Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prevntivní - problémy s připojením na internet

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
TomDIVER
Návštěvník
Návštěvník
Příspěvky: 53
Registrován: 17 čer 2007 10:30

Prevntivní - problémy s připojením na internet

#1 Příspěvek od TomDIVER »

Zdravím, zlobí mě PC. Při brouzdaní po webu se i www.seznam.cz načítá pomalu, video se spíš nepustí a při hraní ON-LINE hry jsem často odpojen a musím se znovu přihlásit.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:22:15, on 23.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
E:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
E:\totalcmd\TOTALCMD.EXE
H:\PortableApps\HijackThisPortable\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: CHelper Class - {99A7C4DD-B2E6-4CA0-BB6E-737A61364155} - E:\PROGRA~1\EUROTR~1\e2003i.dll
O2 - BHO: CacherBHO - {9B4DF450-DCC7-4B07-935D-0CD757A64583} - C:\Program Files\Moyea\YouTube FLV Downloader\MoyeaCatcher.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AnyDVD] E:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - Multiclicker-win.lnk = E:\TOM\Software\Multiclicker\Multiclicker-win.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NewShortcut1.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\PROGRA~1\EUROTR~1\e2003i.dll
O9 - Extra 'Tools' menuitem: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\PROGRA~1\EUROTR~1\e2003i.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{20E8063A-FE60-4000-BF99-08457A1B47B1}: NameServer = 193.179.144.2,212.47.0.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{20E8063A-FE60-4000-BF99-08457A1B47B1}: NameServer = 10.254.254.254,10.254.254.253
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 8293 bytes
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Prevntivní - problémy s připojením na internet

#2 Příspěvek od motji »

Dobré ránko :)

:arrow: Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
- otevře se okno, v něm zaškrtněte Scan All Users , File Scan,
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

netsvcs
%SYSTEMDRIVE%\*.exe
%SYSTEMDRIVE%\eventlog.dll /s /md5
%SYSTEMDRIVE%\scecli.dll /s /md5
%SYSTEMDRIVE%\netlogon.dll /s /md5
%SYSTEMDRIVE%\cngaudit.dll /s /md5
%SYSTEMDRIVE%\sceclt.dll /s /md5
%SYSTEMDRIVE%\ntelogon.dll /s /md5
%SYSTEMDRIVE%\logevent.dll /s /md5
%SYSTEMDRIVE%\iaStor.sys /s /md5
%SYSTEMDRIVE%\nvstor.sys /s /md5
%SYSTEMDRIVE%\atapi.sys /s /md5
%SYSTEMDRIVE%\IdeChnDr.sys /s /md5
%SYSTEMDRIVE%\viasraid.sys /s /md5
%SYSTEMDRIVE%\AGP440.sys /s /md5
%SYSTEMDRIVE%\vaxscsi.sys /s /md5
%SYSTEMDRIVE%\nvatabus.sys /s /md5
%SYSTEMDRIVE%\viamraid.sys /s /md5
%SYSTEMDRIVE%\nvata.sys /s /md5
CREATERESTOREPOINT
-klikněte na tlačítko Run scan.
-proběhne sken a objeví se dva logy, obsah obou vložte zde :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
TomDIVER
Návštěvník
Návštěvník
Příspěvky: 53
Registrován: 17 čer 2007 10:30

Re: Prevntivní - problémy s připojením na internet

#3 Příspěvek od TomDIVER »

Ahoj, Krkonoše zdraví Hanou :-D
Tak provedeno. Netuším co to může být, protože výsledky testování připojení co jsem na webu našel ukazovali že připjení je OK.

Vkládám logy - po jednom - překročení max povolených znaků. Jen pro informaci, při scanu to několikrát hlásilo Chyba disku!

OLT
OTL logfile created on: 24.2.2010 19:49:10 - Run 1
OTL by OldTimer - Version 3.1.30.1 Folder = C:\Documents and Settings\Pocitac\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1 014,00 Mb Total Physical Memory | 397,00 Mb Available Physical Memory | 39,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 35,88 Gb Free Space | 73,49% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 184,05 Gb Total Space | 25,54 Gb Free Space | 13,88% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 14,90 Gb Total Space | 2,12 Gb Free Space | 14,25% Space Free | Partition Type: NTFS
I: Drive not present or media not loaded
Drive K: | 15,59 Mb Total Space | 15,56 Mb Free Space | 99,80% Space Free | Partition Type: FAT

Computer Name: MARKETA
Current User Name: Pocitac
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.02.24 19:46:11 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pocitac\Plocha\OTL.exe
PRC - [2010.02.20 13:51:33 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.25 00:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- E:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- E:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009.10.11 04:17:36 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009.10.11 04:17:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009.10.11 04:17:32 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\javaw.exe
PRC - [2009.10.09 13:11:12 | 025,623,336 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2009.10.09 13:11:12 | 000,078,008 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2008.12.31 05:31:15 | 000,247,152 | R--- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe
PRC - [2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.07.24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2007.06.13 07:49:00 | 016,377,344 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
PRC - [2007.04.20 06:57:32 | 000,252,696 | R--- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxsrvc.exe
PRC - [2007.04.20 06:57:30 | 000,138,008 | R--- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxpers.exe
PRC - [2007.04.20 06:57:20 | 000,162,584 | R--- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe
PRC - [2006.10.21 18:04:59 | 000,497,152 | ---- | M] (SlySoft, Inc.) -- E:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
PRC - [2006.01.20 11:20:00 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2004.11.30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) -- C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
PRC - [2004.08.09 05:03:38 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe


========== Modules (SafeList) ==========

MOD - [2010.02.24 19:46:11 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pocitac\Plocha\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- E:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- E:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.10.11 04:17:35 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009.06.02 09:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.04.08 16:35:41 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
SRV - [2008.12.31 05:31:15 | 000,247,152 | R--- | M] () [Auto | Running] -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo) Cyberlink RichVideo Service(CRVS)
SRV - [2008.07.29 18:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2008.04.14 05:21:44 | 000,027,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\irmon.dll -- (Irmon)
SRV - [2007.07.24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2006.01.20 11:20:00 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2004.11.30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2003.07.28 19:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)


