
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu Děkuji
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Prosím o kontrolu logu Děkuji
Logfile of random's system information tool 1.06 (written by random/random)
Run by Vítek at 2010-01-03 17:15:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 305 GB (64%) free of 477 GB
Total RAM: 3071 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:46, on 3.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\windows\system32\FsUsbExService.Exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\windows\system32\nvsvc32.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\windows\Explorer.EXE
C:\windows\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\windows\system32\RUNDLL32.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\windows\system32\ctfmon.exe
C:\program files\steam2\steam.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Vítek\Plocha\Instalační programy\RSIT.exe
C:\Program Files\trend micro\Vítek.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: (no name) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [MaxMenuMgr] "C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Steam] "c:\program files\steam2\steam.exe" -silent
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Miranda IM] C:\Program Files\Miranda IM KP v5.0.8.5\launcher.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res:///105
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Seagate Service (FreeAgentGoNext Service) - Seagate Technology LLC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: FsUsbExService - Teruten - C:\windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate1ca30ad63530f86) (gupdate1ca30ad63530f86) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 8688 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1229272821-1326574676-682003330-1004Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1229272821-1326574676-682003330-1004UA.job
C:\windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-09 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\windows\RTHDCPL.EXE [2008-12-26 18081280]
"Alcmtr"=C:\windows\ALCMTR.EXE [2008-06-19 57344]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-27 13684736]
"nwiz"=nwiz.exe /install []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-03-19 2029640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-27 86016]
"VX1000"=C:\WINDOWS\vVX1000.exe [2006-06-30 707376]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2007-05-15 204800]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2006-11-28 2658304]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]
"MaxMenuMgr"=C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe [2009-05-01 185640]
"NPSStartup"= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"Steam"=c:\program files\steam2\steam.exe [2009-10-24 1217808]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
"PMCLoader"=C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe [2008-12-16 644368]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-11-23 2001648]
"Miranda IM"=C:\Program Files\Miranda IM KP v5.0.8.5\launcher.exe []
"Google Update"=C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-11-04 135664]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-07-15 102400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-09 149280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Steam\steamapps\golf72\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\golf72\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.328\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.328\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX02.812\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX02.812\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX04.781\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX04.781\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE"="C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe"="C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\steamapps\golf72\opposing force\hl.exe"="C:\Program Files\Steam\steamapps\golf72\opposing force\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe"="C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe:LocalSubNet:Enabled:Pinnacle Streaming Server"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\STEAM2\Steam.exe"="C:\Program Files\STEAM2\Steam.exe:*:Enabled:Steam"
"C:\Program Files\STEAM2\steamapps\golf72\counter-strike\hl.exe"="C:\Program Files\STEAM2\steamapps\golf72\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Pinnacle\Studio 10\programs\RM.exe"="C:\Program Files\Pinnacle\Studio 10\programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe"="C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\Program Files\Pinnacle\Studio 10\programs\umi.exe"="C:\Program Files\Pinnacle\Studio 10\programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Miranda IM KP v5.0.8.5\miranda32.exe"="C:\Program Files\Miranda IM KP v5.0.8.5\miranda32.exe:*:Enabled:Miranda IM"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.625\Miranda IM Bagr pack\miranda32.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.625\Miranda IM Bagr pack\miranda32.exe:*:Enabled:Miranda IM"
"C:\Documents and Settings\Vítek\Plocha\Miranda IM Bagr pack\miranda32.exe"="C:\Documents and Settings\Vítek\Plocha\Miranda IM Bagr pack\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Activision\Modern Warfare 2\iw4mp.exe"="C:\Program Files\Activision\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-01-02 21:34:11 ----A---- C:\windows\system32\DIFxAPI.dll
2010-01-02 21:33:44 ----SHD---- C:\Config.Msi
2010-01-02 21:33:00 ----D---- C:\windows\system32\Samsung_USB_Drivers
2010-01-02 21:32:55 ----A---- C:\windows\system32\FsUsbExService.Exe
2010-01-02 21:32:55 ----A---- C:\windows\system32\FsUsbExDevice.Dll
2010-01-02 21:32:44 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Samsung
2010-01-02 21:32:30 ----D---- C:\Program Files\MarkAny
2010-01-02 21:32:28 ----D---- C:\Program Files\PC Connectivity Solution
2010-01-02 21:31:54 ----D---- C:\Program Files\Samsung
2010-01-02 20:25:14 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Facebook
2009-12-24 22:29:04 ----D---- C:\Program Files\LogMeIn Hamachi
2009-12-23 13:46:34 ----A---- C:\DevList.txt
2009-12-19 13:47:38 ----D---- C:\rsit
2009-12-15 17:53:41 ----D---- C:\Program Files\psani
2009-12-15 17:51:47 ----D---- C:\Program Files\UPSANI
2009-12-15 17:46:22 ----D---- C:\Program Files\DesetiPrsty
2009-12-11 22:36:29 ----D---- C:\Documents and Settings\Vítek\Data aplikací\CheckPoint
2009-12-11 22:36:21 ----D---- C:\Program Files\CheckPoint
2009-12-11 22:36:17 ----A---- C:\windows\system32\vsregexp.dll
2009-12-11 22:36:14 ----A---- C:\windows\system32\zlcommdb.dll
2009-12-11 22:36:14 ----A---- C:\windows\system32\zlcomm.dll
2009-12-11 22:36:11 ----A---- C:\windows\system32\zpeng25.dll
2009-12-11 22:36:11 ----A---- C:\windows\system32\vswmi.dll
2009-12-11 22:36:10 ----D---- C:\windows\system32\ZoneLabs
2009-12-11 22:36:10 ----A---- C:\windows\system32\vsxml.dll
2009-12-11 22:36:10 ----A---- C:\windows\system32\vspubapi.dll
2009-12-11 22:36:10 ----A---- C:\windows\system32\vsmonapi.dll
2009-12-11 22:36:08 ----D---- C:\Program Files\Zone Labs
2009-12-11 22:35:30 ----D---- C:\windows\Internet Logs
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsutil.dll
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsinit.dll
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsdata.dll
2009-12-11 22:19:52 ----A---- C:\windows\system32\msvcr90.dll
2009-12-11 20:47:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2009-12-11 20:47:53 ----D---- C:\Program Files\SUPERAntiSpyware
2009-12-11 20:47:53 ----D---- C:\Documents and Settings\Vítek\Data aplikací\SUPERAntiSpyware.com
2009-12-11 19:40:29 ----D---- C:\Program Files\trend micro
2009-12-11 19:37:19 ----D---- C:\windows\CSC
2009-12-11 19:37:13 ----A---- C:\windows\ntbtlog.txt
2009-12-10 18:31:01 ----A---- C:\windows\system32\bassmod.dll
2009-12-10 15:03:29 ----A---- C:\windows\system32\XAudio2_5.dll
2009-12-10 15:03:28 ----A---- C:\windows\system32\xactengine3_5.dll
2009-12-10 15:03:27 ----A---- C:\windows\system32\D3DCompiler_42.dll
2009-12-10 15:03:26 ----A---- C:\windows\system32\d3dcsx_42.dll
2009-12-10 15:03:25 ----A---- C:\windows\system32\d3dx11_42.dll
2009-12-10 15:03:24 ----A---- C:\windows\system32\D3DX9_42.dll
2009-12-10 15:03:24 ----A---- C:\windows\system32\d3dx10_42.dll
2009-12-10 13:58:35 ----D---- C:\Program Files\Activision
2009-12-08 22:07:42 ----D---- C:\Program Files\Common Files\DESIGNER
2009-12-08 22:07:29 ----D---- C:\windows\SHELLNEW
2009-12-08 22:06:21 ----D---- C:\Program Files\Microsoft.NET
2009-12-08 22:03:39 ----RHD---- C:\MSOCache
2009-12-08 21:45:32 ----HDC---- C:\windows\$NtUninstallKB970430$
2009-12-08 21:45:27 ----HDC---- C:\windows\$NtUninstallKB974318$
2009-12-08 21:44:49 ----HDC---- C:\windows\$NtUninstallKB973904$
2009-12-08 21:44:44 ----HDC---- C:\windows\$NtUninstallKB974392$
2009-12-08 21:44:37 ----HDC---- C:\windows\$NtUninstallKB971737$
2009-12-08 20:51:47 ----A---- C:\windows\system32\muweb.dll
2009-12-08 20:51:47 ----A---- C:\windows\system32\mucltui.dll.mui
2009-12-08 20:51:47 ----A---- C:\windows\system32\mucltui.dll
2009-12-08 20:33:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
======List of files/folders modified in the last 1 months======
2010-01-03 17:15:46 ----D---- C:\windows\Prefetch
2010-01-03 17:15:41 ----D---- C:\windows\Temp
2010-01-03 17:12:55 ----D---- C:\Program Files\Mozilla Firefox
2010-01-03 17:10:08 ----D---- C:\Program Files\STEAM2
2010-01-03 14:25:56 ----D---- C:\Program Files\Mozilla Thunderbird
2010-01-03 12:03:47 ----D---- C:\WINDOWS
2010-01-03 12:03:38 ----D---- C:\Program Files\Common Files
2010-01-03 11:56:18 ----D---- C:\windows\system32\CatRoot2
2010-01-02 23:05:54 ----A---- C:\windows\SchedLgU.Txt
2010-01-02 21:43:03 ----D---- C:\windows\system32\drivers
2010-01-02 21:42:57 ----HD---- C:\windows\inf
2010-01-02 21:42:15 ----DC---- C:\windows\system32\DRVSTORE
2010-01-02 21:42:04 ----SHD---- C:\windows\Installer
2010-01-02 21:42:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-02 21:34:11 ----D---- C:\windows\system32
2010-01-02 21:33:47 ----D---- C:\Program Files\Common Files\PCSuite
2010-01-02 21:33:00 ----D---- C:\Program Files\DIFX
2010-01-02 21:32:30 ----RD---- C:\Program Files
2010-01-02 21:28:35 ----D---- C:\Program Files\Common Files\Adobe
2010-01-02 20:47:18 ----A---- C:\windows\NeroDigital.ini
2009-12-26 00:17:16 ----D---- C:\Program Files\Valve
2009-12-24 11:42:27 ----D---- C:\Program Files\Google
2009-12-23 23:18:39 ----SD---- C:\windows\Tasks
2009-12-23 13:47:20 ----RSHDC---- C:\windows\system32\dllcache
2009-12-23 13:47:11 ----D---- C:\windows\system32\ReinstallBackups
2009-12-20 14:50:48 ----D---- C:\Documents and Settings\Vítek\Data aplikací\HLSW
2009-12-17 16:27:12 ----D---- C:\windows\system32\DirectX
2009-12-17 16:26:33 ----RSD---- C:\windows\assembly
2009-12-17 16:17:07 ----D---- C:\Documents and Settings\Vítek\Data aplikací\DAEMON Tools Lite
2009-12-15 15:31:10 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-12-14 19:13:51 ----D---- C:\Documents and Settings\Vítek\Data aplikací\GHISLER
