Problemy po zrychleni pocitaca

Zpráva

Judzi · #1 Příspěvek od **Judzi** » 01 bře 2010 14:50

Dobry den. asi 5 dni do zadu som riesil problem pomaleho pocitaca

http://www.viry.cz/forum/viewtopic.php?f=13&t=98115

Momentalne ide pc super rychlo. Nainstaloval som donho Comodo Firewall. Nastavil som bezpecne programy, povolil som vsetko co som chcel aby bolo povelene. Len ked som tak cca 20 minut na nete (vsetko fici tak ako ma) tak mi zrazu prehliadac vypise ze nelze zobrazit stranku (je jedno ci pouzijem IE alebo Mozzilu ci Operu). pritom modem je pripojeny. ked chcem zobrazit okno modemu tak mi len blikne na stvrt sekundy a nic sa neda vidiet. Skusal som aj winsockxpfix, no nepomohlo. Pocas toho ako mi vypne internet, nejde spustit ziadny program. Ked som si zapol spravcu uloh tak tam bol jeden proces "procesy systemovej necinnosti" vyuzitie mal 99. Neviem ci je to normalne alebo ci to nesposobuje njaky vir, lebo aj momentalne co som na nete tak cca 10-15 minut mam objem prijatych dat 2 159 014 bajtov. Snad som to napisal zrozumitelne.

Vdaka

#2 Příspěvek od **stell** » 01 bře 2010 15:38

Ahoj
1:"procesy systemovej necinnosti" vyuzitie mal 99=v pohode takto ma byt,to jest system nezatazuje nic,,
2:nelze zobrazit stranku >>ak takto je moze byt comodo firewall na pricine skus odinstalovat a uvidis.
3:prijate-odoslane data je podla mna ok,pocitac komunikuje takze prijima data,,,
Podla stavu systemovej necinnosti pc je ok,,
ale mozes preskanovat pc z AVP-Tool a log vloz sem
http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

Judzi · #3 Příspěvek od **Judzi** » 03 bře 2010 15:04

Neviem ako prisiel ten program na to "14671 days ago ".

tu je log...

Autoscan: completed 14671 days ago (events: 8, objects: 547615, time: 03:39:37)
2.3.2010 19:25:18 Task started
2.3.2010 21:13:42 Processing error D:\Dokumenty\VERONIKA\Dokumenty\Škola\Fotky\Gymnázium\Akcie\šk. rok 2006-2007\ŠPORT\Futbalový turnaj 3.5.2007\Futbalový turnaj 3.5.2007 024.jpg Read error
2.3.2010 21:30:06 Detected: Backdoor.Win32.Bifrose.cgsf D:\System Volume Information\_restore{E648EB66-2411-4BEC-A052-759332D26A76}\RP8\A0005599.exe/#
2.3.2010 21:31:14 Deleted: Backdoor.Win32.Bifrose.cgsf D:\System Volume Information\_restore{E648EB66-2411-4BEC-A052-759332D26A76}\RP8\A0005599.exe
2.3.2010 21:54:55 Detected: Trojan.Win32.Pasta.cvy E:\System Volume Information\_restore{E648EB66-2411-4BEC-A052-759332D26A76}\RP8\A0005600.exe/UPX
2.3.2010 21:57:52 Deleted: Trojan.Win32.Pasta.cvy E:\System Volume Information\_restore{E648EB66-2411-4BEC-A052-759332D26A76}\RP8\A0005600.exe
2.3.2010 22:46:37 Processing error D:\Dokumenty\VERONIKA\Dokumenty\Škola\Fotky\Gymnázium\Akcie\šk. rok 2006-2007\ŠPORT\Futbalový turnaj 3.5.2007\Futbalový turnaj 3.5.2007 024.jpg Read error
2.3.2010 23:04:55 Task completed

#4 Příspěvek od **stell** » 03 bře 2010 15:11

ani ja,

Treba vypnut obnovu sytemu na vsetkych jednotkach-restart a zapnut spat,,a malo by too byt ok,

Judzi · #5 Příspěvek od **Judzi** » 03 bře 2010 20:24

Vdaka.

Judzi · #6 Příspěvek od **Judzi** » 03 bře 2010 21:24

Tak som tu zas.

PC po restarte islo v pohode (restartol som ho s vypnutym obnovovanim) potom som ho zapol a siel na net. no zrazu net seklo ako pred tym. modem pripojeny, neda sa zobrazit okno stavu pripojenia. ziadny prehliadac nezobrazi net. nejde ani odpojit proste pc ako keby nereagoval. Myska sa ale hybe a okna otvori (napr. tento pocitac, dokumenty a pod. ale trva mu to dlho.) CPU je stale na 100%. spravil som zopar screenov:

: problem 2.JPG (81.06 KiB) Zobrazeno 4169 x

procesy vyzeraju takto (nehal som to velke kvoli citatelnosti)

problem3.JPG: (81.65 KiB) Staženo 328 x

Popri tom som mal pusteny WMP. vsetko hralo no po seknuti netu sa stalo ze mi wmp nedokazal prehrat skladby ktore pre dym hrali:

: problem.JPG (16.13 KiB) Zobrazeno 4169 x

Modem som preinstaloval pred scanom AVP Tool. AVP Tool problem s modemom nehlasil. Firewall nemam nainstalovany. Internet po restarte PC vzdy nabehne bez problemov. No potom ho zasa sekne. Na net sa da potom dostat az po dalsom restarte.
Sorry za hrozny prispevok ale som uz z toho PC zufaly.

#7 Příspěvek od **stell** » 04 bře 2010 07:41

Stiahni spust,a log vloz sem

http://screen317.spywareinfoforum.org/SecurityCheck.exe

Stahni OTListIt2>> OTL
- spust
-zafajkni
-Scan all users.
-Lop check.
-Purity check.
-v sekciiExtra Registry>zaboduj>Use SafeList
-do okna Custom Scans/Fixes>vloz zeleny text a klik Run SCAN
-scan trva [10-15 min]>.potom vloz sem
-OTL.txt (bude na ploche).
-Extras.txt [bude dole na hlavnom panely]

Kód: Vybrat vše

netsvcs
%SYSTEMDRIVE%\*.exe
%SYSTEMDRIVE%\eventlog.dll /s /md5
%SYSTEMDRIVE%\scecli.dll /s /md5
%SYSTEMDRIVE%\netlogon.dll /s /md5
%SYSTEMDRIVE%\cngaudit.dll /s /md5
%SYSTEMDRIVE%\sceclt.dll /s /md5
%SYSTEMDRIVE%\ntelogon.dll /s /md5
%SYSTEMDRIVE%\logevent.dll /s /md5
%SYSTEMDRIVE%\iaStor.sys /s /md5
%SYSTEMDRIVE%\nvstor.sys /s /md5
%SYSTEMDRIVE%\atapi.sys /s /md5
%SYSTEMDRIVE%\IdeChnDr.sys /s /md5
%SYSTEMDRIVE%\viasraid.sys /s /md5
%SYSTEMDRIVE%\AGP440.sys /s /md5
%SYSTEMDRIVE%\vaxscsi.sys /s /md5
%SYSTEMDRIVE%\nvatabus.sys /s /md5
%SYSTEMDRIVE%\viamraid.sys /s /md5
%SYSTEMDRIVE%\nvata.sys /s /md5
%SYSTEMROOT%\*. /mp /s
CREATERESTOREPOINT
%SYSTEMROOT%\system32\*.dll /lockedfiles
%SYSTEMROOT%\Tasks\*.job /lockedfiles

