Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.Suspect::
c:\program files\ESET\EGUI.exe
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Při zatížení grafiky jede procesor na 100 %
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Při zatížení grafiky jede procesor na 100 %
Spusťte znovu poznámkový blok a zkopírujte do něj:
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Stejný problém jako při úplně prvním spuštění … naskočilo modré okno, ale sken nezačal, akorát tentokrát šlo to okno zavřít.
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Po restartu se to napodruhé povedlo spustit, za chvíli bude log.
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Při zatížení grafiky jede procesor na 100 %
OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Tak konečně to dokončil.
ComboFix 13-07-27.01 - vaclaf 28.07.2013 18:50:45.3.2 - x86
Microsoft® Windows Vista™ Business 6.0.6002.2.1250.420.1029.18.2039.689 [GMT 2:00]
Spuštěný z: c:\users\vaclaf\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\vaclaf\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_ctypes.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_elementtree.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_hashlib.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_multiprocessing.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_socket.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_ssl.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pyexpat.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pysqlite2._sqlite.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\python27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pythoncom27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\PyWinTypes27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\select.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\unicodedata.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32api.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32com.shell.shell.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32crypt.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32event.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32file.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32inet.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32pdh.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32process.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32profile.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32security.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32ts.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\windows._cacheinvalidation.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._controls_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._core_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._gdi_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._html2.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._misc_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._windows_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._wizard.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_net_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_adv_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_core_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_html_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-28 do 2013-07-28 )))))))))))))))))))))))))))))))
.
.
2013-07-28 17:09 . 2013-07-28 17:19 -------- d-----w- c:\users\vaclaf\AppData\Local\temp
2013-07-28 17:09 . 2013-07-28 17:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-28 13:24 . 2013-07-28 13:26 -------- d-----w- c:\program files\ESET
2013-07-26 14:41 . 2013-07-26 19:45 -------- d-----w- c:\program files\trend micro
2013-07-09 20:41 . 2013-04-17 10:10 1069056 ----a-w- c:\windows\system32\DWrite.dll
2013-07-09 20:41 . 2013-04-17 10:10 798208 ----a-w- c:\windows\system32\FntCache.dll
2013-07-09 20:41 . 2013-04-17 11:28 189952 ----a-w- c:\windows\system32\d3d10core.dll
2013-07-09 20:41 . 2013-04-17 10:33 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2013-07-09 20:41 . 2013-04-17 11:28 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-07-09 20:41 . 2013-04-17 11:28 1029120 ----a-w- c:\windows\system32\d3d10.dll
2013-07-09 20:41 . 2013-04-17 10:34 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2013-07-09 20:41 . 2013-04-17 10:14 683008 ----a-w- c:\windows\system32\d2d1.dll
2013-07-09 20:41 . 2013-04-17 11:28 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2013-07-09 20:41 . 2013-04-09 03:51 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-09 20:41 . 2013-04-09 03:52 1218048 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-09 20:41 . 2013-04-09 03:51 983552 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-09 20:41 . 2013-04-09 03:51 964608 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-22 13:01 . 2012-04-03 16:16 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-22 13:01 . 2011-05-16 07:43 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-08 12:49 . 2013-07-08 12:49 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-08 12:49 . 2012-06-28 06:31 867240 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-07-08 12:49 . 2010-07-03 07:34 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-02 06:54 . 2013-07-26 12:20 7143960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E04AEB93-E22D-4B22-899B-76BAAA275228}\mpengine.dll
2013-06-04 01:50 . 2013-07-09 20:43 2049024 ----a-w- c:\windows\system32\win32k.sys
2013-06-01 04:06 . 2013-07-09 20:50 505344 ----a-w- c:\windows\system32\qedit.dll
2013-05-29 01:41 . 2013-07-09 21:22 1129472 ----a-w- c:\windows\system32\wininet.dll
2013-05-29 01:36 . 2013-07-09 21:22 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-05-29 01:33 . 2013-07-09 21:22 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-05-15 06:29 . 2010-06-24 09:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 49728 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-10 07:57 . 2013-05-10 07:57 25160 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-08 04:37 . 2013-06-12 07:08 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-08 04:04 . 2013-07-09 20:41 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-05-02 22:03 . 2013-06-12 07:09 3603832 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-02 22:03 . 2013-06-12 07:09 3551096 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 04:04 . 2013-06-12 07:08 443904 ----a-w- c:\windows\system32\win32spl.dll
2013-05-02 04:03 . 2013-06-12 07:08 37376 ----a-w- c:\windows\system32\printcom.dll
2013-05-02 00:06 . 2009-10-03 03:01 238872 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-06-06 19676256]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-02-21 1183744]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-02-01 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-02-01 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-02-01 150552]
"egui"="c:\program files\ESET\egui.exe" [2013-03-21 5078504]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AVer HID Receiver.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe [2010-11-29 159744]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-3-29 719664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Obsah adresáře 'Naplánované úlohy'
.