2009-12-14 17:18:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2009-12-13 21:38:04 ----D---- C:\Documents and Settings\Vítek\Data aplikací\ICQ
2009-12-13 15:51:01 ----A---- C:\windows\ODBC.INI
2009-12-13 15:50:46 ----A---- C:\windows\win.ini
2009-12-12 11:43:10 ----D---- C:\Program Files\Steam
2009-12-12 10:43:49 ----RSD---- C:\windows\Fonts
2009-12-12 10:43:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-12-11 21:46:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\QuickTime
2009-12-11 20:47:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-12-11 20:43:24 ----D---- C:\windows\system32\Restore
2009-12-11 10:50:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle VideoSpin
2009-12-11 10:50:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio
2009-12-11 10:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2009-12-09 16:16:35 ----D---- C:\windows\Microsoft.NET
2009-12-08 22:07:45 ----D---- C:\Program Files\Microsoft Office
2009-12-08 22:07:31 ----D---- C:\Program Files\Common Files\System
2009-12-08 22:03:45 ----D---- C:\windows\system
2009-12-08 21:49:03 ----A---- C:\windows\system32\PerfStringBackup.INI
2009-12-08 21:45:31 ----A---- C:\windows\imsins.BAK
2009-12-08 21:45:06 ----D---- C:\Program Files\Internet Explorer
2009-12-08 21:44:57 ----HD---- C:\windows\$hf_mig$
2009-12-08 21:44:25 ----D---- C:\windows\system32\CatRoot
2009-12-08 21:43:07 ----D---- C:\windows\WinSxS
2009-12-08 21:32:06 ----D---- C:\windows\system32\wbem
2009-12-08 21:07:01 ----SD---- C:\Documents and Settings\Vítek\Data aplikací\Microsoft
2009-12-08 20:38:46 ----D---- C:\windows\system32\config
2009-12-04 16:55:37 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Nokia Multimedia Player
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Amfilter;A4Tech Mouse Filter Driver; C:\windows\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2009-03-19 107256]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2009-03-19 93848]
R1 intelppm;Řadič procesoru Intel; C:\windows\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 PCLEPCI;PCLEPCI; \??\C:\windows\system32\drivers\pclepci.sys []
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\windows\System32\vsdatant.sys [2009-11-22 486280]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2009-03-19 113960]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 TBPanel;TBPanel; C:\windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i-MCE; C:\windows\system32\DRIVERS\3xHybrid.sys [2006-11-22 1121536]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\windows\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\windows\system32\FsUsbExDisk.SYS []
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\windows\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RtkHDAud.sys [2008-12-26 4968448]
R3 MouseCap;MouseCapture Driver; C:\windows\System32\Drivers\MouseCap.sys [2005-08-08 6640]
R3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2009-03-27 6280416]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\windows\system32\DRIVERS\Rtenicxp.sys [2008-09-25 115328]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 usbaudio;USB Audio Driver (WDM); C:\windows\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\windows\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VX1000;VX-1000; C:\windows\system32\DRIVERS\VX1000.sys [2006-06-30 1965872]
S3 aer4adjn;aer4adjn; C:\windows\system32\drivers\aer4adjn.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\windows\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 Moufiltr;Mouse Test Driver; C:\windows\system32\DRIVERS\Moufiltr.sys [2005-08-06 9661]
S3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\windows\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\windows\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\windows\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\windows\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:\windows\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\windows\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\windows\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 Nokia USB Port;Nokia USB Port; C:\windows\system32\drivers\nmwcdcj.sys [2006-05-29 13312]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\windows\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\windows\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-03-19 731840]
R2 FreeAgentGoNext Service;Seagate Service; C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-05-01 181544]
R2 FsUsbExService;FsUsbExService; C:\windows\system32\FsUsbExService.Exe [2009-07-15 233472]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2009-10-29 1074568]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\windows\system32\nvsvc32.exe [2009-03-27 163908]
R2 wmcmgc;Windows Management Configuration; C:\windows\System32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S2 gupdate1ca30ad63530f86;Služba Google Update (gupdate1ca30ad63530f86); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-08 133104]
S2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-03-19 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-02 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-09 153376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Děkuju
Run by Vítek at 2010-01-03 17:15:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 305 GB (64%) free of 477 GB
Total RAM: 3071 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:46, on 3.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\windows\system32\FsUsbExService.Exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\windows\system32\nvsvc32.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\windows\Explorer.EXE
C:\windows\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\windows\system32\RUNDLL32.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\windows\system32\ctfmon.exe
C:\program files\steam2\steam.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Vítek\Plocha\Instalační programy\RSIT.exe
C:\Program Files\trend micro\Vítek.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: (no name) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [MaxMenuMgr] "C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Steam] "c:\program files\steam2\steam.exe" -silent
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe -checktasks
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Miranda IM] C:\Program Files\Miranda IM KP v5.0.8.5\launcher.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res:///105
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Seagate Service (FreeAgentGoNext Service) - Seagate Technology LLC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: FsUsbExService - Teruten - C:\windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate1ca30ad63530f86) (gupdate1ca30ad63530f86) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 8688 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1229272821-1326574676-682003330-1004Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1229272821-1326574676-682003330-1004UA.job
C:\windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-09 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\windows\RTHDCPL.EXE [2008-12-26 18081280]
"Alcmtr"=C:\windows\ALCMTR.EXE [2008-06-19 57344]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-27 13684736]
"nwiz"=nwiz.exe /install []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-03-19 2029640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-27 86016]
"VX1000"=C:\WINDOWS\vVX1000.exe [2006-06-30 707376]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2007-05-15 204800]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2006-11-28 2658304]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]
"MaxMenuMgr"=C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe [2009-05-01 185640]
"NPSStartup"= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"Steam"=c:\program files\steam2\steam.exe [2009-10-24 1217808]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
"PMCLoader"=C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe [2008-12-16 644368]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-11-23 2001648]
"Miranda IM"=C:\Program Files\Miranda IM KP v5.0.8.5\launcher.exe []
"Google Update"=C:\Documents and Settings\Vítek\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-11-04 135664]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-07-15 102400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-09 149280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Steam\steamapps\golf72\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\golf72\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.328\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.328\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX02.812\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX02.812\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX04.781\ventrilo_srv.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX04.781\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
"C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE"="C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe"="C:\Program Files\Age Of Empires 2 & The Conquerors Expansion - Full Game\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\steamapps\golf72\opposing force\hl.exe"="C:\Program Files\Steam\steamapps\golf72\opposing force\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe"="C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe:LocalSubNet:Enabled:Pinnacle Streaming Server"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\STEAM2\Steam.exe"="C:\Program Files\STEAM2\Steam.exe:*:Enabled:Steam"
"C:\Program Files\STEAM2\steamapps\golf72\counter-strike\hl.exe"="C:\Program Files\STEAM2\steamapps\golf72\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Pinnacle\Studio 10\programs\RM.exe"="C:\Program Files\Pinnacle\Studio 10\programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe"="C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\Program Files\Pinnacle\Studio 10\programs\umi.exe"="C:\Program Files\Pinnacle\Studio 10\programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Miranda IM KP v5.0.8.5\miranda32.exe"="C:\Program Files\Miranda IM KP v5.0.8.5\miranda32.exe:*:Enabled:Miranda IM"
"C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.625\Miranda IM Bagr pack\miranda32.exe"="C:\Documents and Settings\Vítek\Local Settings\Temp\Rar$EX00.625\Miranda IM Bagr pack\miranda32.exe:*:Enabled:Miranda IM"
"C:\Documents and Settings\Vítek\Plocha\Miranda IM Bagr pack\miranda32.exe"="C:\Documents and Settings\Vítek\Plocha\Miranda IM Bagr pack\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Activision\Modern Warfare 2\iw4mp.exe"="C:\Program Files\Activision\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-01-02 21:34:11 ----A---- C:\windows\system32\DIFxAPI.dll
2010-01-02 21:33:44 ----SHD---- C:\Config.Msi
2010-01-02 21:33:00 ----D---- C:\windows\system32\Samsung_USB_Drivers
2010-01-02 21:32:55 ----A---- C:\windows\system32\FsUsbExService.Exe
2010-01-02 21:32:55 ----A---- C:\windows\system32\FsUsbExDevice.Dll
2010-01-02 21:32:44 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Samsung
2010-01-02 21:32:30 ----D---- C:\Program Files\MarkAny
2010-01-02 21:32:28 ----D---- C:\Program Files\PC Connectivity Solution
