16:30 . 2009-08-05 20:26 -------- d-----w- c:\program files\ASUS
2010-01-02 16:03 . 2010-01-02 16:03 -------- d-----w- c:\program files\ATKGFNEX
2010-01-02 15:18 . 2009-10-22 15:29 -------- d-----w- c:\programdata\ASUS
2010-01-02 15:16 . 2010-01-02 15:16 30264 ----a-w- c:\windows\system32\drivers\AsDsm.sys
2010-01-02 14:42 . 2010-01-02 14:42 -------- d-----w- c:\programdata\BVRP Software
2010-01-02 13:27 . 2009-08-05 20:29 -------- d-----w- c:\program files\Multimedia Card Reader
2010-01-02 13:27 . 2010-01-02 12:59 -------- d-----w- c:\program files\AmIcoSingLun
2010-01-02 11:49 . 2009-08-05 20:40 -------- d-----w- c:\programdata\Atheros
2010-01-02 11:49 . 2010-01-02 11:49 -------- d-----w- c:\program files\Atheros
2010-01-01 23:35 . 2009-11-02 11:05 125696 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-01-01 21:28 . 2010-01-01 21:28 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Search Settings
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Plocha
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Oblíbené položky
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Šablony
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Nabídka Start
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Dokumenty
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Data aplikací
2010-01-01 20:07 . 2010-01-01 20:07 21496 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-01 19:52 . 2009-10-29 11:14 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Teleca
2010-01-01 19:52 . 2010-01-01 14:25 -------- d-----w- c:\users\JARA_2\AppData\Roaming\InstallShield
2010-01-01 19:52 . 2009-12-24 05:46 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Ashampoo
2010-01-01 19:52 . 2009-12-24 05:24 -------- d-----w- c:\users\JARA_2\AppData\Roaming\CyberLink
2010-01-01 19:52 . 2009-11-21 13:08 -------- d-----w- c:\users\JARA_2\AppData\Roaming\DivX
2010-01-01 19:52 . 2009-10-22 15:25 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Leadertech
2010-01-01 19:52 . 2009-10-22 13:23 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ATI
2010-01-01 19:52 . 2009-10-31 18:56 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Ahead
2010-01-01 19:52 . 2009-10-22 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Apple Computer
2010-01-01 19:52 . 2009-11-15 18:33 -------- d-----w- c:\users\Guest\AppData\Roaming\Teleca
2010-01-01 19:51 . 2009-11-15 18:56 -------- d-----w- c:\users\Guest\AppData\Roaming\Ahead
2010-01-01 19:51 . 2009-11-15 18:33 -------- d-----w- c:\users\Guest\AppData\Roaming\ATI
2010-01-01 19:40 . 2009-12-24 05:46 -------- d-----w- c:\programdata\page
2010-01-01 19:40 . 2009-12-19 15:26 -------- d-----w- c:\programdata\WindowsSearch
2010-01-01 19:40 . 2009-12-02 17:48 -------- d-----w- c:\programdata\QuickMediaConverter
2010-01-01 19:40 . 2009-08-05 19:59 -------- d-----w- c:\programdata\Symantec
2010-01-01 19:40 . 2009-08-05 19:51 -------- d-----w- c:\programdata\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2010-01-01 19:40 . 2009-11-27 02:03 -------- d-----w- c:\programdata\Motive
2010-01-01 19:40 . 2009-10-31 15:43 -------- d-----w- c:\programdata\Nero
2010-01-01 19:38 . 2009-10-31 15:43 -------- d-----w- c:\program files\Nero
2010-01-01 19:38 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2010-01-01 19:38 . 2009-10-31 15:16 -------- d-----w- c:\program files\Microsoft Works
2010-01-01 19:38 . 2009-10-31 15:14 -------- d-----w- c:\program files\Microsoft.NET
2010-01-01 19:38 . 2009-10-31 15:11 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-01-01 19:38 . 2009-10-22 09:31 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-01-01 19:38 . 2009-10-22 09:30 -------- d-----w- c:\program files\Microsoft
2010-01-01 19:38 . 2009-07-14 04:52 -------- d-----w- c:\program files\Microsoft Games
2010-01-01 19:37 . 2009-11-29 23:34 -------- d-----w- c:\program files\Java
2010-01-01 19:37 . 2009-08-05 20:01 -------- d-----w- c:\program files\Google
2010-01-01 19:37 . 2009-11-24 18:41 -------- d-----w- c:\program files\Fritz 9
2010-01-01 19:37 . 2009-12-07 15:58 -------- d-----w- c:\program files\DivX
2010-01-01 19:37 . 2009-11-22 14:52 -------- d-----w- c:\program files\FDRLab
2010-01-01 19:37 . 2009-08-05 21:05 -------- d-----w- c:\program files\Downloaded Installations
2010-01-01 19:37 . 2009-08-05 20:27 -------- d-----w- c:\program files\Dolby
2010-01-01 19:35 . 2009-08-05 19:51 -------- d-----w- c:\program files\Activation Assistant for the 2007 Microsoft Office suites
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-29 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\F-Secure\FSGUI\TNBUtil.exe" [2008-12-04 957024]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-12-24 1280272]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
backup=c:\windows\pss\FancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
2009-06-24 11:30 272952 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-08-05 20:54 47672 ----a-w- c:\windows\AsScrProlog.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSTPE]
2007-10-12 04:44 106496 ----a-w- c:\windows\System32\ASUSTPE.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2009-08-19 19:31 170624 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2009-08-17 08:58 6859392 ----a-w- c:\program files\ASUS\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2009-06-19 09:29 105016 ----a-w- c:\program files\ASUS\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-07-16 11:00 6253088 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2008-07-16 11:01 1833504 ----a-w- c:\windows\SkyTel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-08-29 16:11 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-08-05 20:01 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-06 10:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
R0 fsbts;fsbts;c:\windows\System32\drivers\fsbts.sys [31.1.2010 22:21 33920]
R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [5.8.2009 21:49 15416]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\HIPS\drivers\fshs.sys [31.1.2010 22:20 67808]
R1 FSES;F-Secure Email Scanning Driver;c:\windows\System32\drivers\fses.sys [31.1.2010 22:21 35552]
R1 FSFW;F-Secure Firewall Driver;c:\windows\System32\drivers\fsdfw.sys [31.1.2010 22:21 70944]
R1 fsvista;F-Secure Vista Support Driver;c:\program files\F-Secure\Anti-Virus\minifilter\fsvista.sys [31.1.2010 22:20 12384]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.7.2009 0:52 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [18.8.2009 2:36 176128]
R2 IS360service;IS360service;c:\program files\IObit\IObit Security 360\is360srv.exe [2.3.2010 17:20 311568]
R2 MDES;DVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [21.10.2008 17:57 307200]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\minifilter\fsgk.sys [31.1.2010 22:20 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\ORSP Client\fsorsp.exe [31.1.2010 22:20 55904]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\System32\drivers\seehcri.sys [2.1.2010 15:38 27632]
R3 SiSGbeLH;SiS191/SiS190 – ovladač NDIS 6.0 zařízení sítě Ethernet;c:\windows\System32\drivers\SiSGB6.sys [10.6.2009 22:18 48128]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\System32\drivers\vwifimp.sys [14.7.2009 0:52 14336]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.12.2009 3:52 135664]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [5.8.2009 21:33 29736]
S3 fssfltr;fssfltr;c:\windows\System32\drivers\fssfltr.sys [22.10.2009 10:32 55264]