2013-07-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 13:01]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Trusted Zone: mfcr.cz
TCP: DhcpNameServer = 192.168.26.1
FF - ProfilePath - c:\users\vaclaf\AppData\Roaming\Mozilla\Firefox\Profiles\epzr3m8v.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - ExtSQL: !HIDDEN! 2009-06-23 21:01; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-07-28 19:18
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.032"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.abr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.amr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ani"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.apd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.arw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bay"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.bwf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.cel"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.cr2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.crw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.cs1"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.cur"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dcr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dcx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dib"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.djv"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.djvu"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dng"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.emf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.eps"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.erf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.fff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.fpx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.gif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.hdr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.icl"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.icn"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ico"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.iff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ilbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.int"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.inta"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.iw4"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.j2c"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.j2k"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.jbr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jfif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jp2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpe"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpeg"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpg"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpk"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.kar"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.kdc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.lbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m15"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m1a"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m2a"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m75"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mos"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mrw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.nef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.orf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pbr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pcd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pct"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pcx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pgm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pic"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pics"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pict"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pix"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.png"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ppm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.psd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.psp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pspbrush"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pspimage"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.qcp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.qtpf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.raf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ras"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.raw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rgb"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rgba"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rle"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rsb"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.rw2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sdv"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sfil"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.sgi"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.smf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.smil"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sml"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.sr2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.srf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.swa"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.tga"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.thm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.tif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.tiff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ttc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ttf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ulw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10o\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10o"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10p\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10p"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10pf\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10pf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11o\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11o"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11p\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11p"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11pf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11pf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.vfw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wbmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wmf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xpm"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000002e
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3100)
c:\windows\system32\btmmhook.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Hpservice.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\agrsmsvc.exe
c:\program files\XAMPP\apache\bin\httpd.exe
c:\program files\Common Files\AVerMedia\Service\AVerRemote.exe
c:\program files\Common Files\AVerMedia\Service\AVerScheduleService.exe
c:\program files\ESET\ekrn.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\XAMPP\mysql\bin\mysqld.exe
c:\program files\NetLimiter\nlsvc.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\XAMPP\apache\bin\httpd.exe
c:\windows\System32\WUDFHost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\NetLimiter\NLClient.exe
c:\windows\system32\conime.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2013-07-28 19:30:31 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-07-28 17:30
ComboFix2.txt 2013-07-28 12:01
ComboFix3.txt 2013-07-28 00:18
.
Před spuštěním: Volných bajtů: 30 379 712 512
Po spuštění: Volných bajtů: 30 344 245 248
.
- - End Of File - - 047259A83B5886EC0045F5903E6A5E92
82967FD6D91A60516A81EEE17D859620
ComboFix 13-07-27.01 - vaclaf 28.07.2013 18:50:45.3.2 - x86
Microsoft® Windows Vista™ Business 6.0.6002.2.1250.420.1029.18.2039.689 [GMT 2:00]
Spuštěný z: c:\users\vaclaf\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\vaclaf\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_ctypes.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_elementtree.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_hashlib.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_multiprocessing.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_socket.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\_ssl.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pyexpat.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pysqlite2._sqlite.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\python27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\pythoncom27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\PyWinTypes27.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\select.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\unicodedata.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32api.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32com.shell.shell.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32crypt.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32event.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32file.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32inet.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32pdh.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32process.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32profile.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32security.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\win32ts.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\windows._cacheinvalidation.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._controls_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._core_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._gdi_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._html2.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._misc_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._windows_.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wx._wizard.pyd
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_net_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_adv_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_core_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_html_vc90.dll
c:\users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-28 do 2013-07-28 )))))))))))))))))))))))))))))))
.
.
