Win Vista - Režim testovania

[kuco.kuco]

Poradi niekto co s tým ? win je oficial

Pikladam vypis z Combofixu a nahlad plochy

[kuco.kuco]

ComboFix 10-01-04.01 - Bohus . 01. 2010 15:52:27.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.421.1051.18.3326.2330 [GMT 1:00]
Running from: c:\users\Bohus\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2479052159-902601359-2096147507-1000
c:\$recycle.bin\S-1-5-21-2593497608-2489350725-24891396-1000
c:\$recycle.bin\S-1-5-21-3358271611-2344764359-3612061028-1000
c:\users\Bohus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
c:\windows\system32\drivers\npf.sys
c:\windows\system32\oledb32.dll
c:\windows\system32\Packet.dll
c:\windows\system32\pZVA21.dll
c:\windows\system32\wpcap.dll
c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
H:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_NPF


((((((((((((((((((((((((( Files Created from 2009-12-10 to 2010-01-10 )))))))))))))))))))))))))))))))
.

2010-01-07 23:01 . 2010-01-07 23:01 -------- d-----w- c:\program files\ESET
2010-01-06 21:41 . 2010-01-06 21:41 36864 ----a-w- c:\windows\uinst001.exe
2010-01-06 20:53 . 2010-01-06 21:00 -------- d-----w- c:\program files\Registry Medic
2010-01-06 15:30 . 2010-01-06 15:30 -------- d-----w- c:\users\Bohus\AppData\Local\VS Revo Group
2010-01-06 15:30 . 2009-12-30 10:21 27192 ----a-w- c:\windows\system32\drivers\revoflt.sys
2009-12-16 19:51 . 2009-12-16 22:16 -------- d-----w- C:\c71c766cfcf2bcecbe61532ac962cdee
2009-12-16 16:53 . 2010-01-06 15:30 -------- d-----w- c:\program files\VS Revo Group
2009-12-15 21:17 . 2009-12-16 05:24 -------- d-----w- C:\202372f489139ec994
2009-12-14 22:52 . 2009-12-14 23:17 -------- d-----w- C:\b4fc72164cfa449bbd2bdafd4d
2009-12-14 21:51 . 2009-12-14 21:52 -------- d-----w- c:\windows\system32\ca-ES
2009-12-14 21:51 . 2009-12-14 21:52 -------- d-----w- c:\windows\system32\eu-ES
2009-12-14 21:51 . 2009-12-14 21:52 -------- d-----w- c:\windows\system32\vi-VN
2009-12-14 21:47 . 2009-12-14 21:47 -------- d-----w- c:\windows\system32\SPReview
2009-12-14 21:34 . 2009-04-10 22:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2009-12-14 21:34 . 2009-04-10 22:27 57856 ----a-w- c:\windows\system32\compcln.exe
2009-12-14 21:30 . 2009-04-10 22:32 180712 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2009-12-14 21:19 . 2009-12-14 21:19 -------- d-----w- c:\windows\system32\EventProviders