S3 fsssvc;Windows Live Zabezpečení rodiny;c:\program files\Windows Live\Family Safety\fsssvc.exe [8.12.2008 16:01 533344]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [2.1.2010 15:38 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [2.1.2010 15:38 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [2.1.2010 15:38 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [2.1.2010 15:38 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [2.1.2010 15:38 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [2.1.2010 15:38 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [2.1.2010 15:38 115752]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\System32\drivers\s816mdfl.sys [22.10.2009 11:22 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\System32\drivers\s816mdm.sys [22.10.2009 11:22 107304]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\fsfilter.sys [31.1.2010 22:20 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\fsrec.sys [31.1.2010 22:20 25184]
--- Ostatní služby/ovladače v paměti ---
*Deregistered* - cmdGuard
*Deregistered* - cmdHlp
*Deregistered* - sp_rsdrv2
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
2010-03-02 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-03-01 13:11]
2010-03-02 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2010-03-01 12:38]
2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-21 02:51]
2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-21 02:51]
2010-03-02 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\F-Secure\ANTI-V~1\fsav.exe [2010-01-31 13:57]
2009-11-25 c:\windows\Tasks\User_Feed_Synchronization-{98EEE44C-6E55-4FD8-900C-1E4FAB2CF1F0}.job
- c:\windows\system32\msfeedssync.exe [2009-07-13 01:14]
2009-11-02 c:\windows\Tasks\Wise Registry Cleaner 4.job
- c:\program files\Wise Registry Cleaner\WiseRegistryCleaner.exe [2009-12-17 22:48]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
FF - ProfilePath - c:\users\JARA_2\AppData\Roaming\Mozilla\Firefox\Profiles\zfsqyflc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
Toolbar-Locked - (no file)
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(596)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'lsass.exe'(604)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'Explorer.exe'(2220)
c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
- - - - - - - > 'csrss.exe'(432)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(520)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\windows\System32\lpksetup.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\F-Secure\Anti-Virus\fsgk32st.exe
c:\program files\F-Secure\Common\FSMA32.EXE
c:\program files\F-Secure\Common\FSMB32.EXE
c:\program files\F-Secure\Anti-Virus\FSGK32.EXE
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\F-Secure\Common\FCH32.EXE
c:\program files\F-Secure\Common\FAMEH32.EXE
c:\program files\F-Secure\Anti-Virus\fsqh.exe
c:\windows\system32\taskhost.exe
c:\program files\ASUS\ASUS CopyProtect\aspg.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\Wireless Console 2\wcourier.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\F-Secure\FWES\Program\fsdfwd.exe
c:\program files\F-Secure\FSAUA\program\fsaua.exe
c:\program files\F-Secure\Anti-Virus\fssm32.exe
c:\windows\system32\conhost.exe
c:\program files\F-Secure\FSAUA\program\fsus.exe
c:\windows\system32\conhost.exe
c:\program files\F-Secure\FSGUI\fsguidll.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2010-03-02 18:13:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-02 17:13
Před spuštěním: Volných bajtů: 164 652 449 792
Po spuštění: Volných bajtů: 164 495 646 720
- - End Of File - - 52ED3D8080FEBC54252075ADF90D092A
ComboFix 10-03-01.04 - JARA_2 02.03.2010 17:56:18.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3071.2034 [GMT 1:00]
Spuštěný z: c:\users\JARA_2\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-1497842182-775629098-4108401540-1000
c:\program files\temp
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\JARA_2\AppData\Roaming\inst.exe
c:\windows\system32\~.inf
c:\windows\system32\sqlite3.dll
----- BITS: Možné infikované stránky -----
hxxp://armmf.adobe.com
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-02 do 2010-03-02 )))))))))))))))))))))))))))))))
.
2010-03-02 17:03 . 2010-03-02 17:08 -------- d-----w- c:\users\JARA_2\AppData\Local\temp
2010-03-02 17:03 . 2010-03-02 17:03 -------- d-----w- c:\users\Guest\AppData\Local\temp
2010-03-02 17:03 . 2010-03-02 17:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-02 03:35 . 2010-03-02 08:03 -------- d--h--w- c:\temp\dvmexp
2010-03-02 03:35 . 2010-03-02 03:35 -------- d-----w- C:\dvmexp
2010-03-01 15:31 . 2010-03-01 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\skypePM
2010-03-01 15:01 . 2010-03-02 03:36 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\program files\Common Files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----r- c:\program files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\programdata\Skype
2010-03-01 12:39 . 2010-03-02 16:20 -------- d-----w- c:\programdata\IObit
2010-03-01 11:13 . 2010-03-02 16:20 -------- d-----w- c:\program files\IObit
2010-03-01 11:13 . 2010-03-01 12:19 -------- d-----w- c:\users\JARA_2\AppData\Roaming\IObit
2010-03-01 04:59 . 2010-03-01 04:59 -------- d-----w- c:\program files\Lavalys
2010-02-27 22:49 . 2010-02-27 22:49 -------- d-----w- C:\inetpub
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2010-02-26 22:53 . 2010-02-27 07:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-02-26 22:35 . 2010-02-27 22:02 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GetRightToGo
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Thinstall
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Local\Thinstall
2010-02-24 01:31 . 2009-12-13 09:30 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-02-24 01:31 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2010-02-24 01:31 . 2009-12-13 09:29 417792 ----a-w- c:\windows\system32\msdri.dll
2010-02-24 01:31 . 2010-02-02 07:45 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 08:51 . 2010-02-21 08:54 -------- d-----w- c:\program files\Ashampoo
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Gabest
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Xvid
2010-02-20 17:16 . 2006-11-01 13:54 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-02-20 17:16 . 2006-11-01 13:52 765952 ----a-w- c:\windows\system32\xvidcore.dll
2010-02-20 17:15 . 2010-02-20 17:15 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-20 17:13 . 2010-02-21 06:20 -------- d-----w- c:\program files\AVI ReComp
2010-02-20 17:08 . 2010-02-20 17:08 -------- d-----w- c:\program files\JockerSoft
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- C:\TRANSLAT
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- c:\programdata\LangSoft
2010-02-12 11:04 . 2010-03-01 13:32 -------- d-----w- c:\users\JARA_2\AppData\Roaming\LangSoft
2010-02-10 02:17 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-02-10 02:17 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-02-10 02:17 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-02-10 02:17 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-02-07 19:36 . 2010-02-07 19:36 -------- d-----w- c:\users\JARA_2\AppData\Local\Apps
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:36 . 2010-02-07 12:37 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:46 . 2009-09-02 15:41 102439 ----a-w- c:\windows\system32\sipr3260.dll
2010-02-07 06:34 . 2010-02-07 06:34 -------- d-----w- c:\programdata\vsosdk
2010-02-07 05:56 . 2010-03-01 18:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Vso
2010-02-07 05:56 . 2010-02-07 05:56 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-02-07 05:56 . 2007-03-18 20:37 65602 ----a-w- c:\windows\system32\cook3260.dll
2010-02-07 05:56 . 2006-09-29 12:26 176165 ----a-w- c:\windows\system32\drv23260.dll
2010-02-07 05:56 . 2006-09-29 12:25 208935 ----a-w- c:\windows\system32\drv33260.dll
2010-02-07 05:56 . 2006-09-29 12:24 217127 ----a-w- c:\windows\system32\drv43260.dll
2010-02-07 05:56 . 2010-02-07 08:56 -------- d-----w- c:\program files\VSO
2010-01-31 21:28 . 2010-02-26 04:20 -------- d-----w- c:\users\JARA_2\AppData\Roaming\F-Secure
2010-01-31 21:21 . 2010-01-31 21:35 33920 ----a-w- c:\windows\system32\drivers\fsbts.sys