Judzi · #8 Příspěvek od **Judzi** » 04 bře 2010 15:14

Log zo SecurityCheck:

Results of screen317's Security Check version 0.99.1
Windows XP Service Pack 2
Out of date service pack!!
``````````````````````````````
Antivirus/Firewall Check:
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Disabled!
ESET NOD32 Antivirus
Antivirus up to date!
``````````````````````````````
Anti-malware/Other Utilities Check:
Ad-Aware
SpywareBlaster 4.2
Spybot - Search & Destroy
SUPERAntiSpyware Free Edition
Rootkit Unhooker LE 3.8 SR 1
HijackThis 2.0.2
CCleaner
Java(TM) SE Runtime Environment 6 Update 1
Adobe Flash Player 10
Adobe Reader 8 - Czech
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent
Ad-Aware AAWService.exe
Ad-Aware AAWTray.exe is disabled!
``````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````

Tu je OTL.txt

OTL logfile created on: 4.3.2010 14:43:06 - Run 1
OTL by OldTimer - Version 3.1.33.0 Folder = C:\Documents and Settings\Ocko\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 164,00 Mb Available Physical Memory | 32,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 10,47 Gb Free Space | 21,43% Space Free | Partition Type: NTFS
Drive D: | 78,13 Gb Total Space | 2,64 Gb Free Space | 3,38% Space Free | Partition Type: NTFS
Drive E: | 62,96 Gb Total Space | 13,55 Gb Free Space | 21,52% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JKIRKA
Current User Name: Ocko
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.03.04 14:05:15 | 000,552,960 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ocko\Desktop\OTL.exe
PRC - [2009.06.01 21:20:12 | 000,222,968 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe
PRC - [2009.05.14 14:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.05.14 14:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008.07.07 08:15:18 | 000,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2004.12.01 08:54:22 | 000,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2004.08.04 13:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004.06.16 06:55:20 | 000,233,472 | R--- | M] (Conexant Systems, Inc.) -- C:\Program Files\Microcom\ADSL DeskPorte USB\CnxDslTb.exe

========== Modules (SafeList) ==========

MOD - [2010.03.04 14:05:15 | 000,552,960 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ocko\Desktop\OTL.exe
MOD - [2004.08.04 13:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - [2009.06.02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (servicelayer)
SRV - [2009.06.01 21:20:12 | 000,222,968 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (icq service)
SRV - [2009.05.14 14:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (ehttpsrv)
SRV - [2009.05.14 14:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.07.07 08:15:18 | 000,611,664 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice)
SRV - [2004.03.18 16:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

========== Driver Services (SafeList) ==========

DRV - [2010.01.24 08:40:18 | 000,051,072 | ---- | M] (Identcode Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\ANGELNT.SYS -- (Angelnt)
DRV - [2009.05.14 14:49:32 | 000,094,360 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.05.14 14:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.05.14 14:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.02 19:07:31 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.04.01 23:37:14 | 000,223,128 | ---- | M] (DT Soft Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi)
DRV - [2008.02.29 15:03:48 | 000,008,944 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2008.02.29 15:03:46 | 000,051,440 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2008.02.26 06:51:43 | 002,863,616 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007.04.04 12:43:38 | 000,098,952 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716unic.sys -- (s716unic) Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (WDM)
DRV - [2007.04.04 12:43:36 | 000,098,568 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716obex.sys -- (s716obex)
DRV - [2007.04.04 12:43:36 | 000,023,176 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716nd5.sys -- (s716nd5) Sony Ericsson Device 716 USB Ethernet Emulation SEMC716 (NDIS)
DRV - [2007.04.04 12:43:34 | 000,108,552 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716mdm.sys -- (s716mdm)
DRV - [2007.04.04 12:43:34 | 000,100,360 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716mgmt.sys -- (s716mgmt) Sony Ericsson Device 716 USB WMC Device Management Drivers (WDM)
DRV - [2007.04.04 12:43:32 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716mdfl.sys -- (s716mdfl)
DRV - [2007.04.04 12:43:20 | 000,083,208 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s716bus.sys -- (s716bus) Sony Ericsson Device 716 driver (WDM)
DRV - [2007.04.03 13:57:48 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdm.sys -- (s116mdm)
DRV - [2007.04.03 13:57:48 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdfl.sys -- (s116mdfl)
DRV - [2007.04.03 13:57:42 | 000,083,336 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2006.03.13 18:35:28 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2006.03.13 18:35:26 | 000,081,728 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)
DRV - [2006.03.13 18:35:20 | 000,089,872 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)
DRV - [2006.03.13 18:35:18 | 000,006,576 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)
DRV - [2006.03.13 18:35:12 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM)
DRV - [2006.02.16 15:51:08 | 000,004,096 | R--- | M] (SuperAdBlocker, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\sasenum.sys -- (SASENUM)
DRV - [2004.12.07 09:15:54 | 000,087,936 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2004.12.01 13:40:08 | 002,300,928 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2004.11.24 10:42:48 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2004.11.24 10:42:46 | 000,033,408 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvenetfd.sys -- (NVENETFD)
DRV - [2004.11.16 10:54:06 | 000,038,336 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\MSI\Core Center\rushtop.sys -- (RushTopDevice)
DRV - [2004.10.21 04:39:44 | 000,035,840 | R--- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004.08.03 23:00:14 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\Changer.sys -- (Changer)
DRV - [2004.08.03 22:59:34 | 000,034,688 | ---- | M] (Toshiba Corp.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\lbrtfdc.sys -- (lbrtfdc)
DRV - [2004.06.16 06:51:56 | 000,614,272 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CnxEtU.sys -- (CnxEtU)
DRV - [2004.06.16 06:51:56 | 000,060,416 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CnxTgNP.sys -- (CnxTgNP)
DRV - [2004.06.16 06:51:50 | 000,131,072 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CnxEtP.sys -- (CnxEtP)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.zoznam.sk/
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\S-1-5-21-1935655697-1563985344-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http:/www.zoznam.sk"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... id=afex&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.11.04 20:14:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.02.27 11:27:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.02.19 06:54:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009.07.15 06:46:10 | 000,000,000 | ---D | M]

[2008.07.28 14:14:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Extensions