2013-07-28 17:09 . 2013-07-28 17:19 -------- d-----w- c:\users\vaclaf\AppData\Local\temp
2013-07-28 17:09 . 2013-07-28 17:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-28 13:24 . 2013-07-28 13:26 -------- d-----w- c:\program files\ESET
2013-07-26 14:41 . 2013-07-26 19:45 -------- d-----w- c:\program files\trend micro
2013-07-09 20:41 . 2013-04-17 10:10 1069056 ----a-w- c:\windows\system32\DWrite.dll
2013-07-09 20:41 . 2013-04-17 10:10 798208 ----a-w- c:\windows\system32\FntCache.dll
2013-07-09 20:41 . 2013-04-17 11:28 189952 ----a-w- c:\windows\system32\d3d10core.dll
2013-07-09 20:41 . 2013-04-17 10:33 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2013-07-09 20:41 . 2013-04-17 11:28 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-07-09 20:41 . 2013-04-17 11:28 1029120 ----a-w- c:\windows\system32\d3d10.dll
2013-07-09 20:41 . 2013-04-17 10:34 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2013-07-09 20:41 . 2013-04-17 10:14 683008 ----a-w- c:\windows\system32\d2d1.dll
2013-07-09 20:41 . 2013-04-17 11:28 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2013-07-09 20:41 . 2013-04-09 03:51 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-09 20:41 . 2013-04-09 03:52 1218048 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-09 20:41 . 2013-04-09 03:51 983552 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-09 20:41 . 2013-04-09 03:51 964608 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-22 13:01 . 2012-04-03 16:16 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-22 13:01 . 2011-05-16 07:43 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-08 12:49 . 2013-07-08 12:49 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-08 12:49 . 2012-06-28 06:31 867240 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-07-08 12:49 . 2010-07-03 07:34 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-02 06:54 . 2013-07-26 12:20 7143960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E04AEB93-E22D-4B22-899B-76BAAA275228}\mpengine.dll
2013-06-04 01:50 . 2013-07-09 20:43 2049024 ----a-w- c:\windows\system32\win32k.sys
2013-06-01 04:06 . 2013-07-09 20:50 505344 ----a-w- c:\windows\system32\qedit.dll
2013-05-29 01:41 . 2013-07-09 21:22 1129472 ----a-w- c:\windows\system32\wininet.dll
2013-05-29 01:36 . 2013-07-09 21:22 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-05-29 01:33 . 2013-07-09 21:22 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-05-15 06:29 . 2010-06-24 09:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-10 07:57 . 2013-05-10 07:57 49728 ----a-w- c:\windows\system32\AdobePDF.dll
2013-05-10 07:57 . 2013-05-10 07:57 25160 ----a-w- c:\windows\system32\AdobePDFUI.dll
2013-05-08 04:37 . 2013-06-12 07:08 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-08 04:04 . 2013-07-09 20:41 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-05-02 22:03 . 2013-06-12 07:09 3603832 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-02 22:03 . 2013-06-12 07:09 3551096 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 04:04 . 2013-06-12 07:08 443904 ----a-w- c:\windows\system32\win32spl.dll
2013-05-02 04:03 . 2013-06-12 07:08 37376 ----a-w- c:\windows\system32\printcom.dll
2013-05-02 00:06 . 2009-10-03 03:01 238872 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-06-06 19676256]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-02-21 1183744]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-02-01 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-02-01 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-02-01 150552]
"egui"="c:\program files\ESET\egui.exe" [2013-03-21 5078504]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AVer HID Receiver.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe [2010-11-29 159744]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-3-29 719664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Obsah adresáře 'Naplánované úlohy'
.
2013-07-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 13:01]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Trusted Zone: mfcr.cz
TCP: DhcpNameServer = 192.168.26.1
FF - ProfilePath - c:\users\vaclaf\AppData\Roaming\Mozilla\Firefox\Profiles\epzr3m8v.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - ExtSQL: !HIDDEN! 2009-06-23 21:01; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-07-28 19:18
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.032"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.abr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.amr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ani"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.apd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.arw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bay"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.bw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.bwf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.cel"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.cr2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.crw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.cs1"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.cur"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dcr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dcx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dib"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.djv"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.djvu"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.dng"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.emf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.eps"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.erf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.fff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.fpx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.gif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.hdr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.icl"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.icn"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ico"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.iff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ilbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.int"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.inta"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.iw4"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.j2c"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.j2k"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.jbr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jfif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jp2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpe"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpeg"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpg"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpk"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.jpx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.kar"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.kdc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.lbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m15"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m1a"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m2a"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.m75"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mos"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.mrw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.nef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.orf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pbr"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pcd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pct"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pcx"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pef"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pgm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pic"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pics"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pict"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pix"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.png"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ppm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.psd"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.psp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.pspbrush"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.pspimage"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.qcp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.qtpf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.raf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.ras"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.raw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rgb"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rgba"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rle"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.rsb"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.rw2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sdv"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sfil"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.sgi"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.smf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.smil"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.sml"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.sr2"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.srf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.swa"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.tga"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.thm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.tif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.tiff"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ttc"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ttf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.ulw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10o\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10o"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10p\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10p"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10pf\UserChoice]
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10pf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11o\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11o"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11p\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11p"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v11pf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.v11pf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Photo Manager 2009.vfw"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wbmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.wmf"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xbm"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xif"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xmp"
.