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-10 14:50 . 2009-10-25 20:46 -------- d-----w- c:\users\Bohus\AppData\Roaming\.purple
2010-01-10 14:36 . 2008-04-25 15:16 -------- d-----w- c:\program files\HP
2010-01-10 14:33 . 2008-11-04 17:00 83308 ----a-w- c:\windows\system32\perfh01B.dat
2010-01-10 14:33 . 2008-11-04 17:00 29350 ----a-w- c:\windows\system32\perfc01B.dat
2010-01-10 14:27 . 2009-07-20 12:41 -------- d-----w- c:\users\Bohus\AppData\Roaming\vlc
2010-01-06 21:02 . 2008-11-14 07:18 -------- d-----w- c:\programdata\Reprise
2010-01-06 21:01 . 2008-11-14 07:18 -------- d-----w- c:\users\Bohus\AppData\Roaming\Right Hemisphere
2010-01-06 20:23 . 2009-11-28 08:56 -------- d-----w- c:\program files\ESET NOD32 Antivirus
2010-01-06 19:22 . 2008-11-04 16:46 177792 ----a-w- c:\users\Bohus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-01-05 20:43 . 2008-11-04 19:16 -------- d-----w- c:\program files\Winamp
2010-01-05 20:36 . 2009-10-19 20:17 -------- d-----w- c:\program files\IEPro
2010-01-05 19:15 . 2009-05-03 19:34 -------- d-----w- c:\users\Bohus\AppData\Roaming\dvdcss
2010-01-05 09:20 . 2009-05-09 14:12 -------- d-----w- c:\users\Bohus\AppData\Roaming\Skype
2010-01-05 09:17 . 2009-05-09 14:25 -------- d-----w- c:\users\Bohus\AppData\Roaming\skypePM
2009-12-31 19:34 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-12-31 19:32 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-12-31 19:31 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-12-31 19:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-12-31 19:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-12-31 19:30 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-31 19:24 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-12-18 05:36 . 2008-11-07 18:01 -------- d-----w- c:\users\Bohus\AppData\Roaming\uTorrent
2009-12-16 22:16 . 2009-04-20 19:28 -------- d-----w- c:\users\Bohus\AppData\Roaming\Hamachi
2009-12-15 05:36 . 2008-11-07 18:31 5642 --sha-w- c:\programdata\KGyGaAvL.sys
2009-12-15 05:36 . 2008-11-07 18:31 5642 --sha-w- c:\programdata\KGyGaAvL.sys
2009-12-14 21:51 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-12-14 15:53 . 2008-11-04 18:46 -------- d-----w- c:\program files\LogMeIn
2009-11-27 23:08 . 2009-11-27 22:43 -------- d-----w- c:\program files\Registry Clean Expert
2009-11-27 22:43 . 2009-11-27 22:43 -------- d-----w- c:\users\Bohus\AppData\Roaming\iExpert Software
2009-11-27 21:16 . 2009-11-27 21:16 -------- d-----w- c:\programdata\WindowsSearch
2009-11-16 08:06 . 2009-11-16 08:06 38240 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2009-11-16 08:06 . 2009-11-16 08:06 135048 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-11-16 08:03 . 2009-11-16 08:03 108792 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-11-16 07:56 . 2009-11-16 07:56 116520 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-11-10 20:27 . 2009-11-10 20:27 174 ----a-w- c:\windows\fnerr.dat
2009-10-30 16:40 . 2009-10-30 16:40 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2009-10-17 16:19 . 2009-05-04 14:23 40960 ----a-w- c:\windows\Antera Wheels.dll
2009-10-17 16:19 . 2009-05-04 14:23 380976 ----a-w- c:\windows\Antera Wheels.scr
2009-10-17 16:19 . 2009-05-04 14:23 10147825 ----a-w- c:\windows\Antera Wheels.exe
2008-12-28 20:41 . 2008-12-28 20:41 91 ----a-w- c:\program files\app.properties
2008-11-19 07:53 . 2008-11-19 07:53 22 --sha-w- c:\windows\SMINST\HPCD.sys
2008-04-26 00:46 . 2008-04-26 00:21 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
2009-05-11 14:13 . 2006-11-02 06:25 10 --sha-r- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\config.sys
2009-05-11 14:13 . 2006-11-02 06:25 10 --sha-r- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\config.sys
2009-05-11 14:13 . 2006-11-02 06:25 10 --sha-r- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\config.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]
"RegClean Expert Scheduler"="c:\program files\Registry Clean Expert\RCHelper.exe" [2009-11-27 609016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-03-26 5369856]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-07-12 178712]
"SunJavaUpdateReg"="c:\windows\system32\jureg.exe" [2007-04-07 54936]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2008-01-10 92704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-10 8530464]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-10 88608]
"HPUsageTracking"="c:\program files\HP\HP UT\bin\hppusg.exe" [2007-11-02 36864]
"PrnStatusMX"="c:\program files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe" [2007-08-29 1077248]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-07-17 55824]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2007-11-15 44168]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Linksys Wireless Network Monitor.lnk - c:\program files\Linksys\WUSBF54G\wlMonitor.exe [2008-11-5 3348480]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):67,c5,0e,58,0a,7d,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-599531317-895268337-2412267614-1000]
"EnableNotificationsRef"=dword:00000001

