Podezření na virus

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
Avatar uživatele
Black-g
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 09 Říj 2010 23:28
Místo/Bydliště: Děčín CZ

Re: Podezření na virus

#16 Příspěvek od Black-g »

OTL Extras logfile created on: 18.5.2011 20:17:16 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\hpp\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8080.16413)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 38,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 60,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 224,41 Gb Total Space | 93,93 Gb Free Space | 41,86% Space Free | Partition Type: NTFS
Drive D: | 8,47 Gb Total Space | 1,59 Gb Free Space | 18,80% Space Free | Partition Type: NTFS
Drive F: | 5,60 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: HPP-PC | User Name: hpp | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] -- Reg Error: Value error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{12D10EF8-206E-48A9-B841-6AF0B3D85D49}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{25B856E8-A51A-465E-8255-316888259D6F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2F1EE2EA-0210-4986-814F-924D48694BAE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{39092976-B34D-439A-BD0A-31F3F2641F42}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{56848970-BF49-44C9-9A4D-AFDCE374AF2E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{73730DF3-42BA-460E-8434-938516B75681}" = lport=2869 | protocol=6 | dir=in | app=system |
"{74532322-89F0-4FE9-991A-68923D9FB431}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{75B2F849-671E-4F1C-AA5A-3FC2AED9F37E}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{7C39B949-85F1-466B-8783-38AB6B0776E8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{7EC5DD8C-A2F1-4EBD-B6C0-EFCFF7B65403}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{81E9849D-8CA4-4FA6-B0B4-BB615A62EE8F}" = rport=2869 | protocol=6 | dir=out | app=system |
"{83D7D9AF-EC20-4839-8733-28EC3E6585E1}" = rport=138 | protocol=17 | dir=out | app=system |
"{871E0AEA-4314-4EB9-8E54-B9B88D65D79B}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{8925EDA2-6954-45D7-904C-5DF87B5CAD0C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8DFDE4C3-7AB7-46D1-B91D-EFD6C3E051CA}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{8E236408-972A-4D64-904A-79F9B817B64A}" = lport=445 | protocol=6 | dir=in | app=system |
"{95C8176E-F7D3-4E7F-B231-8C1A08083DFD}" = lport=139 | protocol=6 | dir=in | app=system |
"{991D2EAF-ACF2-461B-BB8F-48938B7B4151}" = lport=137 | protocol=17 | dir=in | app=system |
"{A4B3FFBF-2878-4C31-AADE-2C10E57780EF}" = rport=139 | protocol=6 | dir=out | app=system |
"{AAC1B7A6-CAB2-4A73-BFFD-0CBE601FE39F}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{AB6E352D-EECE-4262-96EA-02304F8FBC31}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BD3A19C4-5A86-438C-A519-5A0F3E990126}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C0680C6B-2C58-412B-A38D-6C42D9413E18}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{D17F1001-5444-4A95-B1EE-9F29EB31A9C2}" = rport=445 | protocol=6 | dir=out | app=system |
"{DB662B66-7991-4FF0-B783-E33081E74486}" = lport=138 | protocol=17 | dir=in | app=system |
"{E1ECBDC7-0F55-4318-AAA0-E7EADD0A35C1}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{EB01BF43-7F26-4FD3-8530-BFEC4C5CDF2D}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{EF83E4E3-C715-4220-AE76-7CA45631B6CB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F2286324-B1EE-4552-886D-978AE3E08ACC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F5CCBB7A-9CA8-4EE3-BBF7-E381056BA9EB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F74E6754-53C5-4683-A896-3E29B084ACDF}" = rport=137 | protocol=17 | dir=out | app=system |
"{FFBE38E5-9D6B-4B6F-BE48-6E4278CC8BAF}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0463C465-6DF9-41A4-9DAA-2F77B2D7AEF1}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{07F6075A-FFFC-4C5D-A9BF-9BBD7E9F1742}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{0A402D22-441C-43A8-B751-7FA307CA62F4}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{166B4E51-9C62-4EF7-96C7-82C02037ABE7}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1D8748CA-8EE9-42F5-A80F-8CFE29267569}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{242E4101-030D-4ADF-B3A5-FE9568119674}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{269A7353-4D12-4E3D-A285-38FCAC4B98A4}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{2AA19DC0-EA5A-4A5F-8558-CB305ABC57AE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{2ADFD5FA-C28A-4E6D-8DE1-FAF702638708}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe |
