Zdravím, měl jsem vir "Security tool", který jsem, zdá se, úspěšně odstranil, ale teď se mi při zapnutí zobrazí jen čistá plocha, ne ikony, ty musím zobrazit ručně v spráci úloh zadáním "explorer.exe". Navíc se mi při vypínání objeví okno "Instrukce na adrese 0x636f9e2e odkazovala na adresu paměti 0x636fc255. S pamětí nelze provést operaci: written.
Logfile of random's system information tool 1.08 (written by random/random)
Run by Hans at 2010-11-15 22:47:12
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (5 free of 40 GB
Total RAM: 1015 MB (14% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:47:57, on 15/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\PC Tools Security\pctsAuxs.exe
C:\Program Files\PC Tools Security\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Tools Security\pctsGui.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\PC Tools Security\BDT\FGuard.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Hans\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Hans.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://googleure.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
R3 - URLSearchHook: PC Tools Browser Guard - {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Pomocník pro poihlášení ke službi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\PC Tools Security\pctsGui.exe" /hideGUI
O4 - HKLM\..\Run: [PCTools FGuard] C:\Program Files\PC Tools Security\BDT\FGuard.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-606747145-861567501-839522115-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipamiti kategorií soueástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Browser Defender Update Service - Unknown owner - C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\PC Tools Security\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\PC Tools Security\pctsSvc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Hans/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
--
End of file - 11315 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-08-06 1062184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll [2010-09-24 522192]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-17 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll [2010-09-24 522192]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-08-09 917504]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-05-16 53248]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-25 786521]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-03-30 544768]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-31 282624]
"CnxDslTaskBar"=C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe [2004-04-29 462848]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-03-28 413696]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-14 198160]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2006-08-01 802816]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2006-08-01 696320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"ISTray"=C:\Program Files\PC Tools Security\pctsGui.exe [2010-09-29 1588184]
"PCTools FGuard"=C:\Program Files\PC Tools Security\BDT\FGuard.exe [2010-09-24 108496]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
DSLMON.lnk - C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Documents and Settings\Hans\Nabídka Start\Programy\Po spuštění
mondxc32.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Documents and Settings\Hans\Plocha\P1876832.JPG-www.facebook.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======File associations======
.ini - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
.txt - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
======List of files/folders created in the last 1 months======
2010-11-15 22:47:13 ----D---- C:\Program Files\trend micro
2010-11-15 22:47:12 ----D---- C:\rsit
2010-11-15 21:45:41 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-15 21:45:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-15 20:39:34 ----D---- C:\Program Files\HLPSOFT
2010-11-15 09:04:46 ----A---- C:\WINDOWS\BDTSupport.dll
2010-11-15 09:04:43 ----A---- C:\WINDOWS\SGDetectionTool.dll
2010-11-15 09:04:43 ----A---- C:\WINDOWS\PCTBDRes.dll
2010-11-15 09:04:43 ----A---- C:\WINDOWS\PCTBDCore.dll
2010-11-14 23:05:06 ----A---- C:\WINDOWS\system32\drivers\pctEFA.sys
2010-11-14 23:05:06 ----A---- C:\WINDOWS\system32\drivers\pctDS.sys
2010-11-14 23:05:05 ----A---- C:\WINDOWS\system32\drivers\pctgntdi.sys
2010-11-14 23:05:00 ----A---- C:\WINDOWS\system32\drivers\PCTCore.sys
2010-11-14 23:05:00 ----A---- C:\WINDOWS\system32\drivers\PCTAppEvent.sys
2010-11-14 23:04:50 ----A---- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys
2010-11-14 23:04:50 ----A---- C:\WINDOWS\system32\drivers\pctNdis-DNS.sys
2010-11-14 23:04:49 ----A---- C:\WINDOWS\system32\drivers\pctplfw.sys
2010-11-14 23:04:47 ----A---- C:\WINDOWS\system32\drivers\pctplsg.sys
2010-11-14 23:04:02 ----D---- C:\Program Files\PC Tools Security
2010-11-14 23:04:02 ----D---- C:\Program Files\Common Files\PC Tools
2010-11-14 23:04:02 ----D---- C:\Documents and Settings\Hans\Data aplikací\PC Tools
2010-11-14 22:47:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2010-11-14 17:40:35 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-11-14 17:40:28 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-11-14 17:40:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-11-14 10:10:53 ----D---- C:\WINDOWS\system32\XPSViewer
2010-11-14 10:10:48 ----D---- C:\Program Files\MSBuild
2010-11-14 10:10:34 ----D---- C:\Program Files\Reference Assemblies
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-11-14 10:09:29 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-11-14 10:05:01 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-11-14 10:04:48 ----D---- C:\Program Files\MSXML 6.0
2010-11-14 00:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-11-14 00:33:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-11-14 00:33:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-11-14 00:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-11-14 00:33:05 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-11-14 00:32:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-11-14 00:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-11-14 00:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-11-14 00:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-11-14 00:32:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-11-14 00:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-11-14 00:31:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-11-14 00:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-11-14 00:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2010-11-14 00:31:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-11-14 00:31:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-11-14 00:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-11-14 00:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-11-14 00:30:44 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-11-14 00:30:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-11-14 00:30:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-11-14 00:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-11-14 00:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-11-14 00:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-11-14 00:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-11-14 00:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-11-14 00:29:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-11-14 00:29:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-11-14 00:29:09 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-11-14 00:28:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-11-14 00:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-11-14 00:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-11-14 00:28:33 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-11-14 00:26:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-11-14 00:26:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-11-14 00:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-11-14 00:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-11-14 00:25:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-11-14 00:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-11-14 00:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-11-14 00:25:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-11-14 00:25:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-11-14 00:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-11-14 00:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-11-14 00:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-11-14 00:23:42 ----D---- C:\Program Files\MSXML 4.0