2010-01-31 21:21 . 2008-12-04 13:57 35552 ----a-w- c:\windows\system32\drivers\fses.sys
2010-01-31 21:21 . 2008-12-04 13:57 70944 ----a-w- c:\windows\system32\drivers\fsdfw.sys
2010-01-31 21:21 . 2008-12-04 14:03 572512 ----a-w- c:\windows\system32\msvcp50.dll
2010-01-31 21:19 . 2010-03-02 16:05 -------- d-----w- c:\program files\F-Secure
2010-01-31 21:15 . 2010-01-31 21:19 -------- d-----w- c:\programdata\fssg
2010-01-31 21:13 . 2010-01-31 21:20 -------- d-----w- c:\programdata\f-secure
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-02 07:57 . 2009-08-26 09:31 661510 ----a-w- c:\windows\system32\perfh005.dat
2010-03-02 07:57 . 2009-08-26 09:31 138088 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 15:31 . 2010-03-01 15:31 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-03-01 14:00 . 2010-02-12 11:07 299008 ----a-w- c:\programdata\LangSoft\TrnWord.dll
2010-03-01 14:00 . 2010-02-12 11:07 798771 ----a-w- c:\programdata\LangSoft\WebIE.dll
2010-03-01 14:00 . 2010-02-12 11:07 356352 ----a-w- c:\programdata\LangSoft\TrnOutl.dll
2010-03-01 08:57 . 2010-03-01 08:58 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb6D29.tmp.exe
2010-02-27 22:02 . 2010-01-06 08:39 -------- d-----w- c:\users\JARA_2\AppData\Roaming\PDFCreator
2010-02-27 22:02 . 2009-10-23 03:41 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org2
2010-02-27 22:02 . 2009-10-31 18:58 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GHISLER
2010-02-27 22:02 . 2009-08-05 20:52 -------- d-----w- c:\programdata\P4G
2010-02-27 22:01 . 2009-11-25 19:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org
2010-02-27 22:01 . 2009-11-24 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ChessBase
2010-02-24 08:16 . 2009-10-31 16:15 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-15 03:57 . 2009-12-02 17:12 -------- d-----w- c:\program files\QuickMediaConverter
2010-02-10 02:28 . 2009-08-05 19:43 -------- d-----w- c:\programdata\Microsoft Help
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:37 . 2010-01-02 01:24 126496 ----a-w- c:\users\JARA_2\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-07 12:37 . 2010-02-07 12:36 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:55 . 2010-02-07 05:56 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-02-07 08:55 . 2010-02-07 05:56 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-01-31 04:26 . 2010-01-31 04:26 -------- d-----w- c:\program files\CCleaner
2010-01-30 20:36 . 2010-01-30 20:36 -------- d-----w- c:\programdata\Agnitum
2010-01-30 14:54 . 2010-01-30 14:53 -------- d-----w- c:\program files\Ultimate Process Manager
2010-01-21 03:04 . 2009-11-24 19:36 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-18 23:29 . 2010-02-10 02:16 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 02:16 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 02:16 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 02:16 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 03:30 . 2009-10-22 09:27 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 11:33 . 2010-01-13 11:33 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Actecom
2010-01-08 03:18 . 2010-02-10 02:16 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 02:16 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-01-07 06:53 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-01-06 07:46 . 2010-01-06 07:46 -------- d-----w- c:\program files\PDFCreator
2010-01-06 07:24 . 2010-01-03 03:06 353609 ----a-w- c:\windows\system32\~.tmp
2010-01-05 19:20 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-01-02 17:04 . 2009-08-05 19:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-02 17:04 . 2009-08-05 19:57 -------- d-----w- c:\programdata\CyberLink
2010-01-02 17:02 . 2009-08-05 19:57 36864 ----a-w- c:\programdata\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe
2010-01-02 16:30 . 2009-08-05 20:26 -------- d-----w- c:\program files\ASUS
2010-01-02 16:03 . 2010-01-02 16:03 -------- d-----w- c:\program files\ATKGFNEX
2010-01-02 15:18 . 2009-10-22 15:29 -------- d-----w- c:\programdata\ASUS
2010-01-02 15:16 . 2010-01-02 15:16 30264 ----a-w- c:\windows\system32\drivers\AsDsm.sys
2010-01-02 14:42 . 2010-01-02 14:42 -------- d-----w- c:\programdata\BVRP Software
2010-01-02 13:27 . 2009-08-05 20:29 -------- d-----w- c:\program files\Multimedia Card Reader
2010-01-02 13:27 . 2010-01-02 12:59 -------- d-----w- c:\program files\AmIcoSingLun
2010-01-02 11:49 . 2009-08-05 20:40 -------- d-----w- c:\programdata\Atheros
2010-01-02 11:49 . 2010-01-02 11:49 -------- d-----w- c:\program files\Atheros
2010-01-01 23:35 . 2009-11-02 11:05 125696 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-01-01 21:28 . 2010-01-01 21:28 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Search Settings
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Plocha
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Oblíbené položky
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Šablony
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Nabídka Start
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Dokumenty
2010-01-01 21:18 . 2010-01-01 21:18 -------- d-sh--we c:\programdata\Data aplikací
2010-01-01 20:07 . 2010-01-01 20:07 21496 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-01 19:52 . 2009-10-29 11:14 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Teleca
2010-01-01 19:52 . 2010-01-01 14:25 -------- d-----w- c:\users\JARA_2\AppData\Roaming\InstallShield
2010-01-01 19:52 . 2009-12-24 05:46 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Ashampoo
2010-01-01 19:52 . 2009-12-24 05:24 -------- d-----w- c:\users\JARA_2\AppData\Roaming\CyberLink
2010-01-01 19:52 . 2009-11-21 13:08 -------- d-----w- c:\users\JARA_2\AppData\Roaming\DivX
2010-01-01 19:52 . 2009-10-22 15:25 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Leadertech
2010-01-01 19:52 . 2009-10-22 13:23 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ATI
2010-01-01 19:52 . 2009-10-31 18:56 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Ahead
2010-01-01 19:52 . 2009-10-22 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Apple Computer
2010-01-01 19:52 . 2009-11-15 18:33 -------- d-----w- c:\users\Guest\AppData\Roaming\Teleca
2010-01-01 19:51 . 2009-11-15 18:56 -------- d-----w- c:\users\Guest\AppData\Roaming\Ahead
2010-01-01 19:51 . 2009-11-15 18:33 -------- d-----w- c:\users\Guest\AppData\Roaming\ATI
2010-01-01 19:40 . 2009-12-24 05:46 -------- d-----w- c:\programdata\page
2010-01-01 19:40 . 2009-12-19 15:26 -------- d-----w- c:\programdata\WindowsSearch
2010-01-01 19:40 . 2009-12-02 17:48 -------- d-----w- c:\programdata\QuickMediaConverter
2010-01-01 19:40 . 2009-08-05 19:59 -------- d-----w- c:\programdata\Symantec
2010-01-01 19:40 . 2009-08-05 19:51 -------- d-----w- c:\programdata\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2010-01-01 19:40 . 2009-11-27 02:03 -------- d-----w- c:\programdata\Motive
2010-01-01 19:40 . 2009-10-31 15:43 -------- d-----w- c:\programdata\Nero
2010-01-01 19:38 . 2009-10-31 15:43 -------- d-----w- c:\program files\Nero
2010-01-01 19:38 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2010-01-01 19:38 . 2009-10-31 15:16 -------- d-----w- c:\program files\Microsoft Works
2010-01-01 19:38 . 2009-10-31 15:14 -------- d-----w- c:\program files\Microsoft.NET
2010-01-01 19:38 . 2009-10-31 15:11 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-01-01 19:38 . 2009-10-22 09:31 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-01-01 19:38 . 2009-10-22 09:30 -------- d-----w- c:\program files\Microsoft
2010-01-01 19:38 . 2009-07-14 04:52 -------- d-----w- c:\program files\Microsoft Games
2010-01-01 19:37 . 2009-11-29 23:34 -------- d-----w- c:\program files\Java
2010-01-01 19:37 . 2009-08-05 20:01 -------- d-----w- c:\program files\Google
2010-01-01 19:37 . 2009-11-24 18:41 -------- d-----w- c:\program files\Fritz 9
2010-01-01 19:37 . 2009-12-07 15:58 -------- d-----w- c:\program files\DivX