========== Driver Services (SafeList) ==========

DRV - [2009.11.25 00:50:59 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009.11.25 00:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.11.25 00:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.11.25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.11.25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009.11.25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009.10.01 12:57:18 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.10.01 12:57:18 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.03.09 15:32:45 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.02.21 04:45:28 | 000,215,872 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\truecrypt.sys -- (truecrypt)
DRV - [2009.02.17 11:19:44 | 000,057,672 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009.02.17 11:17:40 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2009.02.13 21:56:26 | 000,047,360 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pcouffin.sys -- (pcouffin)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.05.14 18:32:42 | 000,535,040 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emBDA.sys -- (USB28xxBGA)
DRV - [2008.05.14 18:32:24 | 000,286,208 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emOEM.sys -- (USB28xxOEM)
DRV - [2008.04.13 19:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2008.04.13 17:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007.11.13 11:25:52 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007.07.03 08:06:50 | 000,037,768 | R--- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wceusbsh.sys -- (wceusbsh)
DRV - [2007.06.22 11:14:00 | 004,432,384 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.04.23 14:54:50 | 000,100,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mgmt.sys -- (s115mgmt) Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM)
DRV - [2007.04.23 14:54:50 | 000,098,568 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115obex.sys -- (s115obex)
DRV - [2007.04.23 14:54:48 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdm.sys -- (s115mdm)
DRV - [2007.04.23 14:54:48 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdfl.sys -- (s115mdfl)
DRV - [2007.04.23 14:54:46 | 000,083,208 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115bus.sys -- (s115bus) Sony Ericsson Device 115 driver (WDM)
DRV - [2007.04.16 07:16:26 | 005,760,096 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2007.04.14 09:28:00 | 000,094,592 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.04.03 12:57:54 | 000,099,080 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116unic.sys -- (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV - [2007.04.03 12:57:52 | 000,098,696 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116obex.sys -- (s116obex)
DRV - [2007.04.03 12:57:52 | 000,023,176 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116nd5.sys -- (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV - [2007.04.03 12:57:50 | 000,100,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mgmt.sys -- (s116mgmt) Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM)
DRV - [2007.04.03 12:57:48 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdm.sys -- (s116mdm)
DRV - [2007.04.03 12:57:48 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdfl.sys -- (s116mdfl)
DRV - [2007.04.03 12:57:42 | 000,083,336 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2006.10.20 18:42:41 | 000,020,096 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2006.06.16 11:53:16 | 000,025,088 | ---- | M] (Ark Pioneer MicroElectronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IrUSB.sys -- (IrUSB)
DRV - [2006.04.22 02:44:39 | 000,008,064 | ---- | M] (Elaborate Bytes AG) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV - [2006.03.02 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2005.05.03 16:34:02 | 000,027,392 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2005.04.12 09:41:20 | 000,004,608 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2004.11.30 13:14:28 | 000,017,024 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2004.11.30 13:13:28 | 000,023,271 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)
DRV - [2004.11.30 13:13:24 | 000,222,876 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP)
DRV - [2004.11.30 13:13:16 | 000,148,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2004.11.30 13:12:14 | 001,241,818 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2004.11.30 13:10:14 | 000,030,299 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004.11.30 13:09:50 | 000,055,288 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\S-1-5-21-1220945662-1202660629-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Wikipedie (cs)"
FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:2.0.2
FF - prefs.js..extensions.enabledItems: cs@dictionaries.addons.mozilla.org:1.0.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {FCAB6FDD-5585-425b-95C1-5ED856F3FD08}:1.3.2

FF - HKLM\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.08.29 09:26:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.02.21 12:24:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.02.20 13:51:37 | 000,000,000 | ---D | M]

[2008.09.02 20:45:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Extensions
[2010.02.23 19:07:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Firefox\Profiles\ducap7uu.default\extensions
[2009.02.14 13:05:30 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Firefox\Profiles\ducap7uu.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2009.12.30 14:13:02 | 000,000,000 | ---D | M] (Sothink SWF Catcher) -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Firefox\Profiles\ducap7uu.default\extensions\{FCAB6FDD-5585-425b-95C1-5ED856F3FD08}
[2008.09.25 19:16:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Firefox\Profiles\ducap7uu.default\extensions\cs@dictionaries.addons.mozilla.org
[2009.02.21 06:05:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Sunbird\Profiles\z3fxkr6m.default\extensions
[2009.02.21 06:05:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pocitac\Data aplikací\Mozilla\Sunbird\Profiles\z3fxkr6m.default\extensions\langpack-cs@sunbird.mozilla.org
[2010.02.23 19:07:28 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.08.25 06:47:18 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.08.25 06:47:18 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.08.25 06:47:18 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.08.25 06:47:18 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.08.25 06:47:18 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2006.03.02 13:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (CHelper Class) - {99A7C4DD-B2E6-4CA0-BB6E-737A61364155} - E:\Program Files\Eurotran 2003\e2003i.dll ()
O2 - BHO: (CatcherBHO Class) - {9B4DF450-DCC7-4B07-935D-0CD757A64583} - C:\Program Files\Moyea\YouTube FLV Downloader\MoyeaCatcher.dll (Moyea Software Co., Ltd.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast!] E:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004..\Run: [AnyDVD] E:\Program Files\SlySoft\AnyDVD\AnyDVD.exe (SlySoft, Inc.)
O4 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\NewShortcut1.lnk = C:\Program Files\USB_video_device\Utility\RemoteTool\BDARemote.exe File not found
O4 - Startup: C:\Documents and Settings\Pocitac\Nabídka Start\Programy\Po spuštění\Zástupce - Multiclicker-win.lnk = E:\TOM\Software\Multiclicker\Multiclicker-win.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\Program Files\Eurotran 2003\e2003i.dll ()
O9 - Extra 'Tools' menuitem : Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\Program Files\Eurotran 2003\e2003i.dll ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm ()
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (Broadcom Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {93994DE8-8239-4655-B1D1-5F4E91300429} - E:\Program Files\DVD Region+CSS Free\DVDShell.dll (Fengtao Software Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.12.07 02:13:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010.01.09 23:29:56 | 000,000,112 | ---- | M] () - H:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{1636bf3c-4f75-11dd-a8c1-001d92213d5e}\Shell\AutoRun\command - "" = F:\wd_windows_tools\WDSetup.exe -- File not found
O33 - MountPoints2\{2f1ebf86-d921-11de-aa26-001d92213d5e}\Shell\AutoRun\command - "" = J:\SamsungSoftware\APPInst.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell - "" = AutoRun
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\Auto\command - "" = G:\auto.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\explore\Command - "" = G:\vpfdvcjx.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\open\Command - "" = G:\vpfdvcjx.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2007.12.07 02:13:02 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - C:\WINDOWS\system32\irmon.dll (Microsoft Corporation)
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (55172488459452416)