R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [16. 11. 2009 9:03 108792]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [15. 12. 2008 20:08 660768]
R2 ekrn;ESET Service;c:\program files\ESET NOD32 Antivirus\ekrn.exe [16. 11. 2009 9:04 735960]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [6. 11. 2008 15:14 222456]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [24. 7. 2008 18:46 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\System32\drivers\LMIRfsDriver.sys [4. 11. 2008 19:46 47640]
R2 NICSer_WUSBF54G;NICSer_WUSBF54G;c:\program files\Linksys\WUSBF54G\NICServ.exe [5. 11. 2008 10:22 530432]
R2 SpeedyUpdate;Speedy Online Updater;c:\windows\PeerNet\UpdateSrv.exe [29. 11. 2008 17:36 64512]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\System32\drivers\HCW85BDA.sys [26. 4. 2008 1:47 1176064]
R3 ZD1211BU(Linksys A Division of Cisco Systems Inc.);Linksys Wireless-G USB Network Adapter Driver(Linksys A Division of Cisco Systems Inc.);c:\windows\System32\drivers\ZD1211BU.sys [5. 11. 2008 10:22 402432]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\System32\drivers\ggflt.sys [3. 1. 2009 0:41 10976]
S3 Monlpsvnns;Monlpsvnns; [x]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\System32\drivers\nmwcdnsu.sys [1. 2. 2008 14:17 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\System32\drivers\nmwcdnsuc.sys [1. 2. 2008 14:17 8320]
S3 Revoflt;Revoflt;c:\windows\System32\drivers\revoflt.sys [6. 1. 2010 16:30 27192]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [3. 1. 2009 0:28 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [3. 1. 2009 0:28 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [3. 1. 2009 0:28 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [3. 1. 2009 0:28 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [3. 1. 2009 0:28 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [3. 1. 2009 0:28 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [3. 1. 2009 0:28 115752]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-10-22 18:55 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sk_sk&c=81&bd=Pavilion&pf=desktop
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MIF269~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Bohus\AppData\Roaming\Mozilla\Firefox\Profiles\pvd0gnv9.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage -
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Picasa3\npPicasa3.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - ORPHANS REMOVED - - - -

BHO-{BD389B4D-F612-3AD3-B593-2F487D256161} - (no file)
HKU-Default-Run-Nokia.PCSync - c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.032"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.abr"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ani"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.apd"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.arw"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.bay"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.bmp"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.bw"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.cr2"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.crw"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.cs1"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.cur"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.dcr"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.dcx"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.dib"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.djv"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.djvu"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.dng"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.emf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.eps"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.erf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.fff"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.fpx"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.gif"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.hdr"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.icl"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.icn"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ico"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.iff"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ilbm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.int"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.inta"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.iw4"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.j2c"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.j2k"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jbr"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jfif"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jif"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jp2"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jpc"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.jpe"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.jpeg"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.jpg"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jpk"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.jpx"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.kdc"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.lbm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.mef"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.mos"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.mrw"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.nef"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.orf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pbm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pbr"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pcd"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pct"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pcx"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.pef"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pgm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pic"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pict"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pix"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.png"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ppm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.psd"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.psp"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pspbrush"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.pspimage"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.raf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ras"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.raw"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.rgb"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.rgba"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.rle"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.rsb"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.sgi"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.sr2"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.srf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.tga"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.thm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.tif"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-599531317-895268337-2412267614-1000)
"Progid"="ACDSee Pro 2.5.tiff"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ttc"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.ttf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v25po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.v25po"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v25pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.v25pp"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v25ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.v25ppf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.wbm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.wbmp"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.wmf"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.xbm"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.xif"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.xmp"

[HKEY_USERS\S-1-5-21-599531317-895268337-2412267614-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 2.5.xpm"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(1932)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_slk.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\windows\PeerNet\PeerManager.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conime.exe
c:\windows\system32\wbem\unsecapp.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2010-01-10 16:08:05 - machine was rebooted
ComboFix-quarantined-files.txt 2010-01-10 15:08

Pre-Run: 45 031 079 936 bytes free
Post-Run: 51 696 984 064 bytes free

- - End Of File - - 8F802991BDF8DD4ADB8BCA10BF6F55F8

[motji]

Dobrý večer
To se Vám povedlo jak? Obnova systému nepomohla?
Něco pak ještě dočistíme, ale zkusíme vyřešit tohle, bohužel moc informací o tom nikde není.