2010-11-14 00:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-11-14 00:23:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-11-14 00:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-11-13 18:56:11 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-11-13 18:33:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-11-13 18:26:35 ----SHD---- C:\RECYCLER
2010-11-13 16:49:24 ----A---- C:\ComboFix.txt
2010-11-13 16:34:07 ----A---- C:\WINDOWS\NIRCMD.exe
2010-11-13 16:34:07 ----A---- C:\WINDOWS\MBR.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\zip.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWSC.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWREG.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\sed.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\PEV.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\grep.exe
2010-11-13 16:34:05 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-11-13 16:33:58 ----D---- C:\WINDOWS\ERDNT
2010-11-13 16:33:35 ----D---- C:\Qoobox
2010-11-13 16:32:27 ----D---- C:\Documents and Settings\Hans\Data aplikací\U3
2010-11-13 14:52:26 ----D---- C:\Documents and Settings\Hans\Data aplikací\Malwarebytes
2010-11-13 13:34:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-11-10 15:00:30 ----A---- C:\jshd.exe
2010-10-19 16:33:52 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2010-10-19 16:33:51 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2010-10-19 16:33:50 ----D---- C:\Program Files\PDFCreator
======List of files/folders modified in the last 1 months======
2010-11-15 22:47:52 ----D---- C:\WINDOWS\Prefetch
2010-11-15 22:47:42 ----D---- C:\WINDOWS\Temp
2010-11-15 22:47:13 ----RD---- C:\Program Files
2010-11-15 22:43:21 ----D---- C:\Documents and Settings\Hans\Data aplikací\Skype
2010-11-15 22:41:06 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-11-15 22:23:40 ----D---- C:\WINDOWS\system32\ias
2010-11-15 22:23:38 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2010-11-15 22:23:37 ----D---- C:\WINDOWS
2010-11-15 22:21:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-15 20:41:23 ----D---- C:\filmy
2010-11-15 20:41:22 ----D---- C:\Program Files\Windows Media Connect 2
2010-11-15 20:41:22 ----D---- C:\My JPEGs
2010-11-15 20:10:51 ----D---- C:\WINDOWS\system32\NtmsData
2010-11-15 20:10:43 ----SD---- C:\Documents and Settings\All Users\Data aplikací
\Microsoft
2010-11-15 09:07:56 ----D---- C:\WINDOWS\system32
2010-11-14 23:11:49 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-14 23:11:48 ----RSD---- C:\WINDOWS\assembly
2010-11-14 23:05:09 ----SHD---- C:\System Volume Information
2010-11-14 23:05:09 ----D---- C:\WINDOWS\system32\drivers
2010-11-14 23:04:10 ----SHD---- C:\WINDOWS\Installer
2010-11-14 23:04:10 ----D---- C:\Config.Msi
2010-11-14 23:04:09 ----D---- C:\WINDOWS\WinSxS
2010-11-14 23:04:02 ----D---- C:\Program Files\Common Files
2010-11-14 18:13:56 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-14 18:07:34 ----D---- C:\WINDOWS\Debug
2010-11-14 17:15:45 ----AC---- C:\WINDOWS\WINCMD.INI
2010-11-14 10:16:13 ----D---- C:\Program Files\ESET
2010-11-14 10:16:13 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-14 10:10:48 ----D---- C:\WINDOWS\system32\en-US
2010-11-14 10:10:43 ----RSD---- C:\WINDOWS\Fonts
2010-11-14 10:10:10 ----HD---- C:\WINDOWS\inf
2010-11-14 10:09:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-14 10:06:50 ----D---- C:\Program Files\Internet Explorer
2010-11-14 10:00:22 ----D---- C:\WINDOWS\AppPatch
2010-11-14 10:00:21 ----D---- C:\WINDOWS\system32\Setup
2010-11-14 00:30:18 ----D---- C:\Program Files\Movie Maker
2010-11-14 00:25:54 ----D---- C:\Program Files\Outlook Express
2010-11-14 00:24:10 ----D---- C:\WINDOWS\system32\cs-cz
2010-11-14 00:06:01 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-11-14 00:06:00 ----D---- C:\WINDOWS\system32\CatRoot
2010-11-13 21:29:39 ----D---- C:\WINDOWS\Help
2010-11-13 19:36:01 ----D---- C:\Documents and Settings\Hans\Data aplikací\uTorrent
2010-11-13 19:35:49 ----D---- C:\WINDOWS\system32\config
2010-11-13 16:48:46 ----SD---- C:\WINDOWS\Tasks
2010-11-13 16:46:37 ----A---- C:\WINDOWS\system.ini
2010-11-13 16:46:11 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-13 14:50:56 ----D---- C:\WINDOWS\msagent
2010-11-13 01:30:01 ----A---- C:\WINDOWS\system32\userinit.exe
2010-11-03 10:25:40 ----D---- C:\Program Files\Common Files\Adobe
2010-11-03 10:25:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-10-17 14:49:10 ----D---- C:\Program Files\uTorrent
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3emand, 4isabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 PCTCore;PCTools KDS; C:\WINDOWS\system32\drivers\PCTCore.sys [2010-08-18 237632]
R0 pctDS;PC Tools Data Store; C:\WINDOWS\system32\drivers\pctDS.sys [2010-07-16 338880]
R0 pctEFA;PC Tools Extended File Attributes; C:\WINDOWS\system32\drivers\pctEFA.sys [2010-07-16 656320]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-08 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 SSHDRV65;SSHDRV65; \??\C:\WINDOWS\system32\drivers\SSHDRV65.sys []
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1 v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-05-29 21419]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2002-07-17 16877]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-09-05 271360]
R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2009-06-20 12032]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-09-05 18048]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 NETw3x32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-09-27 1709696]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2005-09-17 28672]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-09-14 50560]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-02-16 70144]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-03-30 889472]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-04-27 1164600]
R3 SynMini;USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-08-09 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-08-09 7808]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-25 193088]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2004-01-05 46295]
S2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys []
S3 adiusbaw;ADSL USB MODEM WAN ADAPTER; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [2004-01-12 127721]
S3 afx9c8c2;afx9c8c2; C:\WINDOWS\system32\drivers\afx9c8c2.sys []
S3 CCDECODEekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL WAN Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-04-28 60288]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-04-28 646400]
S3 CnxTgN;Conexant AccessRunner USB ADSL WAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgN.sys [2004-04-29 108771]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-03-04 4202496]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PCD65X2;PCD65X2; \??\C:\DOCUME~1\Hans\LOCALS~1\Temp\PCD65X2.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2004-08-03 11136]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2004-08-03 10240]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-02-02 108928]
S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632]
S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-02-08 62848]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-31 39808]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODECálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3emand, 4isabled)======
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe [2010-09-24 235472]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-01 434176]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-08-09 495616]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-01 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-01 937984]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\PC Tools Security\pctsAuxs.exe [2010-03-15 366840]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\PC Tools Security\pctsSvc.exe [2010-09-29 1145304]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2007-08-09 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
-----------------EOF-----------------
nenajíždí plocha (explorer.exe)
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: nenajíždí plocha (explorer.exe)
Postupujte podle tohoto návodu:
http://www.bleepingcomputer.com/combofi ... t-combofix
Konzolu pro zotavení zatím neinstalujte.
http://www.bleepingcomputer.com/combofi ... t-combofix
Konzolu pro zotavení zatím neinstalujte.