2010-01-01 19:37 . 2009-11-22 14:52 -------- d-----w- c:\program files\FDRLab
2010-01-01 19:37 . 2009-08-05 21:05 -------- d-----w- c:\program files\Downloaded Installations
2010-01-01 19:37 . 2009-08-05 20:27 -------- d-----w- c:\program files\Dolby
2010-01-01 19:35 . 2009-08-05 19:51 -------- d-----w- c:\program files\Activation Assistant for the 2007 Microsoft Office suites
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-29 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\F-Secure\FSGUI\TNBUtil.exe" [2008-12-04 957024]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-12-24 1280272]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
backup=c:\windows\pss\FancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
2009-06-24 11:30 272952 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-08-05 20:54 47672 ----a-w- c:\windows\AsScrProlog.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSTPE]
2007-10-12 04:44 106496 ----a-w- c:\windows\System32\ASUSTPE.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2009-08-19 19:31 170624 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2009-08-17 08:58 6859392 ----a-w- c:\program files\ASUS\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2009-06-19 09:29 105016 ----a-w- c:\program files\ASUS\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-07-16 11:00 6253088 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2008-07-16 11:01 1833504 ----a-w- c:\windows\SkyTel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-08-29 16:11 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-08-05 20:01 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-06 10:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
R0 fsbts;fsbts;c:\windows\System32\drivers\fsbts.sys [31.1.2010 22:21 33920]
R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [5.8.2009 21:49 15416]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\HIPS\drivers\fshs.sys [31.1.2010 22:20 67808]
R1 FSES;F-Secure Email Scanning Driver;c:\windows\System32\drivers\fses.sys [31.1.2010 22:21 35552]
R1 FSFW;F-Secure Firewall Driver;c:\windows\System32\drivers\fsdfw.sys [31.1.2010 22:21 70944]
R1 fsvista;F-Secure Vista Support Driver;c:\program files\F-Secure\Anti-Virus\minifilter\fsvista.sys [31.1.2010 22:20 12384]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.7.2009 0:52 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [18.8.2009 2:36 176128]
R2 IS360service;IS360service;c:\program files\IObit\IObit Security 360\is360srv.exe [2.3.2010 17:20 311568]
R2 MDES;DVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [21.10.2008 17:57 307200]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\minifilter\fsgk.sys [31.1.2010 22:20 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\ORSP Client\fsorsp.exe [31.1.2010 22:20 55904]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\System32\drivers\seehcri.sys [2.1.2010 15:38 27632]
R3 SiSGbeLH;SiS191/SiS190 – ovladač NDIS 6.0 zařízení sítě Ethernet;c:\windows\System32\drivers\SiSGB6.sys [10.6.2009 22:18 48128]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\System32\drivers\vwifimp.sys [14.7.2009 0:52 14336]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.12.2009 3:52 135664]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [5.8.2009 21:33 29736]
S3 fssfltr;fssfltr;c:\windows\System32\drivers\fssfltr.sys [22.10.2009 10:32 55264]
S3 fsssvc;Windows Live Zabezpečení rodiny;c:\program files\Windows Live\Family Safety\fsssvc.exe [8.12.2008 16:01 533344]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [2.1.2010 15:38 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [2.1.2010 15:38 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [2.1.2010 15:38 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [2.1.2010 15:38 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [2.1.2010 15:38 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [2.1.2010 15:38 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [2.1.2010 15:38 115752]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\System32\drivers\s816mdfl.sys [22.10.2009 11:22 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\System32\drivers\s816mdm.sys [22.10.2009 11:22 107304]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\fsfilter.sys [31.1.2010 22:20 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\fsrec.sys [31.1.2010 22:20 25184]
--- Ostatní služby/ovladače v paměti ---
*Deregistered* - cmdGuard
*Deregistered* - cmdHlp
*Deregistered* - sp_rsdrv2
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
2010-03-02 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2010-03-01 13:11]
2010-03-02 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2010-03-01 12:38]
2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-21 02:51]
2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-21 02:51]
2010-03-02 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\F-Secure\ANTI-V~1\fsav.exe [2010-01-31 13:57]
2009-11-25 c:\windows\Tasks\User_Feed_Synchronization-{98EEE44C-6E55-4FD8-900C-1E4FAB2CF1F0}.job
- c:\windows\system32\msfeedssync.exe [2009-07-13 01:14]
2009-11-02 c:\windows\Tasks\Wise Registry Cleaner 4.job
- c:\program files\Wise Registry Cleaner\WiseRegistryCleaner.exe [2009-12-17 22:48]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
FF - ProfilePath - c:\users\JARA_2\AppData\Roaming\Mozilla\Firefox\Profiles\zfsqyflc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
Toolbar-Locked - (no file)
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(596)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'lsass.exe'(604)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'Explorer.exe'(2220)
c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
- - - - - - - > 'csrss.exe'(432)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(520)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\windows\System32\lpksetup.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\F-Secure\Anti-Virus\fsgk32st.exe
c:\program files\F-Secure\Common\FSMA32.EXE
c:\program files\F-Secure\Common\FSMB32.EXE
c:\program files\F-Secure\Anti-Virus\FSGK32.EXE
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\F-Secure\Common\FCH32.EXE
c:\program files\F-Secure\Common\FAMEH32.EXE
c:\program files\F-Secure\Anti-Virus\fsqh.exe
c:\windows\system32\taskhost.exe
c:\program files\ASUS\ASUS CopyProtect\aspg.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\Wireless Console 2\wcourier.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\F-Secure\FWES\Program\fsdfwd.exe
c:\program files\F-Secure\FSAUA\program\fsaua.exe
c:\program files\F-Secure\Anti-Virus\fssm32.exe
c:\windows\system32\conhost.exe
c:\program files\F-Secure\FSAUA\program\fsus.exe
c:\windows\system32\conhost.exe
c:\program files\F-Secure\FSGUI\fsguidll.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2010-03-02 18:13:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-02 17:13
Před spuštěním: Volných bajtů: 164 652 449 792
Po spuštění: Volných bajtů: 164 495 646 720
- - End Of File - - 52ED3D8080FEBC54252075ADF90D092A
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu Combofix a pusťte. CF se spustí a vykoná příkazy ze skriptu.Collect::
c:\windows\system32\~.tmp
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s Operou
Omlouvám se , ale už jsem to sem dal. nic se mi neukázalo tak to opakuji. Vzpominám si ,že ten trojan měl datum 6.1.2010 v ten den jsem instaloval PDF Creator. Od rána mi nejde. Tady je logComboFix 10-03-01.04 - JARA_2 04.03.2010 21:09:47.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3071.1968 [GMT 1:00]
Spuštěný z: c:\users\JARA_2\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\JARA_2\Desktop\CFScript.txt
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\~.inf
c:\windows\system32\~.tmp
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-04 do 2010-03-04 )))))))))))))))))))))))))))))))
.