========== Files/Folders - Created Within 30 Days ==========

[2010.02.24 19:46:06 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Pocitac\Plocha\OTL.exe
[2010.02.24 19:45:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010.02.23 21:16:37 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Pocitac\Recent
[2010.02.11 02:19:56 | 000,000,000 | ---D | C] -- C:\Program Files\Moyea
[2010.02.09 20:43:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
[2010.02.06 20:36:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pocitac\Data aplikací\Apple Computer
[2010.02.06 20:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.02.06 20:28:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.02.06 20:28:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.02.06 20:28:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\Apple
[2010.02.06 20:28:06 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010.02.06 20:28:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2010.02.06 20:27:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\Apple Computer
[2009.09.18 08:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\CyberLink
[2009.04.11 09:08:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2009.02.13 21:56:26 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Pocitac\Data aplikací\pcouffin.sys
[2008.10.18 15:07:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2007.12.07 02:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2007.12.07 02:13:21 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2007.12.07 02:13:21 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.02.24 19:46:11 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pocitac\Plocha\OTL.exe
[2010.02.24 19:45:18 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.02.24 19:18:32 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.02.24 19:17:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.02.24 19:17:54 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.02.24 01:03:06 | 004,980,736 | -H-- | M] () -- C:\Documents and Settings\Pocitac\NTUSER.DAT
[2010.02.24 01:03:06 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Pocitac\ntuser.ini
[2010.02.24 01:02:59 | 000,004,533 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2010.02.23 20:57:18 | 000,159,528 | ---- | M] () -- C:\Documents and Settings\Pocitac\Plocha\FHSetup.exe
[2010.02.23 20:43:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.02.22 09:02:37 | 001,044,128 | -H-- | M] () -- C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\IconCache.db
[2010.02.21 17:55:39 | 000,073,216 | ---- | M] () -- C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.02.15 17:26:07 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.02.12 21:30:30 | 000,000,793 | ---- | M] () -- C:\Documents and Settings\Pocitac\Plocha\Miranda Marketa Portable.lnk
[2010.02.11 02:20:01 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Moyea YouTube FLV Downloader.lnk
[2010.02.07 17:06:17 | 000,000,067 | ---- | M] () -- C:\WINDOWS\DVDRegionFree.INI
[2010.02.06 20:28:50 | 000,001,604 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\QuickTime Player.lnk
[2010.02.06 20:11:51 | 000,000,648 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\GOM Player.lnk
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.02.24 19:45:17 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.02.23 20:57:17 | 000,159,528 | ---- | C] () -- C:\Documents and Settings\Pocitac\Plocha\FHSetup.exe
[2010.02.12 21:30:30 | 000,000,793 | ---- | C] () -- C:\Documents and Settings\Pocitac\Plocha\Miranda Marketa Portable.lnk
[2010.02.11 02:20:01 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Moyea YouTube FLV Downloader.lnk
[2010.02.06 20:28:50 | 000,001,604 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\QuickTime Player.lnk
[2010.02.06 20:28:12 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009.10.01 12:57:18 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009.10.01 12:57:18 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009.09.19 12:01:58 | 000,000,582 | ---- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\AutoGK.ini
[2009.09.18 09:36:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PhotoNow.INI
[2009.09.18 07:58:44 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2009.09.17 17:29:57 | 000,000,306 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2009.09.17 17:26:21 | 000,000,062 | ---- | C] () -- C:\WINDOWS\MeTcd.ini
[2009.08.30 12:08:33 | 000,001,817 | ---- | C] () -- C:\WINDOWS\WDICT32.INI
[2009.06.22 17:06:53 | 000,002,516 | -HS- | C] () -- C:\Documents and Settings\All Users\Data aplikací\KGyGaAvL.sys
[2009.06.22 17:06:53 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Data aplikací\9BCFEBED95.sys
[2009.06.22 13:31:39 | 000,000,103 | ---- | C] () -- C:\WINDOWS\KA.ini
[2009.05.15 19:27:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2009.02.13 21:57:15 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009.02.13 21:56:32 | 000,000,034 | ---- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\pcouffin.log
[2009.02.13 21:56:26 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\ezpinst.exe
[2009.02.13 21:56:26 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\pcouffin.cat
[2009.02.13 21:56:26 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\pcouffin.inf
[2009.01.25 22:10:48 | 000,179,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.01.09 00:01:22 | 000,629,760 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.01.03 14:46:48 | 000,004,239 | ---- | C] () -- C:\WINDOWS\WTRAN32.INI
[2008.11.16 12:36:46 | 000,073,216 | ---- | C] () -- C:\Documents and Settings\Pocitac\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.07.11 20:05:04 | 000,000,083 | -HS- | C] () -- C:\Documents and Settings\Pocitac\Data aplikací\.zreglib
[2008.07.11 19:41:30 | 000,000,067 | ---- | C] () -- C:\WINDOWS\DVDRegionFree.INI
[2008.07.11 19:30:32 | 000,001,874 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2008.06.22 11:20:38 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.06.08 17:48:45 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008.06.08 15:58:50 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008.06.07 09:19:52 | 000,004,533 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.03.30 07:30:41 | 000,000,038 | ---- | C] () -- C:\WINDOWS\ALIK.INI
[2008.03.09 20:01:59 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2008.03.09 15:18:41 | 000,000,169 | ---- | C] () -- C:\WINDOWS\Jahoda.ini
[2008.03.09 15:04:20 | 000,000,149 | ---- | C] () -- C:\WINDOWS\Pomeranc.ini
[2008.03.09 15:02:47 | 000,000,151 | ---- | C] () -- C:\WINDOWS\Vanilka.ini
[2008.03.09 14:56:26 | 000,000,169 | ---- | C] () -- C:\WINDOWS\Visen.ini
[2008.03.09 14:53:37 | 000,000,136 | ---- | C] () -- C:\WINDOWS\Jablko.ini
[2008.03.09 14:51:43 | 000,000,159 | ---- | C] () -- C:\WINDOWS\Citron.ini
[2008.01.30 17:39:34 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SILCOM_P.INI
[2008.01.16 19:42:26 | 000,002,956 | ---- | C] () -- C:\WINDOWS\disney.ini
[2007.12.07 02:21:32 | 000,204,800 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2007.12.06 19:49:13 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007.12.06 19:49:12 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007.12.06 19:49:12 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2004.11.30 13:21:14 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2002.10.15 23:54:04 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2002.05.15 22:29:04 | 000,000,607 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2001.11.23 17:18:00 | 000,000,597 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001.11.14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2001.10.28 16:42:30 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[1999.08.12 00:00:00 | 001,708,032 | ---- | C] () -- C:\WINDOWS\System32\MSO97V.DLL
[1999.08.12 00:00:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1999.08.12 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MSORFS.DLL
[1999.08.12 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >

< %SYSTEMDRIVE%\eventlog.dll /s /md5 >
[2006.03.02 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\scecli.dll /s /md5 >
[2006.03.02 13:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\netlogon.dll /s /md5 >
[2006.03.02 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\cngaudit.dll /s /md5 >

