avast našel win32:Kates-AO

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
turquoisefly
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 21 Črc 2008 11:27

avast našel win32:Kates-AO

#1 Příspěvek od turquoisefly »

Dobrý den,

počítač je pomalý, ve firefoxu naskakují hlášky o blokovaném přesměrování na jinou stránku (při přihlačování na e-mail) a avast našel trojana win32:Kates-AO. Můžu vás poprosit o pomoc?

Díky. Přikládám log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Libuše at 2010-10-15 13:51:22
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 84 GB (55%) free of 153 GB
Total RAM: 511 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:51:48, on 15.10.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\KEMailKb\KEMailKb.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
C:\WINDOWS\Dit.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\NetCentrum\Notifikator\Notifikator.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Libuše\Plocha\vlasta\RSIT.exe
C:\Program Files\trend micro\Libuše.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://library.muni.cz/proxy/libproxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KEMailKb] C:\PROGRA~1\KEMailKb\KEMailKb.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Centrum.cz Notifikátor] C:\Program Files\NetCentrum\Notifikator\Notifikator.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Rychlé spuštění aplikace HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Data aplikací\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: HP Chytrý výběr - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: FCI - Unknown owner - C:\WINDOWS\system32\fci.exe.exe:ext.exe (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 11922 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]
{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-22 77824]
"KEMailKb"=C:\PROGRA~1\KEMailKb\KEMailKb.EXE [2002-12-31 253952]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-11-11 344064]
"WinFast Schedule"=C:\Program Files\WinFast\WFTVFM\WFWIZ.exe [2004-08-02 176128]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2005-01-12 241664]
"Dit"=C:\WINDOWS\Dit.exe [2003-12-29 94208]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2005-11-14 98304]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"AudioDeck"=C:\Program Files\VIAudioi\SBADeck\ADeck.exe [2006-07-26 540672]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Centrum.cz Notifikátor"=C:\Program Files\NetCentrum\Notifikator\Notifikator.exe [2005-05-26 606720]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
Rychlé spuštění aplikace HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
C:\WINDOWS\system32\antiwpa.dll [2006-07-22 5376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-05-04 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 190464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"NoSecCpl"=0
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"NoDispCpl"=0
"NoDispScrSavPage"=0
"NoDispAppearancePage"=0
"NoDispSettingsPage"=0
"NoVisualStyleChoice"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=36
"NoDriveAutoRun"=0xFFFFFFFF
"NoDrives"=0
"NoDesktop"=0
"NoActiveDesktop"=0
"HideClock"=0
"NoStartMenuPinnedList"=0
"NoStartMenuMFUprogramsList"=0
"NoUserNameInStartMenu"=0
"StartmenuLogoff"=0
"NoStartMenuSubFolders"=0
"NoCommonGroups"=0
"NoPrinterTabs"=0
"NoDeletePrinter"=0
"NoAddPrinter"=0
"NoPrinters"=0
"NoFavoritesMenu"=0
"NoRun"=0
"NoFind"=0
"NoClose"=0
"NoSetFolders"=0
"NoViewContextMenu"=0
"NoToolbarCustomize"=0
"NoRecentDocsNetHood"=0
"NoChangeAnimation"=0
"NoChangeKeyboardNavigationIndicators"=0
"NoThemesTab"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=255
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\System32\dpvsetup.exe"="C:\WINDOWS\System32\dpvsetup.exe:*:Disabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Disabled:Far Cry"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:HP Software Update Client"
"C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe"="C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime"
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"
"C:\WINDOWS\System32\dplaysvr.exe"="C:\WINDOWS\System32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome.exe"="C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome.exe:*:Enabled:Nero MediaHome"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Documents and Settings\Libuše\Plocha\Worms_World_Party\Worms World Party\wwp.exe"="C:\Documents and Settings\Libuše\Plocha\Worms_World_Party\Worms World Party\wwp.exe:*:Enabled:Worms World Party"
"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\BIN\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\BIN\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hposid01.exe"="C:\Program Files\HP\Digital Imaging\BIN\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpqcopy.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpqcopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\BIN\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\BIN\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-10-15 13:51:22 ----D---- C:\rsit
2010-10-15 13:51:22 ----D---- C:\Program Files\trend micro
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-10-15 11:16:03 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-10-15 11:15:36 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-10-15 11:14:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-10-14 09:08:06 ----HD---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-14 09:08:01 ----HD---- C:\WINDOWS\$NtUninstallKB2279986$
2010-10-14 09:07:56 ----HD---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-14 09:07:51 ----HD---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-14 09:07:44 ----HD---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-14 09:07:41 ----HD---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-14 09:07:35 ----HD---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-14 09:01:56 ----HD---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-14 09:01:47 ----HD---- C:\WINDOWS\$NtUninstallKB2360937$
2010-09-29 17:53:18 ----HD---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-16 21:15:50 ----HD---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-16 21:15:44 ----HD---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-16 21:15:41 ----HD---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-16 21:15:36 ----HD---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-16 21:15:31 ----HD---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-16 21:15:23 ----HD---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-16 21:10:01 ----HD---- C:\WINDOWS\$NtUninstallKB2141007$