2010-03-04 20:17 . 2010-03-04 20:17 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-04 20:17 . 2010-03-04 20:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-04 09:11 . 2010-03-04 18:56 -------- d--h--w- c:\temp\dvmexp
2010-03-04 09:11 . 2010-03-04 09:11 -------- d-----w- C:\dvmexp
2010-03-04 05:54 . 2010-03-04 05:54 -------- d-----w- c:\users\JARA_2\AppData\Local\Opera
2010-03-04 05:53 . 2010-03-04 05:54 -------- d-----w- c:\program files\Opera
2010-03-04 04:36 . 2010-03-04 06:05 -------- d-----w- c:\program files\trend micro
2010-03-02 17:03 . 2010-03-04 20:17 -------- d-----w- c:\users\JARA_2\AppData\Local\temp
2010-03-01 15:31 . 2010-03-01 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\skypePM
2010-03-01 15:01 . 2010-03-02 03:36 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\program files\Common Files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----r- c:\program files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\programdata\Skype
2010-03-01 12:39 . 2010-03-02 16:20 -------- d-----w- c:\programdata\IObit
2010-03-01 11:13 . 2010-03-03 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\IObit
2010-03-01 11:13 . 2010-03-02 16:20 -------- d-----w- c:\program files\IObit
2010-03-01 08:58 . 2010-03-01 08:57 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb6D29.tmp.exe
2010-03-01 04:59 . 2010-03-01 04:59 -------- d-----w- c:\program files\Lavalys
2010-02-27 22:49 . 2010-02-27 22:49 -------- d-----w- C:\inetpub
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2010-02-26 22:53 . 2010-02-27 07:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-02-26 22:35 . 2010-02-27 22:02 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GetRightToGo
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Thinstall
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Local\Thinstall
2010-02-24 01:31 . 2009-12-13 09:30 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-02-24 01:31 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2010-02-24 01:31 . 2009-12-13 09:29 417792 ----a-w- c:\windows\system32\msdri.dll
2010-02-24 01:31 . 2010-02-02 07:45 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 08:51 . 2010-02-21 08:54 -------- d-----w- c:\program files\Ashampoo
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Gabest
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Xvid
2010-02-20 17:16 . 2006-11-01 13:54 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-02-20 17:16 . 2006-11-01 13:52 765952 ----a-w- c:\windows\system32\xvidcore.dll
2010-02-20 17:15 . 2010-02-20 17:15 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-20 17:13 . 2010-02-21 06:20 -------- d-----w- c:\program files\AVI ReComp
2010-02-20 17:08 . 2010-02-20 17:08 -------- d-----w- c:\program files\JockerSoft
2010-02-12 11:07 . 2010-03-01 14:00 299008 ----a-w- c:\programdata\LangSoft\TrnWord.dll
2010-02-12 11:07 . 2010-03-01 14:00 798771 ----a-w- c:\programdata\LangSoft\WebIE.dll
2010-02-12 11:07 . 2010-03-01 14:00 356352 ----a-w- c:\programdata\LangSoft\TrnOutl.dll
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- C:\TRANSLAT
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- c:\programdata\LangSoft
2010-02-12 11:04 . 2010-03-01 13:32 -------- d-----w- c:\users\JARA_2\AppData\Roaming\LangSoft
2010-02-10 02:17 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-02-10 02:17 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-02-10 02:17 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-02-10 02:17 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-02-07 19:36 . 2010-02-07 19:36 -------- d-----w- c:\users\JARA_2\AppData\Local\Apps
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:36 . 2010-02-07 12:37 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:46 . 2009-09-02 15:41 102439 ----a-w- c:\windows\system32\sipr3260.dll
2010-02-07 06:34 . 2010-02-07 06:34 -------- d-----w- c:\programdata\vsosdk
2010-02-07 05:56 . 2010-03-01 18:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Vso
2010-02-07 05:56 . 2010-02-07 08:55 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-02-07 05:56 . 2010-02-07 05:56 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-02-07 05:56 . 2007-03-18 20:37 65602 ----a-w- c:\windows\system32\cook3260.dll
2010-02-07 05:56 . 2006-09-29 12:26 176165 ----a-w- c:\windows\system32\drv23260.dll
2010-02-07 05:56 . 2006-09-29 12:25 208935 ----a-w- c:\windows\system32\drv33260.dll
2010-02-07 05:56 . 2006-09-29 12:24 217127 ----a-w- c:\windows\system32\drv43260.dll
2010-02-07 05:56 . 2010-02-07 08:56 -------- d-----w- c:\program files\VSO
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-04 19:51 . 2010-01-31 21:19 -------- d-----w- c:\program files\F-Secure
2010-03-03 15:18 . 2009-08-26 09:31 661510 ----a-w- c:\windows\system32\perfh005.dat
2010-03-03 15:18 . 2009-08-26 09:31 138088 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 15:31 . 2010-03-01 15:31 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-02-27 22:02 . 2010-01-06 08:39 -------- d-----w- c:\users\JARA_2\AppData\Roaming\PDFCreator
2010-02-27 22:02 . 2009-10-23 03:41 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org2
2010-02-27 22:02 . 2009-10-31 18:58 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GHISLER
2010-02-27 22:02 . 2009-08-05 20:52 -------- d-----w- c:\programdata\P4G
2010-02-27 22:01 . 2009-11-25 19:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org
2010-02-27 22:01 . 2009-11-24 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ChessBase
2010-02-26 04:20 . 2010-01-31 21:28 -------- d-----w- c:\users\JARA_2\AppData\Roaming\F-Secure
2010-02-24 08:16 . 2009-10-31 16:15 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-15 03:57 . 2009-12-02 17:12 -------- d-----w- c:\program files\QuickMediaConverter
2010-02-10 02:28 . 2009-08-05 19:43 -------- d-----w- c:\programdata\Microsoft Help
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:37 . 2010-01-02 01:24 126496 ----a-w- c:\users\JARA_2\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-07 12:37 . 2010-02-07 12:36 -------- d-----w- c:\program files\ChessBase
2010-01-31 21:35 . 2010-01-31 21:21 33920 ----a-w- c:\windows\system32\drivers\fsbts.sys
2010-01-31 21:20 . 2010-01-31 21:13 -------- d-----w- c:\programdata\f-secure
2010-01-31 21:19 . 2010-01-31 21:15 -------- d-----w- c:\programdata\fssg
2010-01-31 04:26 . 2010-01-31 04:26 -------- d-----w- c:\program files\CCleaner
2010-01-30 20:36 . 2010-01-30 20:36 -------- d-----w- c:\programdata\Agnitum
2010-01-30 14:54 . 2010-01-30 14:53 -------- d-----w- c:\program files\Ultimate Process Manager
2010-01-21 03:04 . 2009-11-24 19:36 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-18 23:29 . 2010-02-10 02:16 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 02:16 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 02:16 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 02:16 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 03:30 . 2009-10-22 09:27 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 11:33 . 2010-01-13 11:33 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Actecom
2010-01-08 03:18 . 2010-02-10 02:16 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 02:16 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-01-07 06:53 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-01-06 07:46 . 2010-01-06 07:46 -------- d-----w- c:\program files\PDFCreator
2010-01-05 19:20 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-01-02 17:02 . 2009-08-05 19:57 36864 ----a-w- c:\programdata\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe
2010-01-02 15:16 . 2010-01-02 15:16 30264 ----a-w- c:\windows\system32\drivers\AsDsm.sys
2010-01-01 23:35 . 2009-11-02 11:05 125696 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-01-01 20:07 . 2010-01-01 20:07 21496 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-01 19:08 . 2010-01-01 19:08 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-01 16:27 . 2009-08-05 19:37 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-01 16:18 . 2010-01-01 16:18 10134 ----a-r- c:\users\JARA_2\AppData\Roaming\Microsoft\Installer\{9372A5A0-DA43-0B28-6F7A-C02018D8C015}\ARPPRODUCTICON.exe
2010-01-01 13:22 . 2009-08-05 21:01 45056 ----a-w- c:\windows\system32\acovcnt.exe
2009-12-19 09:02 . 2010-01-22 03:48 977920 ----a-w- c:\windows\system32\wininet.dll
2009-12-19 09:02 . 2010-02-10 02:16 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2009-12-19 09:02 . 2010-02-10 02:16 22016 ----a-w- c:\windows\system32\msyuv.dll
2009-12-19 09:02 . 2010-02-10 02:16 13312 ----a-w- c:\windows\system32\msrle32.dll
2009-12-19 09:02 . 2010-02-10 02:16 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2009-12-19 03:49 . 2009-12-19 03:49 515848 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-08 11:40 . 2010-02-10 02:16 3955288 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-08 11:40 . 2010-02-10 02:16 3899464 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-08 11:32 . 2010-02-10 02:16 292864 ----a-w- c:\windows\system32\apphelp.dll
2009-12-08 09:55 . 2009-12-08 09:55 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb4524.tmp.exe
2009-12-08 08:05 . 2010-02-10 02:16 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-08 08:05 . 2010-02-10 02:16 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2009-04-08 09:31 . 2009-04-08 09:31 106496 ----a-w- c:\program files\Common Files\CPInstallAction.dll
2008-08-11 20:45 . 2008-08-11 20:45 155648 ----a-w- c:\program files\Common Files\MSIactionall.dll
2008-05-22 07:35 . 2008-05-22 07:35 51962 ----a-w- c:\program files\Common Files\banner.jpg
2007-06-12 08:34 . 2007-06-12 08:34 35822 ----a-w- c:\program files\Common Files\ASPG_icon.ico
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-05 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-29 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\F-Secure\FSGUI\TNBUtil.exe" [2008-12-04 957024]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-12-24 1280272]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