"{305437F4-BA11-4DE4-882B-73E4644EA132}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{3218995C-354C-4AA9-BF67-20B4811448B4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3566DB9B-0D75-4385-B5AE-DE56E304D94E}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{35AFA65F-E323-4B6F-8FFF-AAD203F89FF9}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe |
"{370F63C2-1438-4C4B-A5CB-7AE022034FD8}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{3852152E-FACB-40AF-B113-952F00C46012}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{3A802B31-4234-49D1-922D-6D43CA94D15F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3D7C46F0-BE8A-4091-A08E-5547DF9CE932}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{403DA01D-6DD9-4213-8F9F-3AE9FE84CAA3}" = protocol=6 | dir=in | app=c:\program files\myyearbook toolbar\troubleshooter.exe |
"{40921FC8-A435-4E95-A067-39E17CAB36C2}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{44CEADA0-4230-49D3-AFF9-4375B0B48136}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{4651E4AE-9158-4A41-ABA4-DD1F63527FD6}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{49E198E5-893D-4515-9949-64045EEA867D}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{507618B1-09CF-4D6D-9B91-8B6858AA050D}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{51BF7B2A-C187-49A8-8B71-BD03B1988CB4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{529D1CD8-B788-430A-AA7F-739B4752E430}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{53BD8FE7-2C5C-4FB3-A65B-8482D967EF51}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{555900C8-03A4-44E6-B817-217A2B08AFCB}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{5B0E6529-2194-4A45-8645-A2D5E9D488D2}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{6A413080-49A8-44FF-A63F-8EB94509B6AB}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{6E7C3B8A-2A9F-47E9-94D6-84D7F63FD1B0}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{717FCC0A-56E1-45D5-B501-984EBC86F9DC}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{72E1902A-1E91-48C6-B785-412F4FA78E0C}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{73AA5ED3-34DB-4AA7-9C67-D983C8A8DAE7}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{77B2B421-63C1-4293-9B9F-68BA5AE01D02}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{796FDBA5-177B-450A-A743-13AEBD21D12B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{7C14FB88-3BC4-45AA-9BDA-D9F5ED25ABAA}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{7E40D365-122C-4AF6-9462-3168AF295D6D}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{817A8B00-A220-4E30-8C4C-5962B5BF8D72}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe |
"{85058C49-E2C6-472D-B4D2-E85F34437526}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe |
"{8513A2DC-CC0D-4801-B960-87D67BE37A6A}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{86157AAD-DA2A-4ECF-8E9E-13E4C9B86548}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{8C755455-4D7E-4CED-A637-41816E24B354}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe |
"{8FABB250-406F-4097-8F9C-753AD8EA6CAE}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{97561E20-8B2E-47AC-91AF-CEC08E713D68}" = protocol=17 | dir=in | app=c:\program files\myyearbook toolbar\troubleshooter.exe |
"{9FFE713A-5F0C-4DFE-AA3F-4FAA8AC28894}" = protocol=6 | dir=in | app=c:\program files\myyearbook toolbar\toolbarupdate.exe |
"{A0075F38-5E0F-4DA0-84C0-CA03D7581EAB}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{A041249F-C64D-4911-B0A8-3F263EF3890A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{A409455C-312C-451B-9E7B-7ECD9AC87A9A}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{A6456917-B09D-4797-83AB-8EE2109FFF92}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{ABCBBA6C-7C63-4D60-B0FD-D3C365FD6938}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{B42EB569-6940-4FFE-BC82-815CB23C2882}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B4345466-04A7-4BBD-BA63-39A69DB8276D}" = protocol=17 | dir=in | app=c:\program files\ea games\mirror's edge\binaries\mirrorsedge.exe |
"{BB0A3B99-F66B-412A-AF25-F07DF18AB571}" = protocol=17 | dir=in | app=c:\program files\myyearbook toolbar\toolbarupdate.exe |
"{BC5DC387-A0EA-45CA-A345-6826948876FD}" = dir=in | app=c:\program files\hp\quickplay\qp.exe |
"{C07266C3-6C15-4F18-B0AD-9942E4A54363}" = protocol=6 | dir=in | app=c:\program files\ea games\mirror's edge\binaries\mirrorsedge.exe |
"{C1805EFB-E6F4-43C3-8100-7BCC4C9E9267}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{C20EE865-B6C7-4A52-8AA7-C59E2846DF12}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe |
"{C8BB7B49-D8CC-4496-A245-3EC82FC728B0}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe |
"{CC9E3BCA-A9A8-4946-8F00-DBD6B838A32B}" = dir=in | app=c:\program files\hp\quickplay\qpservice.exe |