2010-01-02 21:31:54 ----D---- C:\Program Files\Samsung
2010-01-02 20:25:14 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Facebook
2009-12-24 22:29:04 ----D---- C:\Program Files\LogMeIn Hamachi
2009-12-23 13:46:34 ----A---- C:\DevList.txt
2009-12-19 13:47:38 ----D---- C:\rsit
2009-12-15 17:53:41 ----D---- C:\Program Files\psani
2009-12-15 17:51:47 ----D---- C:\Program Files\UPSANI
2009-12-15 17:46:22 ----D---- C:\Program Files\DesetiPrsty
2009-12-11 22:36:29 ----D---- C:\Documents and Settings\Vítek\Data aplikací\CheckPoint
2009-12-11 22:36:21 ----D---- C:\Program Files\CheckPoint
2009-12-11 22:36:17 ----A---- C:\windows\system32\vsregexp.dll
2009-12-11 22:36:14 ----A---- C:\windows\system32\zlcommdb.dll
2009-12-11 22:36:14 ----A---- C:\windows\system32\zlcomm.dll
2009-12-11 22:36:11 ----A---- C:\windows\system32\zpeng25.dll
2009-12-11 22:36:11 ----A---- C:\windows\system32\vswmi.dll
2009-12-11 22:36:10 ----D---- C:\windows\system32\ZoneLabs
2009-12-11 22:36:10 ----A---- C:\windows\system32\vsxml.dll
2009-12-11 22:36:10 ----A---- C:\windows\system32\vspubapi.dll
2009-12-11 22:36:10 ----A---- C:\windows\system32\vsmonapi.dll
2009-12-11 22:36:08 ----D---- C:\Program Files\Zone Labs
2009-12-11 22:35:30 ----D---- C:\windows\Internet Logs
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsutil.dll
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsinit.dll
2009-12-11 22:35:28 ----A---- C:\windows\system32\vsdata.dll
2009-12-11 22:19:52 ----A---- C:\windows\system32\msvcr90.dll
2009-12-11 20:47:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2009-12-11 20:47:53 ----D---- C:\Program Files\SUPERAntiSpyware
2009-12-11 20:47:53 ----D---- C:\Documents and Settings\Vítek\Data aplikací\SUPERAntiSpyware.com
2009-12-11 19:40:29 ----D---- C:\Program Files\trend micro
2009-12-11 19:37:19 ----D---- C:\windows\CSC
2009-12-11 19:37:13 ----A---- C:\windows\ntbtlog.txt
2009-12-10 18:31:01 ----A---- C:\windows\system32\bassmod.dll
2009-12-10 15:03:29 ----A---- C:\windows\system32\XAudio2_5.dll
2009-12-10 15:03:28 ----A---- C:\windows\system32\xactengine3_5.dll
2009-12-10 15:03:27 ----A---- C:\windows\system32\D3DCompiler_42.dll
2009-12-10 15:03:26 ----A---- C:\windows\system32\d3dcsx_42.dll
2009-12-10 15:03:25 ----A---- C:\windows\system32\d3dx11_42.dll
2009-12-10 15:03:24 ----A---- C:\windows\system32\D3DX9_42.dll
2009-12-10 15:03:24 ----A---- C:\windows\system32\d3dx10_42.dll
2009-12-10 13:58:35 ----D---- C:\Program Files\Activision
2009-12-08 22:07:42 ----D---- C:\Program Files\Common Files\DESIGNER
2009-12-08 22:07:29 ----D---- C:\windows\SHELLNEW
2009-12-08 22:06:21 ----D---- C:\Program Files\Microsoft.NET
2009-12-08 22:03:39 ----RHD---- C:\MSOCache
2009-12-08 21:45:32 ----HDC---- C:\windows\$NtUninstallKB970430$
2009-12-08 21:45:27 ----HDC---- C:\windows\$NtUninstallKB974318$
2009-12-08 21:44:49 ----HDC---- C:\windows\$NtUninstallKB973904$
2009-12-08 21:44:44 ----HDC---- C:\windows\$NtUninstallKB974392$
2009-12-08 21:44:37 ----HDC---- C:\windows\$NtUninstallKB971737$
2009-12-08 20:51:47 ----A---- C:\windows\system32\muweb.dll
2009-12-08 20:51:47 ----A---- C:\windows\system32\mucltui.dll.mui
2009-12-08 20:51:47 ----A---- C:\windows\system32\mucltui.dll
2009-12-08 20:33:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
======List of files/folders modified in the last 1 months======
2010-01-03 17:15:46 ----D---- C:\windows\Prefetch
2010-01-03 17:15:41 ----D---- C:\windows\Temp
2010-01-03 17:12:55 ----D---- C:\Program Files\Mozilla Firefox
2010-01-03 17:10:08 ----D---- C:\Program Files\STEAM2
2010-01-03 14:25:56 ----D---- C:\Program Files\Mozilla Thunderbird
2010-01-03 12:03:47 ----D---- C:\WINDOWS
2010-01-03 12:03:38 ----D---- C:\Program Files\Common Files
2010-01-03 11:56:18 ----D---- C:\windows\system32\CatRoot2
2010-01-02 23:05:54 ----A---- C:\windows\SchedLgU.Txt
2010-01-02 21:43:03 ----D---- C:\windows\system32\drivers
2010-01-02 21:42:57 ----HD---- C:\windows\inf
2010-01-02 21:42:15 ----DC---- C:\windows\system32\DRVSTORE
2010-01-02 21:42:04 ----SHD---- C:\windows\Installer
2010-01-02 21:42:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-02 21:34:11 ----D---- C:\windows\system32
2010-01-02 21:33:47 ----D---- C:\Program Files\Common Files\PCSuite
2010-01-02 21:33:00 ----D---- C:\Program Files\DIFX
2010-01-02 21:32:30 ----RD---- C:\Program Files
2010-01-02 21:28:35 ----D---- C:\Program Files\Common Files\Adobe
2010-01-02 20:47:18 ----A---- C:\windows\NeroDigital.ini
2009-12-26 00:17:16 ----D---- C:\Program Files\Valve
2009-12-24 11:42:27 ----D---- C:\Program Files\Google
2009-12-23 23:18:39 ----SD---- C:\windows\Tasks
2009-12-23 13:47:20 ----RSHDC---- C:\windows\system32\dllcache
2009-12-23 13:47:11 ----D---- C:\windows\system32\ReinstallBackups
2009-12-20 14:50:48 ----D---- C:\Documents and Settings\Vítek\Data aplikací\HLSW
2009-12-17 16:27:12 ----D---- C:\windows\system32\DirectX
2009-12-17 16:26:33 ----RSD---- C:\windows\assembly
2009-12-17 16:17:07 ----D---- C:\Documents and Settings\Vítek\Data aplikací\DAEMON Tools Lite
2009-12-15 15:31:10 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-12-14 19:13:51 ----D---- C:\Documents and Settings\Vítek\Data aplikací\GHISLER
2009-12-14 17:18:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2009-12-13 21:38:04 ----D---- C:\Documents and Settings\Vítek\Data aplikací\ICQ
2009-12-13 15:51:01 ----A---- C:\windows\ODBC.INI
2009-12-13 15:50:46 ----A---- C:\windows\win.ini
2009-12-12 11:43:10 ----D---- C:\Program Files\Steam
2009-12-12 10:43:49 ----RSD---- C:\windows\Fonts
2009-12-12 10:43:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-12-11 21:46:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\QuickTime
2009-12-11 20:47:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-12-11 20:43:24 ----D---- C:\windows\system32\Restore
2009-12-11 10:50:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle VideoSpin
2009-12-11 10:50:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio
2009-12-11 10:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2009-12-09 16:16:35 ----D---- C:\windows\Microsoft.NET
2009-12-08 22:07:45 ----D---- C:\Program Files\Microsoft Office
2009-12-08 22:07:31 ----D---- C:\Program Files\Common Files\System
2009-12-08 22:03:45 ----D---- C:\windows\system
2009-12-08 21:49:03 ----A---- C:\windows\system32\PerfStringBackup.INI
2009-12-08 21:45:31 ----A---- C:\windows\imsins.BAK
2009-12-08 21:45:06 ----D---- C:\Program Files\Internet Explorer
2009-12-08 21:44:57 ----HD---- C:\windows\$hf_mig$
2009-12-08 21:44:25 ----D---- C:\windows\system32\CatRoot
2009-12-08 21:43:07 ----D---- C:\windows\WinSxS
2009-12-08 21:32:06 ----D---- C:\windows\system32\wbem
2009-12-08 21:07:01 ----SD---- C:\Documents and Settings\Vítek\Data aplikací\Microsoft
2009-12-08 20:38:46 ----D---- C:\windows\system32\config
2009-12-04 16:55:37 ----D---- C:\Documents and Settings\Vítek\Data aplikací\Nokia Multimedia Player
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Amfilter;A4Tech Mouse Filter Driver; C:\windows\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2009-03-19 107256]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2009-03-19 93848]
R1 intelppm;Řadič procesoru Intel; C:\windows\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 PCLEPCI;PCLEPCI; \??\C:\windows\system32\drivers\pclepci.sys []
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\windows\System32\vsdatant.sys [2009-11-22 486280]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2009-03-19 113960]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R2 TBPanel;TBPanel; C:\windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i-MCE; C:\windows\system32\DRIVERS\3xHybrid.sys [2006-11-22 1121536]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\windows\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\windows\system32\FsUsbExDisk.SYS []
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\windows\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RtkHDAud.sys [2008-12-26 4968448]
R3 MouseCap;MouseCapture Driver; C:\windows\System32\Drivers\MouseCap.sys [2005-08-08 6640]
R3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2009-03-27 6280416]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\windows\system32\DRIVERS\Rtenicxp.sys [2008-09-25 115328]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 usbaudio;USB Audio Driver (WDM); C:\windows\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\windows\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VX1000;VX-1000; C:\windows\system32\DRIVERS\VX1000.sys [2006-06-30 1965872]
S3 aer4adjn;aer4adjn; C:\windows\system32\drivers\aer4adjn.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\windows\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 Moufiltr;Mouse Test Driver; C:\windows\system32\DRIVERS\Moufiltr.sys [2005-08-06 9661]
S3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\windows\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\windows\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\windows\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\windows\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:\windows\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\windows\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\windows\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 Nokia USB Port;Nokia USB Port; C:\windows\system32\drivers\nmwcdcj.sys [2006-05-29 13312]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\windows\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\windows\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-03-19 731840]
R2 FreeAgentGoNext Service;Seagate Service; C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-05-01 181544]
R2 FsUsbExService;FsUsbExService; C:\windows\system32\FsUsbExService.Exe [2009-07-15 233472]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2009-10-29 1074568]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\windows\system32\nvsvc32.exe [2009-03-27 163908]
R2 wmcmgc;Windows Management Configuration; C:\windows\System32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S2 gupdate1ca30ad63530f86;Služba Google Update (gupdate1ca30ad63530f86); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-08 133104]
S2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-03-19 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-02 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-09 153376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Děkuju
Re: Prosím o kontrolu logu Děkuji
Hezké odpoledne
odinstalujte Daemon tool toolbar a složku C:\Program Files\DAEMON Tools Toolbar smažte ( můžete ho odinstalovat přes Ccleaner - záložka nástroje)
Z mého podpisu stahněte Ccleaner
-nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru
záložka čistič
-nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
-po analýze klikněte na Spustit Ccleaner
záložka Registry
-klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy
udělat zálohu registrů - nemusíte
-kliknete opravit všechny problémy
ok
zavřít
Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.
Dejte soubor otestovat na http://www.virustotal.com
C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys
C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
Sem vložte link s výsledky.



-nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru
záložka čistič
-nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
-po analýze klikněte na Spustit Ccleaner
záložka Registry
-klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy

-kliknete opravit všechny problémy


Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.

C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys
C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
Sem vložte link s výsledky.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Prosím o kontrolu logu Děkuji
nevěděl jsem co všechno zkopírovat tak sem to vzal vše
toto je první soubor :
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.46 2010.01.04 -
AhnLab-V3 5.0.0.2 2010.01.04 -
AntiVir 7.9.1.122 2009.12.31 -
Antiy-AVL 2.0.3.7 2010.01.04 -
Authentium 5.2.0.5 2010.01.04 -
Avast 4.8.1351.0 2010.01.04 -
AVG 8.5.0.430 2010.01.04 -
BitDefender 7.2 2010.01.04 -
CAT-QuickHeal 10.00 2010.01.04 -
ClamAV 0.94.1 2010.01.04 -
Comodo 3467 2010.01.04 -
DrWeb 5.0.1.12222 2010.01.04 -
eSafe 7.0.17.0 2010.01.04 -
eTrust-Vet 35.1.7214 2010.01.04 -
F-Prot 4.5.1.85 2010.01.04 -
F-Secure 9.0.15370.0 2010.01.04 -
Fortinet 4.0.14.0 2010.01.02 -
GData 19 2010.01.04 -
Ikarus T3.1.1.79.0 2009.12.31 -
Jiangmin 13.0.900 2010.01.04 -
K7AntiVirus 7.10.937 2010.01.04 -
Kaspersky 7.0.0.125 2010.01.04 -
McAfee 5851 2010.01.04 -
McAfee+Artemis 5851 2010.01.04 -
McAfee-GW-Edition 6.8.5 2010.01.04 -
Microsoft 1.5302 2010.01.04 -
NOD32 4743 2010.01.04 -
Norman 6.04.03 2010.01.04 -
nProtect 2009.1.8.0 2010.01.04 -
Panda 10.0.2.2 2010.01.04 -
PCTools 7.0.3.5 2010.01.04 -
Prevx 3.0 2010.01.04 -
Rising 22.29.00.04 2010.01.04 -
Sophos 4.49.0 2010.01.04 -
Sunbelt 3.2.1858.2 2010.01.03 -
Symantec 20091.2.0.41 2010.01.04 -
TheHacker 6.5.0.3.131 2010.01.04 -
TrendMicro 9.120.0.1004 2010.01.04 -
VBA32 3.12.12.1 2010.01.04 -
ViRobot 2010.1.4.2120 2010.01.04 -
VirusBuster 5.0.21.0 2010.01.04 -
Rozšiřující informace
File size: 25208 bytes
MD5...: 6c614b6fd20194835c77346f6c34156e
SHA1..: 75c8976060b509b9ec8926633e9bdefe299ba6ae
SHA256: 457816509d125d0ad9b3425bea06d64c31473a724ee657796126db532daac0fc
ssdeep: 384:S6H0+7msegdbQtaKc+wrKc+nevtraqbarzYJLWd6jnNbi:bHv7JegdbQG91U
evtraqeryLAmNbi
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x2e50
timedatestamp.....: 0x4ad5cccd (Wed Oct 14 13:06:21 2009)
machinetype.......: 0x14c (I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2d6c 0x2e00 6.15 89eec6497baef3ae1658d77be3040172
.rdata 0x4000 0xbf6 0xc00 5.09 21ede422cba6cd23727bc2e9aae9ed1f
.data 0x5000 0x344 0x200 0.63 479aeafc571c905fadce76cc0863da41
.rsrc 0x6000 0x3e4 0x400 3.50 b42a683d03c27fd3a4b146c21f9a9c44
.reloc 0x7000 0x3d8 0x400 6.39 a8fa0f27d5ccec08380e1382ff08679d
( 2 imports )
> ntoskrnl.exe: KeGetCurrentThread, _except_handler3, KeSetAffinityThread, ObfReferenceObject, InterlockedCompareExchange, KeSetEvent, KeReleaseMutex, KeWaitForSingleObject, PsGetCurrentProcessId, MmCreateSection, KeInitializeEvent, ExFreePool, ExAllocatePoolWithTag, memset, MmUnmapViewOfSection, ObfDereferenceObject, MmMapViewOfSection, memcpy, ZwQueryInformationProcess, RtlEqualSid, PsDereferencePrimaryToken, SeQueryInformationToken, PsReferencePrimaryToken, _wcsnicmp, KeDelayExecutionThread, IofCompleteRequest, ExGetPreviousMode, ObReferenceObjectByName, IoDriverObjectType, RtlInitUnicodeString, ZwClose, ZwQueryValueKey, ZwOpenKey, RtlGetVersion, IoDeleteDevice, IoGetCurrentProcess, PoStartNextPowerIrp, IoCreateDevice, PsDereferenceImpersonationToken, SeQuerySessionIdToken, PsReferenceImpersonationToken, ProbeForWrite, NtConnectPort, ZwQueryInformationToken, ObReferenceObjectByHandle, ZwOpenProcessToken, ZwDuplicateObject, KeUnstackDetachProcess, SeTokenType, IoFreeMdl, MmUnlockPages, MmUnmapLockedPages, KeWaitForMultipleObjects, KeInsertQueueApc, KeInitializeApc, MmMapLockedPages, MmProbeAndLockPages, IoAllocateMdl, ExEventObjectType, ZwCreateEvent, KeStackAttachProcess, ObOpenObjectByPointer, PsLookupProcessByProcessId, ZwQueryObject, PsSetCreateProcessNotifyRoutine, KeSetTargetProcessorDpc, KeSetImportanceDpc, KeInsertQueueDpc, KeQueryActiveProcessors, KeInitializeDpc, KeInitializeMutex, ProbeForRead, ZwQueryInformationThread
> HAL.dll: KfRaiseIrql, KfLowerIrql
( 0 exports )
RDS...: NSRL Reference Data Set
-
sigcheck:
publisher....: Check Point Software Technologies
copyright....: (c) Check Point Software Technologies LTD, 2005-2009. All rights reserved
product......: ZoneAlarm ForceField
description..: ZoneAlarm ForceField
original name: n/a
internal name: n/a
file version.: 1, 5, 53, 4
comments.....:
signers......: Check Point Software Technologies Ltd.
VeriSign Class 3 Code Signing 2004 CA
Class 3 Public Primary Certification Authority
signing date.: 2:30 PM 10/14/2009
verified.....: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
pdfid.: -
toto je druhý:
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.46 2010.01.04 -
AhnLab-V3 5.0.0.2 2010.01.04 -
AntiVir 7.9.1.122 2009.12.31 -
Antiy-AVL 2.0.3.7 2010.01.04 -
Authentium 5.2.0.5 2010.01.04 -
Avast 4.8.1351.0 2010.01.04 -
AVG 8.5.0.430 2010.01.04 -
BitDefender 7.2 2010.01.04 -
CAT-QuickHeal 10.00 2010.01.04 -
ClamAV 0.94.1 2010.01.04 -
Comodo 3467 2010.01.04 -
DrWeb 5.0.1.12222 2010.01.04 -
eSafe 7.0.17.0 2010.01.04 -
eTrust-Vet 35.1.7214 2010.01.04 -
F-Prot 4.5.1.85 2010.01.04 -
F-Secure 9.0.15370.0 2010.01.04 -
Fortinet 4.0.14.0 2010.01.02 -
GData 19 2010.01.04 -
Ikarus T3.1.1.79.0 2009.12.31 -
Jiangmin 13.0.900 2010.01.04 -
K7AntiVirus 7.10.937 2010.01.04 -
Kaspersky 7.0.0.125 2010.01.04 -
McAfee 5851 2010.01.04 -
McAfee+Artemis 5851 2010.01.04 -
McAfee-GW-Edition 6.8.5 2010.01.04 -
Microsoft 1.5302 2010.01.04 -
NOD32 4743 2010.01.04 -
Norman 6.04.03 2010.01.04 -
nProtect 2009.1.8.0 2010.01.04 -
Panda 10.0.2.2 2010.01.04 -
PCTools 7.0.3.5 2010.01.04 -
Prevx 3.0 2010.01.04 -
Rising 22.29.00.04 2010.01.04 -
Sophos 4.49.0 2010.01.04 -
Sunbelt 3.2.1858.2 2010.01.03 -
Symantec 20091.2.0.41 2010.01.04 -
TheHacker 6.5.0.3.131 2010.01.04 -
TrendMicro 9.120.0.1004 2010.01.04 -
VBA32 3.12.12.1 2010.01.04 -
ViRobot 2010.1.4.2120 2010.01.04 -
VirusBuster 5.0.21.0 2010.01.04 -
Rozšiřující informace
File size: 578928 bytes
MD5...: 367a59a3fd91982685a9927a7fd803b3
SHA1..: cf4e7d9efe76c38909fdf4c85837d458e83f6392
SHA256: a7b6c51e4c2c9e23d42cdf8ba4c38cda354190c01b007de868d772b851d75e6e
ssdeep: 12288:3iVPJFhnMDnksQF47U2j07SYWc6mqn6TnjWAn9J6SxbY6MqDLjuNP:30Rn
MDnkn47UESSrm+6TnSAn9J6SxbYF
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x4cd47
timedatestamp.....: 0x4ad5cf9e (Wed Oct 14 13:18:22 2009)
machinetype.......: 0x14c (I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x52f62 0x53000 6.42 d25a9606110aee7775c1786aa0b49ca0
.rdata 0x54000 0x1d981 0x1e000 5.81 3f7ed6b677dfe30ce068013e941dde21
.data 0x72000 0x83ac 0x8000 4.59 93b745142b6a6b9acaa188b535f66d90
.rsrc 0x7b000 0x9a98 0xa000 5.35 a4bdf62378bd4896746362da269a37b9
.reloc 0x85000 0x77dc 0x8000 6.55 b29e3212c7f8f35e529c0678d4a5b088
( 11 imports )
> SHLWAPI.dll: SHDeleteKeyW
> ntdll.dll: ZwQueryInformationFile, RtlUnwind, _allmul, memcpy, ZwOpenMutant, ZwDelayExecution, ZwSetInformationFile, RtlFormatCurrentUserKeyPath, RtlFreeUnicodeString, ZwQueryInformationProcess, ZwClose, ZwWaitForSingleObject, ZwReleaseMutant, ZwCreateFile, ZwWaitForMultipleObjects, ZwCreateEvent, ZwSetValueKey, ZwCreateKey, ZwCreateMutant, ZwReadFile, ZwQueryValueKey, ZwOpenFile, ZwOpenKey, _fltused, ZwQueryFullAttributesFile, RtlInitUnicodeString, ZwFlushBuffersFile, ZwQueryInformationThread, ZwWriteFile, ZwYieldExecution, RtlGetVersion, tolower, _itow, ZwQueryKey, ZwOpenThread, ZwResetEvent, ZwSetEvent
> KERNEL32.dll: OpenEventW, LoadResource, RaiseException, lstrcmpiW, LockResource, FindResourceW, DisableThreadLibraryCalls, CloseHandle, SizeofResource, InterlockedExchange, GetTickCount, lstrlenA, MultiByteToWideChar, FlushInstructionCache, GetCurrentProcess, GetCurrentProcessId, OutputDebugStringA, InterlockedDecrement, GetModuleFileNameW, InterlockedIncrement, GetFileAttributesW, SetLastError, GetLastError, GetModuleHandleA, GetVersion, LoadLibraryExW, GetModuleHandleW, DeleteCriticalSection, GetProcAddress, InitializeCriticalSection, FreeLibrary, Sleep, LoadLibraryW, InterlockedCompareExchange, LeaveCriticalSection, EnterCriticalSection, SystemTimeToFileTime, lstrlenW, GetLocalTime, GetSystemTimeAsFileTime, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, LoadLibraryA, GetProcessHeap, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, SwitchToThread, VirtualProtect, VirtualQuery, OpenFileMappingW, GlobalFree, GlobalAlloc, GlobalUnlock, GlobalLock, GlobalSize, WideCharToMultiByte, GetPrivateProfileStringW, GetVersionExW, GetFileSize, GetShortPathNameW, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, GetProcessAffinityMask, GetComputerNameW, LocalFree, GetCurrentThread, QueueUserWorkItem, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, OutputDebugStringW, GetWindowsDirectoryW, SetEnvironmentVariableW, GetEnvironmentStringsW, SearchPathW, CompareStringW, GetPrivateProfileIntW, CompareStringA, VirtualFree, VirtualAlloc, CopyFileW, GetCurrentDirectoryW, FindClose, FindFirstFileW, SetEvent, DuplicateHandle, QueryPerformanceCounter, OpenThread, QueryPerformanceFrequency, GetCurrentThreadId, MoveFileExW, ReleaseMutex, GetTempPathW, HeapDestroy, HeapCreate, GetCommandLineW, GetEnvironmentVariableW, SetFilePointerEx, GetFileSizeEx, DeleteFileW, CompareFileTime, WriteFile, HeapFree, CreateDirectoryW, CreateMutexW, WaitForSingleObject, ReadFile, QueueUserAPC, GetSystemTime, CreateFileW, SetEndOfFile, HeapAlloc, ExitThread, WaitForSingleObjectEx, SetThreadPriority