======List of files/folders modified in the last 1 months======

2010-10-15 11:11:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-14 09:02:04 ----A---- C:\WINDOWS\system32\MRT.exe
2010-10-14 08:59:00 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-18 12:23:38 ----A---- C:\WINDOWS\system32\mfc42u.dll
2010-09-18 08:53:38 ----A---- C:\WINDOWS\system32\mfc42.dll
2010-09-18 08:53:38 ----A---- C:\WINDOWS\system32\mfc40u.dll
2010-09-18 08:53:38 ----A---- C:\WINDOWS\system32\mfc40.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2003-10-10 62720]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2003-09-06 6944]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-09-06 4832]
R0 St323dk;St323dk; C:\WINDOWS\system32\drivers\St323dk.sys [2002-10-13 88736]
R0 viamraid;viamraid; C:\WINDOWS\system32\drivers\viamraid.sys [2005-04-26 60928]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2005-01-03 28928]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\incdrm.sys [2005-01-03 27776]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2003-10-10 52128]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 WF23880;WinFast TV2000/DV2000 WDM Video Capture.; C:\WINDOWS\system32\drivers\wf88vcap.sys [2004-03-12 209171]
R2 WF88XBAR;WinFast TV2000/DV2000 WDM Crossbar.; C:\WINDOWS\system32\drivers\WF88XBAR.sys [2004-03-12 9284]
R2 WFTUNE;WinFast TV2000/DV2000 WDM Tuner.; C:\WINDOWS\system32\drivers\WF88TUNE.sys [2004-03-12 36261]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-05-04 1133056]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2006-04-13 204160]
R3 WFIOCTL;WFIOCTL; \??\C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS []
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2003-05-14 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2003-05-14 44288]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2005-01-03 99456]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-22 2304320]
S3 CardReaderFilter;Card Reader Filter; \??\C:\WINDOWS\system32\Drivers\USBCRFT.SYS []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2002-11-08 17071]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GMSIPCI;GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-01-17 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-01-17 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-01-17 21568]
S3 mbr;mbr; \??\C:\DOCUME~1\LIBUŠE\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2008-03-27 503008]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2003-05-14 21216]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2003-05-14 5728]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-05-04 364544]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 InCDsrv;InCD Helper; C:\Program Files\Ahead\InCD\InCDsrv.exe [2005-01-03 854528]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2005-05-03 516096]
S2 FCI;FCI; C:\WINDOWS\system32\fci.exe.exe:ext.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

turquoisefly
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 21 Črc 2008 11:27

Re: avast našel win32:Kates-AO

#2 Příspěvek od turquoisefly »

ještě vkládám log z UPM:

Windows XP SP 3 (build 2600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ne
Whitelist: Ne
Internet Explorer v8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
Log vygenerován: 15.10.2010 13:55:06
================================================================

SmallARK
================================================================
[R]NtClose -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtCreateKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtDeleteKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtDeleteValueKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtDuplicateObject -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtOpenKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtOpenProcess -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtOpenThread -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtQueryValueKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtRenameKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtRestoreKey -> C:\WINDOWS\system32\drivers\aswSP.SYS
[R]NtSetValueKey -> C:\WINDOWS\system32\drivers\aswSP.SYS



Běžící procesy
================================================================

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCDSRV.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\ATI2EVXX.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRAM FILES\KEMAILKB\KEMAILKB.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\WINFAST\WFTVFM\WFWIZ.EXE
C:\WINDOWS\DIT.EXE
C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\VIAUDIOI\SBADECK\ADECK.EXE
C:\PROGRAM FILES\NETCENTRUM\NOTIFIKATOR\NOTIFIKATOR.EXE
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 7\PCSUITE.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\JAVA\JRE6\BIN\JQS.EXE
C:\PROGRAM FILES\NIKON\PICTUREPROJECT\NKBMONITOR.EXE
C:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQTRA08.EXE
C:\PROGRAM FILES\MCAFEE SECURITY SCAN\2.0.181\SSSCHEDULER.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\COMMON FILES\ULEAD SYSTEMS\DVD\ULCDRSVR.EXE
C:\WINDOWS\SYSTEM32\WDFMGR.EXE
C:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQGALRY.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\SERVICELAYER.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLUSBSRV.EXE
C:\WINDOWS\SYSTEM32\ALG.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLRSSRV.EXE
C:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQSTE08.EXE
C:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQBAM08.EXE
C:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQGPC01.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\AVASTSVC.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\AVASTUI.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\DOCUMENTS AND SETTINGS\LIBUAE\PLOCHA\UPM.EXE