"{CEB4D0F6-8AD4-4A8B-A65F-AF8C5457740E}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{D3D3F107-49D7-482F-84A6-58BF083130A2}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{D6991A2F-CBB4-4754-A16F-9BF7D3460A9C}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{E6C3F413-ADB4-4D6F-AF8C-141730D57067}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{E823B7A8-F768-49A4-B865-B71AAEB5127A}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{EC1D8103-E6DB-44D3-8E1C-2853B290FD89}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe |
"{F6EDC96D-F9C7-4907-9107-2AE6D5B736B0}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{FFA59172-563B-404E-9E33-2021B53AF238}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"TCP Query User{21D9FEFB-FBFB-40DB-A0FE-A91B91C8C342}C:\users\hpp\appdata\local\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\users\hpp\appdata\local\google\chrome\application\chrome.exe |
"TCP Query User{2225C4BB-DEE9-42BE-B831-478A46B01F20}C:\program files\qip 2010\qip.exe" = protocol=6 | dir=in | app=c:\program files\qip 2010\qip.exe |
"TCP Query User{23234AEB-DAC4-48D8-BE94-38821E10C634}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"TCP Query User{271B43E1-66F0-47B3-A3A4-4234FC97E9BC}C:\program files\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{2B4B4263-249F-40C3-BAB8-86F68D50D98F}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"TCP Query User{3A5B03C8-2430-4547-8D9F-037F50CB2122}C:\users\hpp\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=6 | dir=in | app=c:\users\hpp\appdata\roaming\imvuclient\1vivoxvoice.exe |
"TCP Query User{556FB5C1-52DA-4543-AE53-2763B7A4D8F1}C:\users\hpp\appdata\local\temp\fj_downloader.exe" = protocol=6 | dir=in | app=c:\users\hpp\appdata\local\temp\fj_downloader.exe |
"TCP Query User{77B774E9-73DC-400D-9328-0CE84837D327}C:\program files\dsnet corp\atube catcher 2.0\yct.exe" = protocol=6 | dir=in | app=c:\program files\dsnet corp\atube catcher 2.0\yct.exe |
"TCP Query User{908AB376-33C7-429E-96A2-1D5571DEE9C9}C:\program files\namco\street racing syndicate\bin\srs.exe" = protocol=6 | dir=in | app=c:\program files\namco\street racing syndicate\bin\srs.exe |
"TCP Query User{A2839BD7-429F-4E06-931F-55C33BFDE990}C:\program files\audiosurf\engine\questviewer.exe" = protocol=6 | dir=in | app=c:\program files\audiosurf\engine\questviewer.exe |
"TCP Query User{A36C5E44-F6C9-442B-8137-B42BE61F3912}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{B473E014-0A8C-45E3-9FDF-825AD8AED297}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{BAD0563A-78BF-4DC0-83DF-715A034C7129}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{CCA76CFB-AFB5-44F1-B998-006935B8112B}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{CF671722-D4EB-4042-BFCA-D760A6531EA2}C:\program files\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{DD6BBF2F-E032-48C2-8FDA-5044959FDF91}C:\world of padman\wop.exe" = protocol=6 | dir=in | app=c:\world of padman\wop.exe |
"TCP Query User{EA31AEE3-099F-4DC4-8BFB-27F7F1BA7369}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{00266705-88E1-428F-921F-9113D87F0ACE}C:\program files\qip 2010\qip.exe" = protocol=17 | dir=in | app=c:\program files\qip 2010\qip.exe |
"UDP Query User{141EA8BC-B1EB-4C6A-95E5-764BBD4E7888}C:\world of padman\wop.exe" = protocol=17 | dir=in | app=c:\world of padman\wop.exe |
"UDP Query User{217C2BC5-ED1F-4C9E-8B6B-921B03A787A5}C:\program files\namco\street racing syndicate\bin\srs.exe" = protocol=17 | dir=in | app=c:\program files\namco\street racing syndicate\bin\srs.exe |
"UDP Query User{322B0CA3-4E9E-461C-9FE9-5CAFCAA06B9B}C:\program files\dsnet corp\atube catcher 2.0\yct.exe" = protocol=17 | dir=in | app=c:\program files\dsnet corp\atube catcher 2.0\yct.exe |
"UDP Query User{3F7B91F2-2D67-48CE-8E02-867E0FC29E37}C:\users\hpp\appdata\local\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\users\hpp\appdata\local\google\chrome\application\chrome.exe |
"UDP Query User{459873ED-623C-45C5-AA3F-0B5A8B378F86}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{5098B3A2-3B43-45E1-A56E-C24AC81D389F}C:\users\hpp\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=17 | dir=in | app=c:\users\hpp\appdata\roaming\imvuclient\1vivoxvoice.exe |
"UDP Query User{531A6F8D-6239-4FD0-B147-7D2D7F42605F}C:\users\hpp\appdata\local\temp\fj_downloader.exe" = protocol=17 | dir=in | app=c:\users\hpp\appdata\local\temp\fj_downloader.exe |
"UDP Query User{5F0492EE-50F8-418D-8133-FD2996541A88}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"UDP Query User{6634B159-F7BA-459C-BA51-65302066505A}C:\program files\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"UDP Query User{68387071-1926-4684-9FDE-8A4088628878}C:\program files\audiosurf\engine\questviewer.exe" = protocol=17 | dir=in | app=c:\program files\audiosurf\engine\questviewer.exe |