Re: nenajíždí plocha (explorer.exe)
projel sem to ComboFixem, prikladam vypis z logu
ComboFix 10-11-12.01 - Hans 16/11/2010 21:43:10.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1015.569 [GMT 1:00]
Spuštìný z: c:\documents and settings\Hans\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.50 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
VAROVÁNÍ - NA TOMTO POÈÍTAÈI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((( Soubory vytvoøené od 2010-10-16 do 2010-11-16 )))))))))))))))))))))))))))))))
.
2010-11-15 21:47 . 2010-11-15 21:47 -------- d-----w- c:\program files\trend micro
2010-11-15 21:47 . 2010-11-15 21:48 -------- d-----w- C:\rsit
2010-11-15 20:45 . 2010-11-15 21:20 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-15 20:45 . 2010-11-15 20:46 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-11-15 19:39 . 2010-11-15 19:39 -------- d-----w- c:\documents and settings\Hans\Local Settings\Data aplikací\Threat Expert
2010-11-15 19:39 . 2010-11-15 19:39 -------- d-----w- c:\program files\HLPSOFT
2010-11-15 08:04 . 2010-09-24 11:19 767952 ----a-w- c:\windows\BDTSupport.dll
2010-11-15 08:04 . 2010-09-24 11:19 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-11-15 08:04 . 2010-09-24 11:19 743376 ----a-w- c:\windows\PCTBDRes.dll
2010-11-15 08:04 . 2010-09-24 11:19 1914832 ----a-w- c:\windows\PCTBDCore.dll
2010-11-15 08:04 . 2010-11-15 08:04 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2010-11-14 22:05 . 2010-07-16 13:59 656320 ----a-w- c:\windows\system32\drivers\pctEFA.sys
2010-11-14 22:05 . 2010-07-16 13:59 338880 ----a-w- c:\windows\system32\drivers\pctDS.sys
2010-11-14 22:05 . 2010-10-05 10:10 249616 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-11-14 22:05 . 2010-09-30 07:58 159936 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-11-14 22:05 . 2010-08-18 12:51 237632 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-11-14 22:04 . 2010-09-03 11:28 87400 ----a-w- c:\windows\system32\drivers\pctNdis-PacketFilter.sys
2010-11-14 22:04 . 2010-08-10 16:58 31960 ----a-w- c:\windows\system32\drivers\pctNdis-DNS.sys
2010-11-14 22:04 . 2010-10-05 10:11 123712 ----a-w- c:\windows\system32\drivers\pctplfw.sys
2010-11-14 22:04 . 2010-08-27 08:26 70536 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-11-14 22:04 . 2010-11-16 20:22 -------- d-----w- c:\program files\PC Tools Security
2010-11-14 22:04 . 2010-11-14 22:32 -------- d-----w- c:\program files\Common Files\PC Tools
2010-11-14 22:04 . 2010-11-14 22:04 -------- d-----w- c:\documents and settings\Hans\Data aplikací\PC Tools
2010-11-14 21:47 . 2010-11-14 22:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2010-11-14 16:40 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-14 16:40 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-14 16:40 . 2010-11-14 16:40 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\windows\system32\XPSViewer
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\program files\MSBuild
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\program files\Reference Assemblies
2010-11-14 09:10 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-11-14 09:09 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-11-14 09:09 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-11-14 09:09 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-11-14 09:09 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-11-14 09:09 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-11-14 09:09 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-11-14 09:09 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-11-14 09:09 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-11-14 09:04 . 2010-11-14 09:04 -------- d-----w- c:\program files\MSXML 6.0
2010-11-13 23:23 . 2010-11-13 23:23 -------- d-----w- c:\program files\MSXML 4.0
2010-11-13 17:56 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-11-13 17:33 . 2010-11-13 23:33 -------- d--h--w- c:\windows\$hf_mig$
2010-11-13 15:32 . 2010-11-13 15:32 -------- d-----w- c:\documents and settings\Hans\Data aplikací\U3
2010-11-13 13:52 . 2010-11-13 13:52 -------- d-----w- c:\documents and settings\Hans\Data aplikací\Malwarebytes
2010-11-13 12:39 . 2010-11-13 12:39 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Malwarebytes
2010-11-13 12:34 . 2010-11-13 12:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-10 14:00 . 2010-11-10 14:00 258 ----a-w- C:\jshd.exe
2010-10-19 15:33 . 2004-03-08 23:00 662288 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2010-10-19 15:33 . 2001-10-28 15:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2010-10-19 15:33 . 1998-06-23 23:00 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2010-10-19 15:33 . 1998-07-05 23:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2010-10-19 15:33 . 2010-10-19 15:34 -------- d-----w- c:\program files\PDFCreator
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-13 00:30 . 2004-08-17 13:49 60416 ----a-w- c:\windows\system32\userinit.exe
2010-09-13 16:11 . 2010-11-15 08:04 2052 ----a-w- c:\windows\UDB.zip
.
------- Sigcheck -------
[-] 2010-11-13 00:30 . C47991896F57D3C4EC90C009B3294989 . 60416 . . [------] . . c:\windows\system32\userinit.exe
[7] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[7] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\userinit.exe
.