[HKEY_USERS\S-1-5-21-802251615-3002685323-227833205-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-802251615-3002685323-227833205-1006)
"Progid"="ACDSee Photo Manager 2009.xpm"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000002e
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3100)
c:\windows\system32\btmmhook.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Hpservice.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\agrsmsvc.exe
c:\program files\XAMPP\apache\bin\httpd.exe
c:\program files\Common Files\AVerMedia\Service\AVerRemote.exe
c:\program files\Common Files\AVerMedia\Service\AVerScheduleService.exe
c:\program files\ESET\ekrn.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\XAMPP\mysql\bin\mysqld.exe
c:\program files\NetLimiter\nlsvc.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\XAMPP\apache\bin\httpd.exe
c:\windows\System32\WUDFHost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\NetLimiter\NLClient.exe
c:\windows\system32\conime.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2013-07-28 19:30:31 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-07-28 17:30
ComboFix2.txt 2013-07-28 12:01
ComboFix3.txt 2013-07-28 00:18
.
Před spuštěním: Volných bajtů: 30 379 712 512
Po spuštění: Volných bajtů: 30 344 245 248
.
- - End Of File - - 047259A83B5886EC0045F5903E6A5E92
82967FD6D91A60516A81EEE17D859620
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Při zatížení grafiky jede procesor na 100 %
Děkuji. Log posoudí autor CF a podá nám zprávu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
OK, zatím moc děkuju.
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Při zatížení grafiky jede procesor na 100 %
Zatím není zač.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Při zatížení grafiky jede procesor na 100 %
Ještě vás poprosím, abyste přiložil soubor C:\Qoobox\ComboFix-quarantined-files.txt k vašemu příštímu postu. Soubor budete muset zabalit do raru. Děkuji.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Zas tak velký, aby se to muselo balit, to není:
2013-07-28 16:37:48 . 2013-07-28 16:37:48 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_webview_vc90.dll.vir
2013-07-28 16:37:47 . 2013-07-28 16:37:48 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_net_vc90.dll.vir
2013-07-28 16:37:47 . 2013-07-28 16:37:47 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_html_vc90.dll.vir
2013-07-28 16:37:46 . 2013-07-28 16:37:47 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_adv_vc90.dll.vir
2013-07-28 16:37:45 . 2013-07-28 16:37:46 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_core_vc90.dll.vir
2013-07-28 16:37:45 . 2013-07-28 16:37:45 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_vc90.dll.vir
2013-07-28 16:37:44 . 2013-07-28 16:37:44 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\python27.dll.vir
2013-07-28 16:37:44 . 2013-07-28 16:37:44 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_elementtree.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:44 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_socket.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32api.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32ts.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pysqlite2._sqlite.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_multiprocessing.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32com.shell.shell.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._html2.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32crypt.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._gdi_.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\windows._cacheinvalidation.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32profile.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_ctypes.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pythoncom27.dll.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._misc_.pyd.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\PyWinTypes27.dll.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32security.pyd.vir
2013-07-28 16:37:39 . 2013-07-28 16:37:39 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._core_.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_ssl.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32pdh.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32process.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:38 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_hashlib.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._windows_.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._wizard.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32file.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32inet.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:30 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._controls_.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:29 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32event.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:29 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pyexpat.pyd.vir
2013-07-28 16:37:28 . 2013-07-28 16:37:29 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\unicodedata.pyd.vir
2013-07-28 16:37:16 . 2013-07-28 16:37:28 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\select.pyd.vir
2013-07-28 11:47:45 . 2013-07-28 11:47:46 11,614,498 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ESET\_egui_.exe.zip
2013-07-28 11:14:38 . 2013-07-28 16:46:37 99 ----a-w- C:\Qoobox\Quarantine\catchme.txt
2013-07-28 02:00:12 . 2013-07-28 02:00:12 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxbase294u_net_vc90.dll.vir
2013-07-28 02:00:12 . 2013-07-28 02:00:12 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_webview_vc90.dll.vir
2013-07-28 02:00:10 . 2013-07-28 02:00:10 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_html_vc90.dll.vir
2013-07-28 02:00:09 . 2013-07-28 02:00:10 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_adv_vc90.dll.vir