> USER32.dll: CharNextW, IsWindow, CallWindowProcW, UnregisterClassA, CharUpperBuffW, CharUpperBuffA, DefWindowProcW, InvalidateRect, SendMessageW, SetClassLongW, MapWindowPoints, GetClientRect, GetParent, SetWindowPos, GetTopWindow, SetWindowLongW, KillTimer, SetTimer, GetWindowLongW, GetWindowThreadProcessId, FindWindowExW, GetForegroundWindow, CharLowerBuffA, MsgWaitForMultipleObjects, DispatchMessageW, TranslateMessage, PeekMessageW, ReleaseDC, MessageBoxW, RegisterWindowMessageW, CharLowerBuffW, CharUpperW, CreateWindowExW, DestroyWindow, LoadCursorW, RegisterClassExW, UnregisterClassW, GetWindow, GetClassNameW, GetWindowTextW, LoadStringW, wsprintfW, GetDesktopWindow, GetWindowRect, GetDC
> GDI32.dll: SetWindowOrgEx, OffsetWindowOrgEx, GetPixel
> ADVAPI32.dll: SetKernelObjectSecurity, DuplicateTokenEx, LookupAccountNameW, OpenThreadToken, RegSetValueExW, RegDeleteValueW, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryInfoKeyW, RegCloseKey, RegDeleteKeyW, SetSecurityInfo, GetSecurityDescriptorSacl, SetSecurityDescriptorDacl, RegQueryValueExW, RegEnumValueW, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, GetTokenInformation, GetAce, GetSecurityInfo, InitializeAcl, LookupPrivilegeValueW, AddAccessAllowedAce, AdjustTokenPrivileges, OpenProcessToken, ConvertStringSidToSidW, MakeAbsoluteSD, InitializeSecurityDescriptor, EqualSid
> SHELL32.dll: ShellExecuteW, SHGetSpecialFolderPathW
> ole32.dll: CoInitialize, CoCreateInstance, CoTaskMemRealloc, CoTaskMemFree, CoTaskMemAlloc, StringFromGUID2, CoUninitialize
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCP80.dll: _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IIG@Z, _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IPBG@Z, _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IABV12@@Z, _length@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _length@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBG@Z, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _resize@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@ABV12@@Z, _compare@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEHPBG@Z, _rfind@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIGI@Z, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBGI@Z, _erase@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@II@Z, _empty@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBE_NXZ, _replace@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@IIPBD@Z, _find@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIDI@Z, _replace@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBGABV10@@Z, _assign@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@PBDI@Z, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIABV12@I@Z, __$_MGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IG@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@ABV12@@Z, _npos@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@2IB, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBGI@Z, __0_$allocator@G@std@@QAE@ABV01@@Z, _deallocate@_$allocator@G@std@@QAEXPAGI@Z, _allocate@_$allocator@G@std@@QAEPAGI@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBG@Z, _max_size@_$allocator@G@std@@QBEIXZ, _substr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_AV12@II@Z, __0_$allocator@G@std@@QAE@XZ, __4_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, __4_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@PBD@Z, _append@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@PBD@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAADI@Z, _size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _resize@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXI@Z, __$_9DU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_NPBDABV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@@Z, __$_8DU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_NPBDABV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@@Z, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, _empty@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_NXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __$_HDU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_AV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@ABV10@0@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBDI@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ID@Z, __0_$allocator@D@std@@QAE@ABV01@@Z, _deallocate@_$allocator@D@std@@QAEXPADI@Z, _allocate@_$allocator@D@std@@QAEPADI@Z, _max_size@_$allocator@D@std@@QBEIXZ, __0_$allocator@D@std@@QAE@XZ, __$_9GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBG@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, _erase@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@II@Z, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@ABV10@0@Z, _clear@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXXZ, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@ABV10@PBG@Z, _begin@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE_AV_$_String_iterator@GU_$char_traits@G@std@@V_$allocator@G@2@@2@XZ, _end@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE_AV_$_String_iterator@GU_$char_traits@G@std@@V_$allocator@G@2@@2@XZ, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAGI@Z, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEABGI@Z, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBG@Z, _size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIPBGI@Z, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIGI@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBG@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@ABV01@@Z, __Myptr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@IBEPBGXZ, __1_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, _c_str@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEPBGXZ, _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, __Myptr@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@IBEPBDXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBD@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ABV01@@Z, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __Myptr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@IAEPAGXZ
> MSVCR80.dll: __type_info_dtor_internal_method@type_info@@QAEXXZ, _crt_debugger_hook, __clean_type_info_names_internal, _except_handler4_common, __CppXcptFilter, _adjust_fdiv, _amsg_exit, _initterm_e, _initterm, _encoded_null, _malloc_crt, _decode_pointer, _onexit, _lock, _encode_pointer, __dllonexit, _unlock, _terminate@@YAXXZ, memset, _wstat64i32, strncpy, _wcsdup, isalpha, _vsnwprintf, _vsnprintf, wcschr, strchr, _snprintf, strftime, _gmtime64, _time64, __CxxFrameHandler3, wcsncpy, _wtoi, memmove, _memicmp, isdigit, wcsrchr, srand, _beginthreadex, _wcsicmp, rand, _itoa, wcscpy_s, wcscat_s, wcsncpy_s, memcpy_s, _recalloc, malloc, _beginthread, free, _resetstkoflw, memmove_s, __2@YAPAXI@Z, ___V@YAXPAX@Z, _what@exception@std@@UBEPBDXZ, __0exception@std@@QAE@XZ, __0exception@std@@QAE@ABV01@@Z, _purecall, __1exception@std@@UAE@XZ, _invalid_parameter_noinfo, __0exception@std@@QAE@ABQBD@Z, __3@YAXPAX@Z, _CxxThrowException, clock
( 5 exports )
DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, _IswLog_FlushThread@4
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: DirectShow filter (53.7%)
Windows OCX File (32.9%)
Win32 Executable MS Visual C++ (generic) (10.0%)
Win32 Executable Generic (2.2%)
Generic Win/DOS Executable (0.5%)
sigcheck:
publisher....: Check Point Software Technologies
copyright....: (c) Check Point Software Technologies LTD, 2005-2009. All rights reserved
product......: ZoneAlarm ForceField
description..: ZoneAlarm ForceField
original name: n/a
internal name: n/a
file version.: 1, 5, 53, 4
comments.....:
signers......: Check Point Software Technologies Ltd.
VeriSign Class 3 Code Signing 2004 CA
Class 3 Public Primary Certification Authority
signing date.: 2:30 PM 10/14/2009
verified.....: -
Děkuji

Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.46 2010.01.04 -
AhnLab-V3 5.0.0.2 2010.01.04 -
AntiVir 7.9.1.122 2009.12.31 -
Antiy-AVL 2.0.3.7 2010.01.04 -
Authentium 5.2.0.5 2010.01.04 -
Avast 4.8.1351.0 2010.01.04 -
AVG 8.5.0.430 2010.01.04 -
BitDefender 7.2 2010.01.04 -
CAT-QuickHeal 10.00 2010.01.04 -
ClamAV 0.94.1 2010.01.04 -
Comodo 3467 2010.01.04 -
DrWeb 5.0.1.12222 2010.01.04 -
eSafe 7.0.17.0 2010.01.04 -
eTrust-Vet 35.1.7214 2010.01.04 -
F-Prot 4.5.1.85 2010.01.04 -
F-Secure 9.0.15370.0 2010.01.04 -
Fortinet 4.0.14.0 2010.01.02 -
GData 19 2010.01.04 -
Ikarus T3.1.1.79.0 2009.12.31 -
Jiangmin 13.0.900 2010.01.04 -
K7AntiVirus 7.10.937 2010.01.04 -
Kaspersky 7.0.0.125 2010.01.04 -
McAfee 5851 2010.01.04 -
McAfee+Artemis 5851 2010.01.04 -
McAfee-GW-Edition 6.8.5 2010.01.04 -
Microsoft 1.5302 2010.01.04 -
NOD32 4743 2010.01.04 -
Norman 6.04.03 2010.01.04 -
nProtect 2009.1.8.0 2010.01.04 -
Panda 10.0.2.2 2010.01.04 -
PCTools 7.0.3.5 2010.01.04 -
Prevx 3.0 2010.01.04 -
Rising 22.29.00.04 2010.01.04 -
Sophos 4.49.0 2010.01.04 -
Sunbelt 3.2.1858.2 2010.01.03 -
Symantec 20091.2.0.41 2010.01.04 -
TheHacker 6.5.0.3.131 2010.01.04 -
TrendMicro 9.120.0.1004 2010.01.04 -
VBA32 3.12.12.1 2010.01.04 -
ViRobot 2010.1.4.2120 2010.01.04 -
VirusBuster 5.0.21.0 2010.01.04 -
Rozšiřující informace
File size: 25208 bytes
MD5...: 6c614b6fd20194835c77346f6c34156e
SHA1..: 75c8976060b509b9ec8926633e9bdefe299ba6ae
SHA256: 457816509d125d0ad9b3425bea06d64c31473a724ee657796126db532daac0fc
ssdeep: 384:S6H0+7msegdbQtaKc+wrKc+nevtraqbarzYJLWd6jnNbi:bHv7JegdbQG91U
evtraqeryLAmNbi
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x2e50
timedatestamp.....: 0x4ad5cccd (Wed Oct 14 13:06:21 2009)
machinetype.......: 0x14c (I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2d6c 0x2e00 6.15 89eec6497baef3ae1658d77be3040172
.rdata 0x4000 0xbf6 0xc00 5.09 21ede422cba6cd23727bc2e9aae9ed1f
.data 0x5000 0x344 0x200 0.63 479aeafc571c905fadce76cc0863da41
.rsrc 0x6000 0x3e4 0x400 3.50 b42a683d03c27fd3a4b146c21f9a9c44
.reloc 0x7000 0x3d8 0x400 6.39 a8fa0f27d5ccec08380e1382ff08679d
( 2 imports )
> ntoskrnl.exe: KeGetCurrentThread, _except_handler3, KeSetAffinityThread, ObfReferenceObject, InterlockedCompareExchange, KeSetEvent, KeReleaseMutex, KeWaitForSingleObject, PsGetCurrentProcessId, MmCreateSection, KeInitializeEvent, ExFreePool, ExAllocatePoolWithTag, memset, MmUnmapViewOfSection, ObfDereferenceObject, MmMapViewOfSection, memcpy, ZwQueryInformationProcess, RtlEqualSid, PsDereferencePrimaryToken, SeQueryInformationToken, PsReferencePrimaryToken, _wcsnicmp, KeDelayExecutionThread, IofCompleteRequest, ExGetPreviousMode, ObReferenceObjectByName, IoDriverObjectType, RtlInitUnicodeString, ZwClose, ZwQueryValueKey, ZwOpenKey, RtlGetVersion, IoDeleteDevice, IoGetCurrentProcess, PoStartNextPowerIrp, IoCreateDevice, PsDereferenceImpersonationToken, SeQuerySessionIdToken, PsReferenceImpersonationToken, ProbeForWrite, NtConnectPort, ZwQueryInformationToken, ObReferenceObjectByHandle, ZwOpenProcessToken, ZwDuplicateObject, KeUnstackDetachProcess, SeTokenType, IoFreeMdl, MmUnlockPages, MmUnmapLockedPages, KeWaitForMultipleObjects, KeInsertQueueApc, KeInitializeApc, MmMapLockedPages, MmProbeAndLockPages, IoAllocateMdl, ExEventObjectType, ZwCreateEvent, KeStackAttachProcess, ObOpenObjectByPointer, PsLookupProcessByProcessId, ZwQueryObject, PsSetCreateProcessNotifyRoutine, KeSetTargetProcessorDpc, KeSetImportanceDpc, KeInsertQueueDpc, KeQueryActiveProcessors, KeInitializeDpc, KeInitializeMutex, ProbeForRead, ZwQueryInformationThread
> HAL.dll: KfRaiseIrql, KfLowerIrql
( 0 exports )
RDS...: NSRL Reference Data Set
-
sigcheck:
publisher....: Check Point Software Technologies
copyright....: (c) Check Point Software Technologies LTD, 2005-2009. All rights reserved
product......: ZoneAlarm ForceField
description..: ZoneAlarm ForceField
original name: n/a
internal name: n/a
file version.: 1, 5, 53, 4
comments.....:
signers......: Check Point Software Technologies Ltd.
VeriSign Class 3 Code Signing 2004 CA
Class 3 Public Primary Certification Authority
signing date.: 2:30 PM 10/14/2009
verified.....: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
pdfid.: -
toto je druhý:
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.46 2010.01.04 -
AhnLab-V3 5.0.0.2 2010.01.04 -
AntiVir 7.9.1.122 2009.12.31 -
Antiy-AVL 2.0.3.7 2010.01.04 -
Authentium 5.2.0.5 2010.01.04 -
Avast 4.8.1351.0 2010.01.04 -
AVG 8.5.0.430 2010.01.04 -
BitDefender 7.2 2010.01.04 -
CAT-QuickHeal 10.00 2010.01.04 -
ClamAV 0.94.1 2010.01.04 -
Comodo 3467 2010.01.04 -
DrWeb 5.0.1.12222 2010.01.04 -
eSafe 7.0.17.0 2010.01.04 -
eTrust-Vet 35.1.7214 2010.01.04 -
F-Prot 4.5.1.85 2010.01.04 -
F-Secure 9.0.15370.0 2010.01.04 -
Fortinet 4.0.14.0 2010.01.02 -
GData 19 2010.01.04 -
Ikarus T3.1.1.79.0 2009.12.31 -
Jiangmin 13.0.900 2010.01.04 -
K7AntiVirus 7.10.937 2010.01.04 -
Kaspersky 7.0.0.125 2010.01.04 -
McAfee 5851 2010.01.04 -
McAfee+Artemis 5851 2010.01.04 -
McAfee-GW-Edition 6.8.5 2010.01.04 -
Microsoft 1.5302 2010.01.04 -
NOD32 4743 2010.01.04 -
Norman 6.04.03 2010.01.04 -
nProtect 2009.1.8.0 2010.01.04 -
Panda 10.0.2.2 2010.01.04 -
PCTools 7.0.3.5 2010.01.04 -
Prevx 3.0 2010.01.04 -
Rising 22.29.00.04 2010.01.04 -
Sophos 4.49.0 2010.01.04 -
Sunbelt 3.2.1858.2 2010.01.03 -
Symantec 20091.2.0.41 2010.01.04 -
TheHacker 6.5.0.3.131 2010.01.04 -
TrendMicro 9.120.0.1004 2010.01.04 -
VBA32 3.12.12.1 2010.01.04 -
ViRobot 2010.1.4.2120 2010.01.04 -
VirusBuster 5.0.21.0 2010.01.04 -
Rozšiřující informace
File size: 578928 bytes
MD5...: 367a59a3fd91982685a9927a7fd803b3
SHA1..: cf4e7d9efe76c38909fdf4c85837d458e83f6392
SHA256: a7b6c51e4c2c9e23d42cdf8ba4c38cda354190c01b007de868d772b851d75e6e
ssdeep: 12288:3iVPJFhnMDnksQF47U2j07SYWc6mqn6TnjWAn9J6SxbY6MqDLjuNP:30Rn
MDnkn47UESSrm+6TnSAn9J6SxbYF
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x4cd47
timedatestamp.....: 0x4ad5cf9e (Wed Oct 14 13:18:22 2009)
machinetype.......: 0x14c (I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x52f62 0x53000 6.42 d25a9606110aee7775c1786aa0b49ca0
.rdata 0x54000 0x1d981 0x1e000 5.81 3f7ed6b677dfe30ce068013e941dde21
.data 0x72000 0x83ac 0x8000 4.59 93b745142b6a6b9acaa188b535f66d90
.rsrc 0x7b000 0x9a98 0xa000 5.35 a4bdf62378bd4896746362da269a37b9
.reloc 0x85000 0x77dc 0x8000 6.55 b29e3212c7f8f35e529c0678d4a5b088
( 11 imports )
> SHLWAPI.dll: SHDeleteKeyW
> ntdll.dll: ZwQueryInformationFile, RtlUnwind, _allmul, memcpy, ZwOpenMutant, ZwDelayExecution, ZwSetInformationFile, RtlFormatCurrentUserKeyPath, RtlFreeUnicodeString, ZwQueryInformationProcess, ZwClose, ZwWaitForSingleObject, ZwReleaseMutant, ZwCreateFile, ZwWaitForMultipleObjects, ZwCreateEvent, ZwSetValueKey, ZwCreateKey, ZwCreateMutant, ZwReadFile, ZwQueryValueKey, ZwOpenFile, ZwOpenKey, _fltused, ZwQueryFullAttributesFile, RtlInitUnicodeString, ZwFlushBuffersFile, ZwQueryInformationThread, ZwWriteFile, ZwYieldExecution, RtlGetVersion, tolower, _itow, ZwQueryKey, ZwOpenThread, ZwResetEvent, ZwSetEvent
> KERNEL32.dll: OpenEventW, LoadResource, RaiseException, lstrcmpiW, LockResource, FindResourceW, DisableThreadLibraryCalls, CloseHandle, SizeofResource, InterlockedExchange, GetTickCount, lstrlenA, MultiByteToWideChar, FlushInstructionCache, GetCurrentProcess, GetCurrentProcessId, OutputDebugStringA, InterlockedDecrement, GetModuleFileNameW, InterlockedIncrement, GetFileAttributesW, SetLastError, GetLastError, GetModuleHandleA, GetVersion, LoadLibraryExW, GetModuleHandleW, DeleteCriticalSection, GetProcAddress, InitializeCriticalSection, FreeLibrary, Sleep, LoadLibraryW, InterlockedCompareExchange, LeaveCriticalSection, EnterCriticalSection, SystemTimeToFileTime, lstrlenW, GetLocalTime, GetSystemTimeAsFileTime, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, LoadLibraryA, GetProcessHeap, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, SwitchToThread, VirtualProtect, VirtualQuery, OpenFileMappingW, GlobalFree, GlobalAlloc, GlobalUnlock, GlobalLock, GlobalSize, WideCharToMultiByte, GetPrivateProfileStringW, GetVersionExW, GetFileSize, GetShortPathNameW, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, GetProcessAffinityMask, GetComputerNameW, LocalFree, GetCurrentThread, QueueUserWorkItem, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, OutputDebugStringW, GetWindowsDirectoryW, SetEnvironmentVariableW, GetEnvironmentStringsW, SearchPathW, CompareStringW, GetPrivateProfileIntW, CompareStringA, VirtualFree, VirtualAlloc, CopyFileW, GetCurrentDirectoryW, FindClose, FindFirstFileW, SetEvent, DuplicateHandle, QueryPerformanceCounter, OpenThread, QueryPerformanceFrequency, GetCurrentThreadId, MoveFileExW, ReleaseMutex, GetTempPathW, HeapDestroy, HeapCreate, GetCommandLineW, GetEnvironmentVariableW, SetFilePointerEx, GetFileSizeEx, DeleteFileW, CompareFileTime, WriteFile, HeapFree, CreateDirectoryW, CreateMutexW, WaitForSingleObject, ReadFile, QueueUserAPC, GetSystemTime, CreateFileW, SetEndOfFile, HeapAlloc, ExitThread, WaitForSingleObjectEx, SetThreadPriority