Zkuste pročíst tohle
http://www.extrahardware.cz/forum/viewt ... =51&t=2978

edit
Zkuste ještě start -spustit -napište Msconfig
a někde bude normální spuštění, asi 2 založka, zkuste pohledat

[kuco.kuco]

ono sa to zrejme objavilo po tomto hlaseni co je v prilohe. Pociatok bol ale nejaky virus, antivirak ho sice zachitil ale svina sa stihol spustit.

Desktop1.jpg

(517.9 KiB) Staženo 247 x

[motji]

Takže ted už jste v normálním režimu? A můžu vědět, co zabralo?
Poprosím ještě o log ze Rsitu, viz můj podpis

[kuco.kuco]

nemal som cas vsetko je po starom
tu je vypis z risitu

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bohus at 2010-01-13 21:07:41
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 246 GB (83%) free of 297 GB
Total RAM: 3326 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:08:19, on 13. 1. 2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\system32\schtasks.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Registry Clean Expert\RCHelper.exe
C:\Program Files\Linksys\WUSBF54G\wlMonitor.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Pidgin\pidgin.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hp\kbd\kbd.exe
C:\Users\Public\Downloads\RSIT.exe
C:\Program Files\trend micro\Bohus.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT"
O4 - HKLM\..\Run: [PrnStatusMX] C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [RegClean Expert Scheduler] "C:\Program Files\Registry Clean Expert\RCHelper.exe" /startup
O4 - Global Startup: Linksys Wireless Network Monitor.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MIF269~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NICSer_WUSBF54G - Unknown owner - C:\Program Files\Linksys\WUSBF54G\NICServ.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speedy Online Updater (SpeedyUpdate) - Unknown owner - C:\Windows\PeerNet\UpdateSrv.exe

--
End of file - 6790 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-26 5369856]
"hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
"KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
"OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-07-12 178712]
"SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2008-01-10 92704]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-01-10 8530464]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-01-10 88608]
"HPUsageTracking"=C:\Program Files\HP\HP UT\bin\hppusg.exe [2007-11-02 36864]
"PrnStatusMX"=C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [2007-08-29 1077248]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2007-07-17 55824]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"=C:\Windows\SMINST\launcher.exe [2007-11-15 44168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-18 202240]
"RegClean Expert Scheduler"=C:\Program Files\Registry Clean Expert\RCHelper.exe [2009-11-28 609016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Linksys Wireless Network Monitor.lnk - C:\Program Files\Linksys\WUSBF54G\wlMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 3 months======