2013-07-28 02:00:09 . 2013-07-28 02:00:09 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_core_vc90.dll.vir
2013-07-28 02:00:08 . 2013-07-28 02:00:08 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxbase294u_vc90.dll.vir
2013-07-28 02:00:06 . 2013-07-28 02:00:07 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\python27.dll.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_elementtree.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_socket.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32api.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32ts.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pysqlite2._sqlite.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_multiprocessing.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32com.shell.shell.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._html2.pyd.vir
2013-07-28 02:00:04 . 2013-07-28 02:00:04 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32crypt.pyd.vir
2013-07-28 02:00:04 . 2013-07-28 02:00:04 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._gdi_.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\windows._cacheinvalidation.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32profile.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_ctypes.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pythoncom27.dll.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._misc_.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\PyWinTypes27.dll.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32security.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:03 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._core_.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_ssl.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32pdh.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32process.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_hashlib.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32file.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32inet.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._windows_.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._wizard.pyd.vir
2013-07-28 01:59:55 . 2013-07-28 01:59:58 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._controls_.pyd.vir
2013-07-28 01:59:53 . 2013-07-28 01:59:54 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32event.pyd.vir
2013-07-28 01:59:33 . 2013-07-28 01:59:37 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pyexpat.pyd.vir
2013-07-28 01:59:32 . 2013-07-28 01:59:32 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\unicodedata.pyd.vir
2013-07-28 01:59:29 . 2013-07-28 01:59:31 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\select.pyd.vir
2013-07-28 00:12:52 . 2013-07-28 00:12:52 442 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-IDOS - ProgramTT.reg.dat
2013-07-28 00:12:52 . 2013-07-28 00:12:52 478 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-2009.reg.dat
2013-07-28 00:12:52 . 2013-07-28 00:12:52 478 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-2008.reg.dat
2013-07-28 00:12:51 . 2013-07-28 00:12:51 732 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-AV732E.reg.dat
2013-07-28 00:12:51 . 2013-07-28 00:12:51 890 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-Agere Systems Soft Modem.reg.dat
2013-07-28 00:12:26 . 2013-07-28 00:12:26 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfRd.reg.dat
2013-07-28 00:12:26 . 2013-07-28 00:12:26 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfPf.reg.dat
2013-07-27 23:42:09 . 2013-07-27 23:42:09 1,342 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_XPROTECTOR.reg.dat
2013-07-27 23:42:09 . 2013-07-27 23:42:09 1,124 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_XPROTECTOR.reg.dat
2013-07-27 23:41:34 . 2013-07-28 17:04:28 11,969 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2013-07-27 23:25:22 . 2013-07-28 16:46:27 512 ----a-w- C:\Qoobox\Quarantine\MBR_HardDisk0.mbr
2013-07-27 23:16:54 . 2013-07-27 23:16:54 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll.vir
2013-07-27 23:16:54 . 2013-07-27 23:16:54 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll.vir
2013-07-27 23:16:54 . 2013-07-27 23:16:54 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll.vir
2013-07-27 23:16:53 . 2013-07-27 23:16:53 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll.vir
2013-07-27 23:16:52 . 2013-07-27 23:16:52 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll.vir
2013-07-27 23:16:51 . 2013-07-27 23:16:51 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll.vir
2013-07-27 23:16:50 . 2013-07-27 23:16:51 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\python27.dll.vir
2013-07-27 23:16:50 . 2013-07-27 23:16:50 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_elementtree.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_socket.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32api.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32ts.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pysqlite2._sqlite.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_multiprocessing.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32com.shell.shell.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._html2.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32crypt.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._gdi_.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\windows._cacheinvalidation.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32profile.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_ctypes.pyd.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pythoncom27.dll.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._misc_.pyd.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32security.pyd.vir