[2009.10.29 17:21:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\extensions
[2009.02.04 21:14:39 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\bsplayer-search.xml
[2010.02.28 20:22:10 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-1.xml
[2009.02.04 21:39:13 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-10.xml
[2009.03.07 17:20:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-11.xml
[2009.03.28 22:07:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-12.xml
[2009.04.23 13:08:17 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-13.xml
[2009.04.29 07:10:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-14.xml
[2009.06.13 19:05:03 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-15.xml
[2009.07.06 07:04:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-16.xml
[2009.07.23 08:12:15 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-17.xml
[2009.08.09 20:06:50 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-18.xml
[2009.08.10 08:58:00 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-19.xml
[2008.07.28 14:14:31 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-2.xml
[2009.10.29 13:44:01 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-20.xml
[2009.11.07 11:19:18 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-21.xml
[2009.12.01 20:13:16 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-22.xml
[2010.01.08 20:04:35 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-23.xml
[2010.02.19 06:55:16 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-24.xml
[2008.07.29 15:05:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-3.xml
[2008.09.26 21:03:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-4.xml
[2008.09.28 06:51:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-5.xml
[2008.11.15 13:55:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-6.xml
[2008.11.22 15:12:09 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-7.xml
[2008.11.22 21:40:17 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-8.xml
[2008.12.18 06:51:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin-9.xml
[2008.03.31 08:52:00 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin.gif
[2008.03.31 08:52:00 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin.src
[2009.07.13 16:12:02 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\Mozilla\Firefox\Profiles\jfna20ew.default\searchplugins\icqplugin.xml
[2010.03.02 17:19:35 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.07.19 19:05:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.12.22 12:43:42 | 000,279,888 | ---- | M] (Musicnotes, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npmusicn.dll
[2008.09.10 13:49:14 | 005,817,064 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\ScorchPDFWrapper.dll
[2009.07.23 08:11:51 | 000,001,583 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\atlas-sk.xml
[2009.07.23 08:11:51 | 000,001,380 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\azet-sk.xml
[2009.07.23 08:11:51 | 000,001,479 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\dunaj-sk.xml
[2009.07.23 08:11:51 | 000,001,473 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slovnik-sk.xml
[2009.07.23 08:11:51 | 000,001,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sk.xml
[2009.07.23 08:11:51 | 000,000,830 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2010.03.02 18:05:27 | 000,000,736 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll (TechSmith Corporation)
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (SnagIt) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll (TechSmith Corporation)
O3 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\..\Toolbar\WebBrowser: (no name) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - No CLSID value found.
O4 - HKLM..\Run: [CnxDslTaskBar] File not found
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UserFaultCheck] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\Ocko\Start Menu\Programs\Startup\winesm32.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O7 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {e59eb121-f339-4851-a3ba-fe49c35617c2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {e59eb121-f339-4851-a3ba-fe49c35617c2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} http://asp02.photoprintit.de/microsite/ ... oader4.cab (IPSUploader4 Control)
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} https://asp.photoprintit.de/microsite/5 ... oader4.cab (IPSUploader4 Control)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: D:\Dokumenty\JURKO\Dokumenty\Obrázky\Moje\autá\medved SLK.bmp
O24 - Desktop BackupWallPaper: D:\Dokumenty\JURKO\Dokumenty\Obrázky\Moje\autá\medved SLK.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.04.01 22:15:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2008.04.01 22:14:59 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (55453963436163072)

========== Files/Folders - Created Within 30 Days ==========

[2010.03.04 14:06:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Desktop\logy na anti
[2010.03.04 14:04:23 | 000,552,960 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ocko\Desktop\OTL.exe
[2010.03.03 16:30:06 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Ocko\Recent
[2010.03.02 17:55:26 | 000,060,416 | R--- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\CnxTgNP.sys
[2010.03.02 17:55:08 | 001,671,168 | R--- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\cnxci.dll
[2010.03.02 17:55:07 | 000,614,272 | R--- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\CnxEtU.sys
[2010.03.02 17:55:07 | 000,131,072 | R--- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\CnxEtP.sys
[2010.02.28 15:19:18 | 000,000,000 | ---D | C] -- C:\Program Files\Resource Kit
[2010.02.27 23:14:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Application Data\Comodo
[2010.02.27 23:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\COMODO
[2010.02.27 22:24:19 | 000,000,000 | ---D | C] -- C:\Program Files\RootkitUnhooker
[2010.02.27 12:10:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Samsung_USB_Drivers
[2010.02.27 12:09:48 | 000,233,472 | ---- | C] (Teruten) -- C:\WINDOWS\System32\FsUsbExService.Exe
[2010.02.27 12:09:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\My Documents\My NPS Files
[2010.02.27 12:09:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Application Data\Samsung
[2010.02.27 12:08:37 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAny
[2010.02.27 12:07:07 | 000,000,000 | ---D | C] -- C:\Program Files\Samsung
[2010.02.26 16:49:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010.02.26 16:16:09 | 001,028,608 | ---- | C] (J.C. Kessels) -- C:\WINDOWS\System32\MyDefragScreenSaver v4.2.8.exe
[2010.02.26 16:16:09 | 000,432,640 | ---- | C] (J.C. Kessels) -- C:\WINDOWS\System32\MyDefragScreenSaver v4.2.8.scr
[2010.02.26 16:16:07 | 000,000,000 | ---D | C] -- C:\Program Files\MyDefrag v4.2.8
[2010.02.26 14:00:30 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.02.26 13:57:56 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010.02.26 13:54:12 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010.02.26 13:34:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.02.26 11:39:34 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.02.25 12:04:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Application Data\Malwarebytes
[2010.02.25 12:04:24 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.02.25 12:04:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.02.25 12:04:20 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.02.25 12:04:18 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.02.25 11:04:20 | 000,000,000 | ---D | C] -- C:\_OTM