"UDP Query User{69858FFD-4119-42C9-BA06-70DCA6961E9F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{714F4A72-88C4-4FDE-9E9A-444698DEFF79}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"UDP Query User{845AC7D3-12E6-4DEB-836F-65FCC3C7A679}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{B4BC1074-69B7-46C0-8E21-E07E657DB190}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{CED4B356-0441-45B5-9D14-5FA0E00EBAFF}C:\program files\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"UDP Query User{F6B32367-345B-4089-8BA6-AD15E04B80E1}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0054A0F6-00C9-4498-B821-B5C9578F433E}" = HP Help and Support
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{13A5E785-5197-4EAD-8EE3-D660271E49BC}" = Feedback Tool
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{228C6B46-64E2-404E-898A-EF0830603EF4}" = HPNetworkAssistant
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 24
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 H2
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Vista
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 3.7
"{491DFBAA-77EF-4B06-8676-2FC66EEE049A}" = LogMeIn Hamachi
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5F548A02-80BC-404D-BAE6-F05F9BF6B449}" = Nero DiscCopyGadget 10 Help (CHM)
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1" = Free MP3 Cutter 1.01
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A3F7D5D-8A53-4A7C-B6DA-22DD1212EB55}" = Internet Explorer
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{92EC1A84-7FFC-42DF-A8F6-79C21C4765A5}" = Nero DiscCopy Gadget 10
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9ADABDDE-9644-461B-9E73-83FA3EFCAB50}" = HP Wireless Assistant
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A31A5DFC-3439-48FC-99BB-5174168AE471}" = COMODO livePCsupport
"{A6CC2CA2-2779-4F10-88BF-A3C9EB874C24}" = SweetIM Toolbar for Internet Explorer 3.9
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.4 - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}" = Adobe Shockwave Player
"{AE84E7FF-4DEC-48EC-BBA9-9A808E48DF8E}_is1" = Free MP3 Recorder 1.0
"{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B6D0B141-B2BE-4DD0-B08F-B9186F3E36B3}" = HP User Guides 0118
"{BE06114F-559D-11E0-B5A1-001D0926B1BF}" = Google Earth
"{BF5EE349-90CD-4422-A43B-661778180173}" = USB Disk Win98 Driver
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C73B5B3B-F974-48CA-8B91-3E8A432AEA5B}" = Microsoft Works
"{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}" = HP Update
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D801B39E-CE01-409F-8E7C-B7976EA3C9DC}_is1" = Audiosurf
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}" = NVIDIA PhysX v8.10.17
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F4770313-7391-411F-B484-43394A785B97}" = HP Customer Experience Enhancements
"{F4C96E82-14D2-485F-93A9-6B246C40130A}" = HP Easy Setup - Frontend
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BlingeeTb.BlingeeTbToolbar" = Blingee Toolbar
"CCleaner" = CCleaner
"Centrum.cz Toolbar_is1" = Centrum.cz Toolbar 1.202.012.001
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDAUDIO_HERMOSA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"conduitEngine" = Conduit Engine
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"EADM" = EA Download Manager
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FastStone Capture" = FastStone Capture 5.3
"Fences" = Fences
"Fraps" = Fraps
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free Sound Recorder_is1" = Free Sound Recorder v6.7
"Free YouTube Download_is1" = Free YouTube Download version 2.10.33.324
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Frets on Fire" = Frets On Fire
"GameSpy Arcade" = GameSpy Arcade
"HaaliMkx" = Haali Media Splitter
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"IcoFX_is1" = IcoFX 1.6.4
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"Lišta Centrum.cz Toolbar_is1" = Lišta Centrum.cz Toolbar 1.203.023.002
"LogMeIn Hamachi" = LogMeIn Hamachi
"Matroska Pack" = Matroska Pack
"Maxthon3" = Maxthon 3
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 4.0.1 (x86 cs)" = Mozilla Firefox 4.0.1 (x86 cs)
"myBabylon_English Toolbar" = myBabylon_English Toolbar
"myYearbook Toolbar" = myYearbook Toolbar
"OpenAL" = OpenAL
"PhotoFiltre" = PhotoFiltre
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"QuickStores-Toolbar_is1" = QuickStores-Toolbar 1.0.0
"RadioBar" = RadioBar Toolbar
"save2pc_is1" = save2pc 4.06
"TeamViewer 6" = TeamViewer 6
"The KMPlayer" = The KMPlayer (remove only)
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"WavePad" = WavePad Uninstall
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1858403596-3662356469-2680116690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"IMVU Avatar chat client software BETA" = IMVU Avatar Chat Software
"UnityWebPlayer" = Unity Web Player