2013-07-27 23:16:46 . 2013-07-27 23:16:46 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._core_.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_ssl.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32pdh.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32process.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_hashlib.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:45 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._windows_.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._wizard.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32file.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32inet.pyd.vir
2013-07-27 23:16:42 . 2013-07-27 23:16:42 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._controls_.pyd.vir
2013-07-27 23:16:42 . 2013-07-27 23:16:42 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32event.pyd.vir
2013-07-27 23:16:23 . 2013-07-27 23:16:42 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pyexpat.pyd.vir
2013-07-27 23:16:18 . 2013-07-27 23:16:23 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\unicodedata.pyd.vir
2013-07-27 23:16:15 . 2013-07-27 23:16:18 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\select.pyd.vir
2013-07-27 20:07:45 . 2013-07-28 16:46:32 1,464 ----a-w- C:\Qoobox\Quarantine\catchme.log
2012-03-25 18:45:30 . 2012-03-25 18:49:35 22 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\TRNCOM.INI.vir
2012-03-25 18:45:30 . 2012-03-25 18:45:30 1,678 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\MAILTRAN.INI.vir
2008-11-06 20:44:18 . 1999-03-24 09:43:56 327,168 ----a-w- C:\Qoobox\Quarantine\C\Windows\IsUn0405.exe.vir
2008-01-19 19:41:22 . 2009-08-19 03:32:54 14,764 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\SLOVA.WAV.vir
2007-10-27 21:15:17 . 2011-06-03 15:17:55 432 ----a-w- C:\Qoobox\Quarantine\C\Windows\System32\drivers\etc\hosts.ics.vir
2007-10-21 07:38:14 . 2006-11-19 22:44:31 3,125 ----a-w- C:\Qoobox\Quarantine\C\Windows\My.ini.vir
2007-10-16 06:52:33 . 2006-07-26 04:55:00 545 ----a-w- C:\Qoobox\Quarantine\C\Windows\pkunzip.pif.vir
2007-10-16 06:52:33 . 2006-07-26 04:55:00 545 ----a-w- C:\Qoobox\Quarantine\C\Windows\pkzip.pif.vir
2007-10-15 19:47:58 . 2007-10-15 19:47:58 14,336 ----a-w- C:\Qoobox\Quarantine\C\Windows\IMAGE.EXE.LOG.vir
2013-07-28 16:37:48 . 2013-07-28 16:37:48 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_webview_vc90.dll.vir
2013-07-28 16:37:47 . 2013-07-28 16:37:48 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_net_vc90.dll.vir
2013-07-28 16:37:47 . 2013-07-28 16:37:47 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_html_vc90.dll.vir
2013-07-28 16:37:46 . 2013-07-28 16:37:47 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_adv_vc90.dll.vir
2013-07-28 16:37:45 . 2013-07-28 16:37:46 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxmsw294u_core_vc90.dll.vir
2013-07-28 16:37:45 . 2013-07-28 16:37:45 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wxbase294u_vc90.dll.vir
2013-07-28 16:37:44 . 2013-07-28 16:37:44 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\python27.dll.vir
2013-07-28 16:37:44 . 2013-07-28 16:37:44 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_elementtree.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:44 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_socket.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32api.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32ts.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pysqlite2._sqlite.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_multiprocessing.pyd.vir
2013-07-28 16:37:43 . 2013-07-28 16:37:43 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32com.shell.shell.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._html2.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32crypt.pyd.vir
2013-07-28 16:37:42 . 2013-07-28 16:37:42 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._gdi_.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\windows._cacheinvalidation.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32profile.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_ctypes.pyd.vir
2013-07-28 16:37:41 . 2013-07-28 16:37:41 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pythoncom27.dll.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._misc_.pyd.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\PyWinTypes27.dll.vir
2013-07-28 16:37:40 . 2013-07-28 16:37:40 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32security.pyd.vir
2013-07-28 16:37:39 . 2013-07-28 16:37:39 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._core_.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_ssl.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32pdh.pyd.vir
2013-07-28 16:37:38 . 2013-07-28 16:37:38 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32process.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:38 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\_hashlib.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._windows_.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._wizard.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32file.pyd.vir
2013-07-28 16:37:37 . 2013-07-28 16:37:37 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32inet.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:30 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\wx._controls_.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:29 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\win32event.pyd.vir
2013-07-28 16:37:29 . 2013-07-28 16:37:29 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\pyexpat.pyd.vir
2013-07-28 16:37:28 . 2013-07-28 16:37:29 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\unicodedata.pyd.vir
2013-07-28 16:37:16 . 2013-07-28 16:37:28 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI33362\select.pyd.vir
2013-07-28 11:47:45 . 2013-07-28 11:47:46 11,614,498 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ESET\_egui_.exe.zip
2013-07-28 11:14:38 . 2013-07-28 16:46:37 99 ----a-w- C:\Qoobox\Quarantine\catchme.txt