Scanner
================================================================
[?] ATI2EVXX.EXE
Non Microsoft v System32:

[?] InCDsrv.exe
Nemá okno
Soubor 7%

[?] ATI2EVXX.EXE
Non Microsoft v System32:

[S] EXPLORER.EXE
Spouští se po startu HKLM Winlogon [Shell]

[?] SOUNDMAN.EXE
Spouští se po startu HKLM Run [SoundMan]

[?] KEMailKb.EXE
Spouští se po startu HKLM Run [KEMailKb]
Skrytá cesta EXE: C:\PROGRA~1\KEMailKb\KEMailKb.EXE
Soubor 14%

[?] ATIPTAXX.EXE
Spouští se po startu HKLM Run [ATIPTA]
Soubor 7%

[?] WFWIZ.EXE
Spouští se po startu HKLM Run [WinFast Schedule]
Soubor 14%

[?] Dit.exe
Spouští se po startu HKLM Run [Dit]
Soubor 7%

[?] hpwuSchd2.exe
Spouští se po startu HKLM Run [HP Software Update]
Soubor 7%

[?] QTTASK.EXE
Spouští se po startu HKLM Run [QuickTime Task]
Soubor 7%

[?] WINAMPA.EXE
Bez výrobce
Spouští se po startu HKLM Run [WinampAgent]
Soubor 25%

[?] ADeck.exe
Spouští se po startu HKLM Run [AudioDeck]
Soubor 7%

[?] Notifikator.exe
Spouští se po startu HKCU Run [Centrum.cz Notifikátor]
Soubor 14%

[?] TeaTimer.exe
Spouští se po startu HKCU Run [SpybotSD TeaTimer]
EntryPoint v sekci: .ITEXT
|_ Celkový počet sekcí: 9
Soubor 100%

[S] CTFMON.EXE
Spouští se po startu HKCU Run [ctfmon.exe]

[?] PCSuite.exe
Spouští se po startu HKCU Run [PC Suite Tray]
Soubor 7%

[?] NkbMonitor.exe
Spouští se po startu Po spuštění []
Soubor 14%

[R] HPQTRA08.EXE
Spouští se po startu Po spuštění []

[R] SSScheduler.exe
Spouští se po startu Po spuštění []

[R] MDM.EXE
Ověřený Microsoft: Ne

[?] ULCDRSvr.exe
Nemá okno
Soubor 7%

[?] hpqgalry.exe
EntryPoint v sekci:
|_ Celkový počet sekcí: 3
Soubor 7%

[?] ServiceLayer.exe
Soubor 7%

[?] NclUSBSrv.exe
Soubor 7%

[?] NclRSSrv.exe
Soubor 7%

[?] hpqSTE08.exe
Soubor 7%

[?] hpqbam08.exe
Soubor 14%

[?] HPQGPC01.EXE
Nemá okno
Soubor 7%

[R] AvastUI.exe
Spouští se po startu HKLM Run [avast5]

[?] UPM.exe
Bez výrobce
Skrytá cesta EXE: C:\Documents and Settings\Libuše\Plocha\UPM.exe


Po spuštění
================================================================

Moduly (Zobraz i bezpečné DLL: False, Jen bez výrobce: True, Zobraz registrované: False)
================================================================
[?] wgalogon.dll
|_ Cesta: C:\WINDOWS\System32\WgaLogon.dll
|_ MD5: FF4213A77EF458E3417457D3BF9AE42D
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ WINLOGON.EXE (748)

[?] antiwpa.dll
|_ Cesta: C:\WINDOWS\System32\ANTIWPA.DLL
|_ MD5: A4E0D905A8DAD2B8733A561E56CD65A7
|_ Výrobce: ?
|_ Procesy
|_ WINLOGON.EXE (748)