[2010.02.24 19:18:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Desktop\zaloha alfa 24.2.2010 19.20
[2010.02.21 22:47:29 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\drivers\lbrtfdc.sys
[2010.02.21 22:47:29 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2010.02.21 22:47:07 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2010.02.21 22:46:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Changer.sys
[2010.02.21 22:46:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\changer.sys
[2010.02.20 12:08:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Desktop\KRIMINALITA - more zdravia
[2010.02.14 21:21:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Desktop\umk
[2010.02.10 19:39:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\My Documents\Nový priečinok (4)
[2010.02.09 21:18:36 | 000,404,480 | ---- | C] (Lambda Core) -- C:\Documents and Settings\Ocko\Desktop\DocReader.exe
[2010.02.04 21:51:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ocko\Desktop\Foto lad
[2009.08.17 06:17:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2008.05.07 13:08:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2008.04.01 22:19:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008.04.01 22:18:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2008.04.01 22:15:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008.04.01 22:15:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft

========== Files - Modified Within 30 Days ==========

[2010.03.04 14:53:21 | 000,792,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\ahvoncix.sys
[2010.03.04 14:30:13 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.03.04 14:29:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.03.04 14:29:16 | 019,922,944 | ---- | M] () -- C:\Documents and Settings\Ocko\NTUSER.DAT
[2010.03.04 14:29:12 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Ocko\ntuser.ini
[2010.03.04 14:12:15 | 000,114,309 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\problem 4.JPG
[2010.03.04 14:05:15 | 000,552,960 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ocko\Desktop\OTL.exe
[2010.03.03 21:36:23 | 000,083,605 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\problem3.JPG
[2010.03.03 21:27:51 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.03.03 21:18:42 | 000,016,515 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\problem.JPG
[2010.03.03 21:12:56 | 000,083,004 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\problem 2.JPG
[2010.03.03 16:58:02 | 000,000,704 | ---- | M] () -- C:\WINDOWS\eporadca_0905.ini
[2010.03.03 07:57:05 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_vxfmp
[2010.03.03 07:46:53 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_uorrg
[2010.03.03 07:43:25 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\avdrn.dat
[2010.03.02 19:17:43 | 000,000,782 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.03.02 19:17:43 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.03.02 19:17:43 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.03.02 18:05:27 | 000,000,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.03.02 17:55:33 | 000,001,448 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microcom ADSL DeskPorte USB.lnk
[2010.03.02 07:48:19 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_lspxs
[2010.03.02 07:47:43 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_ssver
[2010.03.01 23:34:11 | 000,034,816 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\antigona.doc
[2010.03.01 23:02:37 | 000,041,984 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\shakespeare.doc
[2010.03.01 23:00:32 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\docreader.ini
[2010.03.01 22:19:03 | 000,004,845 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\william_shakespeare__15993.rtf
[2010.03.01 21:56:41 | 000,039,424 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Čitateľský denník.doc
[2010.03.01 16:13:47 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Ocko\Desktop\~$vý objekt - Dokument programu Microsoft Word (2).doc
[2010.02.28 23:13:35 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.02.28 20:47:44 | 000,000,798 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2010.02.28 20:06:49 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Ocko\My Documents\PDVD_MediaDisc.PlayList
[2010.02.28 16:56:52 | 000,079,360 | ---- | M] () -- C:\Documents and Settings\Ocko\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.02.28 16:09:31 | 000,002,389 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\602XML Filler.lnk
[2010.02.27 23:45:40 | 000,000,130 | ---- | M] () -- C:\WINDOWS\cfplogvw.INI
[2010.02.27 23:34:58 | 013,949,469 | ---- | M] () -- C:\Documents and Settings\Ocko\My Documents\Hiromi Uehara - The Tom and Jerry Show_0
[2010.02.27 19:10:13 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Nový objekt - Dokument programu Microsoft Word (2).doc
[2010.02.27 12:09:25 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\$_hpcst$.hpc
[2010.02.27 12:08:40 | 000,001,887 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Samsung New PC Studio.lnk
[2010.02.26 13:07:17 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.02.25 10:57:33 | 002,949,174 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\viry.bmp
[2010.02.25 09:58:54 | 000,026,112 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\HODNOTY.doc
[2010.02.25 04:30:31 | 000,379,546 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100225-043207.backup
[2010.02.24 14:08:31 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.02.21 22:45:47 | 000,000,012 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\cqfyto.dat
[2010.02.20 12:05:38 | 001,665,294 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\KRIMINALITA - more zdravia.rar
[2010.02.19 08:38:24 | 000,043,008 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Kremnica-Krahule_-_text opravene.doc
[2010.02.15 16:32:44 | 000,280,385 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\pocasicko.rar
[2010.02.15 16:27:28 | 000,284,193 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\pocasicko.jpg
[2010.02.14 22:35:27 | 000,030,720 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Pohronsko-_kremnický_okruh-text opravene.doc
[2010.02.14 21:54:48 | 000,136,704 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Nový objekt - Dokument programu Microsoft Word.doc
[2010.02.14 21:24:03 | 000,055,972 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Afrodita4_550.jpg
[2010.02.14 21:18:05 | 000,007,351 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\clanok_foto.jpg
[2010.02.14 21:17:38 | 000,019,862 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\4102-amon.jpg
[2010.02.14 19:47:48 | 002,162,102 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Pohronsko-kremnicky.bmp
[2010.02.14 19:43:48 | 002,144,174 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\kremnica- krahule.bmp
[2010.02.14 16:00:54 | 000,210,162 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\image12421.jpg
[2010.02.14 14:12:34 | 000,029,696 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\pohronsko kremnicky okruh.doc
[2010.02.13 12:23:44 | 001,028,608 | ---- | M] (J.C. Kessels) -- C:\WINDOWS\System32\MyDefragScreenSaver v4.2.8.exe
[2010.02.09 21:49:55 | 000,048,128 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Test - Xl0000000(1) (5).xls