2013-07-28 02:00:12 . 2013-07-28 02:00:12 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxbase294u_net_vc90.dll.vir
2013-07-28 02:00:12 . 2013-07-28 02:00:12 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_webview_vc90.dll.vir
2013-07-28 02:00:10 . 2013-07-28 02:00:10 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_html_vc90.dll.vir
2013-07-28 02:00:09 . 2013-07-28 02:00:10 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_adv_vc90.dll.vir
2013-07-28 02:00:09 . 2013-07-28 02:00:09 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxmsw294u_core_vc90.dll.vir
2013-07-28 02:00:08 . 2013-07-28 02:00:08 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wxbase294u_vc90.dll.vir
2013-07-28 02:00:06 . 2013-07-28 02:00:07 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\python27.dll.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_elementtree.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_socket.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32api.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32ts.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pysqlite2._sqlite.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_multiprocessing.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32com.shell.shell.pyd.vir
2013-07-28 02:00:05 . 2013-07-28 02:00:05 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._html2.pyd.vir
2013-07-28 02:00:04 . 2013-07-28 02:00:04 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32crypt.pyd.vir
2013-07-28 02:00:04 . 2013-07-28 02:00:04 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._gdi_.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\windows._cacheinvalidation.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32profile.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_ctypes.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pythoncom27.dll.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._misc_.pyd.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\PyWinTypes27.dll.vir
2013-07-28 02:00:03 . 2013-07-28 02:00:03 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32security.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:03 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._core_.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_ssl.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32pdh.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32process.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\_hashlib.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32file.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32inet.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._windows_.pyd.vir
2013-07-28 02:00:02 . 2013-07-28 02:00:02 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._wizard.pyd.vir
2013-07-28 01:59:55 . 2013-07-28 01:59:58 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\wx._controls_.pyd.vir
2013-07-28 01:59:53 . 2013-07-28 01:59:54 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\win32event.pyd.vir
2013-07-28 01:59:33 . 2013-07-28 01:59:37 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\pyexpat.pyd.vir
2013-07-28 01:59:32 . 2013-07-28 01:59:32 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\unicodedata.pyd.vir
2013-07-28 01:59:29 . 2013-07-28 01:59:31 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI26242\select.pyd.vir
2013-07-28 00:12:52 . 2013-07-28 00:12:52 442 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-IDOS - ProgramTT.reg.dat
2013-07-28 00:12:52 . 2013-07-28 00:12:52 478 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-2009.reg.dat
2013-07-28 00:12:52 . 2013-07-28 00:12:52 478 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-2008.reg.dat
2013-07-28 00:12:51 . 2013-07-28 00:12:51 732 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-AV732E.reg.dat
2013-07-28 00:12:51 . 2013-07-28 00:12:51 890 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-Agere Systems Soft Modem.reg.dat
2013-07-28 00:12:26 . 2013-07-28 00:12:26 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfRd.reg.dat
2013-07-28 00:12:26 . 2013-07-28 00:12:26 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfPf.reg.dat
2013-07-27 23:42:09 . 2013-07-27 23:42:09 1,342 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_XPROTECTOR.reg.dat
2013-07-27 23:42:09 . 2013-07-27 23:42:09 1,124 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_XPROTECTOR.reg.dat
2013-07-27 23:41:34 . 2013-07-28 17:04:28 11,969 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2013-07-27 23:25:22 . 2013-07-28 16:46:27 512 ----a-w- C:\Qoobox\Quarantine\MBR_HardDisk0.mbr
2013-07-27 23:16:54 . 2013-07-27 23:16:54 91,648 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_webview_vc90.dll.vir
2013-07-27 23:16:54 . 2013-07-27 23:16:54 154,112 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxbase294u_net_vc90.dll.vir
2013-07-27 23:16:54 . 2013-07-27 23:16:54 595,968 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_html_vc90.dll.vir
2013-07-27 23:16:53 . 2013-07-27 23:16:53 1,234,944 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_adv_vc90.dll.vir
2013-07-27 23:16:52 . 2013-07-27 23:16:52 4,598,272 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxmsw294u_core_vc90.dll.vir
2013-07-27 23:16:51 . 2013-07-27 23:16:51 1,985,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wxbase294u_vc90.dll.vir
2013-07-27 23:16:50 . 2013-07-27 23:16:51 2,436,608 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\python27.dll.vir
2013-07-27 23:16:50 . 2013-07-27 23:16:50 128,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_elementtree.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 44,032 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_socket.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 98,816 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32api.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 22,528 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32ts.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 557,056 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pysqlite2._sqlite.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 26,624 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_multiprocessing.pyd.vir