< %SYSTEMDRIVE%\sceclt.dll /s /md5 >

< %SYSTEMDRIVE%\ntelogon.dll /s /md5 >

< %SYSTEMDRIVE%\logevent.dll /s /md5 >

< %SYSTEMDRIVE%\iaStor.sys /s /md5 >

< %SYSTEMDRIVE%\nvstor.sys /s /md5 >

< %SYSTEMDRIVE%\atapi.sys /s /md5 >
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.03.02 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys

< %SYSTEMDRIVE%\IdeChnDr.sys /s /md5 >

< %SYSTEMDRIVE%\viasraid.sys /s /md5 >

< %SYSTEMDRIVE%\AGP440.sys /s /md5 >
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< %SYSTEMDRIVE%\vaxscsi.sys /s /md5 >

< %SYSTEMDRIVE%\nvatabus.sys /s /md5 >

< %SYSTEMDRIVE%\viamraid.sys /s /md5 >

< %SYSTEMDRIVE%\nvata.sys /s /md5 >

========== Alternate Data Streams ==========

@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Data aplikací\Temp:671329E4
< End of report >
Nahoru
TomDIVER
Návštěvník
Návštěvník
Příspěvky: 53
Registrován: 17 čer 2007 10:30

Re: Prevntivní - problémy s připojením na internet

#4 Příspěvek od TomDIVER »

druhý log:

OTL Extras logfile created on: 24.2.2010 19:49:10 - Run 1
OTL by OldTimer - Version 3.1.30.1 Folder = C:\Documents and Settings\Pocitac\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1 014,00 Mb Total Physical Memory | 397,00 Mb Available Physical Memory | 39,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 35,88 Gb Free Space | 73,49% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 184,05 Gb Total Space | 25,54 Gb Free Space | 13,88% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 14,90 Gb Total Space | 2,12 Gb Free Space | 14,25% Space Free | Partition Type: NTFS
I: Drive not present or media not loaded
Drive K: | 15,59 Mb Total Space | 15,56 Mb Free Space | 99,80% Space Free | Partition Type: FAT