[2010.02.09 21:18:49 | 000,110,474 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\William Shakespeare - Hamlet.doc.pdb
[2010.02.09 21:18:47 | 000,404,480 | ---- | M] (Lambda Core) -- C:\Documents and Settings\Ocko\Desktop\DocReader.exe
[2010.02.09 21:05:10 | 000,034,501 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\William_Shakespeare_-_Hamlet.rar
[2010.02.09 17:36:05 | 000,057,856 | ---- | M] () -- C:\Documents and Settings\Ocko\Desktop\Sj- čitatelsky WILLIAM SHAKESPEARE.doc
[2010.02.05 12:00:46 | 000,432,640 | ---- | M] (J.C. Kessels) -- C:\WINDOWS\System32\MyDefragScreenSaver v4.2.8.scr

========== Files Created - No Company Name ==========

[2010.03.04 14:12:15 | 000,114,309 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\problem 4.JPG
[2010.03.03 21:03:20 | 000,083,004 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\problem 2.JPG
[2010.03.03 20:59:00 | 000,083,605 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\problem3.JPG
[2010.03.03 20:47:23 | 000,016,515 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\problem.JPG
[2010.03.03 07:57:05 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_vxfmp
[2010.03.03 07:46:53 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_uorrg
[2010.03.03 07:44:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ahvoncix.sys
[2010.03.03 07:43:33 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\NetworkService\Application Data\rbuwzv.dat
[2010.03.03 07:43:25 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Ocko\Application Data\avdrn.dat
[2010.03.02 17:55:33 | 000,001,448 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Microcom ADSL DeskPorte USB.lnk
[2010.03.02 07:48:19 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_lspxs
[2010.03.02 07:47:43 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_ssver
[2010.03.01 23:02:54 | 000,034,816 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\antigona.doc
[2010.03.01 22:19:01 | 000,004,845 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\william_shakespeare__15993.rtf
[2010.03.01 22:13:51 | 000,041,984 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\shakespeare.doc
[2010.03.01 16:51:24 | 000,039,424 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Čitateľský denník.doc
[2010.03.01 16:13:47 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Ocko\Desktop\~$vý objekt - Dokument programu Microsoft Word (2).doc
[2010.02.27 23:40:49 | 000,000,130 | ---- | C] () -- C:\WINDOWS\cfplogvw.INI
[2010.02.27 23:34:49 | 013,949,469 | ---- | C] () -- C:\Documents and Settings\Ocko\My Documents\Hiromi Uehara - The Tom and Jerry Show_0
[2010.02.27 18:24:21 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Nový objekt - Dokument programu Microsoft Word (2).doc
[2010.02.27 12:09:49 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010.02.27 12:09:48 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010.02.27 12:09:25 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Ocko\Application Data\$_hpcst$.hpc
[2010.02.27 12:08:40 | 000,001,887 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Samsung New PC Studio.lnk
[2010.02.26 11:39:39 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.02.26 11:39:37 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010.02.25 10:57:33 | 002,949,174 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\viry.bmp
[2010.02.21 22:45:46 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Ocko\Application Data\cqfyto.dat
[2010.02.20 12:05:35 | 001,665,294 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\KRIMINALITA - more zdravia.rar
[2010.02.20 11:36:10 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\HODNOTY.doc
[2010.02.18 21:19:13 | 000,002,404 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Nero StartSmart.lnk
[2010.02.15 18:19:40 | 000,284,193 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\pocasicko.jpg
[2010.02.15 16:32:43 | 000,280,385 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\pocasicko.rar
[2010.02.14 22:23:37 | 000,030,720 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Pohronsko-_kremnický_okruh-text opravene.doc
[2010.02.14 22:22:58 | 000,043,008 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Kremnica-Krahule_-_text opravene.doc
[2010.02.14 21:24:03 | 000,055,972 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Afrodita4_550.jpg
[2010.02.14 21:18:05 | 000,007,351 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\clanok_foto.jpg
[2010.02.14 21:17:38 | 000,019,862 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\4102-amon.jpg
[2010.02.14 19:53:13 | 000,035,871 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Pohronsko - Kremnický okruh výškový profil.JPG
[2010.02.14 19:51:32 | 002,365,042 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Krahule- Kremnica Profil.bmp
[2010.02.14 19:45:30 | 002,162,102 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Pohronsko-kremnicky.bmp
[2010.02.14 19:43:02 | 002,144,174 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\kremnica- krahule.bmp
[2010.02.14 19:24:56 | 001,101,312 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Krahule - Kremnica.doc
[2010.02.14 16:00:53 | 000,210,162 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\image12421.jpg
[2010.02.14 15:50:30 | 000,136,704 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Nový objekt - Dokument programu Microsoft Word.doc
[2010.02.14 14:14:07 | 000,029,696 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\pohronsko kremnicky okruh.doc
[2010.02.09 21:49:55 | 000,048,128 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Test - Xl0000000(1) (5).xls
[2010.02.09 21:32:56 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\docreader.ini
[2010.02.09 21:18:48 | 000,110,474 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\William Shakespeare - Hamlet.doc.pdb
[2010.02.09 21:05:08 | 000,034,501 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\William_Shakespeare_-_Hamlet.rar
[2010.02.09 17:36:03 | 000,057,856 | ---- | C] () -- C:\Documents and Settings\Ocko\Desktop\Sj- čitatelsky WILLIAM SHAKESPEARE.doc
[2009.12.03 20:50:06 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2009.09.20 12:53:30 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.05.06 21:39:21 | 000,000,704 | ---- | C] () -- C:\WINDOWS\eporadca_0905.ini
[2008.06.30 07:26:45 | 000,001,747 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2008.05.30 18:29:05 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll
[2008.05.30 18:29:05 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2008.05.30 18:29:05 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2008.05.30 18:29:05 | 000,000,205 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll
[2008.04.06 21:17:54 | 000,079,360 | ---- | C] () -- C:\Documents and Settings\Ocko\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.04.04 09:38:12 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.04.02 18:23:33 | 000,000,405 | ---- | C] () -- C:\WINDOWS\System32\ANGELDOS.SYS
[2008.04.02 18:14:18 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Ocko\Local Settings\Application Data\fusioncache.dat
[2008.04.02 16:37:43 | 000,008,196 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008.04.02 14:08:38 | 000,000,325 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.04.01 22:53:32 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008.04.01 22:34:33 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll
[2008.04.01 22:31:36 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2005.12.31 15:19:08 | 001,097,728 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.12.31 15:13:14 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.11.30 12:49:56 | 000,161,792 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2005.10.14 10:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005.10.14 10:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 10:56:50 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.10.14 10:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 10:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2004.08.04 13:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004.08.04 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2003.04.07 10:38:32 | 000,005,746 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002.11.06 11:16:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\angel32.dll
[2001.01.12 10:49:38 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll

========== LOP Check ==========

[2008.04.01 23:26:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2009.07.14 21:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2008.11.10 21:05:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2009.07.19 19:05:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ICQ
[2009.11.27 08:21:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2008.11.22 21:44:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MailFrontier
[2008.12.22 12:44:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Musicnotes
[2009.11.04 20:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2008.06.20 20:32:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TechSmith
[2008.10.31 19:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Teleca
[2010.02.27 23:32:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009.07.04 07:54:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Juraj\Application Data\ESET
[2009.03.16 14:03:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Juraj\Application Data\Teleca
[2008.04.01 23:27:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\ACD Systems
[2008.04.02 19:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Acoustica
[2010.02.26 16:55:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Any Video Converter
[2010.02.26 16:55:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Any Video Converter Professional
[2009.08.26 18:59:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Blender Foundation
[2009.02.04 21:15:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\BSplayer
[2008.04.02 19:04:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\BSplayer Pro
[2009.12.13 19:47:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Design Science
[2009.06.01 14:49:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\ESET
[2008.11.30 12:15:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\GARMIN
[2008.07.02 15:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\ICQ
[2010.02.10 23:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\LimeWire
[2010.02.04 21:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Nokia
[2008.11.26 21:37:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Opera
[2009.11.04 20:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\PC Suite
[2010.02.27 12:09:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Samsung
[2008.10.31 20:13:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Teleca
[2009.08.24 17:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\Thinstall
[2010.02.27 23:35:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\uTorrent
[2008.12.14 20:35:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ocko\Application Data\zweitgeist
[2008.04.05 14:12:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veronika\Application Data\ACD Systems
[2009.07.03 13:31:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veronika\Application Data\ESET
[2008.11.06 23:29:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veronika\Application Data\Teleca

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >
[2009.01.02 14:42:56 | 057,182,054 | ---- | M] () -- C:\ALFAOstra(14.53).exe
[2009.03.10 18:48:24 | 060,158,330 | ---- | M] () -- C:\ALFAOstra(15,11) .exe
[2009.01.02 14:32:39 | 058,871,293 | ---- | M] () -- C:\ALFAOstra(15.00).exe
[2009.03.26 20:40:29 | 060,158,330 | ---- | M] () -- C:\ALFAStart.exe
[2008.06.02 09:27:14 | 010,538,520 | ---- | M] (Doctor Web, Ltd.) -- C:\launch.exe
[2008.11.10 21:01:24 | 059,659,552 | ---- | M] () -- C:\MapSource_6141.exe
[2009.11.04 20:09:59 | 033,911,376 | ---- | M] () -- C:\Nokia_PC_Suite_7_1_30_9_slk_web.exe

< %SYSTEMDRIVE%\eventlog.dll /s /md5 >
[2004.08.04 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2004.08.04 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\system32\eventlog.dll
[2004.08.04 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\system32\dllcache\eventlog.dll

< %SYSTEMDRIVE%\scecli.dll /s /md5 >
[2004.08.04 13:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2004.08.04 13:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\system32\scecli.dll
[2004.08.04 13:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\system32\dllcache\scecli.dll

< %SYSTEMDRIVE%\netlogon.dll /s /md5 >
[2004.08.04 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2004.08.04 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\system32\netlogon.dll
[2004.08.04 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\system32\dllcache\netlogon.dll

< %SYSTEMDRIVE%\cngaudit.dll /s /md5 >

< %SYSTEMDRIVE%\sceclt.dll /s /md5 >

< %SYSTEMDRIVE%\ntelogon.dll /s /md5 >

< %SYSTEMDRIVE%\logevent.dll /s /md5 >

< %SYSTEMDRIVE%\iaStor.sys /s /md5 >

< %SYSTEMDRIVE%\nvstor.sys /s /md5 >

< %SYSTEMDRIVE%\atapi.sys /s /md5 >
[2004.08.04 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2004.08.04 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

< %SYSTEMDRIVE%\IdeChnDr.sys /s /md5 >

< %SYSTEMDRIVE%\viasraid.sys /s /md5 >

< %SYSTEMDRIVE%\AGP440.sys /s /md5 >

< %SYSTEMDRIVE%\vaxscsi.sys /s /md5 >

< %SYSTEMDRIVE%\nvatabus.sys /s /md5 >
[2004.12.07 17:15:54 | 000,087,936 | ---- | M] (NVIDIA Corporation) MD5=E4F1F95A6BBBFBBFF9A713C6063AA2CB -- C:\WINDOWS\OemDir\nvatabus.sys
[2004.12.07 09:15:54 | 000,087,936 | ---- | M] (NVIDIA Corporation) MD5=E4F1F95A6BBBFBBFF9A713C6063AA2CB -- C:\WINDOWS\system32\drivers\nvatabus.sys
[2004.12.07 17:15:54 | 000,087,936 | ---- | M] (NVIDIA Corporation) MD5=E4F1F95A6BBBFBBFF9A713C6063AA2CB -- C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\nvatabus.sys
[2004.12.07 09:15:54 | 000,087,936 | R--- | M] (NVIDIA Corporation) MD5=E4F1F95A6BBBFBBFF9A713C6063AA2CB -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\nvatabus.sys
[2004.12.07 09:15:54 | 000,087,936 | R--- | M] (NVIDIA Corporation) MD5=E4F1F95A6BBBFBBFF9A713C6063AA2CB -- C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\nvatabus.sys

< %SYSTEMDRIVE%\viamraid.sys /s /md5 >

< %SYSTEMDRIVE%\nvata.sys /s /md5 >

< %SYSTEMROOT%\*. /mp /s >

< %SYSTEMROOT%\system32\*.dll /lockedfiles >
[2008.02.26 04:12:07 | 000,372,736 | ---- | M] (Advanced Micro Devices, Inc.) Unable to obtain MD5 -- C:\WINDOWS\system32\ATIDEMGX.dll

< %SYSTEMROOT%\Tasks\*.job /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 498 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8CE646EE
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:661DFA1C
< End of report >

Judzi · #9 Příspěvek od **Judzi** » 04 bře 2010 15:14

OTL Extras logfile created on: 4.3.2010 14:43:06 - Run 1
OTL by OldTimer - Version 3.1.33.0 Folder = C:\Documents and Settings\Ocko\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 164,00 Mb Available Physical Memory | 32,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 10,47 Gb Free Space | 21,43% Space Free | Partition Type: NTFS