[?] drivelocker.dll
|_ Cesta: C:\Program Files\Common Files\Ahead\Lib\DriveLocker.dll
|_ MD5: 8222B430226E2EA622C58A4B5AD6F441
|_ Výrobce: Ahead Software AG
|_ Procesy
|_ InCDsrv.exe (1200)

[?] incdshx.dll
|_ Cesta: C:\Program Files\Ahead\InCD\INCDSHX.DLL
|_ MD5: 1CEEFC7E732596925B3803A01FCF3758
|_ Výrobce: Nero AG
|_ Procesy
|_ InCDsrv.exe (1200)

[?] nerodigitalext.dll
|_ Cesta: C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll
|_ MD5: 5384C2F361DBF801BE6DF2BEB2D8C6DB
|_ Výrobce: Nero AG
|_ Procesy
|_ EXPLORER.EXE (1768)

[?] pdfshell.dll
|_ Cesta: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
|_ MD5: 2094BC9A0FC9C0E15EEA5F4A9581DD14
|_ Výrobce: Adobe Systems, Inc.
|_ Procesy
|_ EXPLORER.EXE (1768)

[?] mfc71.dll
|_ Cesta: C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL
|_ MD5: F35A584E947A5B401FEB0FE01DB4A0D7
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ EXPLORER.EXE (1768)
|_ NkbMonitor.exe (1584)
|_ hpqgalry.exe (2256)

[?] msvcr71.dll
|_ Cesta: C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll
|_ MD5: 86F1895AE8C5E8B17D99ECE768A70732
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ EXPLORER.EXE (1768)
|_ JQS.EXE (1588)
|_ NkbMonitor.exe (1584)
|_ hpqgalry.exe (2256)

[?] msvcp71.dll
|_ Cesta: C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll
|_ MD5: 561FA2ABB31DFA8FAB762145F81667C2
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ EXPLORER.EXE (1768)
|_ NkbMonitor.exe (1584)
|_ hpqgalry.exe (2256)

[?] lgkcutl.dll
|_ Cesta: C:\Program Files\KEMailKb\LGKCUTL.DLL
|_ MD5: D717E8730A066862AEEC825EA98C4ECF
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] mixerutl.dll
|_ Cesta: C:\Program Files\KEMailKb\MIXERUTL.DLL
|_ MD5: 8E3122A02C3981A9681C814E2AE102F1
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] osdutl.dll
|_ Cesta: C:\Program Files\KEMailKb\OSDUTL.DLL
|_ MD5: AD69D4DC6A52B5B3CB2B2E9EA642A7B5
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] rgnmaker.dll
|_ Cesta: C:\Program Files\KEMailKb\RGNMAKER.DLL
|_ MD5: 5A1822B18FEE8807EB7EB33BA8CF9B0F
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] szupfutl.dll
|_ Cesta: C:\Program Files\KEMailKb\SZUPFUTL.DLL
|_ MD5: E279E6411E30E59FE79465A403347989
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] tkbarutl.dll
|_ Cesta: C:\Program Files\KEMailKb\TkBarUtl.dll
|_ MD5: D476DD27E8CF5C1688991E906686D28D
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] wnd2file.dll
|_ Cesta: C:\Program Files\KEMailKb\WND2FILE.DLL
|_ MD5: C9A8F1D76F468EB1C6E05949F5485B0D
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] usbkbkc.dll
|_ Cesta: C:\Program Files\KEMailKb\USBKBKC.DLL
|_ MD5: 8B0F9B4B37A558DF2CBEAC53701EC8C6
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] dialcnt.dll
|_ Cesta: C:\Program Files\KEMailKb\DialCnt.dll
|_ MD5: 83D14F5FDB2366E93364A22DFE3E8C37
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] comfnutl.dll
|_ Cesta: C:\Program Files\KEMailKb\COMFNUTL.DLL
|_ MD5: 50BD1ABEB6F17EE70B2B630F400CD155
|_ Výrobce: Dritek System Inc.
|_ Procesy
|_ KEMailKb.EXE (604)

[?] atipdxxx.dll
|_ Cesta: C:\Program Files\ATI Technologies\ATI Control Panel\ATIPDXXX.DLL
|_ MD5: 9562E86148AE7514E769356AEBE5C81F
|_ Výrobce: ATI Technologies, Inc.
|_ Procesy
|_ ATIPTAXX.EXE (644)

[?] atipdsxx.dll
|_ Cesta: C:\Program Files\ATI Technologies\ATI Control Panel\ATIPDSXX.DLL
|_ MD5: 05C6E2A47C7B37F08EA2EE15D5CA1A52
|_ Výrobce: ATI Technologies, Inc.
|_ Procesy
|_ ATIPTAXX.EXE (644)