Computer Name: MARKETA
Current User Name: Pocitac
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.js [@ = JSFile] -- C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe (Macromedia, Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
jsfile [open] -- "C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1" (Macromedia, Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 10.0.Browse] -- "C:\Program Files\ACD Systems\ACDSee\10.0\ACDSeeQV10.exe" "%1" (ACD Systems)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"G:\MirandaPortable\App\miranda\miranda32.exe" = G:\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\Program Files\MirandaPortable\App\miranda\miranda32.exe" = E:\Program Files\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\totalcmd\TOTALCMD.EXE" = E:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows -- (C. Ghisler & Co.)
"E:\Program Files\uTorrent\utorrent.exe" = E:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"H:\Program Files\PortableApps\PortableApps\MirandaPortable\App\miranda\miranda32.exe" = H:\Program Files\PortableApps\PortableApps\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- File not found
"H:\PortableApps\MirandaPortable\App\miranda\miranda32.exe" = H:\PortableApps\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- ( )
"E:\Program Files\MirandaPortable_Niki\MirandaPortable\App\miranda\miranda32.exe" = E:\Program Files\MirandaPortable_Niki\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\Program Files\MirandaPortable_Market\App\miranda\miranda32.exe" = E:\Program Files\MirandaPortable_Market\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- File not found
"K:\PortableApps\Miranda Portable\miranda32.exe" = K:\PortableApps\Miranda Portable\miranda32.exe:*:Enabled:Miranda IM -- File not found
"K:\PortableApps\Portable Skype\Phone\Skype.exe" = K:\PortableApps\Portable Skype\Phone\Skype.exe:*:Enabled:Skype -- File not found
"F:\PortableApps\Miranda Portable\miranda32.exe" = F:\PortableApps\Miranda Portable\miranda32.exe:*:Enabled:Miranda IM -- File not found
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"H:\PortableApps\Miranda Portable\miranda32.exe" = H:\PortableApps\Miranda Portable\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\Program Files\MirandaPortable_Niki\Miranda IM\miranda32.exe" = E:\Program Files\MirandaPortable_Niki\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\Program Files\MirandaPortable_Niki\MirandaPortable\Miranda IM\miranda32.exe" = E:\Program Files\MirandaPortable_Niki\MirandaPortable\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- File not found
"E:\Program Files\MirandaPortable_Market\Miranda IM\miranda32.exe" = E:\Program Files\MirandaPortable_Market\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- File not found
"C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\base\bin\Settlers6.exe" = C:\Program Files\Ubisoft\THE SETTLERS - Vzestup říše\base\bin\Settlers6.exe:*:Enabled:THE SETTLERS - Vzestup říše -- (Blue Byte GmbH)
"E:\Program Files\MirandaPortable_Niki\miranda32.exe" = E:\Program Files\MirandaPortable_Niki\miranda32.exe:*:Enabled:Miranda IM -- ( )
"J:\PortableApps\Portable Skype\Phone\Skype.exe" = J:\PortableApps\Portable Skype\Phone\Skype.exe:*:Enabled:Skype -- File not found
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
"E:\Program Files\Games\Metin2_TESTER\metin2client.bin" = E:\Program Files\Games\Metin2_TESTER\metin2client.bin:*:Enabled:metin2client -- ()
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"E:\Program Files\Games\Metin2_TESTER\metin2.bin" = E:\Program Files\Games\Metin2_TESTER\metin2.bin:*:Enabled:metin2 -- ()
"I:\PortableApps\Portable Skype\Phone\Skype.exe" = I:\PortableApps\Portable Skype\Phone\Skype.exe:*:Enabled:Skype -- File not found
"F:\PortableApps\Portable Skype\Phone\Skype.exe" = F:\PortableApps\Portable Skype\Phone\Skype.exe:*:Enabled:Skype -- File not found
"E:\Program Files\MirandaPortable_Market\OLD !!!\App\miranda\miranda32.exe" = E:\Program Files\MirandaPortable_Market\OLD !!!\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- ( )
"E:\Program Files\MirandaPortable_Market\MirandaPortable\App\miranda\miranda32.exe" = E:\Program Files\MirandaPortable_Market\MirandaPortable\App\miranda\miranda32.exe:*:Enabled:Miranda IM -- ( )
"L:\PortableApps\Miranda Portable\miranda32.exe" = L:\PortableApps\Miranda Portable\miranda32.exe:*:Enabled:Miranda IM -- File not found
"H:\PortableApps\uTorrentPortable\App\utorrent\utorrent.exe" = H:\PortableApps\uTorrentPortable\App\utorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"H:\PortableApps\Portable Skype\Phone\Skype.exe" = H:\PortableApps\Portable Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW(R) Graphics Suite X4
"_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator 0.8.0
"{015C057F-D7B9-4D82-B266-FBCF0178F382}" = USB Audio/Video Driver
"{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}" = Macromedia Dreamweaver MX 2004
"{0C973594-7DDF-4BD0-84ED-3517F7622037}" = PC Connectivity Solution
"{0ECB59D5-A3FC-4D61-AD3B-6CE679B3F852}" = Java DB 10.2.2.0
"{129DDEC1-A6A3-3D60-AABE-76E6E5334922}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{1A5488D7-314D-4CBC-89BF-C5B59510BDBA}" = Hledá se Nemo
"{2003F533-7639-4436-8404-CB3DE67F1FFA}" = Mio Transfer
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{25BEC3AB-5CD4-481D-9143-215C1BBB189E}" = Sony Ericsson PC Suite
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32A3A4F4-B792-11D6-A78A-00B0D0160030}" = Java(TM) SE Development Kit 6 Update 3
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3D39E775-DDDA-4327-B747-0BDC5F191331}" = Nokia PC Suite
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{44A27085-0616-4181-A0C3-81C7ECA17F73}" = CorelDRAW Graphics Suite X4
"{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Earth
"{6621E927-8AB8-47EA-915B-4E4769BFE688}" = OpenOffice.org 2.2
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68F45351-B08A-4EFC-8414-408485473BB3}" = 102 Dalmatians Puppies to the Rescue
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6FE8B722-4D7E-3CD7-BB3A-3AD1684B1295}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
"{74DCC43B-33C9-3389-BD0D-33EB37973657}" = Microsoft .NET Framework 3.5 Language Pack - csy
"{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW Graphics SUite X4 - ICA
"{7F05E704-30A6-421A-97A7-8EEB1C7FF012}" = CorelDRAW Graphics Suite X4 - Capture
"{7F05E704-30A6-421A-97A7-8EEB1C7FF013}" = CorelDRAW Graphics Suite X4 - Draw
"{7F05E704-30A6-421A-97A7-8EEB1C7FF014}" = CorelDRAW Graphics Suite X4 - PP
"{7F05E704-30A6-421A-97A7-8EEB1C7FF016}" = CorelDRAW Graphics Suite X4 - Content
"{7F05E704-30A6-421A-97A7-8EEB1C7FF017}" = CorelDRAW Graphics Suite X4 - Filters
"{7F05E704-30A6-421A-97A7-8EEB1C7FF019}" = CorelDRAW Graphics Suite X4 - FontNav
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F2ED3E6-4049-4BEF-B4CB-0208D24E302F}" = USB TO IRDA Driver 1.3.0.5
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90535871-81B9-4D99-8A13-A7EE97F2D7FE}" = WIDCOMM Bluetooth Software
"{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}" = CorelDRAW Graphics Suite X4 - IPM
"{9E8DFEEF-D730-4ECB-B302-6295A18B290C}" = Barbie(TM) Módní přehlídka
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}" = Macromedia Extension Manager
"{AC76BA86-7AD7-1029-7B44-A81200000003}" = Adobe Reader 8 - Czech
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{B5924CA6-24A7-48F5-BC9C-8BFA94ED4564}" = LightScribe 1.4.67.1
"{B61D21B6-469D-4423-B161-62DB20B8A70E}" = Visual Basic for Applications (R) Core - English
"{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1" = ConvertXtoDVD 2.1.5.173
"{BD71ADC0-0616-4EC2-A43A-8A7EBF3A85E6}" = Tygrova výprava
"{BF439B41-0252-48DE-8B8B-0430CB26A181}" = CorelDRAW Graphics Suite X4 - VBA
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C60BA916-9E44-4DA4-B11A-9E27B7624EF5}" = Sony Ericsson Drivers
"{C92E7DF1-624A-4D95-A4C4-18CB491B44A4}" = Sony Ericsson Device Data
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"{D3F80A98-05AB-4D8C-9272-766CCFA6A48D}" = THE SETTLERS - Vzestup říše
"{D6BF6477-8369-489F-8DE6-3731F4B88560}" = Sony Ericsson PC Suite
"{DB81779E-7CC5-4630-BCFC-754004956444}" = Visual Basic for Applications (R) Core
"{E24DCAFE-AAB7-40E4-9FB1-2650A71409AE}" = Operation Pridelands
"{EA426461-31AA-4AB3-B15D-EDD748F08394}_is1" = Moyea YouTube FLV Downloader version: 3.1.2.9
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8B98EB6-FC06-45BF-87D4-9784E0408611}" = ACDSee 10 Photo Manager
"{FFFE7261-2318-4227-B827-E9E05E16DFE5}" = CorelDRAW Graphics Suite X4 - Lang CZ
"µTorrent CZ_is1" = µTorrent CZ 1.8.1 (build 12639)
"3D Architekt (instalace na disk)" = 3D Architekt (instalace na disk)
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"7-Zip" = 7-Zip 4.57
"920F395BD609DD6D81B90A071594C5CE2AFCDC55" = Windows Driver Package - Suunto Suunto USB Serial Port (03/13/2008 2.04.06)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE
"Alenka v říši divů_is1" = Alenka v říši divů
"AnyDVD" = AnyDVD
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE
"AutoGK" = Auto Gordian Knot 2.55
"avast!" = avast! Antivirus
"AviSynth" = AviSynth 2.5
"BSPlayer1" = BSPlayer
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 3.8)
"CCleaner" = CCleaner (remove only)
"CDROMEK25" = Ferda - CDROMEK číslo 25
"CloneCD" = CloneCD
"CloneDVD2" = CloneDVD2
"D390F91A2C68E2D5F5A5356AAF23C8A76BBB60DC" = Windows Driver Package - Suunto Suunto USB Driver Package (03/13/2008 2.04.06)
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DVD Region+CSS Free_is1" = DVD Region+CSS Free 5.9.7.2
"DVD Shrink_is1" = DVD Shrink 3.2
"E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84" = Balíček ovladače systému Windows - Nokia Modem (06/01/2009 4.1)
"Eurotran 2003" = Eurotran 2003
"F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7" = Balíček ovladače systému Windows - Nokia Modem (06/01/2009 7.01.0.3)
"FLVPlayer" = FLV Player 1.3.3
"GOM Player" = GOM Player
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{015C057F-D7B9-4D82-B266-FBCF0178F382}" = USB Audio/Video Driver
"InstallShield_{1A5488D7-314D-4CBC-89BF-C5B59510BDBA}" = Hledá se Nemo
"InstallShield_{BD71ADC0-0616-4EC2-A43A-8A7EBF3A85E6}" = Tygrova výprava
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"KLiteCodecPack_is1" = K-Lite Codec Pack 2.83 Full
"Krtek_is1" = Hrajeme si s Krtkem
"Microsoft .NET Framework 3.5 Language Pack - csy" = Microsoft .NET Framework 3.5 Language Pack - CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MIKSOFT Mobile 3GP converter_is1" = MIKSOFT Mobile 3GP converter
"Mozilla Firefox (3.5.8)" = Mozilla Firefox (3.5.8)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero Media Player_is1" = MNP-1.4.0.35b Cz
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia PC Suite" = Nokia PC Suite
"Nvu" = Nvu 1.0
"PPTView97" = Microsoft PowerPoint Viewer 97
"QuickTime32" = QuickTime for Windows (32-bit)
"RADVideo" = RAD Video Tools
"Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 3.32
"SubCulture" = Sub Culture
"Suunto Dive Manager" = Suunto Dive Manager
"SuuntoUSBFTDIVista_is1" = Suunto USB Driver
"Totalcmd" = Total Commander (Remove or Repair)
"TS Český jazyk I (minimální instalace)" = TS Český jazyk I (minimální instalace)
"VobSub" = VobSub v2.23 (Remove Only)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Web Album Generator_is1" = Web Album Generator 1.8.2
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar
"YInstHelper" = Yahoo! Install Manager
"ZonerPhotoStudio10_CZ_is1" = Zoner Photo Studio 10