(((((((((((((((((((((((((((((((((( Spouštìcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-08-09 917504]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-05-16 53248]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-08-23 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-02-07 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-02-07 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-02-07 118784]
"SMSERIAL"="c:\windows\sm56hlpr.exe" [2006-03-29 544768]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-31 282624]
"CnxDslTaskBar"="c:\program files\Conexant\AccessRunner ADSL\CnxDslTb.exe" [2004-04-29 462848]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696]
"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-14 198160]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-01 802816]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-01 696320]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"PCTools FGuard"="c:\program files\PC Tools Security\BDT\FGuard.exe" [2010-09-24 108496]
"ISTray"="c:\program files\PC Tools Security\pctsGui.exe" [2010-09-29 1588184]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
c:\documents and settings\Hans\Nab¡dka Start\Programy\Po spuçtØn¡\
mondxc32.exe [2004-8-17 37888]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [14/11/2010 23:05 237632]
R0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [14/11/2010 23:05 338880]
R0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [14/11/2010 23:05 656320]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [09/09/2007 18:43 691696]
R1 SSHDRV65;SSHDRV65;c:\windows\system32\drivers\SSHDRV65.sys [16/08/2007 17:37 120320]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\PC Tools Security\BDT\BDTUpdateService.exe [15/11/2010 09:04 235472]
R3 SynMini;USB2.0 1.3M WebCam;c:\windows\system32\drivers\SynMini.sys [09/08/2007 20:56 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image;c:\windows\system32\drivers\SynScan.sys [09/08/2007 20:56 7808]
S3 CnxEtP;Conexant AccessRunner USB ADSL WAN Adapter Filter Driver;c:\windows\system32\drivers\CnxEtP.sys [22/08/2007 17:10 60288]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver;c:\windows\system32\drivers\CnxEtU.sys [22/08/2007 17:01 646400]
S3 CnxTgN;Conexant AccessRunner USB ADSL WAN Adapter Driver;c:\windows\system32\drivers\CnxTgN.sys [22/08/2007 17:10 108771]
S3 PCD65X2;PCD65X2;\??\c:\docume~1\Hans\LOCALS~1\Temp\PCD65X2.sys --> c:\docume~1\Hans\LOCALS~1\Temp\PCD65X2.sys [?]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\PC Tools Security\pctsAuxs.exe [14/11/2010 23:04 366840]
.
.
------- Doplòkový sken -------
.
uStart Page = hxxp://googleure.com
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: imon.dll
Trusted Zone: mojebanka.cz\www
DPF: {50E43D86-A74D-11D0-98CE-004005249458} - hxxps://www.mojebanka.cz/jars/confwiz/MVSGif.cab
FF - ProfilePath - c:\documents and settings\Hans\Data aplikací\Mozilla\Firefox\Profiles\8ilugg69.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search13.net/search.php?clid=486&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/ig?hl=cs
FF - prefs.js: keyword.URL - hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=FF&o=&locale=&q=
FF - prefs.js: network.proxy.type - 5
FF - component: c:\documents and settings\Hans\Data aplikací\Mozilla\Firefox\Profiles\8ilugg69.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\PC Tools Security\BDT\Firefox\platform\WINNT_x86-msvc\components\libheuristic.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-16 21:48
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesù ...
skenování skrytých položek 'Po spuštìní' ...
skenování skrytých souborù ...
sken byl úspešnì dokonèen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na bìžící procesy ---------------------
- - - - - - - > 'lsass.exe'(860)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
- - - - - - - > 'explorer.exe'(3272)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový èas: 2010-11-16 21:52:00
ComboFix-quarantined-files.txt 2010-11-16 20:51
ComboFix2.txt 2010-11-13 15:49
Pøed spuštìním: 2,160,689,152
Po spuštìní: 2,152,652,800
- - End Of File - - 2C01B80DD8A310DB5F5DB3A8254C4D08
ComboFix 10-11-12.01 - Hans 16/11/2010 21:43:10.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1015.569 [GMT 1:00]
Spuštìný z: c:\documents and settings\Hans\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.50 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
VAROVÁNÍ - NA TOMTO POÈÍTAÈI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((( Soubory vytvoøené od 2010-10-16 do 2010-11-16 )))))))))))))))))))))))))))))))
.
2010-11-15 21:47 . 2010-11-15 21:47 -------- d-----w- c:\program files\trend micro
2010-11-15 21:47 . 2010-11-15 21:48 -------- d-----w- C:\rsit
2010-11-15 20:45 . 2010-11-15 21:20 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-15 20:45 . 2010-11-15 20:46 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-11-15 19:39 . 2010-11-15 19:39 -------- d-----w- c:\documents and settings\Hans\Local Settings\Data aplikací\Threat Expert
2010-11-15 19:39 . 2010-11-15 19:39 -------- d-----w- c:\program files\HLPSOFT
2010-11-15 08:04 . 2010-09-24 11:19 767952 ----a-w- c:\windows\BDTSupport.dll
2010-11-15 08:04 . 2010-09-24 11:19 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-11-15 08:04 . 2010-09-24 11:19 743376 ----a-w- c:\windows\PCTBDRes.dll
2010-11-15 08:04 . 2010-09-24 11:19 1914832 ----a-w- c:\windows\PCTBDCore.dll
2010-11-15 08:04 . 2010-11-15 08:04 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2010-11-14 22:05 . 2010-07-16 13:59 656320 ----a-w- c:\windows\system32\drivers\pctEFA.sys
2010-11-14 22:05 . 2010-07-16 13:59 338880 ----a-w- c:\windows\system32\drivers\pctDS.sys
2010-11-14 22:05 . 2010-10-05 10:10 249616 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-11-14 22:05 . 2010-09-30 07:58 159936 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-11-14 22:05 . 2010-08-18 12:51 237632 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-11-14 22:04 . 2010-09-03 11:28 87400 ----a-w- c:\windows\system32\drivers\pctNdis-PacketFilter.sys
2010-11-14 22:04 . 2010-08-10 16:58 31960 ----a-w- c:\windows\system32\drivers\pctNdis-DNS.sys
2010-11-14 22:04 . 2010-10-05 10:11 123712 ----a-w- c:\windows\system32\drivers\pctplfw.sys
2010-11-14 22:04 . 2010-08-27 08:26 70536 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-11-14 22:04 . 2010-11-16 20:22 -------- d-----w- c:\program files\PC Tools Security
2010-11-14 22:04 . 2010-11-14 22:32 -------- d-----w- c:\program files\Common Files\PC Tools
2010-11-14 22:04 . 2010-11-14 22:04 -------- d-----w- c:\documents and settings\Hans\Data aplikací\PC Tools
2010-11-14 21:47 . 2010-11-14 22:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2010-11-14 16:40 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-14 16:40 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-14 16:40 . 2010-11-14 16:40 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\windows\system32\XPSViewer
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\program files\MSBuild
2010-11-14 09:10 . 2010-11-14 09:10 -------- d-----w- c:\program files\Reference Assemblies
2010-11-14 09:10 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-11-14 09:09 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-11-14 09:09 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-11-14 09:09 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-11-14 09:09 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-11-14 09:09 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-11-14 09:09 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-11-14 09:09 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-11-14 09:09 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-11-14 09:04 . 2010-11-14 09:04 -------- d-----w- c:\program files\MSXML 6.0
2010-11-13 23:23 . 2010-11-13 23:23 -------- d-----w- c:\program files\MSXML 4.0
2010-11-13 17:56 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-11-13 17:33 . 2010-11-13 23:33 -------- d--h--w- c:\windows\$hf_mig$
2010-11-13 15:32 . 2010-11-13 15:32 -------- d-----w- c:\documents and settings\Hans\Data aplikací\U3
2010-11-13 13:52 . 2010-11-13 13:52 -------- d-----w- c:\documents and settings\Hans\Data aplikací\Malwarebytes
2010-11-13 12:39 . 2010-11-13 12:39 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Malwarebytes
2010-11-13 12:34 . 2010-11-13 12:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-10 14:00 . 2010-11-10 14:00 258 ----a-w- C:\jshd.exe
2010-10-19 15:33 . 2004-03-08 23:00 662288 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2010-10-19 15:33 . 2001-10-28 15:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2010-10-19 15:33 . 1998-06-23 23:00 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2010-10-19 15:33 . 1998-07-05 23:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2010-10-19 15:33 . 2010-10-19 15:34 -------- d-----w- c:\program files\PDFCreator
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-13 00:30 . 2004-08-17 13:49 60416 ----a-w- c:\windows\system32\userinit.exe
2010-09-13 16:11 . 2010-11-15 08:04 2052 ----a-w- c:\windows\UDB.zip
.