2010-01-13 21:07:41 ----D---- C:\rsit
2010-01-13 21:07:41 ----D---- C:\Program Files\trend micro
2010-01-13 20:55:17 ----D---- C:\Windows\pss
2010-01-10 16:08:05 ----A---- C:\ComboFix.txt
2010-01-10 16:01:25 ----D---- C:\$RECYCLE.BIN
2010-01-10 15:59:01 ----D---- C:\Windows\temp
2010-01-10 15:51:52 ----A---- C:\Windows\NIRCMD.exe
2010-01-10 15:51:52 ----A---- C:\Windows\MBR.exe
2010-01-10 15:51:50 ----A---- C:\Windows\zip.exe
2010-01-10 15:51:50 ----A---- C:\Windows\SWREG.exe
2010-01-10 15:51:50 ----A---- C:\Windows\sed.exe
2010-01-10 15:51:50 ----A---- C:\Windows\PEV.exe
2010-01-10 15:51:50 ----A---- C:\Windows\grep.exe
2010-01-10 15:51:49 ----A---- C:\Windows\SWSC.exe
2010-01-10 15:51:45 ----D---- C:\Windows\ERDNT
2010-01-10 15:51:36 ----D---- C:\ComboFix
2010-01-10 15:51:09 ----AD---- C:\Qoobox
2010-01-10 15:50:53 ----A---- C:\Windows\SWXCACLS.exe
2010-01-10 15:36:43 ----D---- C:\Config.Msi
2010-01-08 00:01:08 ----D---- C:\Program Files\ESET
2010-01-06 22:41:29 ----A---- C:\Windows\uinst001.exe
2010-01-06 21:53:46 ----D---- C:\Program Files\Registry Medic
2009-12-31 09:19:32 ----A---- C:\grldr.bak
2009-12-16 20:51:22 ----D---- C:\c71c766cfcf2bcecbe61532ac962cdee
2009-12-16 17:53:17 ----D---- C:\Program Files\VS Revo Group
2009-12-15 22:17:34 ----D---- C:\202372f489139ec994
2009-12-14 23:52:52 ----D---- C:\b4fc72164cfa449bbd2bdafd4d
2009-12-14 22:51:17 ----D---- C:\Windows\system32\eu-ES
2009-12-14 22:51:17 ----D---- C:\Windows\system32\ca-ES
2009-12-14 22:51:11 ----D---- C:\Windows\system32\vi-VN
2009-12-14 22:47:07 ----D---- C:\Windows\system32\SPReview
2009-12-14 22:34:49 ----A---- C:\Windows\system32\scavenge.dll
2009-12-14 22:34:42 ----A---- C:\Windows\system32\compcln.exe
2009-12-14 22:31:16 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorShell.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-12-14 22:31:14 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-12-14 22:31:09 ----A---- C:\Windows\system32\IasMigReader.exe
2009-12-14 22:31:08 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-12-14 22:31:08 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-12-14 22:31:08 ----A---- C:\Windows\system32\fdBth.dll
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-12-14 22:31:01 ----A---- C:\Windows\system32\DevicePairing.dll
2009-12-14 22:30:50 ----A---- C:\Windows\system32\iscsilog.dll
2009-12-14 22:30:39 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-12-14 22:30:38 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-12-14 22:30:37 ----A---- C:\Windows\system32\WscEapPr.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spwizui.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spinstall.exe
2009-12-14 22:30:27 ----A---- C:\Windows\system32\sperror.dll
2009-12-14 22:30:27 ----A---- C:\Windows\system32\spcmsg.dll
2009-12-14 22:30:26 ----A---- C:\Windows\system32\spreview.exe
2009-12-14 22:19:42 ----D---- C:\Windows\system32\EventProviders
2009-12-14 20:55:26 ----D---- C:\ProgramData\Windows Genuine Advantage
2009-11-29 11:35:55 ----A---- C:\Windows\ntbtlog.txt
2009-11-28 09:56:20 ----D---- C:\Program Files\ESET NOD32 Antivirus
2009-11-27 23:43:50 ----D---- C:\Users\Bohus\AppData\Roaming\iExpert Software
2009-11-27 23:43:25 ----D---- C:\Program Files\Registry Clean Expert
2009-11-27 22:16:55 ----D---- C:\ProgramData\WindowsSearch
2009-10-30 17:40:29 ----D---- C:\Program Files\Hamachi
2009-10-25 22:19:38 ----D---- C:\Program Files\Perl
2009-10-25 21:47:01 ----D---- C:\Users\Bohus\AppData\Roaming\gtk-2.0
2009-10-25 21:46:31 ----D---- C:\Users\Bohus\AppData\Roaming\.purple
2009-10-25 21:46:14 ----D---- C:\Program Files\Pidgin
2009-10-25 21:46:12 ----D---- C:\Program Files\Common Files\GTK
2009-10-21 20:21:38 ----D---- C:\Program Files\Last.fm
2009-10-19 21:21:58 ----D---- C:\Users\Bohus\AppData\Roaming\MiniDm
2009-10-19 21:17:27 ----D---- C:\Program Files\IEPro