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 24.12.2008 16:57:52 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of http://jizdnirady.idnes.cz/ScriptResour ... 0853437500
failed, 0000A413.

Error - 8.1.2009 13:16:46 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of http://jizdnirady.idnes.cz/ScriptResour ... 6974375000
failed, 0000A413.

Error - 14.1.2009 0:49:25 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of http://1.im.cz/ad/im.js failed, 0000A413.

Error - 14.2.2009 18:56:47 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of http://jizdnirady.idnes.cz/ScriptResour ... 0853437500
failed, 0000A413.

Error - 15.2.2010 13:32:10 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Documents and Settings\Pocitac\Local Settings\Temp\scoped_dir29791\TEMP_INSTALL\manifest.json
failed, 00000005.

Error - 15.2.2010 13:33:32 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Documents and Settings\Pocitac\Local Settings\Temp\scoped_dir30062\TEMP_INSTALL\manifest.json
failed, 00000005.

Error - 15.2.2010 13:36:00 | Computer Name = MARKETA | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Documents and Settings\Pocitac\Local Settings\Temp\scoped_dir30546\TEMP_INSTALL\manifest.json
failed, 00000005.

[ Application Events ]
Error - 21.12.2009 18:01:50 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 22.12.2009 4:04:34 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 23.12.2009 2:51:59 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 26.12.2009 14:06:00 | Computer Name = MARKETA | Source = Application Error | ID = 1000
Description = Chybující aplikace nbj.exe, verze 1.2.0.61, chybující modul advrcntr.dll,
verze 1.2.12.2315, adresa chyby 0x0001d144.

Error - 26.12.2009 14:06:33 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 27.12.2009 5:50:44 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 29.12.2009 11:02:12 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 30.12.2009 4:47:54 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 1.1.2010 13:21:56 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 2.1.2010 5:06:00 | Computer Name = MARKETA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

[ System Events ]
Error - 22.2.2010 8:04:49 | Computer Name = MARKETA | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC80.MFCLOC nebyla nalezena a
poslední chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 22.2.2010 8:04:49 | Computer Name = MARKETA | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC80.MFCLOC se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .

Error - 22.2.2010 8:04:49 | Computer Name = MARKETA | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 22.2.2010 8:06:36 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7034
Description = Služba Služba brány aplikačního rozhraní byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 22.2.2010 18:12:49 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7000
Description = Služba Ovladač paralelního portu neuspěla při spuštění v důsledku
následující chyby: %%1058

Error - 23.2.2010 13:42:21 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7000
Description = Služba Ovladač paralelního portu neuspěla při spuštění v důsledku
následující chyby: %%1058

Error - 23.2.2010 14:15:08 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7034
Description = Služba Služba brány aplikačního rozhraní byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 23.2.2010 14:15:39 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7034
Description = Služba Cyberlink RichVideo Service(CRVS) byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 23.2.2010 17:30:30 | Computer Name = MARKETA | Source = MRxSmb | ID = 8003
Description = Hlavní prohledávač přijal oznámení serveru od počítače VYDRA, který
se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{20E8063A-FE60-4000-BF9.
Hlavní
prohledávač bude ukončen nebo bude vyvolána volba.

Error - 24.2.2010 14:18:46 | Computer Name = MARKETA | Source = Service Control Manager | ID = 7000
Description = Služba Ovladač paralelního portu neuspěla při spuštění v důsledku
následující chyby: %%1058


< End of report >
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Prevntivní - problémy s připojením na internet

#5 Příspěvek od motji »

:arrow: Odinstalujte Demon toolbar a všechny toolbary, které nepoužíváte


:arrow: Spustte OTL
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
E - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-1220945662-1202660629-682003330-1004\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\Pocitac\Nabídka Start\Programy\Po spuštění\Zástupce - Multiclicker-win.lnk = E:\TOM\Software\Multiclicker\Multiclicker-win.exe ()
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\Program Files\Eurotran 2003\e2003i.dll ()
O9 - Extra 'Tools' menuitem : Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - E:\Program Files\Eurotran 2003\e2003i.dll ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O33 - MountPoints2\{1636bf3c-4f75-11dd-a8c1-001d92213d5e}\Shell\AutoRun\command - "" = F:\wd_windows_tools\WDSetup.exe -- File not found
O33 - MountPoints2\{2f1ebf86-d921-11de-aa26-001d92213d5e}\Shell\AutoRun\command - "" = J:\SamsungSoftware\APPInst.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\Auto\command - "" = G:\auto.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\explore\Command - "" = G:\vpfdvcjx.exe -- File not found
O33 - MountPoints2\{d3d1defa-d256-11dd-a93a-000ea13178f7}\Shell\open\Command - "" = G:\vpfdvcjx.exe -- File not found
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Data aplikací\Temp:671329E4

:files
C:\Program Files\DAEMON Tools Toolbar

:COMMANDS
[Reboot]
-klikněte na tlačítko Run fix.
-Následně se pc restartuje.
- Log vložte zde :)


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
-nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
-po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