------- Sigcheck -------
[-] 2010-11-13 00:30 . C47991896F57D3C4EC90C009B3294989 . 60416 . . [------] . . c:\windows\system32\userinit.exe
[7] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[7] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\userinit.exe
.
(((((((((((((((((((((((((((((((((( Spouštìcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-08-09 917504]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-05-16 53248]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-08-23 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-02-07 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-02-07 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-02-07 118784]
"SMSERIAL"="c:\windows\sm56hlpr.exe" [2006-03-29 544768]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-31 282624]
"CnxDslTaskBar"="c:\program files\Conexant\AccessRunner ADSL\CnxDslTb.exe" [2004-04-29 462848]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696]
"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-14 198160]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-01 802816]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-01 696320]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"PCTools FGuard"="c:\program files\PC Tools Security\BDT\FGuard.exe" [2010-09-24 108496]
"ISTray"="c:\program files\PC Tools Security\pctsGui.exe" [2010-09-29 1588184]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
c:\documents and settings\Hans\Nab¡dka Start\Programy\Po spuçtØn¡\
mondxc32.exe [2004-8-17 37888]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [14/11/2010 23:05 237632]
R0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [14/11/2010 23:05 338880]
R0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [14/11/2010 23:05 656320]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [09/09/2007 18:43 691696]
R1 SSHDRV65;SSHDRV65;c:\windows\system32\drivers\SSHDRV65.sys [16/08/2007 17:37 120320]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\PC Tools Security\BDT\BDTUpdateService.exe [15/11/2010 09:04 235472]
R3 SynMini;USB2.0 1.3M WebCam;c:\windows\system32\drivers\SynMini.sys [09/08/2007 20:56 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image;c:\windows\system32\drivers\SynScan.sys [09/08/2007 20:56 7808]
S3 CnxEtP;Conexant AccessRunner USB ADSL WAN Adapter Filter Driver;c:\windows\system32\drivers\CnxEtP.sys [22/08/2007 17:10 60288]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver;c:\windows\system32\drivers\CnxEtU.sys [22/08/2007 17:01 646400]
S3 CnxTgN;Conexant AccessRunner USB ADSL WAN Adapter Driver;c:\windows\system32\drivers\CnxTgN.sys [22/08/2007 17:10 108771]
S3 PCD65X2;PCD65X2;\??\c:\docume~1\Hans\LOCALS~1\Temp\PCD65X2.sys --> c:\docume~1\Hans\LOCALS~1\Temp\PCD65X2.sys [?]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\PC Tools Security\pctsAuxs.exe [14/11/2010 23:04 366840]
.
.
------- Doplòkový sken -------
.
uStart Page = hxxp://googleure.com
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: imon.dll
Trusted Zone: mojebanka.cz\www
DPF: {50E43D86-A74D-11D0-98CE-004005249458} - hxxps://www.mojebanka.cz/jars/confwiz/MVSGif.cab
FF - ProfilePath - c:\documents and settings\Hans\Data aplikací\Mozilla\Firefox\Profiles\8ilugg69.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search13.net/search.php?clid=486&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/ig?hl=cs
FF - prefs.js: keyword.URL - hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=FF&o=&locale=&q=
FF - prefs.js: network.proxy.type - 5
FF - component: c:\documents and settings\Hans\Data aplikací\Mozilla\Firefox\Profiles\8ilugg69.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\PC Tools Security\BDT\Firefox\platform\WINNT_x86-msvc\components\libheuristic.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-16 21:48
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesù ...
skenování skrytých položek 'Po spuštìní' ...
skenování skrytých souborù ...
sken byl úspešnì dokonèen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na bìžící procesy ---------------------
- - - - - - - > 'lsass.exe'(860)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
- - - - - - - > 'explorer.exe'(3272)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový èas: 2010-11-16 21:52:00
ComboFix-quarantined-files.txt 2010-11-16 20:51
ComboFix2.txt 2010-11-13 15:49
Pøed spuštìním: 2,160,689,152
Po spuštìní: 2,152,652,800
- - End Of File - - 2C01B80DD8A310DB5F5DB3A8254C4D08
Re: nenajíždí plocha (explorer.exe)
Otevřete HiJackThis, který najdete C:\Program Files\trend micro\Hans.exe a klikněte na tlačítko "Do a system scan only"
Zaškrtněte tyto řádky:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://googleure.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Hans/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
Poté klikněte na tlačítko "Fix checked"
Dále klikněte na tlačítko "Config" a následně na tlačítko "Misc Toola" tam poté v System tools klikněte na tlačítko "Delete file on reboot" - poté vyberte soubor:
c:\documents and settings\Hans\Nabídka Start\Programy\Po spuštění\
mondxc32.exe
Odinstalujte PC tools security.
Poté restartujte PC a vložte nový log z RSIT
a také dejte vědět zda nastala nějaká změna.