======List of files/folders modified in the last 3 months======

2010-01-13 21:08:06 ----D---- C:\Windows\System32
2010-01-13 21:08:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-13 21:08:05 ----D---- C:\Windows\inf
2010-01-13 21:07:55 ----D---- C:\Windows\Prefetch
2010-01-13 21:07:41 ----D---- C:\Program Files
2010-01-13 21:02:27 ----D---- C:\Windows\SMINST
2010-01-13 20:55:17 ----D---- C:\Windows
2010-01-11 20:18:29 ----D---- C:\Users\Bohus\AppData\Roaming\Skype
2010-01-11 20:10:36 ----D---- C:\Users\Bohus\AppData\Roaming\skypePM
2010-01-10 23:24:32 ----D---- C:\Users\Bohus\AppData\Roaming\uTorrent
2010-01-10 22:44:11 ----D---- C:\Users\Bohus\AppData\Roaming\vlc
2010-01-10 22:43:30 ----D---- C:\Users\Bohus\AppData\Roaming\dvdcss
2010-01-10 19:18:40 ----SHD---- C:\System Volume Information
2010-01-10 16:08:08 ----D---- C:\Windows\system32\drivers
2010-01-10 16:01:28 ----A---- C:\Windows\system.ini
2010-01-10 15:59:18 ----D---- C:\Windows\system32\config
2010-01-10 15:59:18 ----D---- C:\Boot
2010-01-10 15:58:39 ----D---- C:\Windows\Tasks
2010-01-10 15:56:20 ----D---- C:\Windows\AppPatch
2010-01-10 15:56:19 ----D---- C:\Program Files\Common Files
2010-01-10 15:36:51 ----SHD---- C:\Windows\Installer
2010-01-10 15:36:44 ----D---- C:\Program Files\HP
2010-01-08 00:01:08 ----D---- C:\ProgramData\ESET
2010-01-06 22:02:01 ----D---- C:\ProgramData\Reprise
2010-01-06 22:01:28 ----D---- C:\Users\Bohus\AppData\Roaming\Right Hemisphere
2010-01-06 22:00:48 ----D---- C:\Windows\system32\Tasks
2010-01-06 18:56:52 ----D---- C:\Windows\Minidump
2010-01-06 16:21:42 ----D---- C:\Program Files\Mozilla Firefox
2010-01-05 21:43:31 ----D---- C:\Program Files\Winamp
2010-01-05 21:32:45 ----D---- C:\BMW M3 Challenge
2009-12-31 20:35:22 ----D---- C:\Windows\system32\XPSViewer
2009-12-31 20:35:14 ----D---- C:\Windows\system32\sk-SK
2009-12-31 20:34:57 ----D---- C:\Program Files\Windows Defender
2009-12-31 20:34:33 ----D---- C:\Windows\system32\en
2009-12-31 20:33:54 ----D---- C:\Windows\system32\en-US
2009-12-31 20:33:49 ----D---- C:\Windows\system32\wbem
2009-12-31 20:33:27 ----D---- C:\Program Files\Common Files\System
2009-12-31 20:33:09 ----D---- C:\Program Files\Movie Maker
2009-12-31 20:32:56 ----D---- C:\Windows\servicing
2009-12-31 20:32:47 ----D---- C:\Program Files\Windows Journal
2009-12-31 20:32:31 ----D---- C:\Windows\system32\setup
2009-12-31 20:32:08 ----D---- C:\Windows\IME
2009-12-31 20:31:59 ----D---- C:\Program Files\Windows Sidebar
2009-12-31 20:31:58 ----D---- C:\Windows\system32\migration
2009-12-31 20:31:45 ----D---- C:\Windows\system32\oobe
2009-12-31 20:31:33 ----D---- C:\Windows\system32\SLUI
2009-12-31 20:30:54 ----D---- C:\Program Files\Windows Photo Gallery
2009-12-31 20:30:46 ----D---- C:\Program Files\Windows Collaboration
2009-12-31 20:30:37 ----D---- C:\Windows\system32\AdvancedInstallers
2009-12-31 20:30:26 ----D---- C:\Program Files\Windows Mail
2009-12-31 20:29:12 ----D---- C:\Windows\system32\migwiz
2009-12-31 20:29:08 ----D---- C:\Program Files\Windows Media Player
2009-12-31 20:28:08 ----D---- C:\Program Files\Internet Explorer
2009-12-31 20:27:30 ----D---- C:\Windows\system32\zh-TW
2009-12-31 20:27:30 ----D---- C:\Windows\system32\zh-CN
2009-12-31 20:27:30 ----D---- C:\Windows\system32\uk-UA
2009-12-31 20:27:29 ----D---- C:\Windows\system32\tr-TR
2009-12-31 20:27:29 ----D---- C:\Windows\system32\th-TH
2009-12-31 20:27:29 ----D---- C:\Windows\system32\sv-SE
2009-12-31 20:27:29 ----D---- C:\Windows\system32\sr-Latn-CS
2009-12-31 20:27:28 ----D---- C:\Windows\system32\sl-SI
2009-12-31 20:27:28 ----D---- C:\Windows\system32\ru-RU
2009-12-31 20:27:28 ----D---- C:\Windows\system32\ro-RO
2009-12-31 20:27:28 ----D---- C:\Windows\system32\pt-PT
2009-12-31 20:27:27 ----D---- C:\Windows\system32\pt-BR
2009-12-31 20:27:27 ----D---- C:\Windows\system32\pl-PL
2009-12-31 20:27:27 ----D---- C:\Windows\system32\nl-NL
2009-12-31 20:27:27 ----D---- C:\Windows\system32\nb-NO
2009-12-31 20:27:26 ----D---- C:\Windows\system32\lv-LV
2009-12-31 20:27:26 ----D---- C:\Windows\system32\lt-LT
2009-12-31 20:27:26 ----D---- C:\Windows\system32\ko-KR
2009-12-31 20:27:26 ----D---- C:\Windows\system32\ja-JP
2009-12-31 20:27:25 ----D---- C:\Windows\system32\it-IT
2009-12-31 20:27:25 ----D---- C:\Windows\system32\hu-HU
2009-12-31 20:27:25 ----D---- C:\Windows\system32\hr-HR
2009-12-31 20:27:25 ----D---- C:\Windows\system32\he-IL
2009-12-31 20:27:24 ----D---- C:\Windows\system32\fr-FR
2009-12-31 20:27:24 ----D---- C:\Windows\system32\fi-FI
2009-12-31 20:27:24 ----D---- C:\Windows\system32\et-EE
2009-12-31 20:27:24 ----D---- C:\Windows\system32\es-ES
2009-12-31 20:27:23 ----D---- C:\Windows\system32\el-GR