> USER32.dll: CharNextW, IsWindow, CallWindowProcW, UnregisterClassA, CharUpperBuffW, CharUpperBuffA, DefWindowProcW, InvalidateRect, SendMessageW, SetClassLongW, MapWindowPoints, GetClientRect, GetParent, SetWindowPos, GetTopWindow, SetWindowLongW, KillTimer, SetTimer, GetWindowLongW, GetWindowThreadProcessId, FindWindowExW, GetForegroundWindow, CharLowerBuffA, MsgWaitForMultipleObjects, DispatchMessageW, TranslateMessage, PeekMessageW, ReleaseDC, MessageBoxW, RegisterWindowMessageW, CharLowerBuffW, CharUpperW, CreateWindowExW, DestroyWindow, LoadCursorW, RegisterClassExW, UnregisterClassW, GetWindow, GetClassNameW, GetWindowTextW, LoadStringW, wsprintfW, GetDesktopWindow, GetWindowRect, GetDC
> GDI32.dll: SetWindowOrgEx, OffsetWindowOrgEx, GetPixel
> ADVAPI32.dll: SetKernelObjectSecurity, DuplicateTokenEx, LookupAccountNameW, OpenThreadToken, RegSetValueExW, RegDeleteValueW, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryInfoKeyW, RegCloseKey, RegDeleteKeyW, SetSecurityInfo, GetSecurityDescriptorSacl, SetSecurityDescriptorDacl, RegQueryValueExW, RegEnumValueW, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, GetTokenInformation, GetAce, GetSecurityInfo, InitializeAcl, LookupPrivilegeValueW, AddAccessAllowedAce, AdjustTokenPrivileges, OpenProcessToken, ConvertStringSidToSidW, MakeAbsoluteSD, InitializeSecurityDescriptor, EqualSid
> SHELL32.dll: ShellExecuteW, SHGetSpecialFolderPathW
> ole32.dll: CoInitialize, CoCreateInstance, CoTaskMemRealloc, CoTaskMemFree, CoTaskMemAlloc, StringFromGUID2, CoUninitialize
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCP80.dll: _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IIG@Z, _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IPBG@Z, _insert@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IABV12@@Z, _length@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _length@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBG@Z, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _resize@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@ABV12@@Z, _compare@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEHPBG@Z, _rfind@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIGI@Z, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBGI@Z, _erase@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@II@Z, _empty@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBE_NXZ, _replace@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@IIPBD@Z, _find@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIDI@Z, _replace@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBGABV10@@Z, _assign@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@PBDI@Z, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIABV12@I@Z, __$_MGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IG@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@ABV12@@Z, _npos@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@2IB, _assign@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBGI@Z, __0_$allocator@G@std@@QAE@ABV01@@Z, _deallocate@_$allocator@G@std@@QAEXPAGI@Z, _allocate@_$allocator@G@std@@QAEPAGI@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBG@Z, _max_size@_$allocator@G@std@@QBEIXZ, _substr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_AV12@II@Z, __0_$allocator@G@std@@QAE@XZ, __4_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, __4_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@PBD@Z, _append@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@PBD@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAADI@Z, _size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _resize@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXI@Z, __$_9DU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_NPBDABV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@@Z, __$_8DU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_NPBDABV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@@Z, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, _empty@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_NXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __$_HDU_$char_traits@D@std@@V_$allocator@D@1@@std@@YA_AV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@0@ABV10@0@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBDI@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ID@Z, __0_$allocator@D@std@@QAE@ABV01@@Z, _deallocate@_$allocator@D@std@@QAEXPADI@Z, _allocate@_$allocator@D@std@@QAEPADI@Z, _max_size@_$allocator@D@std@@QBEIXZ, __0_$allocator@D@std@@QAE@XZ, __$_9GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBG@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, _erase@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@II@Z, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@ABV10@0@Z, _clear@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXXZ, __$_HGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_AV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@ABV10@PBG@Z, _begin@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE_AV_$_String_iterator@GU_$char_traits@G@std@@V_$allocator@G@2@@2@XZ, _end@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE_AV_$_String_iterator@GU_$char_traits@G@std@@V_$allocator@G@2@@2@XZ, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAGI@Z, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEABGI@Z, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBG@Z, _size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIPBGI@Z, _find@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIGI@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBG@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@ABV01@@Z, __Myptr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@IBEPBGXZ, __1_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, _c_str@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEPBGXZ, _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, __Myptr@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@IBEPBDXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBD@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ABV01@@Z, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __Myptr@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@IAEPAGXZ
> MSVCR80.dll: __type_info_dtor_internal_method@type_info@@QAEXXZ, _crt_debugger_hook, __clean_type_info_names_internal, _except_handler4_common, __CppXcptFilter, _adjust_fdiv, _amsg_exit, _initterm_e, _initterm, _encoded_null, _malloc_crt, _decode_pointer, _onexit, _lock, _encode_pointer, __dllonexit, _unlock, _terminate@@YAXXZ, memset, _wstat64i32, strncpy, _wcsdup, isalpha, _vsnwprintf, _vsnprintf, wcschr, strchr, _snprintf, strftime, _gmtime64, _time64, __CxxFrameHandler3, wcsncpy, _wtoi, memmove, _memicmp, isdigit, wcsrchr, srand, _beginthreadex, _wcsicmp, rand, _itoa, wcscpy_s, wcscat_s, wcsncpy_s, memcpy_s, _recalloc, malloc, _beginthread, free, _resetstkoflw, memmove_s, __2@YAPAXI@Z, ___V@YAXPAX@Z, _what@exception@std@@UBEPBDXZ, __0exception@std@@QAE@XZ, __0exception@std@@QAE@ABV01@@Z, _purecall, __1exception@std@@UAE@XZ, _invalid_parameter_noinfo, __0exception@std@@QAE@ABQBD@Z, __3@YAXPAX@Z, _CxxThrowException, clock
( 5 exports )
DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, _IswLog_FlushThread@4
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: DirectShow filter (53.7%)
Windows OCX File (32.9%)
Win32 Executable MS Visual C++ (generic) (10.0%)
Win32 Executable Generic (2.2%)
Generic Win/DOS Executable (0.5%)
sigcheck:
publisher....: Check Point Software Technologies
copyright....: (c) Check Point Software Technologies LTD, 2005-2009. All rights reserved
product......: ZoneAlarm ForceField
description..: ZoneAlarm ForceField
original name: n/a
internal name: n/a
file version.: 1, 5, 53, 4
comments.....:
signers......: Check Point Software Technologies Ltd.
VeriSign Class 3 Code Signing 2004 CA
Class 3 Public Primary Certification Authority
signing date.: 2:30 PM 10/14/2009
verified.....: -
Děkuji