Zaškrtněte tyto řádky:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://googleure.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (file missing)
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Hans/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
Poté klikněte na tlačítko "Fix checked"
Dále klikněte na tlačítko "Config" a následně na tlačítko "Misc Toola" tam poté v System tools klikněte na tlačítko "Delete file on reboot" - poté vyberte soubor:
c:\documents and settings\Hans\Nabídka Start\Programy\Po spuštění\
mondxc32.exe
Odinstalujte PC tools security.
Poté restartujte PC a vložte nový log z RSIT
a také dejte vědět zda nastala nějaká změna.Re: nenajíždí plocha (explorer.exe)
díky za radu, udělal jsem vše podle návodu, ale zatím žádná změna. Plocha po zapnutí stále nenajíždí...
Logfile of random's system information tool 1.08 (written by random/random)
Run by Hans at 2010-11-17 14:19:44
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (6%) free of 40 GB
Total RAM: 1015 MB (43% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:56, on 17/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Hans\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Hans.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Pomocník pro poihlášení ke službi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipamiti kategorií soueástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
--
End of file - 8959 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-08-06 1062184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-17 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-08-09 917504]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-05-16 53248]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-25 786521]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-03-30 544768]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-31 282624]
"CnxDslTaskBar"=C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe [2004-04-29 462848]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-03-28 413696]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-14 198160]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2006-08-01 802816]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2006-08-01 696320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
DSLMON.lnk - C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Documents and Settings\Hans\Nabídka Start\Programy\Po spuštění
mondxc32.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======File associations======
.ini - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
.txt - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
======List of files/folders created in the last 1 months======
2010-11-16 22:31:33 ----SHD---- C:\RECYCLER
2010-11-16 21:52:01 ----A---- C:\ComboFix.txt
2010-11-15 22:47:13 ----D---- C:\Program Files\trend micro
2010-11-15 22:47:12 ----D---- C:\rsit
2010-11-15 21:45:41 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-15 21:45:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-15 20:39:34 ----D---- C:\Program Files\HLPSOFT
2010-11-14 22:47:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2010-11-14 17:40:35 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-11-14 17:40:28 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-11-14 17:40:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-11-14 10:10:53 ----D---- C:\WINDOWS\system32\XPSViewer
2010-11-14 10:10:48 ----D---- C:\Program Files\MSBuild
2010-11-14 10:10:34 ----D---- C:\Program Files\Reference Assemblies
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-11-14 10:09:29 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-11-14 10:05:01 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-11-14 10:04:48 ----D---- C:\Program Files\MSXML 6.0
2010-11-14 00:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-11-14 00:33:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-11-14 00:33:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-11-14 00:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-11-14 00:33:05 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-11-14 00:32:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-11-14 00:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-11-14 00:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-11-14 00:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-11-14 00:32:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-11-14 00:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-11-14 00:31:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-11-14 00:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-11-14 00:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2010-11-14 00:31:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-11-14 00:31:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-11-14 00:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-11-14 00:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-11-14 00:30:44 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-11-14 00:30:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-11-14 00:30:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-11-14 00:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-11-14 00:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-11-14 00:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-11-14 00:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-11-14 00:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-11-14 00:29:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-11-14 00:29:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-11-14 00:29:09 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-11-14 00:28:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-11-14 00:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-11-14 00:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-11-14 00:28:33 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-11-14 00:26:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-11-14 00:26:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-11-14 00:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-11-14 00:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-11-14 00:25:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-11-14 00:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-11-14 00:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-11-14 00:25:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-11-14 00:25:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-11-14 00:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-11-14 00:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-11-14 00:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-11-14 00:23:42 ----D---- C:\Program Files\MSXML 4.0
2010-11-14 00:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-11-14 00:23:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-11-14 00:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-11-13 18:56:11 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-11-13 18:33:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-11-13 16:34:07 ----A---- C:\WINDOWS\NIRCMD.exe
2010-11-13 16:34:07 ----A---- C:\WINDOWS\MBR.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\zip.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWSC.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWREG.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\sed.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\PEV.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\grep.exe
2010-11-13 16:34:05 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-11-13 16:33:58 ----D---- C:\WINDOWS\ERDNT
2010-11-13 16:33:35 ----D---- C:\Qoobox
2010-11-13 16:32:27 ----D---- C:\Documents and Settings\Hans\Data aplikací\U3
2010-11-13 14:52:26 ----D---- C:\Documents and Settings\Hans\Data aplikací\Malwarebytes
2010-11-13 13:34:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-11-10 15:00:30 ----A---- C:\jshd.exe
2010-10-19 16:33:52 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2010-10-19 16:33:51 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2010-10-19 16:33:50 ----D---- C:\Program Files\PDFCreator
======List of files/folders modified in the last 1 months======
2010-11-17 14:19:11 ----D---- C:\WINDOWS\Temp
2010-11-17 14:14:52 ----D---- C:\WINDOWS\system32\ias
2010-11-17 14:14:52 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2010-11-17 14:14:41 ----RD---- C:\Program Files
2010-11-17 14:14:40 ----SHD---- C:\System Volume Information
2010-11-17 14:14:40 ----D---- C:\Program Files\Common Files
2010-11-17 14:13:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-17 14:13:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-11-17 14:13:19 ----D---- C:\WINDOWS
2010-11-17 14:13:11 ----D---- C:\WINDOWS\system32\drivers
2010-11-17 14:13:06 ----HD---- C:\WINDOWS\inf
2010-11-17 14:12:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-17 11:34:35 ----D---- C:\WINDOWS\Prefetch
2010-11-17 11:27:58 ----D---- C:\WINDOWS\network diagnostic
2010-11-17 09:41:28 ----D---- C:\Program Files\ESET
2010-11-17 09:41:04 ----RSD---- C:\WINDOWS\assembly
2010-11-16 22:30:16 ----D---- C:\Documents and Settings\Hans\Data aplikací\Skype