2009-12-31 20:27:23 ----D---- C:\Windows\system32\de-DE
2009-12-31 20:27:23 ----D---- C:\Windows\system32\da-DK
2009-12-31 20:27:23 ----D---- C:\Windows\system32\cs-CZ
2009-12-31 20:27:22 ----D---- C:\Windows\system32\bg-BG
2009-12-31 20:27:22 ----D---- C:\Windows\system32\ar-SA
2009-12-31 20:26:41 ----RSD---- C:\Windows\Fonts
2009-12-31 20:26:09 ----D---- C:\Windows\ehome
2009-12-31 20:24:56 ----D---- C:\Program Files\Windows Calendar
2009-12-31 20:24:39 ----D---- C:\Windows\system32\Boot
2009-12-31 20:24:22 ----D---- C:\Windows\system32\manifeststore
2009-12-25 23:23:10 ----D---- C:\Windows\system32\catroot2
2009-12-16 23:18:10 ----D---- C:\Windows\system32\Msdtc
2009-12-16 23:16:56 ----D---- C:\Windows\winsxs
2009-12-16 23:16:55 ----D---- C:\Windows\system32\spool
2009-12-16 23:16:55 ----D---- C:\Windows\rescache
2009-12-16 23:16:55 ----D---- C:\Users\Bohus\AppData\Roaming\Hamachi
2009-12-16 23:16:54 ----D---- C:\Windows\registration
2009-12-16 23:14:28 ----D---- C:\Windows\Logs
2009-12-16 20:52:17 ----D---- C:\Windows\system32\catroot
2009-12-15 06:03:01 ----SD---- C:\Users\Bohus\AppData\Roaming\Microsoft
2009-12-15 00:10:35 ----HD---- C:\Windows\system32\GroupPolicy
2009-12-15 00:10:35 ----D---- C:\ProgramData
2009-12-14 23:01:52 ----D---- C:\Windows\Microsoft.NET
2009-12-14 23:01:50 ----RSD---- C:\Windows\assembly
2009-12-14 22:49:16 ----D---- C:\Windows\system32\RTCOM
2009-12-14 16:53:00 ----D---- C:\Program Files\LogMeIn
2009-12-08 17:58:09 ----D---- C:\Windows\PeerNet
2009-11-29 17:07:33 ----D---- C:\Windows\system32\LogFiles
2009-11-19 23:48:02 ----A---- C:\Windows\NeroDigital.ini
2009-11-17 23:08:33 ----D---- C:\Windows\system
2009-11-17 23:08:33 ----D---- C:\Program Files\Common Files\microsoft shared
2009-11-15 14:57:16 ----D---- C:\Users\Bohus\AppData\Roaming\Adobe
2009-10-17 17:19:31 ----A---- C:\Windows\Antera Wheels.exe
2009-10-17 17:19:31 ----A---- C:\Windows\Antera Wheels.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-08-09 53920]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [2008-07-24 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2008-07-24 47640]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HCW85BDA.sys [2008-03-19 1176064]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-26 2103512]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2007-07-17 34960]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2008-07-24 10144]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2007-07-17 36240]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-01-10 8237120]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-10-03 99840]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
R3 ZD1211BU(Linksys A Division of Cisco Systems Inc.);Linksys Wireless-G USB Network Adapter Driver(Linksys A Division of Cisco Systems Inc.); C:\Windows\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-01-03 10976]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-01-03 22368]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-10-30 25280]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-09-15 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2008-09-15 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2008-02-01 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2008-02-01 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\Windows\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\Windows\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\Windows\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2008-09-15 8064]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-10 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2008-09-15 8064]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-18 39936]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2008-12-15 660768]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ekrn;ESET Service; C:\Program Files\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-07-12 354840]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-10-22 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208]
R2 NICSer_WUSBF54G;NICSer_WUSBF54G; C:\Program Files\Linksys\WUSBF54G\NICServ.exe [2005-10-20 530432]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
S2 SpeedyUpdate;Speedy Online Updater; C:\Windows\PeerNet\UpdateSrv.exe [2009-10-14 64512]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-01-05 33800]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-04-20 85096]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-11-09 654848]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S4 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2009-10-01 116032]
S4 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2008-07-24 63040]