[?] connapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\ConnAPI.dll
|_ MD5: 4643E85C40B2297AE55D3C95F6DEEA8F
|_ Výrobce: Nokia.
|_ Procesy
|_ PCSuite.exe (1340)

[?] daapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\DAAPI.dll
|_ MD5: E467101F6D9483CDE1985F20E4A38C73
|_ Výrobce: Nokia
|_ Procesy
|_ PCSuite.exe (1340)

[?] pccs_abapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\PCCS_ABAPI.dll
|_ MD5: 266478AB65C5B674471EEDFBA3B79B37
|_ Výrobce: Nokia
|_ Procesy
|_ PCSuite.exe (1340)

[?] confserver.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\ConfServer.dll
|_ MD5: FEDB065946CAD4ED398F5A1087902E74
|_ Výrobce: Nokia
|_ Procesy
|_ PCSuite.exe (1340)

[?] nglstyle.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\Styles\NGLStyle.dll
|_ MD5: 0435B351C4BBD710EFB2925966DB160F
|_ Výrobce: Nokia
|_ Procesy
|_ PCSuite.exe (1340)

[?] qjpeg4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll
|_ MD5: B6FAD59C92D1381D986CD7368A5291F4
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] qsvg4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll
|_ MD5: CB3B04A1D5E1F32D5E38974B5E077EA6
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] cdc.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\CDC.dll
|_ MD5: D39835D21F82CEC4BCC0DC92A99C4B7E
|_ Výrobce: Nokia
|_ Procesy
|_ PCSuite.exe (1340)

[?] qtxml4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\QtXml4.dll
|_ MD5: B7AC803CF0DF5FF872DD45D48BBBDA6A
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] qtgui4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\QtGUI4.dll
|_ MD5: 1CA1F99D167BB19F785F2D8582579CFB
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] qtsvg4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\QtSvg4.dll
|_ MD5: 958BE76750B8B10750FB3DE7419588C1
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] qtcore4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\QtCore4.dll
|_ MD5: 285A5075F1973E9BEB8A12EE3641EEA4
|_ Výrobce:
|_ Procesy
|_ PCSuite.exe (1340)

[?] hpqddsvc.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HPQDDSVC.DLL
|_ MD5: DF446BA625CC441617843E87798CE048
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ SVCHOST.EXE (852)

[?] hpocxi08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpocxi08.dll
|_ MD5: 361B57B4CC9AB6FC366FADAA7440C589
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ SVCHOST.EXE (852)

[?] hpqcob08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqcob08.dll
|_ MD5: 80DBCFB7464344FF2E3344E5F3B95856
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ SVCHOST.EXE (852)
|_ HPQTRA08.EXE (1360)
|_ hpqSTE08.exe (3024)

[?] hpqcxs08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqcxs08.dll
|_ MD5: B14328CFEEB6B736BE44C2C9DB3B162C
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ SVCHOST.EXE (852)

[?] hpqddcmn.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HPQDDCMN.DLL
|_ MD5: C83C0791FC7FA3CBE9BE2825B8A47EAF
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ SVCHOST.EXE (852)
|_ HPQTRA08.EXE (1360)

[?] corperfmonext.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
|_ MD5: 56C38B8FCC43FFED6F9F33AE8E6FD190
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ JQS.EXE (1588)

[?] perfcounter.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
|_ MD5: FFFB49BA718EB2D100E58129265D002C
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ JQS.EXE (1588)

[?] aspnet_isapi.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
|_ MD5: 056E6BFD6314BBB84D5DFB1CA529CD60
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ JQS.EXE (1588)

[?] hpqrif08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqrif08.dll
|_ MD5: 822FDAFB41056462F2DDA8A7BCC2B9EB
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqmif08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqmif08.dll
|_ MD5: 4122925C28E461811C033276E25589E9
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqcpta.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HpqCPTA.dll
|_ MD5: 187924625A55EDC7B196B82777C5074A
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqsrta.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HpqSRTA.dll
|_ MD5: A5699775554DE8897924A0F6EB5729C9
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqxml2.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqxml2.dll
|_ MD5: EEC6910D6DA48E66390964735BC97B05
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpodio08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpodio08.dll
|_ MD5: 8AB3CB12111708BD3078FFD5F0AFE413
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)
|_ hpqSTE08.exe (3024)

[?] hpqtap08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqtap08.dll
|_ MD5: FC686D93B58D5DD33218E90DD4C5CED2
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)
|_ hpqSTE08.exe (3024)