2010-11-16 21:48:57 ----A---- C:\WINDOWS\system.ini
2010-11-16 21:45:45 ----D---- C:\WINDOWS\system32
2010-11-16 21:45:45 ----D---- C:\WINDOWS\AppPatch
2010-11-15 22:52:29 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-15 20:41:23 ----D---- C:\filmy
2010-11-15 20:41:22 ----D---- C:\Program Files\Windows Media Connect 2
2010-11-15 20:41:22 ----D---- C:\My JPEGs
2010-11-15 20:10:51 ----D---- C:\WINDOWS\system32\NtmsData
2010-11-15 20:10:43 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-11-14 23:11:49 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-14 23:04:10 ----SHD---- C:\WINDOWS\Installer
2010-11-14 23:04:10 ----D---- C:\Config.Msi
2010-11-14 23:04:09 ----D---- C:\WINDOWS\WinSxS
2010-11-14 18:07:34 ----D---- C:\WINDOWS\Debug
2010-11-14 17:15:45 ----AC---- C:\WINDOWS\WINCMD.INI
2010-11-14 10:16:13 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-14 10:10:48 ----D---- C:\WINDOWS\system32\en-US
2010-11-14 10:10:43 ----RSD---- C:\WINDOWS\Fonts
2010-11-14 10:09:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-14 10:06:50 ----D---- C:\Program Files\Internet Explorer
2010-11-14 10:00:21 ----D---- C:\WINDOWS\system32\Setup
2010-11-14 00:30:18 ----D---- C:\Program Files\Movie Maker
2010-11-14 00:25:54 ----D---- C:\Program Files\Outlook Express
2010-11-14 00:24:10 ----D---- C:\WINDOWS\system32\cs-cz
2010-11-14 00:06:01 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-11-14 00:06:00 ----D---- C:\WINDOWS\system32\CatRoot
2010-11-13 21:29:39 ----D---- C:\WINDOWS\Help
2010-11-13 19:36:01 ----D---- C:\Documents and Settings\Hans\Data aplikací\uTorrent
2010-11-13 19:35:49 ----D---- C:\WINDOWS\system32\config
2010-11-13 16:48:46 ----SD---- C:\WINDOWS\Tasks
2010-11-13 14:50:56 ----D---- C:\WINDOWS\msagent
2010-11-13 01:30:01 ----A---- C:\WINDOWS\system32\userinit.exe
2010-11-03 10:25:40 ----D---- C:\Program Files\Common Files\Adobe
2010-11-03 10:25:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-08 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 SSHDRV65;SSHDRV65; \??\C:\WINDOWS\system32\drivers\SSHDRV65.sys []
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-05-29 21419]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2002-07-17 16877]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-09-05 271360]
R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2009-06-20 12032]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-09-05 18048]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 NETw3x32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-09-27 1709696]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2005-09-17 28672]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-09-14 50560]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-02-16 70144]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-03-30 889472]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-04-27 1164600]
R3 SynMini;USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-08-09 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-08-09 7808]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-25 193088]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2004-01-05 46295]
S2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys []
S3 adiusbaw;ADSL USB MODEM WAN ADAPTER; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [2004-01-12 127721]
S3 asbu1w9f;asbu1w9f; C:\WINDOWS\system32\drivers\asbu1w9f.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL WAN Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-04-28 60288]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-04-28 646400]
S3 CnxTgN;Conexant AccessRunner USB ADSL WAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgN.sys [2004-04-29 108771]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-03-04 4202496]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PCD65X2;PCD65X2; \??\C:\DOCUME~1\Hans\LOCALS~1\Temp\PCD65X2.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2004-08-03 11136]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2004-08-03 10240]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-02-02 108928]
S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632]
S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-02-08 62848]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-31 39808]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-01 434176]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-08-09 495616]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-01 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-01 937984]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2007-08-09 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
-----------------EOF-----------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Hans at 2010-11-17 14:19:44
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (6%) free of 40 GB
Total RAM: 1015 MB (43% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:56, on 17/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Hans\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Hans.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Pomocník pro poihlášení ke službi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipamiti kategorií soueástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
--
End of file - 8959 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-08-06 1062184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-17 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-08-09 917504]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-05-16 53248]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-25 786521]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-02-07 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-02-07 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-02-07 118784]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-03-30 544768]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-31 282624]
"CnxDslTaskBar"=C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe [2004-04-29 462848]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-03-28 413696]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-14 198160]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2006-08-01 802816]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2006-08-01 696320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
DSLMON.lnk - C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Documents and Settings\Hans\Nabídka Start\Programy\Po spuštění
mondxc32.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======File associations======
.ini - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
.txt - open - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1
======List of files/folders created in the last 1 months======
2010-11-16 22:31:33 ----SHD---- C:\RECYCLER
2010-11-16 21:52:01 ----A---- C:\ComboFix.txt
2010-11-15 22:47:13 ----D---- C:\Program Files\trend micro
2010-11-15 22:47:12 ----D---- C:\rsit
2010-11-15 21:45:41 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-15 21:45:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-15 20:39:34 ----D---- C:\Program Files\HLPSOFT
2010-11-14 22:47:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2010-11-14 17:40:35 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-11-14 17:40:28 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-11-14 17:40:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-11-14 10:10:53 ----D---- C:\WINDOWS\system32\XPSViewer
2010-11-14 10:10:48 ----D---- C:\Program Files\MSBuild
2010-11-14 10:10:34 ----D---- C:\Program Files\Reference Assemblies
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-11-14 10:09:30 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-11-14 10:09:29 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-11-14 10:05:01 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-11-14 10:04:48 ----D---- C:\Program Files\MSXML 6.0