backup=c:\windows\pss\FancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
2009-06-24 11:30 272952 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-08-05 20:54 47672 ----a-w- c:\windows\AsScrProlog.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSTPE]
2007-10-12 04:44 106496 ----a-w- c:\windows\System32\ASUSTPE.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2009-08-19 19:31 170624 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2009-08-17 08:58 6859392 ----a-w- c:\program files\ASUS\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2009-06-19 09:29 105016 ----a-w- c:\program files\ASUS\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-07-16 11:00 6253088 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2008-07-16 11:01 1833504 ----a-w- c:\windows\SkyTel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-08-29 16:11 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-08-05 20:01 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-06 10:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
R0 fsbts;fsbts;c:\windows\System32\drivers\fsbts.sys [31.1.2010 22:21 33920]
R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [5.8.2009 21:49 15416]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\HIPS\drivers\fshs.sys [31.1.2010 22:20 67808]
R1 FSES;F-Secure Email Scanning Driver;c:\windows\System32\drivers\fses.sys [31.1.2010 22:21 35552]
R1 FSFW;F-Secure Firewall Driver;c:\windows\System32\drivers\fsdfw.sys [31.1.2010 22:21 70944]
R1 fsvista;F-Secure Vista Support Driver;c:\program files\F-Secure\Anti-Virus\minifilter\fsvista.sys [31.1.2010 22:20 12384]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.7.2009 0:52 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [18.8.2009 2:36 176128]
R2 IS360service;IS360service;c:\program files\IObit\IObit Security 360\is360srv.exe [2.3.2010 17:20 311568]
R2 MDES;DVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [21.10.2008 17:57 307200]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\minifilter\fsgk.sys [31.1.2010 22:20 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\ORSP Client\fsorsp.exe [31.1.2010 22:20 55904]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\System32\drivers\seehcri.sys [2.1.2010 15:38 27632]
R3 SiSGbeLH;SiS191/SiS190 – ovladač NDIS 6.0 zařízení sítě Ethernet;c:\windows\System32\drivers\SiSGB6.sys [10.6.2009 22:18 48128]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\System32\drivers\vwifimp.sys [14.7.2009 0:52 14336]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [5.8.2009 21:33 29736]
S3 fssfltr;fssfltr;c:\windows\System32\drivers\fssfltr.sys [22.10.2009 10:32 55264]
S3 fsssvc;Windows Live Zabezpečení rodiny;c:\program files\Windows Live\Family Safety\fsssvc.exe [8.12.2008 16:01 533344]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [2.1.2010 15:38 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [2.1.2010 15:38 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [2.1.2010 15:38 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [2.1.2010 15:38 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [2.1.2010 15:38 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [2.1.2010 15:38 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [2.1.2010 15:38 115752]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\System32\drivers\s816mdfl.sys [22.10.2009 11:22 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\System32\drivers\s816mdm.sys [22.10.2009 11:22 107304]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\fsfilter.sys [31.1.2010 22:20 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\fsrec.sys [31.1.2010 22:20 25184]
--- Ostatní služby/ovladače v paměti ---
*Deregistered* - cmdGuard
*Deregistered* - cmdHlp
*Deregistered* - sp_rsdrv2
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
2010-03-04 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\F-Secure\ANTI-V~1\fsav.exe [2010-01-31 13:57]
2009-11-25 c:\windows\Tasks\User_Feed_Synchronization-{98EEE44C-6E55-4FD8-900C-1E4FAB2CF1F0}.job
- c:\windows\system32\msfeedssync.exe [2009-07-13 01:14]
2009-11-02 c:\windows\Tasks\Wise Registry Cleaner 4.job
- c:\program files\Wise Registry Cleaner\WiseRegistryCleaner.exe [2009-12-17 22:48]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
FF - ProfilePath - c:\users\JARA_2\AppData\Roaming\Mozilla\Firefox\Profiles\zfsqyflc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: browser.xul.error_pages.enabled - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 8191
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(660)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'lsass.exe'(576)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(432)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(516)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
.
Celkový čas: 2010-03-04 21:22:06
ComboFix-quarantined-files.txt 2010-03-04 20:22
ComboFix2.txt 2010-03-02 17:13
Před spuštěním: Volných bajtů: 166 302 699 520
Po spuštění: Volných bajtů: 166 355 525 632
- - End Of File - - 5B4133B8BBED137F8B8E24041391CA38
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3071.1968 [GMT 1:00]
Spuštěný z: c:\users\JARA_2\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\JARA_2\Desktop\CFScript.txt
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\~.inf
c:\windows\system32\~.tmp
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-04 do 2010-03-04 )))))))))))))))))))))))))))))))
.
2010-03-04 20:17 . 2010-03-04 20:17 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-04 20:17 . 2010-03-04 20:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-04 09:11 . 2010-03-04 18:56 -------- d--h--w- c:\temp\dvmexp
2010-03-04 09:11 . 2010-03-04 09:11 -------- d-----w- C:\dvmexp
2010-03-04 05:54 . 2010-03-04 05:54 -------- d-----w- c:\users\JARA_2\AppData\Local\Opera
2010-03-04 05:53 . 2010-03-04 05:54 -------- d-----w- c:\program files\Opera
2010-03-04 04:36 . 2010-03-04 06:05 -------- d-----w- c:\program files\trend micro
2010-03-02 17:03 . 2010-03-04 20:17 -------- d-----w- c:\users\JARA_2\AppData\Local\temp
2010-03-01 15:31 . 2010-03-01 15:31 -------- d-----w- c:\users\JARA_2\AppData\Roaming\skypePM
2010-03-01 15:01 . 2010-03-02 03:36 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\program files\Common Files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----r- c:\program files\Skype
2010-03-01 15:00 . 2010-03-01 15:00 -------- d-----w- c:\programdata\Skype
2010-03-01 12:39 . 2010-03-02 16:20 -------- d-----w- c:\programdata\IObit
2010-03-01 11:13 . 2010-03-03 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\IObit
2010-03-01 11:13 . 2010-03-02 16:20 -------- d-----w- c:\program files\IObit
2010-03-01 08:58 . 2010-03-01 08:57 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb6D29.tmp.exe
2010-03-01 04:59 . 2010-03-01 04:59 -------- d-----w- c:\program files\Lavalys
2010-02-27 22:49 . 2010-02-27 22:49 -------- d-----w- C:\inetpub
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2010-02-26 23:01 . 2010-02-27 22:02 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2010-02-26 22:53 . 2010-02-27 07:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-02-26 22:35 . 2010-02-27 22:02 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GetRightToGo
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Thinstall
2010-02-24 11:17 . 2010-02-24 11:17 -------- d-----w- c:\users\JARA_2\AppData\Local\Thinstall
2010-02-24 01:31 . 2009-12-13 09:30 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-02-24 01:31 . 2009-12-13 09:30 465408 ----a-w- c:\windows\system32\psisdecd.dll
2010-02-24 01:31 . 2009-12-13 09:29 417792 ----a-w- c:\windows\system32\msdri.dll
2010-02-24 01:31 . 2010-02-02 07:45 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 08:51 . 2010-02-21 08:54 -------- d-----w- c:\program files\Ashampoo
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Gabest
2010-02-20 17:16 . 2010-02-20 17:16 -------- d-----w- c:\program files\Xvid
2010-02-20 17:16 . 2006-11-01 13:54 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-02-20 17:16 . 2006-11-01 13:52 765952 ----a-w- c:\windows\system32\xvidcore.dll
2010-02-20 17:15 . 2010-02-20 17:15 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-20 17:13 . 2010-02-21 06:20 -------- d-----w- c:\program files\AVI ReComp
2010-02-20 17:08 . 2010-02-20 17:08 -------- d-----w- c:\program files\JockerSoft
2010-02-12 11:07 . 2010-03-01 14:00 299008 ----a-w- c:\programdata\LangSoft\TrnWord.dll
2010-02-12 11:07 . 2010-03-01 14:00 798771 ----a-w- c:\programdata\LangSoft\WebIE.dll
2010-02-12 11:07 . 2010-03-01 14:00 356352 ----a-w- c:\programdata\LangSoft\TrnOutl.dll
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- C:\TRANSLAT
2010-02-12 11:06 . 2010-03-01 14:00 -------- d-----w- c:\programdata\LangSoft
2010-02-12 11:04 . 2010-03-01 13:32 -------- d-----w- c:\users\JARA_2\AppData\Roaming\LangSoft
2010-02-10 02:17 . 2009-12-19 09:02 1328640 ----a-w- c:\windows\system32\quartz.dll
2010-02-10 02:17 . 2009-12-19 09:02 31744 ----a-w- c:\windows\system32\msvidc32.dll
2010-02-10 02:17 . 2009-12-19 09:02 84480 ----a-w- c:\windows\system32\mciavi32.dll
2010-02-10 02:17 . 2009-12-19 09:02 91648 ----a-w- c:\windows\system32\avifil32.dll
2010-02-07 19:36 . 2010-02-07 19:36 -------- d-----w- c:\users\JARA_2\AppData\Local\Apps
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:36 . 2010-02-07 12:37 -------- d-----w- c:\program files\ChessBase
2010-02-07 08:46 . 2009-09-02 15:41 102439 ----a-w- c:\windows\system32\sipr3260.dll
2010-02-07 06:34 . 2010-02-07 06:34 -------- d-----w- c:\programdata\vsosdk
2010-02-07 05:56 . 2010-03-01 18:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Vso
2010-02-07 05:56 . 2010-02-07 08:55 47360 ----a-w- c:\users\JARA_2\AppData\Roaming\pcouffin.sys
2010-02-07 05:56 . 2010-02-07 05:56 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-02-07 05:56 . 2007-03-18 20:37 65602 ----a-w- c:\windows\system32\cook3260.dll