:arrow: Zapojte do pc všechny usb klíče, flashky...co používáte

:arrow: Stáhněte na plochu UsbFix
-spusťte, zvolte jazyk E - potvrdťe enter
-klikněte na volbu 2 - enter
- po skenu sem vložte log , pokud na Vás nevyskočí, najdete ho C:\UsbFix.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
TomDIVER
Návštěvník
Návštěvník
Příspěvky: 53
Registrován: 17 čer 2007 10:30

Re: Prevntivní - problémy s připojením na internet

#6 Příspěvek od TomDIVER »

Tak to sice trošku trvalo, ale dopadlo to :D Ccleaner používám. Takže uklízení a mazání registrů dělám skoro pravidelně. Program jsme použil i pro odinstalování toolbarů.
No a pokud jdem o USB - dělal jsem co jsem mohl, mám na PC jen 4 sloty a tak jsme se tam snažil píchnout všechny druhy, i když Flashek mám více, snad se mi podařilo vybrat všechny druhy.

log z UsbFix

a
############################## | UsbFix V6.097 |

User : Pocitac (Administrators) # MARKETA
Update on 20/02/2010 by El Desaparecido , C_XX & Chimay8
Start at: 21:23:28 | 24.2.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Pentium(R) Dual CPU E2140 @ 1.60GHz
Microsoft Windows XP Home Edition (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1368 [VPS 100224-1] 4.8.1368 [ Enabled | Updated ]

C:\ -> Místní pevný disk # 48,83 Go (35,79 Go free) # NTFS
D:\ -> Disk CD-ROM
E:\ -> Místní pevný disk # 184,05 Go (25,34 Go free) # NTFS
F:\ -> Vyměnitelný disk
G:\ -> Disk CD-ROM
H:\ -> Vyměnitelný disk # 14,9 Go (2,12 Go free) [TOM_16MB] # NTFS
I:\ -> Vyměnitelný disk # 963,7 Mo (491,25 Mo free) # FAT
J:\ -> Vyměnitelný disk
K:\ -> Vyměnitelný disk # 15,59 Mo (15,56 Mo free) # FAT
L:\ -> Vyměnitelný disk # 3,73 Go (472,64 Mo free) [FOUR TOM] # FAT32
M:\ -> Vyměnitelný disk

############################## | Active processes |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\logonui.exe
E:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe

################## | Files # Infected Folders |

Deleted ! C:\Recycler\S-1-5-21-1220945662-1202660629-682003330-1004
Deleted ! E:\Recycler\S-1-5-21-1220945662-1202660629-682003330-1004
Deleted ! H:\autorun.inf
Deleted ! H:\system.exe
Deleted ! L:\autorun.inf