2010-11-14 00:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-11-14 00:33:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-11-14 00:33:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-11-14 00:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-11-14 00:33:05 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-11-14 00:32:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-11-14 00:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-11-14 00:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-11-14 00:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-11-14 00:32:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-11-14 00:31:58 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-11-14 00:31:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-11-14 00:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-11-14 00:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2010-11-14 00:31:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-11-14 00:31:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-11-14 00:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-11-14 00:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-11-14 00:30:44 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-11-14 00:30:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-11-14 00:30:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-11-14 00:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-11-14 00:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-11-14 00:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-11-14 00:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-11-14 00:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-11-14 00:29:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-11-14 00:29:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-11-14 00:29:09 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-11-14 00:28:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-11-14 00:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-11-14 00:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-11-14 00:28:33 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-11-14 00:26:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-11-14 00:26:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-11-14 00:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-11-14 00:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-11-14 00:25:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-11-14 00:25:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-11-14 00:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-11-14 00:25:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-11-14 00:25:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-11-14 00:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-11-14 00:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-11-14 00:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-11-14 00:23:42 ----D---- C:\Program Files\MSXML 4.0
2010-11-14 00:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-11-14 00:23:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-11-14 00:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-11-13 18:56:11 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-11-13 18:33:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-11-13 16:34:07 ----A---- C:\WINDOWS\NIRCMD.exe
2010-11-13 16:34:07 ----A---- C:\WINDOWS\MBR.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\zip.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWSC.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\SWREG.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\sed.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\PEV.exe
2010-11-13 16:34:06 ----A---- C:\WINDOWS\grep.exe
2010-11-13 16:34:05 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-11-13 16:33:58 ----D---- C:\WINDOWS\ERDNT
2010-11-13 16:33:35 ----D---- C:\Qoobox
2010-11-13 16:32:27 ----D---- C:\Documents and Settings\Hans\Data aplikací\U3
2010-11-13 14:52:26 ----D---- C:\Documents and Settings\Hans\Data aplikací\Malwarebytes
2010-11-13 13:34:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-11-10 15:00:30 ----A---- C:\jshd.exe
2010-10-19 16:33:52 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2010-10-19 16:33:51 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2010-10-19 16:33:50 ----D---- C:\Program Files\PDFCreator
======List of files/folders modified in the last 1 months======
2010-11-17 14:19:11 ----D---- C:\WINDOWS\Temp
2010-11-17 14:14:52 ----D---- C:\WINDOWS\system32\ias
2010-11-17 14:14:52 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2010-11-17 14:14:41 ----RD---- C:\Program Files
2010-11-17 14:14:40 ----SHD---- C:\System Volume Information
2010-11-17 14:14:40 ----D---- C:\Program Files\Common Files
2010-11-17 14:13:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-17 14:13:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-11-17 14:13:19 ----D---- C:\WINDOWS
2010-11-17 14:13:11 ----D---- C:\WINDOWS\system32\drivers
2010-11-17 14:13:06 ----HD---- C:\WINDOWS\inf
2010-11-17 14:12:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-17 11:34:35 ----D---- C:\WINDOWS\Prefetch
2010-11-17 11:27:58 ----D---- C:\WINDOWS\network diagnostic
2010-11-17 09:41:28 ----D---- C:\Program Files\ESET
2010-11-17 09:41:04 ----RSD---- C:\WINDOWS\assembly
2010-11-16 22:30:16 ----D---- C:\Documents and Settings\Hans\Data aplikací\Skype
2010-11-16 21:48:57 ----A---- C:\WINDOWS\system.ini
2010-11-16 21:45:45 ----D---- C:\WINDOWS\system32
2010-11-16 21:45:45 ----D---- C:\WINDOWS\AppPatch
2010-11-15 22:52:29 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-15 20:41:23 ----D---- C:\filmy
2010-11-15 20:41:22 ----D---- C:\Program Files\Windows Media Connect 2
2010-11-15 20:41:22 ----D---- C:\My JPEGs
2010-11-15 20:10:51 ----D---- C:\WINDOWS\system32\NtmsData
2010-11-15 20:10:43 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-11-14 23:11:49 ----D---- C:\WINDOWS\Microsoft.NET
2010-11-14 23:04:10 ----SHD---- C:\WINDOWS\Installer
2010-11-14 23:04:10 ----D---- C:\Config.Msi
2010-11-14 23:04:09 ----D---- C:\WINDOWS\WinSxS
2010-11-14 18:07:34 ----D---- C:\WINDOWS\Debug
2010-11-14 17:15:45 ----AC---- C:\WINDOWS\WINCMD.INI
2010-11-14 10:16:13 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-14 10:10:48 ----D---- C:\WINDOWS\system32\en-US
2010-11-14 10:10:43 ----RSD---- C:\WINDOWS\Fonts
2010-11-14 10:09:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-14 10:06:50 ----D---- C:\Program Files\Internet Explorer
2010-11-14 10:00:21 ----D---- C:\WINDOWS\system32\Setup
2010-11-14 00:30:18 ----D---- C:\Program Files\Movie Maker
2010-11-14 00:25:54 ----D---- C:\Program Files\Outlook Express
2010-11-14 00:24:10 ----D---- C:\WINDOWS\system32\cs-cz
2010-11-14 00:06:01 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-11-14 00:06:00 ----D---- C:\WINDOWS\system32\CatRoot
2010-11-13 21:29:39 ----D---- C:\WINDOWS\Help
2010-11-13 19:36:01 ----D---- C:\Documents and Settings\Hans\Data aplikací\uTorrent
2010-11-13 19:35:49 ----D---- C:\WINDOWS\system32\config
2010-11-13 16:48:46 ----SD---- C:\WINDOWS\Tasks
2010-11-13 14:50:56 ----D---- C:\WINDOWS\msagent
2010-11-13 01:30:01 ----A---- C:\WINDOWS\system32\userinit.exe
2010-11-03 10:25:40 ----D---- C:\Program Files\Common Files\Adobe
2010-11-03 10:25:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-08 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 SSHDRV65;SSHDRV65; \??\C:\WINDOWS\system32\drivers\SSHDRV65.sys []
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-05-29 21419]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2002-07-17 16877]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-09-05 271360]
R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2009-06-20 12032]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-09-05 18048]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 NETw3x32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-09-27 1709696]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2005-09-17 28672]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-09-14 50560]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-02-16 70144]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-03-30 889472]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-04-27 1164600]
R3 SynMini;USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-08-09 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-08-09 7808]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-25 193088]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2004-01-05 46295]
S2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys []
S3 adiusbaw;ADSL USB MODEM WAN ADAPTER; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [2004-01-12 127721]
S3 asbu1w9f;asbu1w9f; C:\WINDOWS\system32\drivers\asbu1w9f.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL WAN Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-04-28 60288]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-04-28 646400]
S3 CnxTgN;Conexant AccessRunner USB ADSL WAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgN.sys [2004-04-29 108771]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-03-04 4202496]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PCD65X2;PCD65X2; \??\C:\DOCUME~1\Hans\LOCALS~1\Temp\PCD65X2.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2004-08-03 11136]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2004-08-03 10240]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-02-02 108928]
S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632]
S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-02-08 62848]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-31 39808]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-01 434176]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-08-09 495616]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-01 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-01 937984]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2007-08-09 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
-----------------EOF-----------------
Re: nenajíždí plocha (explorer.exe)
Jde to i přes registry.
Start > Spustit > regedit > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon > Shell > Změňte hodnotu na explorer.exe > restart
Testováno na widnows 7
Start > Spustit > regedit > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon > Shell > Změňte hodnotu na explorer.exe > restart
Testováno na widnows 7
Přispějete na provoz fóra?