2010-02-07 05:56 . 2006-09-29 12:26 176165 ----a-w- c:\windows\system32\drv23260.dll
2010-02-07 05:56 . 2006-09-29 12:25 208935 ----a-w- c:\windows\system32\drv33260.dll
2010-02-07 05:56 . 2006-09-29 12:24 217127 ----a-w- c:\windows\system32\drv43260.dll
2010-02-07 05:56 . 2010-02-07 08:56 -------- d-----w- c:\program files\VSO
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-04 19:51 . 2010-01-31 21:19 -------- d-----w- c:\program files\F-Secure
2010-03-03 15:18 . 2009-08-26 09:31 661510 ----a-w- c:\windows\system32\perfh005.dat
2010-03-03 15:18 . 2009-08-26 09:31 138088 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 15:31 . 2010-03-01 15:31 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-02-27 22:02 . 2010-01-06 08:39 -------- d-----w- c:\users\JARA_2\AppData\Roaming\PDFCreator
2010-02-27 22:02 . 2009-10-23 03:41 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org2
2010-02-27 22:02 . 2009-10-31 18:58 -------- d-----w- c:\users\JARA_2\AppData\Roaming\GHISLER
2010-02-27 22:02 . 2009-08-05 20:52 -------- d-----w- c:\programdata\P4G
2010-02-27 22:01 . 2009-11-25 19:42 -------- d-----w- c:\users\JARA_2\AppData\Roaming\OpenOffice.org
2010-02-27 22:01 . 2009-11-24 18:52 -------- d-----w- c:\users\JARA_2\AppData\Roaming\ChessBase
2010-02-26 04:20 . 2010-01-31 21:28 -------- d-----w- c:\users\JARA_2\AppData\Roaming\F-Secure
2010-02-24 08:16 . 2009-10-31 16:15 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-15 03:57 . 2009-12-02 17:12 -------- d-----w- c:\program files\QuickMediaConverter
2010-02-10 02:28 . 2009-08-05 19:43 -------- d-----w- c:\programdata\Microsoft Help
2010-02-07 12:49 . 2010-02-07 12:49 -------- d-----w- c:\programdata\ChessBase
2010-02-07 12:37 . 2010-01-02 01:24 126496 ----a-w- c:\users\JARA_2\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-07 12:37 . 2010-02-07 12:36 -------- d-----w- c:\program files\ChessBase
2010-01-31 21:35 . 2010-01-31 21:21 33920 ----a-w- c:\windows\system32\drivers\fsbts.sys
2010-01-31 21:20 . 2010-01-31 21:13 -------- d-----w- c:\programdata\f-secure
2010-01-31 21:19 . 2010-01-31 21:15 -------- d-----w- c:\programdata\fssg
2010-01-31 04:26 . 2010-01-31 04:26 -------- d-----w- c:\program files\CCleaner
2010-01-30 20:36 . 2010-01-30 20:36 -------- d-----w- c:\programdata\Agnitum
2010-01-30 14:54 . 2010-01-30 14:53 -------- d-----w- c:\program files\Ultimate Process Manager
2010-01-21 03:04 . 2009-11-24 19:36 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-18 23:29 . 2010-02-10 02:16 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 02:16 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 02:16 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 02:16 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 02:16 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 02:16 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 03:30 . 2009-10-22 09:27 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 11:33 . 2010-01-13 11:33 -------- d-----w- c:\users\JARA_2\AppData\Roaming\Actecom
2010-01-08 03:18 . 2010-02-10 02:16 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 02:16 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-01-07 06:53 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-01-07 06:53 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-01-06 07:46 . 2010-01-06 07:46 -------- d-----w- c:\program files\PDFCreator
2010-01-05 19:20 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-01-02 17:02 . 2009-08-05 19:57 36864 ----a-w- c:\programdata\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658}\PostBuild.exe
2010-01-02 15:16 . 2010-01-02 15:16 30264 ----a-w- c:\windows\system32\drivers\AsDsm.sys
2010-01-01 23:35 . 2009-11-02 11:05 125696 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-01-01 20:07 . 2010-01-01 20:07 21496 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-01 19:08 . 2010-01-01 19:08 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-01 16:27 . 2009-08-05 19:37 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-01 16:18 . 2010-01-01 16:18 10134 ----a-r- c:\users\JARA_2\AppData\Roaming\Microsoft\Installer\{9372A5A0-DA43-0B28-6F7A-C02018D8C015}\ARPPRODUCTICON.exe
2010-01-01 13:22 . 2009-08-05 21:01 45056 ----a-w- c:\windows\system32\acovcnt.exe
2009-12-19 09:02 . 2010-01-22 03:48 977920 ----a-w- c:\windows\system32\wininet.dll
2009-12-19 09:02 . 2010-02-10 02:16 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2009-12-19 09:02 . 2010-02-10 02:16 22016 ----a-w- c:\windows\system32\msyuv.dll
2009-12-19 09:02 . 2010-02-10 02:16 13312 ----a-w- c:\windows\system32\msrle32.dll
2009-12-19 09:02 . 2010-02-10 02:16 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2009-12-19 03:49 . 2009-12-19 03:49 515848 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-08 11:40 . 2010-02-10 02:16 3955288 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-08 11:40 . 2010-02-10 02:16 3899464 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-08 11:32 . 2010-02-10 02:16 292864 ----a-w- c:\windows\system32\apphelp.dll
2009-12-08 09:55 . 2009-12-08 09:55 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb4524.tmp.exe
2009-12-08 08:05 . 2010-02-10 02:16 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-08 08:05 . 2010-02-10 02:16 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2009-04-08 09:31 . 2009-04-08 09:31 106496 ----a-w- c:\program files\Common Files\CPInstallAction.dll
2008-08-11 20:45 . 2008-08-11 20:45 155648 ----a-w- c:\program files\Common Files\MSIactionall.dll
2008-05-22 07:35 . 2008-05-22 07:35 51962 ----a-w- c:\program files\Common Files\banner.jpg
2007-06-12 08:34 . 2007-06-12 08:34 35822 ----a-w- c:\program files\Common Files\ASPG_icon.ico
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-05 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-29 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\F-Secure\FSGUI\TNBUtil.exe" [2008-12-04 957024]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-12-24 1280272]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
backup=c:\windows\pss\FancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
2009-06-24 11:30 272952 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-08-05 20:54 47672 ----a-w- c:\windows\AsScrProlog.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSTPE]
2007-10-12 04:44 106496 ----a-w- c:\windows\System32\ASUSTPE.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2009-08-19 19:31 170624 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2009-08-17 08:58 6859392 ----a-w- c:\program files\ASUS\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 10:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2009-06-19 09:29 105016 ----a-w- c:\program files\ASUS\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-07-16 11:00 6253088 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2008-07-16 11:01 1833504 ----a-w- c:\windows\SkyTel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-08-29 16:11 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-08-05 20:01 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-06 10:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
R0 fsbts;fsbts;c:\windows\System32\drivers\fsbts.sys [31.1.2010 22:21 33920]
R0 lullaby;lullaby;c:\windows\System32\drivers\lullaby.sys [5.8.2009 21:49 15416]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\HIPS\drivers\fshs.sys [31.1.2010 22:20 67808]
R1 FSES;F-Secure Email Scanning Driver;c:\windows\System32\drivers\fses.sys [31.1.2010 22:21 35552]
R1 FSFW;F-Secure Firewall Driver;c:\windows\System32\drivers\fsdfw.sys [31.1.2010 22:21 70944]
R1 fsvista;F-Secure Vista Support Driver;c:\program files\F-Secure\Anti-Virus\minifilter\fsvista.sys [31.1.2010 22:20 12384]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.7.2009 0:52 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [18.8.2009 2:36 176128]
R2 IS360service;IS360service;c:\program files\IObit\IObit Security 360\is360srv.exe [2.3.2010 17:20 311568]
R2 MDES;DVM Meta Data Export Service;c:\asus.sys\DVMExportService.exe [21.10.2008 17:57 307200]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\minifilter\fsgk.sys [31.1.2010 22:20 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\ORSP Client\fsorsp.exe [31.1.2010 22:20 55904]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\System32\drivers\seehcri.sys [2.1.2010 15:38 27632]
R3 SiSGbeLH;SiS191/SiS190 – ovladač NDIS 6.0 zařízení sítě Ethernet;c:\windows\System32\drivers\SiSGB6.sys [10.6.2009 22:18 48128]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\System32\drivers\vwifimp.sys [14.7.2009 0:52 14336]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [5.8.2009 21:33 29736]
S3 fssfltr;fssfltr;c:\windows\System32\drivers\fssfltr.sys [22.10.2009 10:32 55264]
S3 fsssvc;Windows Live Zabezpečení rodiny;c:\program files\Windows Live\Family Safety\fsssvc.exe [8.12.2008 16:01 533344]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [2.1.2010 15:38 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [2.1.2010 15:38 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [2.1.2010 15:38 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [2.1.2010 15:38 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [2.1.2010 15:38 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [2.1.2010 15:38 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [2.1.2010 15:38 115752]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\System32\drivers\s816mdfl.sys [22.10.2009 11:22 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\System32\drivers\s816mdm.sys [22.10.2009 11:22 107304]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\fsfilter.sys [31.1.2010 22:20 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\fsrec.sys [31.1.2010 22:20 25184]
--- Ostatní služby/ovladače v paměti ---
*Deregistered* - cmdGuard
*Deregistered* - cmdHlp
*Deregistered* - sp_rsdrv2
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
.