-----------------EOF-----------------

[motji]

Prominte, ale myslíte tím že jste stále v testovacím režimu?
Můžete prosím vyzkoušet to co jsem psala?

[kuco.kuco]

myslite toto ?

Zkuste ještě start -spustit -napište Msconfig
a někde bude normální spuštění, asi 2 založka, zkuste pohledat

[motji]

Ano, a taky koukal jste na ten odkaz, co jsem posílala?

[kuco.kuco]

pozeral som nan, len anglicky to je pre mna spanielska dedina. System mam Vistu 32 bit
a podla toho postupu to vypada na preinstalovanie systemu ?
Instalacku nemam pretoze som dostal PC uz s OS a nalepkou od Microsoftu

Mam ale zalohove DVD systemu co PC ponuklo automaticky. Len som si nie isty ci mi neposere uctovny soft.
bol dodatocne aktualizovany a rucne nastavovane databazy a ine blbinky

[motji]

Zkuste nejdřív ten Ms config

[kuco.kuco]

tot som uz skusil

[motji]

A restartoval jste pak počítač? Nic se nezměnilo?

[kuco.kuco]

ostalo vsetko po starom

[motji]

zkuste tohle podle tohoto návodu http://www.extrahardware.cz/forum/viewt ... =51&t=2978

musíte mít práva administrátora
start - všechny programy - příslušenství - spustit /nebo nějak podobně, nemám bohužel visty, u xp je to start - spustit/

do řádku napíšete cmd.exe - enter
a do černého okénka napíšete

Kód: Vybrat vše

bcdedit /set testsigning off

enter