[?] hpqcxm08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqcxm08.dll
|_ MD5: E62A09CAAB253BC11CB8245581E42004
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)
|_ hpqgalry.exe (2256)

[?] hpqddusr.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqddusr.dll
|_ MD5: 8F48362B61A6637D1B064278E549EF40
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hposcn08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpoSCN08.rsc
|_ MD5: A2FE06F3A8C7B4B8D71A520B242A861F
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpzipr12.dll
|_ Cesta: C:\WINDOWS\System32\HPZipr12.dll
|_ MD5: AF880166DAC5880219F748ED83902CB2
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ HPQTRA08.EXE (1360)
|_ hpqSTE08.exe (3024)

[?] hpqusg.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HPQUSG.DLL
|_ MD5: 2AB5F9E7D0780364F8BFEA5CF3180240
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpzidr12.dll
|_ Cesta: C:\WINDOWS\System32\HPZidr12.dll
|_ MD5: 26AE2CA34FA4342749EC1157CB1FE954
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpotradd.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpotradd.dll
|_ MD5: B9FB1DBF7B97226B1F95FFAFCDC699B7
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpquio08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpquio08.dll
|_ MD5: 715AB41A22E0DE693CB101639070D3BE
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hposcn08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hposcn08.dll
|_ MD5: B72CD5ABDB2BE6F440A88A643A8435AA
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqtra08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqtra08.rsc
|_ MD5: 294FA577F44CA0C81BF5D820474A3406
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpqtao08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqtao08.dll
|_ MD5: DAB8C1971354B1A55D271066674ED734
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpodeb08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpodeb08.dll
|_ MD5: BB7EFF4C8F8AEA1BC153FA47A06D24A3
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpodev08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpodev08.dll
|_ MD5: B235A75E4A03C349B39B60D901EA3D81
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpotra08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpotra08.dll
|_ MD5: 796A1A6E11FD68C7B5C610467FA77B81
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpotra08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpotra08.rsc
|_ MD5: 49C03ECF831B22CAEFB1EEB282ABF047
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpostd08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpoSTD08.dll
|_ MD5: 12523A379FEE3E813628DAB33229A3F8
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpostd08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpoSTD08.rsc
|_ MD5: 7144D8E46769CFC818C98F2692480E81
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpodvd09.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpodvd09.dll
|_ MD5: 79FD6D7ECBC36E0274C68E5015DC256C
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] hpoddcomm09.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpoddcomm09.dll
|_ MD5: F991B99D8F1DEB23D0E3814DAA74100D
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ HPQTRA08.EXE (1360)