Drive D: | 78,13 Gb Total Space | 2,64 Gb Free Space | 3,38% Space Free | Partition Type: NTFS
Drive E: | 62,96 Gb Total Space | 13,55 Gb Free Space | 21,52% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JKIRKA
Current User Name: Ocko
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDBrowse] -- "C:\Program Files\ACD Systems\ACDSee\8.0\ACDSee8.exe" "%1" (ACD Systems Ltd.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Môj CEWE Fotosvet] -- "C:\Program Files\Fotolab\Môj CEWE Fotosvet\Môj CEWE Fotosvet.exe" "%1" ()
Directory [Môj CEWE Fotosvet.exe] -- "C:\Program Files\Fotolab\Môj CEWE Fotosvet\Môj CEWE Fotosvet.exe" "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"7233:TCP" = 7233:TCP:*:Enabled:oychtdm

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Hamachi\hamachi.exe" = C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client -- (LogMeIn Inc.)
"D:\Dokumenty\JURKO\Dokumenty\Rôzne\Inštalačky rôzne\utorrent.exe" = D:\Dokumenty\JURKO\Dokumenty\Rôzne\Inštalačky rôzne\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"D:\QIP\qip.exe" = D:\QIP\qip.exe:*:Enabled:Quiet Internet Pager -- (The Author of QIP)
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- (Lime Wire, LLC)
"D:\QIP 8081\qip.exe" = D:\QIP 8081\qip.exe:*:Enabled:Quiet Internet Pager -- (The Author of QIP)
"D:\Counter Strike 1.6 a\hl.exe" = D:\Counter Strike 1.6 a\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- File not found
"D:\Counter Strike 1.6 a\hltv.exe" = D:\Counter Strike 1.6 a\hltv.exe:*:Enabled:HLTV Launcher -- (Valve)
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal)
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02e89efc-7b07-4d5a-aa03-9ec0902914ee}" = VC 9.0 Runtime
"{035E858B-2E6E-7AC7-16A9-41506F698D1E}" = Catalyst Control Center Graphics Full New
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0c973594-7ddf-4bd0-84ed-3517f7622037}" = PC Connectivity Solution
"{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}" = Scan
"{212748bb-0da5-46de-82a1-403736dc9f27}" = MSVC80_x86
"{215C3C3E-D5D5-4B78-A5B5-5E42EDA59468}_is1" = 3GP Player 2008
"{21E75254-410E-49C4-8981-2E1A2A2221F2}" = HP Diagnostic Assistant
"{2405665A-16C9-4D3A-B70E-F006220E1472}" = Overland
"{267868CE-6DFF-40F7-9C58-C01119B7B117}" = Fax
"{2BBC9458-07CA-4843-848B-5C8146E5EFA8}" = CreativeProjects
"{2F06D374-97CE-D8FB-9383-73150A2382DF}" = CCC Help English
"{2F71F2BA-B513-4113-969C-18A84D238E27}" = 1310
"{2F93BFDD-EECE-924B-54ED-B0896F03D758}" = Catalyst Control Center Graphics Previews Common
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}" = AiOSoftware
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3AE681E0-4E8D-453F-950A-48534D3C0724}" = Copy
"{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics
"{3d39e775-ddda-4327-b747-0bdc5f191331}" = Nokia PC Suite
"{41254D7B-EADF-4078-AE4A-BD73B300EE86}" = Unload
"{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update
"{4FA944D6-623E-EBBD-47D7-CE02A28C0796}" = Catalyst Control Center Graphics Light
"{52d02a2b-03d2-4e34-a358-dc5d951fd296}" = Nokia Connectivity Cable Driver
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{597D73A8-5FDB-4bc1-9893-40B54459F1BC}" = ProductContext
"{59BD7BCE-E1CE-4C44-8432-05D65AFE4525}" = Microsoft Tool Web Package : OH.EXE
"{5CC68528-24FF-4DF8-91C9-AF540F98505A}" = Sony Ericsson Drivers
"{5F4B558D-8AEB-4DEE-AAB3-C00D1D9A86BA}" = Sibelius Scorch (Firefox, Opera, Netscape only)
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{69E369F1-6A92-47B5-86D5-474A7E06B3DC}" = ALFA 16.02.00
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EC78BC-B379-4E29-9006-8F161DCAABA6}" = Apple Software Update
"{77654E99-F083-ED32-B326-118741828039}" = Catalyst Control Center Graphics Full Existing
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{80413011-029C-4D6B-B3AD-725DDE60B81C}" = 1310Trb
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{87CA98F3-0A13-77FE-A9F0-2AB1F28D741A}" = ccc-core-preinstall
"{8C8BC74F-E17F-4D59-D098-2F90BB9AE9E0}" = Skins
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{9111041B-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}" = QuickTime
"{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}" = SkinsHP1
"{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}" = Counter-Strike 1.6
"{9B5337F7-0444-5607-A397-909EFEFA7CFF}" = Catalyst Control Center Core Implementation
"{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}" = QuickProjects
"{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}" = PrintScreen
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.2
"{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}" = PhotoGallery
"{A1E15B5F-E414-4595-A1B5-94A2F07EF9CB}" = Slovakia TOPO v2
"{A2500497-FD32-493e-B8E5-28D6728DBEF5}" = Readme
"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan
"{AC76BA86-7AD7-1029-7B44-A80000000000}" = Adobe Reader 8 - Czech
"{AE80641A-0C8D-4670-A518-B4EC154B1027}" = ACDSee 8
"{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"{B192E1BB-98A4-4369-9271-96117A57F546}" = Sony Ericsson PC Suite
"{B32C75F2-7495-4D01-9431-C11E97D66F8C}" = DocProc
"{B3D5D4E0-E965-41C4-ABFD-A7B1AD0663C2}" = Director
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}" = CreativeProjectsTemplates
"{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}" = DocumentViewer
"{B6A51892-D4A5-616B-4489-44B790179455}" = ccc-utility
"{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare
"{BD3E4C0E-6E73-4AE9-9382-61DFEA6F10BD}_is1" = IO Equations
"{BF018D2F-C788-4AB1-AB95-1280EAB8F13E}" = TrayApp
"{C92E7DF1-624A-4D95-A4C4-18CB491B44A4}" = Sony Ericsson Device Data
"{ca567ad5-33a4-403d-86d1-ee2d38251951}_is1" = VDownloader 0.83
"{CB20D3BC-6C7C-A9CA-D679-914240CDA0D3}" = ccc-core-static
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CF07A1C9-098F-47DD-99E0-B6558C33871B}" = Garmin MapSource
"{D3162DFC-7CA1-47A9-AA00-15BE80E3B1F8}" = 602XML Filler
"{D6BF6477-8369-489F-8DE6-3731F4B88560}" = Sony Ericsson PC Suite
"{DA0BF7AB-88EB-4675-8FA1-531EAD938821}" = SnagIt 8
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{df62f79c-bd69-4737-8c74-93f26b895b91}" = ESET NOD32 Antivirus
"{E1E502E2-C006-49DB-9C0C-F2196E51826F}_is1" = Rootkit Unhooker LE 3.8 SR 1
"{E21658D0-8C83-4ADD-937B-6ED07F335ABA}" = 1310Tour
"{E90BEB5B-CFA0-418E-9ABB-4C4A7B0D9483}" = 1310_Help
"{EC8673DA-F96B-497E-B2DB-BC7B029FD680}" = BufferChm
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F296739D-AF5C-4426-972A-0DC916D11051}" = Nero 8
"{F4F47155-5B4D-42AA-97F8-490BC52EA7F3}" = Destinations
"{F65787F3-B356-45EC-8DD0-0E6758EDBCEE}" = WebReg
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}" = CueTour
"504244733d18c8f63ff584aeb290e3904e791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Windows Driver Package - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Windows Driver Package - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
"7-Zip" = 7-Zip 4.47 beta
"Acoustica CD/DVD Label Maker" = Acoustica CD/DVD Label Maker
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"adobe flash player plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Software Uninstall Utility
"Any FLV Player" = Any FLV Player 1.1.2
"AoA Audio Extractor_is1" = AoA Audio Extractor 1.0
"ATI Display Driver" = ATI Display Driver
"audacity_is1" = Audacity 1.2.6
"blender" = Blender (remove only)
"BSPlayerf" = BS.Player FREE
"CalendarPainter_is1" = CalendarPainter
"CCleaner" = CCleaner
"Conexant ADSL USB Modem" = Conexant AccessRunner ADSL