Obsah adresáře 'Naplánované úlohy'
2010-03-04 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\F-Secure\ANTI-V~1\fsav.exe [2010-01-31 13:57]
2009-11-25 c:\windows\Tasks\User_Feed_Synchronization-{98EEE44C-6E55-4FD8-900C-1E4FAB2CF1F0}.job
- c:\windows\system32\msfeedssync.exe [2009-07-13 01:14]
2009-11-02 c:\windows\Tasks\Wise Registry Cleaner 4.job
- c:\program files\Wise Registry Cleaner\WiseRegistryCleaner.exe [2009-12-17 22:48]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
FF - ProfilePath - c:\users\JARA_2\AppData\Roaming\Mozilla\Firefox\Profiles\zfsqyflc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: browser.xul.error_pages.enabled - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 8191
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,d6,dc,de,4f,be,27,a0,4a,9a,1d,d9,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(660)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'lsass.exe'(576)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(432)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
- - - - - - - > 'csrss.exe'(516)
c:\program files\F-Secure\FWES\Program\fsdc32.dll
.
Celkový čas: 2010-03-04 21:22:06
ComboFix-quarantined-files.txt 2010-03-04 20:22
ComboFix2.txt 2010-03-02 17:13
Před spuštěním: Volných bajtů: 166 302 699 520
Po spuštění: Volných bajtů: 166 355 525 632
- - End Of File - - 5B4133B8BBED137F8B8E24041391CA38
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
Log již vypadá čistý. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s Operou
Po restartu pc opera neodpovídá a je zmrzlá. Nějaké špatné nastavení? Jinak Mozzila ok. Znovu musím ukončit proces a přemění se na spuštěno, ale nevím kde. Bere si 32 mege RAM. Procesor je sotva 2%.
Re: Problém s Operou
Jestli byla opera preinstalovana na novou verzi, tak ve starem profilu muze byt neco, co ji nesedi. V tomhle pripade ji doporucuju odinstalovat a zbavit se zbytku (hlavne profil - najde se po napsani opera:about do adresniho radku) po ni a nainstalovat znova.
Ale nejprve by se hodilo vytahnout bookmarks.adr (zalozky) a wand.dat (hesla) a po instalaci je hodit zpatky.
edit:
A jak sem si to procet poradne, tak by mohl byt problem v pripade vyuzivani vice uzivatelskych uctu a rezimu spanku.
Ale nejprve by se hodilo vytahnout bookmarks.adr (zalozky) a wand.dat (hesla) a po instalaci je hodit zpatky.
edit:
A jak sem si to procet poradne, tak by mohl byt problem v pripade vyuzivani vice uzivatelskych uctu a rezimu spanku.
Re: Problém s Operou
zdravím, měl .jsem pred par dny operu 10.10 ta to delala taky. Před tím žadnou. Teď vyšla nová opera10.50. Mám jen jeden učet - administrátorský s heslem, kromě Guest, který je vypnutý. Taky mi kolikrát při pokusu vypnutí hodí hlášku Přístup odepřen. Je také v
C-users -JARA_2 -Ap Data -Roaming, přičemž složka JARA_2 je opatřena zámečkem. Je možné, že je nainstalována jako users ane pod administrátor? Vždyť jsem přihlášen jako správce, tak proč mi odpírá přístup. Vzpomínám si má upgrade Vist na Win.7. Měl jsem dva účty: jeden Admin. druhý Jara. Neuměl jsem převést profil, tak jsem účet Jara smazal a Admin přejmenoval na Jara. Tak nevím asi jestli to dělá bordel kvůli tomu. S tím režimem spánku tomu nerozumím. Děkuji za pomoc.
C-users -JARA_2 -Ap Data -Roaming, přičemž složka JARA_2 je opatřena zámečkem. Je možné, že je nainstalována jako users ane pod administrátor? Vždyť jsem přihlášen jako správce, tak proč mi odpírá přístup. Vzpomínám si má upgrade Vist na Win.7. Měl jsem dva účty: jeden Admin. druhý Jara. Neuměl jsem převést profil, tak jsem účet Jara smazal a Admin přejmenoval na Jara. Tak nevím asi jestli to dělá bordel kvůli tomu. S tím režimem spánku tomu nerozumím. Děkuji za pomoc.
Re: Problém s Operou
Hm, tak to za edit se Vas tykat nebude (rezim spanku = pred vypnutim si system ulozi obsah pameti na disk, po zapnuti si to natahne zpet).
Pravdepodobne si nerozumi s necim v systemu (byl po odinstalaci pouzit ccleaner ?). Napada me jedine vyzkouset portable verzi, ale pokud bych podobne problemy mel ja, tak bych se vratil k puvodnimu prohlizeci.
Mozna by stalo za pokus se jeste zeptat na foru opery - http://www.operacesky.net/forum/
Omlouvam se, ale vazne mi dosly napady.
Pravdepodobne si nerozumi s necim v systemu (byl po odinstalaci pouzit ccleaner ?). Napada me jedine vyzkouset portable verzi, ale pokud bych podobne problemy mel ja, tak bych se vratil k puvodnimu prohlizeci.
Mozna by stalo za pokus se jeste zeptat na foru opery - http://www.operacesky.net/forum/
Omlouvam se, ale vazne mi dosly napady.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
Fórum Opery mohu jen doporučit. Zdá se mi, že půjde o specifický problém a tam by o něm mohli vědět více.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s Operou
Zkusím položit dotaz tam. Díky všem za pomoc.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
Za všechny: Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s Operou
Zdravím, zdá se , že probém je vyřešen. Odinstaloval jsem F-Secure Profi Antivirus od O2 a vrátil se nazpět k Avastu k němu Comodo firewall a ejhle Opera najednou šlape. Někde se to hádalo.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s Operou
Děkuji za informaci.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?