2013-07-27 23:16:49 . 2013-07-27 23:16:49 320,512 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32com.shell.shell.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 70,656 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._html2.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 11,264 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32crypt.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 805,888 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._gdi_.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 1,022,416 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\windows._cacheinvalidation.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 17,408 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32profile.pyd.vir
2013-07-27 23:16:48 . 2013-07-27 23:16:48 87,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_ctypes.pyd.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 364,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pythoncom27.dll.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 735,232 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._misc_.pyd.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 110,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\PyWinTypes27.dll.vir
2013-07-27 23:16:47 . 2013-07-27 23:16:47 108,544 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32security.pyd.vir
2013-07-27 23:16:46 . 2013-07-27 23:16:46 1,175,040 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._core_.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 1,153,024 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_ssl.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 25,600 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32pdh.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 35,840 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32process.pyd.vir
2013-07-27 23:16:45 . 2013-07-27 23:16:45 711,680 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\_hashlib.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:45 811,008 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._windows_.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 122,368 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._wizard.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 119,808 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32file.pyd.vir
2013-07-27 23:16:44 . 2013-07-27 23:16:44 38,912 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32inet.pyd.vir
2013-07-27 23:16:42 . 2013-07-27 23:16:42 1,062,400 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\wx._controls_.pyd.vir
2013-07-27 23:16:42 . 2013-07-27 23:16:42 18,432 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\win32event.pyd.vir
2013-07-27 23:16:23 . 2013-07-27 23:16:42 127,488 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\pyexpat.pyd.vir
2013-07-27 23:16:18 . 2013-07-27 23:16:23 686,080 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\unicodedata.pyd.vir
2013-07-27 23:16:15 . 2013-07-27 23:16:18 10,240 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Temp\_MEI37602\select.pyd.vir
2013-07-27 20:07:45 . 2013-07-28 16:46:32 1,464 ----a-w- C:\Qoobox\Quarantine\catchme.log
2012-03-25 18:45:30 . 2012-03-25 18:49:35 22 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\TRNCOM.INI.vir
2012-03-25 18:45:30 . 2012-03-25 18:45:30 1,678 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\MAILTRAN.INI.vir
2008-11-06 20:44:18 . 1999-03-24 09:43:56 327,168 ----a-w- C:\Qoobox\Quarantine\C\Windows\IsUn0405.exe.vir
2008-01-19 19:41:22 . 2009-08-19 03:32:54 14,764 ----a-w- C:\Qoobox\Quarantine\C\Users\vaclaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\SLOVA.WAV.vir
2007-10-27 21:15:17 . 2011-06-03 15:17:55 432 ----a-w- C:\Qoobox\Quarantine\C\Windows\System32\drivers\etc\hosts.ics.vir
2007-10-21 07:38:14 . 2006-11-19 22:44:31 3,125 ----a-w- C:\Qoobox\Quarantine\C\Windows\My.ini.vir
2007-10-16 06:52:33 . 2006-07-26 04:55:00 545 ----a-w- C:\Qoobox\Quarantine\C\Windows\pkunzip.pif.vir
2007-10-16 06:52:33 . 2006-07-26 04:55:00 545 ----a-w- C:\Qoobox\Quarantine\C\Windows\pkzip.pif.vir
2007-10-15 19:47:58 . 2007-10-15 19:47:58 14,336 ----a-w- C:\Qoobox\Quarantine\C\Windows\IMAGE.EXE.LOG.vir
Re: Při zatížení grafiky jede procesor na 100 %
Zdravim 
Jdete prosim na tuto stranku http://www.bleepingcomputer.com/submit- ... ?channel=4
Do okna vedle Link to topic where this file was requested: nakopirujte odkaz nize
Nasledne do okna vedle Browse to the file you want to submit: kliknete a najdete soubor C:\Qoobox\Quarantine\C\Program Files\ESET\_egui_.exe.zip
Pote kliknete na Send File cimz soubor uploadnete k autorovi CF
Jdete prosim na tuto stranku http://www.bleepingcomputer.com/submit- ... ?channel=4 Do okna vedle Link to topic where this file was requested: nakopirujte odkaz nize
Kód: Vybrat vše
http://forum.viry.cz/viewtopic.php?f=13&t=131710"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Neprojde to, má to 11 MB a na tom serveru je kvóta 5 MB 
-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
V tom archivu jsou totiž tři kopie prvního egui.exe (ESET ES 5) a tři toho druhého (ESET SS 6).
Re: Při zatížení grafiky jede procesor na 100 %
Fajn, zabalte mi vse do jednoho raru a nekam uploadnete nekam (treba LP http://leteckaposta.cz/)...
Ta velikost by vysvetlovala proc to CF neuploadnul...
Ta velikost by vysvetlovala proc to CF neuploadnul...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.-
vaclaf1981
- Návštěvník
- Příspěvky: 24
- Registrován: 26 črc 2013 15:45
Re: Při zatížení grafiky jede procesor na 100 %
Všechno už je to v jednom ZIPu, tak jsem to hodil na Leteckou poštu: http://leteckaposta.cz/340981052
Přispějete na provoz fóra?