[?] fusion.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\FUSION.DLL
|_ MD5: 7C87A5FB95777E4132B11FC3D92CAAF5
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqutils.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqutils\3.0.0.0__a53cf5803f4c3827\hpqutils.dll
|_ MD5: 196F5C5A8537EE4E4C4661B9C8E8D028
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqfmrsc.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqfmrsc\3.0.0.0__a53cf5803f4c3827\hpqfmrsc.dll
|_ MD5: E99E5A7B19E31E8713C5BE557894509F
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqgldlg.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqgldlg\3.0.0.0__a53cf5803f4c3827\hpqgldlg.dll
|_ MD5: 3838A46B043209D6113E1DB6E0A82975
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqtray.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqtray\3.0.0.0__a53cf5803f4c3827\hpqtray.dll
|_ MD5: D6FDFE5B352403AD6C0DE3293BA669FF
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqgskin.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqgskin\3.0.0.0__a53cf5803f4c3827\hpqgskin.dll
|_ MD5: 0E8254639DEDEF3F5387E1F05C305CA5
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqgalry.resources.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\cs\hpqgalry.resources.dll
|_ MD5: 4A1EC7CE196781E6CBC3AFB6D8C95776
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqptfnd.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqptfnd\3.0.0.0__a53cf5803f4c3827\hpqptfnd.dll
|_ MD5: 77A6B4360966CFEE517ADAD807892792
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] interop.hpqcxm08.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\Interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\Interop.hpqcxm08.dll
|_ MD5: EC5C685ACAD87936B790064AAF87788E
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqimgr.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqimgr.dll
|_ MD5: A5261C4E83D9B53C1815F7503199AF35
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] lead.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\LEAD\13.0.0.66__9cf889f53ea9b907\LEAD.dll
|_ MD5: 26AAF8560AF2857B411E16587F5E21A4
|_ Výrobce: LEAD Technologies, Inc.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqimgrc.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqimgrc\3.0.0.0__a53cf5803f4c3827\hpqimgrc.dll
|_ MD5: 5F2599319F6622F311A6AE4E590FD81A
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] lead.wrapper.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\LEAD.Wrapper\13.0.0.66__9cf889f53ea9b907\LEAD.Wrapper.dll
|_ MD5: 1497069481FDA6967436CF5096E93B05
|_ Výrobce: LEAD Technologies, Inc.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqcmctl.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqcmctl\3.0.0.0__a53cf5803f4c3827\hpqcmctl.dll
|_ MD5: DDBFF36C9C1FE06198F6B58D26BF4E15
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqtray.resources.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqtray.resources\3.0.0.0_cs_a53cf5803f4c3827\hpqtray.resources.dll
|_ MD5: 25D01B60094FBA0A36DF54691E3557BC
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] lead.windows.forms.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\LEAD.Windows.Forms\13.0.0.66__9cf889f53ea9b907\LEAD.Windows.Forms.dll
|_ MD5: 656421105E87F4ECE5633D0061412A88
|_ Výrobce: LEAD Technologies, Inc.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] lead.drawing.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\LEAD.Drawing\13.0.0.66__9cf889f53ea9b907\LEAD.Drawing.dll
|_ MD5: F27508B6DA412E005A732767DCB2B32F
|_ Výrobce: LEAD Technologies, Inc.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqfmrsc.resources.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqfmrsc.resources\3.0.0.0_cs_a53cf5803f4c3827\hpqfmrsc.resources.dll
|_ MD5: 8E4D0DC36D81708408985D835AA7332D
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] interop.hpqimgr.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\interop.hpqimgr\1.0.0.0__a53cf5803f4c3827\interop.hpqimgr.dll
|_ MD5: 3DFE9B36B310582160BF0F081E51BC04
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqasset.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqasset\3.0.0.0__a53cf5803f4c3827\hpqasset.dll
|_ MD5: BC77758DED7A9E0128937A490BE11BEA
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqccrsc.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqccrsc\3.0.0.0__a53cf5803f4c3827\hpqccrsc.dll
|_ MD5: 597A11165ED1B357C6776C52DE3F608C
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqmirsc.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqmirsc.DLL
|_ MD5: 95E92090394C815F82B0AED330500B1A
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqmirsc.resources.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\cs\hpqmirsc.resources.dll
|_ MD5: 5714E2322C39D17E3C4709815EFE316F
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqietpz.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqietpz\3.0.0.0__a53cf5803f4c3827\hpqietpz.dll
|_ MD5: 16105FE2451F233E547303034E2618E0
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqietpz.resources.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqietpz.resources\3.0.0.0_cs_a53cf5803f4c3827\hpqietpz.resources.dll
|_ MD5: 2F4DAF758847BD39F3BF9DFFB89C14A2
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqcprsc.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqcprsc\3.0.0.0__a53cf5803f4c3827\hpqcprsc.dll
|_ MD5: 775F9AF75DFBDBF74A8CD0FBF2F1C328
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqcprsc.resources.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqcprsc.resources\3.0.0.0_cs_a53cf5803f4c3827\hpqcprsc.resources.dll
|_ MD5: 2479F8A4C930E566CCF0514560053E16
|_ Výrobce:
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqisrtb.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqisrtb\4.0.0.0__a53cf5803f4c3827\hpqisrtb.dll
|_ MD5: 292A4B5BE5DB485E7088955F34586878
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqisrtb.resources.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqisrtb.resources\4.0.0.0_cs_a53cf5803f4c3827\hpqisrtb.resources.dll
|_ MD5: C973D939A87AD5F1AED87CFF670E45FB
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqthumb.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqthumb\3.0.0.0__a53cf5803f4c3827\hpqthumb.dll
|_ MD5: 0BA7450557844966591FF53962612514
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] hpqiface.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\hpqiface\3.0.0.0__a53cf5803f4c3827\hpqiface.dll
|_ MD5: C7968E26F2EA5393E720F24164B7FA37
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] ltkrn13n.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\ltkrn13n.dll
|_ MD5: CB7BBA5413CB8EE3E13C240BFA119715
|_ Výrobce: LEAD Technologies, Inc.
|_ Procesy
|_ hpqgalry.exe (2256)

[?] mscorwks.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORWKS.DLL
|_ MD5: 74D879F95A0249E7007F6D94BD069C32
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] mscorjit.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL
|_ MD5: 3C923E1911CED5802C3BDB9CE18F64DA
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] mscorsn.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
|_ MD5: 1A692DBDAC7A578187E0A94A850A6240
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] mscorlib.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORLIB.DLL
|_ MD5: 0A8D6FE9110A23A2E561DD570C3B0508
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)
|_ hpqgalry.exe (2256)