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"Core Center" = Core Center
"DSMT6" = MathType 6
"DVD Shrink_is1" = DVD Shrink 3.2
"e8a6d621b6d3fc5d43c68c549d959de76eef5d84" = Windows Driver Package - Nokia Modem (06/01/2009 4.1)
"eax unified" = EAX Unified
"Elcomm" = Elcomm
"E-Poradca Máj 2009" = E-Poradca Máj 2009
"f779f5541abd99c95c03b0fd5e3c058b22da0ff7" = Windows Driver Package - Nokia Modem (06/01/2009 7.01.0.3)
"Hamachi" = Hamachi 1.0.2.5
"HijackThis" = HijackThis 2.0.2
"HP Photo & Imaging" = HP Image Zone 4.2
"ICQToolbar" = ICQ Toolbar
"InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"LimeWire" = LimeWire 4.16.6
"mafia game" = Mafia Game
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Mozilla Firefox (3.5.8)" = Mozilla Firefox (3.5.8)
"Môj CEWE Fotosvet" = Môj CEWE Fotosvet
"MV2Player" = MV2Player (remove only)
"MyDefrag v4.2.8_is1" = MyDefrag v4.2.8
"nokia pc suite" = Nokia PC Suite
"NVIDIA Drivers" = NVIDIA Drivers
"Opera" = Opera
"QIP2005" = QIP 2005 Uninstall
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software
"SpywareBlaster_is1" = SpywareBlaster 4.2
"Totalcmd" = Total Commander (Remove or Repair)
"VideoMach 3.4.1" = VideoMach 3.4.1
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"WinRAR archiver" = WinRAR archiver
"xvid_is1" = Xvid 1.2.2 final uninstall

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2.3.2010 14:06:02 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie , verzia 0.0.0.0, zlyhanie modulu unknown, verzia
0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 2:26:49 | Computer Name = JKIRKA | Source = Application Error | ID = 1004
Description = Zlyhanie aplikácie svchost.exe, verzia 0.0.0.0, zlyhanie modulu unknown,
verzia 0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 2:27:41 | Computer Name = JKIRKA | Source = Application Error | ID = 1004
Description = Zlyhanie aplikácie svchost.exe, verzia 0.0.0.0, zlyhanie modulu unknown,
verzia 0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 2:27:59 | Computer Name = JKIRKA | Source = Application Error | ID = 1004
Description = Zlyhanie aplikácie svchost.exe, verzia 0.0.0.0, zlyhanie modulu unknown,
verzia 0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 2:28:07 | Computer Name = JKIRKA | Source = Application Error | ID = 1004
Description = Zlyhanie aplikácie svchost.exe, verzia 0.0.0.0, zlyhanie modulu unknown,
verzia 0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 2:43:50 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie svchost.exe, verzia 5.1.2600.2180, zlyhanie modulu
unknown, verzia 0.0.0.0, adresa zlyhania 0x00406472.

Error - 3.3.2010 2:52:33 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie svchost.exe, verzia 5.1.2600.2180, zlyhanie modulu
unknown, verzia 0.0.0.0, adresa zlyhania 0x001f1cb0.

Error - 3.3.2010 11:05:40 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie , verzia 0.0.0.0, zlyhanie modulu unknown, verzia
0.0.0.0, adresa zlyhania 0x00000000.

Error - 3.3.2010 15:36:54 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie , verzia 0.0.0.0, zlyhanie modulu unknown, verzia
0.0.0.0, adresa zlyhania 0x00000000.

Error - 4.3.2010 9:27:57 | Computer Name = JKIRKA | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie svchost.exe, verzia 5.1.2600.2180, zlyhanie modulu
unknown, verzia 0.0.0.0, adresa zlyhania 0x00406472.

[ System Events ]
Error - 3.3.2010 16:05:16 | Computer Name = JKIRKA | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 4.3.2010 2:15:38 | Computer Name = JKIRKA | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 4.3.2010 2:17:07 | Computer Name = JKIRKA | Source = Service Control Manager | ID = 7023
Description = Služba Task Support bola ukončená s nasledujúcou chybou: %%126

Error - 4.3.2010 8:59:06 | Computer Name = JKIRKA | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 4.3.2010 9:00:38 | Computer Name = JKIRKA | Source = Service Control Manager | ID = 7023
Description = Služba Task Support bola ukončená s nasledujúcou chybou: %%126

Error - 4.3.2010 9:22:20 | Computer Name = JKIRKA | Source = DCOM | ID = 10010
Description = Server {BA126AD7-2166-11D1-B1D0-00805FC1270E} sa v danom časovom limite
nezaregistroval na serveri DCOM.

Error - 4.3.2010 9:24:24 | Computer Name = JKIRKA | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 4.3.2010 9:25:54 | Computer Name = JKIRKA | Source = Service Control Manager | ID = 7023
Description = Služba Task Support bola ukončená s nasledujúcou chybou: %%126

Error - 4.3.2010 9:30:08 | Computer Name = JKIRKA | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 4.3.2010 9:31:42 | Computer Name = JKIRKA | Source = Service Control Manager | ID = 7023
Description = Služba Task Support bola ukončená s nasledujúcou chybou: %%126

< End of report >

#10 Příspěvek od **stell** » 04 bře 2010 18:30

Ad-Aware
SpywareBlaster 4.2
Spybot - Search & Destroy
SUPERAntiSpyware Free Edition
Rootkit Unhooker LE 3.8 SR 1

nechaj len Spywarebalstaer a superAntispyware.
zbytok odinstalovat.
spust OTL-do okna custom scan/fixes vloz zeleny text a klik RUNFIX,log po restarte vloz sem

Kód: Vybrat vše

:OTL
IE - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\..\URLSearchHook: - Reg Error: Key error. File not found
O3 - HKU\S-1-5-21-1935655697-1563985344-725345543-1003\..\Toolbar\WebBrowser: (no name) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - No CLSID value found.
O4 - HKLM..\Run: [CnxDslTaskBar] File not found
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - Startup: C:\Documents and Settings\Ocko\Start Menu\Programs\Startup\winesm32.exe ()
[2010.03.04 14:53:21 | 000,792,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\ahvoncix.sys
[2010.03.03 07:57:05 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_vxfmp
[2010.03.03 07:46:53 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_uorrg
[2010.03.03 07:43:25 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Ocko\Application Data\avdrn.dat
[2010.03.02 07:48:19 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_lspxs
[2010.03.02 07:47:43 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_ssver
[2010.02.27 23:40:49 | 000,000,130 | ---- | C] () -- C:\WINDOWS\cfplogvw.INI
[2010.02.21 22:45:46 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Ocko\Application Data\cqfyto.dat
@Alternate Data Stream - 498 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8CE646EE
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:661DFA1C
:reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"7233:TCP" =-
:services
oychtdm
:commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Judzi · #11 Příspěvek od **Judzi** » 04 bře 2010 18:50

mam odinstalovat vsetky "anti" programy okrem spywareblaster a superantispyware? lebo mam aj dalsie ako napr. spyware terminator a pod.

#12 Příspěvek od **stell** » 04 bře 2010 20:21

Ano vsetko.

Judzi · #13 Příspěvek od **Judzi** » 04 bře 2010 20:53

Vlozil som zeleny text do programu. pocas restartu, ked bol na obrazovke napis "vypínaní" pc zamrzol. po cca 10 minutych som ho resetol. Momentalne nejde zapnut ani cez safe mod, ani cez poslednu znamu funkcnu konfig. Jedine co som neskusal bolo Recovery console, tu moznost mam od pouzitia combofixu. (momentalne idem cez NB)

#14 Příspěvek od **stell** » 04 bře 2010 21:41

vypnut pocitac pockaj kus a zapnut.

Judzi · #15 Příspěvek od **Judzi** » 05 bře 2010 14:10

nejde zapol som ho rano a nic. nebude najjednoduchsie preistalovat OS?

VIRY.CZ

Problemy po zrychleni pocitaca

Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca

Re: Problemy po zrychleni pocitaca