################## | MD5 |


################## | Registry |


################## | Mountpoints2 |


################## | Listing of the present files |

[07.12.2007 02:13|--a------|0] C:\AUTOEXEC.BAT
[09.03.2009 22:29|--a------|192] C:\BcBtRmv.log
[07.12.2007 02:08|---hs----|211] C:\boot.ini
[02.03.2006 13:00|-rahs----|4952] C:\Bootfont.bin
[03.02.2008 18:02|--a------|13] C:\CONFIG.SYS
[07.12.2007 02:13|-rahs----|0] C:\IO.SYS
[07.12.2007 02:13|-rahs----|0] C:\MSDOS.SYS
[02.03.2006 13:00|-rahs----|47564] C:\NTDETECT.COM
[14.10.2008 18:45|-rahs----|250576] C:\ntldr
[?|?|?] C:\pagefile.sys
[09.03.2008 15:52|--a------|984744] C:\pokus.txt
[24.02.2010 21:47|--a------|3223] C:\UsbFix.txt
[08.02.2009 18:36|--a------|236614] E:\1.jpg
[17.02.2010 17:54|--a------|13] E:\24.flv.td
[08.02.2009 18:36|--a------|256070] E:\3.jpg
[17.02.2010 17:54|--a------|13] E:\5c.flv.td
[17.02.2010 17:53|--a------|13] E:\92.flv.td
[18.10.2009 08:33|--a------|22936] E:\aditiva.zip
[02.01.2010 20:59|--a------|7453445] E:\Alcohol 120% 1.9.6.4719 Retail.zip
[17.02.2010 18:04|--a------|13] E:\b4.flv.td
[06.12.2008 15:36|--a------|171098] E:\Balonky.swf
[14.12.2008 13:45|--a------|167708] E:\colorzilla-2.0-.xpi
[26.12.2009 19:15|--a------|152] E:\f.FAT32-NTFS.zip
[15.12.2009 19:08|--a------|286966] E:\Harry_Potter_And_The_Half-blood_Prince_Czech_Custom-[cdcovers_cc]-cd1.jpg
[15.12.2009 18:53|--a------|443025] E:\Ice_Age_3_Custom-[cdcovers_cc]-cd1.jpg
[15.12.2009 18:49|--a------|1727256] E:\Ice_Age_Dawn_Of_The_Dinosaurs_Czech_R2_Custom-[cdcovers_cc]-front.jpg
[02.11.2009 22:56|--a------|2580482] E:\kolekce_obleceni_Merida_2009.pdf
[15.12.2009 19:10|--a------|383788] E:\Monster_Vs_Alien_R1-[cdcovers_cc]-cd1.jpg
[02.11.2009 22:59|--a------|20582670] E:\Pells09_SportWear.pdf
[26.12.2009 20:11|--a------|1322445] E:\PF 2010.pptx
[01.10.2009 19:41|--a------|4694425600] E:\The Settlers - games.iso
[15.12.2009 19:25|--a------|389871] E:\Tinker_Bell_And_The_Lost_Treasure_Custom-[cdcovers_cc]-cd1.jpg
[15.12.2009 19:39|--a------|249211] E:\Transformers_Revenge_Of_The_Fallen_R1_Custom-[cdcovers_cc]-cd1.jpg
[15.12.2009 19:39|--a------|122204] E:\Transformers_Revenge_Of_The_Fallen_R1_Custom-[cdcovers_cc]-cd2.jpg
[15.12.2009 19:33|--a------|490565] E:\Up__R2_Custom-[cdcovers_cc]-cd1.jpg
[28.08.2009 19:04|--ah-----|4096] H:\._.Trashes
[10.04.2009 17:29|--a------|126] H:\Avast licencni kliź 2009.txt
[09.12.2009 20:05|--a------|124783] H:\bookmarks od Markety z PC.html
[10.07.2008 14:27|--a------|393702] H:\Centrum erotiky - erotika, porno a sex od A po Z..txt
[24.10.2007 13:43|--a------|3289237] H:\enter_the_east.mp3
[17.02.2010 18:50|--a------|119] H:\Fux - Bondage Babe Gives Head To A Big Cock While Trapped In A Cage.URL
[17.02.2010 18:50|--a------|137] H:\Fux - Hot Asian Sucks Hard On A Stiff Cock Then Gets It Shoved Deep In Her Tight Cunt.URL
[17.02.2010 18:50|--a------|123] H:\Fux - Jude Indica - Jude Indica Passed Around By Her Master Made To Suck Strange Cock.URL
[03.07.2009 15:23|--a------|4564] H:\HARTMAN_TOMµć.p12
[21.12.2009 14:33|--a------|1128468] H:\IMG_3524.JPG
[12.01.2009 15:21|--a------|491008] H:\Kalkulace çablona.xlt
[10.03.2009 08:21|--a------|13] H:\KeePass.ifo
[11.01.2010 14:29|--a------|23340] H:\KeePassDatabase.kdb
[19.11.2009 22:26|--a------|632] H:\klikani paypal.txt
[27.01.2010 13:28|--a------|277] H:\Metin2 login.txt
[16.03.2009 19:00|--a------|535157720] H:\Metin2_20081120.exe
[09.01.2009 19:54|--a------|52] H:\Nikźa ICQ.txt
[28.12.2009 13:43|--a------|374884] H:\PF2010TOM.pdf
[28.12.2009 13:43|--a------|74041] H:\PF_2010_TOM.jpg
[14.01.2010 15:15|--a------|338] H:\potapecska vez Nemecko.txt
[10.11.2009 15:11|--a------|128000] H:\ROBO Seznam DVD.xls
[17.02.2010 18:50|--a------|87] H:\SeekBang.com - A Social Network for SEX! Adult Personals Sex Dating Hook Up site.URL
[14.12.2009 17:34|--a------|1203] H:\stahni flv.txt
[21.05.2008 22:02|--a------|88712] H:\StartPortableApps.exe
[19.10.2009 18:56|--a------|2089028] H:\Suunto Cobra CZ A4.pdf
[28.12.2009 13:37|--a------|1320992] H:\TOM Divers2.psd
[02.09.2009 21:33|--a------|19968] H:\Trimix věpoźty.xls
[18.10.2009 16:11|--a------|8058] H:\uloz FLV.txt
[30.01.2010 01:50|--a------|1219] H:\uloz-to.txt
[16.10.2009 14:51|--a------|1296896] H:\ZYP - Pavel Prucha.sdl
[09.01.2009 19:54|--a------|52] L:\Nikźa ICQ.txt
[16.10.2009 14:51|--a------|1296896] L:\ZYP - Pavel Prucha.sdl
[18.10.2009 16:11|--a------|8058] L:\uloz FLV.txt
[16.10.2009 14:44|--a------|1304064] L:\Praha.doc
[14.12.2009 17:34|--a------|1203] L:\stahni flv.txt
[28.08.2009 19:04|--ah-----|4096] L:\._.Trashes
[10.07.2008 14:27|--a------|393702] L:\Centrum erotiky - erotika, porno a sex od A po Z..txt
[21.12.2009 14:19|--a------|1100] L:\uloz-to.txt
[09.12.2009 10:39|--a------|5428] L:\BOOTEX.LOG
[02.09.2009 21:33|--a------|19968] L:\Trimix věpoźty.xls
[23.10.2009 17:55|--a------|939918] L:\M01.mpg.idx
[25.10.2009 10:57|--a------|3146961] L:\noty.ZIP
[19.10.2009 18:56|--a------|2089028] L:\Suunto Cobra CZ A4.pdf
[25.10.2009 11:49|--a------|13622] L:\Poser - Millennium Centaurs [mininova].torrent
[25.10.2009 11:31|--a------|17356] L:\DAZ3D Poser hongyu Maiden Lingerie II V4 A4 V3 A3 [mininova].torrent
[25.10.2009 11:26|--a------|11035] L:\FRAD-Riona [mininova].torrent
[25.10.2009 11:22|--a------|11297] L:\Pamela-A4.zip [mininova].torrent
[10.04.2009 17:29|--a------|126] L:\Avast licencni kliź 2009.txt
[25.10.2009 11:21|--a------|7788] L:\Ynes V4 [mininova].torrent
[14.08.2009 08:57|--a------|1115513] L:\Mongol Cingischan.jpg
[16.05.2009 16:42|---h-----|675840] L:\~WRL1248.tmp
[25.10.2009 11:26|--a------|8848] L:\AS-Akhyel Suit V3.zip [mininova].torrent
[25.10.2009 11:24|--a------|928] L:\ps_mo249b_V4Expressions.exe [mininova].torrent
[19.08.2009 06:15|--a------|270629] L:\ćifra Karla Velik‚ho.jpg
[10.11.2009 15:11|--a------|128000] L:\ROBO Seznam DVD.xls
[09.12.2009 20:05|--a------|124783] L:\bookmarks od Markety z PC.html
[17.12.2009 07:40|--a------|90] L:\Metin2 login.txt
[03.07.2009 15:23|--a------|4564] L:\HARTMAN_TOMµć.p12
[21.05.2008 22:02|--a------|88712] L:\StartPortableApps.exe
[19.11.2009 22:26|--a------|632] L:\klikani paypal.txt
[25.12.2009 14:41|--a------|2251837] L:\Foto z Nokie.zip
[13.12.2009 11:45|--a------|23100] L:\KeePassDatabase.kdb
[10.03.2009 08:21|--a------|13] L:\KeePass.ifo

################## | Vaccination |

# C:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# E:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# H:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# I:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# K:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# L:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | Upload |

Please send the file : C:\UsbFix_Upload_Me_MARKETA.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.097 ! |
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Prevntivní - problémy s připojením na internet

#7 Příspěvek od motji »

Klidně tam zapojte další flešky a postup zopakujte. Mimo to, že maže infekci na fleškách, na nich ještě vytvoří složku autorun.inf, která slouží jako ochrana proti tomuto viru.
Log ráda uvidím :) .

Jak to vypadá s počítačem?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
TomDIVER
Návštěvník
Návštěvník
Příspěvky: 53
Registrován: 17 čer 2007 10:30

Re: Prevntivní - problémy s připojením na internet

#8 Příspěvek od TomDIVER »

Hmm, tak to mám smolíka, další mám v práci, jsou v oběhu. Jinak už to vypadá dobře, video už běží na pohodu. Tu hru ale dnes už zkoušet nebudu. Pofrčím do hajan. Moc díky za čas :wink:
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Prevntivní - problémy s připojením na internet

#9 Příspěvek od motji »

Tak program spustíte později. Pak se ozvěte, ještě uklidíme :)
Není zač :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“