Re: Prosím o kontrolu logu Děkuji
Jsou nějaké problémy s počítačem? 

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Prosím o kontrolu logu Děkuji
no počítač celkem šlape, ale někdy zamrzne při startu spodní lišta nemůže to být hodně aplikacemi ,které se mi při startu spuštějí a ještě ESET kontroluje programy spuštěné při startu ....
Re: Prosím o kontrolu logu Děkuji

Stáhněte z mého podpisu program StartUpLite
vypíše seznam zbytečně spouštěných programů po startu, vyberete které chcete zastavit,u nich zaškrtnete Disable a klikněte na Continue


-Nainstalujte,dejte úplný sken
NIC NEMAZAT

-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Prosím o kontrolu logu Děkuji
právě skenuji Děkuju a ještě se chci zeptat jestli pak nebude hrozit PC nějaké nebezpečí když vypnu v tom ESETU to sken. prog. ..
Re: Prosím o kontrolu logu Děkuji
Malwarebytes' Anti-Malware 1.43
Verze databáze: 3492
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
4.1.2010 20:07:50
mbam-log-2010-01-04 (20-07-45).txt
Typ kontroly: Kompletní kontrola (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Zkontrolované objekty: 196355
Uplynulý čas: 30 minute(s), 18 second(s)
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)
Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)
Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)
Infikované soubory:
C:\Program Files\gfxlib32.dll (Spyware.OnlineGames) -> No action taken.
Verze databáze: 3492
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
4.1.2010 20:07:50
mbam-log-2010-01-04 (20-07-45).txt
Typ kontroly: Kompletní kontrola (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Zkontrolované objekty: 196355
Uplynulý čas: 30 minute(s), 18 second(s)
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)
Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)
Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)
Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)
Infikované soubory:
C:\Program Files\gfxlib32.dll (Spyware.OnlineGames) -> No action taken.
Re: Prosím o kontrolu logu Děkuji
Co našel mbam, smažte
To testování nodu po startu vypněte, ale rezidentní štít by měl běžet dál, vyzkoušejte
Zkuste pc pročistit a napište zda to pomohlo nebo budem hledat dál
Smažte cache Opery bud ručně nebo ATF Cleanerem
http://www.slunecnice.cz/sw/atf-cleaner/
- v menu nahoře vyberte záložku Firefox / Opera a klikněte na ni
-zatrhněte Select All a pak klikněte na Empty Selected
pozor - přijdete o všechna hesla uložená ve FF /Opere!
-Na záložce main zaškrtněte All users temp a potvrdte Empty selected
Stahněte TFC a použijte
TFC (http://oldtimer.geekstogo.com/TFC.exe)
vyčistění disku
start-spustit - napište cleanmgr - ok..ok
-dát fajfku temporary ,,,offline,,koš,,,dočasné soubory - ok,
start-spustit - napište cleanmgr - ok..ok
-další možnosti - obnovení systému - vyčistit - ok
start-spustit - napište chkdsk /f/r
-[enter]
souhlas - restartuje se pc a nechá se disk zkontrolovat
defragmentace disku
start - ovládací panely - nástroje pro správu - správa počítače - defragmentace disku
-můžete použít i jiný nástroj na defragmentaci, ten ve windows není nic moc
Za sebe můžu doporučit JK defrag, který se neinstaluje
http://www.slunecnice.cz/sw/jkdefrag/
To testování nodu po startu vypněte, ale rezidentní štít by měl běžet dál, vyzkoušejte

Zkuste pc pročistit a napište zda to pomohlo nebo budem hledat dál


http://www.slunecnice.cz/sw/atf-cleaner/
- v menu nahoře vyberte záložku Firefox / Opera a klikněte na ni
-zatrhněte Select All a pak klikněte na Empty Selected
pozor - přijdete o všechna hesla uložená ve FF /Opere!
-Na záložce main zaškrtněte All users temp a potvrdte Empty selected

TFC (http://oldtimer.geekstogo.com/TFC.exe)

start-spustit - napište cleanmgr - ok..ok
-dát fajfku temporary ,,,offline,,koš,,,dočasné soubory - ok,
start-spustit - napište cleanmgr - ok..ok
-další možnosti - obnovení systému - vyčistit - ok

-[enter]
souhlas - restartuje se pc a nechá se disk zkontrolovat

start - ovládací panely - nástroje pro správu - správa počítače - defragmentace disku
-můžete použít i jiný nástroj na defragmentaci, ten ve windows není nic moc
Za sebe můžu doporučit JK defrag, který se neinstaluje
http://www.slunecnice.cz/sw/jkdefrag/
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Prosím o kontrolu logu Děkuji
DObře Děkuji
Re: Prosím o kontrolu logu Děkuji
Není zač, pak dejte vědět jak to vypadá 

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Prosím o kontrolu logu Děkuji
Dobrý večer, tak počítač se celkově zrychluil, ale ten FF se stále po startu načítá dost dlouho potom na 2 vteřiny hlásí, že neodpovídá a pak se spustí.... děkuji 

Re: Prosím o kontrolu logu Děkuji
Zkuste Mozillu přeinstalovat, odinstalujte ji třeba přes Revo uninstaller, vyčištěte registry CCleanerem a znovu nainstalujte 

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.