[?] accessibility.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll
|_ MD5: A1B44C0A1AD71F86579A4521D5B1C024
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] system.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
|_ MD5: 9921697AFAA1349535316A346D87BB78
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)
|_ hpqgalry.exe (2256)

[?] system.drawing.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
|_ MD5: BCF15390DE7368639C593735BF938D7A
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)
|_ hpqgalry.exe (2256)

[?] system.windows.forms.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
|_ MD5: 2814E9BDB75088C0B4CF6C1123F6EC8E
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)
|_ hpqgalry.exe (2256)

[?] system.xml.dll
|_ Cesta: C:\WINDOWS\ASSEMBLY\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
|_ MD5: A5205B3AF85B1477AB2C2A1E12201598
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)
|_ hpqgalry.exe (2256)

[?] atl71.dll
|_ Cesta: C:\WINDOWS\System32\atl71.dll
|_ MD5: 273C8F1B99AC38525A74077F704F218F
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ hpqgalry.exe (2256)

[?] pccs_dbengine.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\PCCS_DBEngine.dll
|_ MD5: 27DD9CEA7B4C8EFAD06B55AED94AAAD7
|_ Výrobce: Nokia
|_ Procesy
|_ ServiceLayer.exe (3268)

[?] hpqgpb01.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HPQGPB01.DLL
|_ MD5: 2CC556F7106F0568787A0E28DA3A4DF7
|_ Výrobce: Hewlett-Packard
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqstp08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqstp08.rsc
|_ MD5: 019F580336CAAB57EAF24894D041DB3F
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqssm08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqssm08.dll
|_ MD5: A2966A3CD303C4F18C2BA721F617C35B
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqsem08.rsc
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqsem08.rsc
|_ MD5: 6DAB621DEECECAFC450EA24EE6EB3D0F
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqsplh08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HpqSplh08.dll
|_ MD5: DDE8F732F6508EE2D165FAD29E13F687
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqwso08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\HPQWSO08.DLL
|_ MD5: B37C9631E176B52F2EB264D7880B46CC
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqsti08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqsti08.dll
|_ MD5: 5B128616CA79AEBE0EDCDA40B5CB84AB
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] hpqstp08.dll
|_ Cesta: C:\Program Files\HP\Digital Imaging\BIN\hpqstp08.dll
|_ MD5: FA5249DD988D89B89EC43890C7F98720
|_ Výrobce: Hewlett-Packard Co.
|_ Procesy
|_ hpqSTE08.exe (3024)

[?] bkmrkext.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
|_ MD5: A6DCB0F8C92EF06AC5BA5D0CAE298A65
|_ Výrobce: Nokia
|_ Procesy
|_ firefox.exe (3412)

[?] softokn3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\softokn3.dll
|_ MD5: AF390567BD3ABE5283EA1FF4E81EEC36
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (3412)

[?] nssdbm3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\nssdbm3.dll
|_ MD5: 1C4BF0A05137E7C4EE7A4876FF2CCFCC
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (3412)

[?] freebl3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\freebl3.dll
|_ MD5: DE97230F0FC16BB6155CB866576E3A2F
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (3412)

[X] lde.dll
|_ Cesta: C:\Documents and Settings\Libuše\Plocha\LDE.dll
|_ MD5: 0F13A4173A599AAA15E3B270E5E27A7F
|_ Výrobce:
|_ Procesy
|_ UPM.exe (2596)

[?] upm.dll
|_ Cesta: C:\Documents and Settings\Libuše\Plocha\upm.dll
|_ MD5: 9D9AA74910EE283E95214ABEADC779BD
|_ Výrobce: Lodus Software
|_ Procesy
|_ UPM.exe (2596)

[!] prjxtab.ocx
|_ Cesta: C:\Documents and Settings\Libuše\Plocha\prjXTab.ocx
|_ MD5: DE745F09FC7C607841519AD559C33AC3
|_ Výrobce: xyz
|_ Procesy
|_ UPM.exe (2596)



================================================================
Ultimate Process Manager v4.1.3 - [ Lodus Software ]

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15933
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: avast našel win32:Kates-AO

#3 Příspěvek od JaRon »

Command: C:\Windows\System32\antiwpa.dll
Description: An illegal software crack used to bypass copy protection for Windows.

takze tu asi koncime ,,,
ak Ti to pomoze, zakaz sluzbu - FCI
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Odpovědět