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 15.4.2011 19:12:38 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 15.4.2011 19:12:38 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 9391

Error - 15.4.2011 19:12:38 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 9391

Error - 16.4.2011 0:00:15 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:18 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:18 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:18 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:53 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:53 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

Error - 16.4.2011 0:00:53 | Computer Name = hpp-PC | Source = Bonjour Service | ID = 100
Description = WSARecvMsg failed (10022)

[ System Events ]
Error - 18.5.2011 0:12:58 | Computer Name = hpp-PC | Source = ipnathlp | ID = 31004
Description = Agent serveru proxy služby DNS nemohl přidělit 0 bajtů paměti. To
může znamenat, že tento systém má nedostatek virtuální paměti nebo že správce paměti
zjistil vnitřní chybu.

Error - 18.5.2011 8:11:14 | Computer Name = hpp-PC | Source = ipnathlp | ID = 30013
Description = Přidělování DHCP bylo automaticky vypnuto u adresy IP 89.103.172.42,
protože tato adresa nepatří do oboru 192.168.0.0/255.255.255.0, ze kterého jsou
přidělovány adresy klientům DHCP. Chcete-li přidělování DHCP u této adresy IP zapnout,
změňte obor tak, aby tuto adresu IP zahrnoval, nebo změňte adresu IP tak, aby patřila
do oboru.

Error - 18.5.2011 8:12:01 | Computer Name = hpp-PC | Source = ipnathlp | ID = 31004
Description = Agent serveru proxy služby DNS nemohl přidělit 0 bajtů paměti. To
může znamenat, že tento systém má nedostatek virtuální paměti nebo že správce paměti
zjistil vnitřní chybu.

Error - 18.5.2011 10:25:27 | Computer Name = hpp-PC | Source = ipnathlp | ID = 31004
Description = Agent serveru proxy služby DNS nemohl přidělit 0 bajtů paměti. To
může znamenat, že tento systém má nedostatek virtuální paměti nebo že správce paměti
zjistil vnitřní chybu.

Error - 18.5.2011 10:25:31 | Computer Name = hpp-PC | Source = ipnathlp | ID = 30013
Description = Přidělování DHCP bylo automaticky vypnuto u adresy IP 89.103.172.42,
protože tato adresa nepatří do oboru 192.168.0.0/255.255.255.0, ze kterého jsou
přidělovány adresy klientům DHCP. Chcete-li přidělování DHCP u této adresy IP zapnout,
změňte obor tak, aby tuto adresu IP zahrnoval, nebo změňte adresu IP tak, aby patřila
do oboru.

Error - 18.5.2011 12:43:35 | Computer Name = hpp-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 18.5.2011 12:44:40 | Computer Name = hpp-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 18.5.2011 12:55:04 | Computer Name = hpp-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 18.5.2011 13:03:04 | Computer Name = hpp-PC | Source = ipnathlp | ID = 30013
Description = Přidělování DHCP bylo automaticky vypnuto u adresy IP 89.103.172.42,
protože tato adresa nepatří do oboru 192.168.0.0/255.255.255.0, ze kterého jsou
přidělovány adresy klientům DHCP. Chcete-li přidělování DHCP u této adresy IP zapnout,
změňte obor tak, aby tuto adresu IP zahrnoval, nebo změňte adresu IP tak, aby patřila
do oboru.

Error - 18.5.2011 13:08:41 | Computer Name = hpp-PC | Source = Service Control Manager | ID = 7030
Description =


< End of report >

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Podezření na virus

#17 Příspěvek od vyosek »

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
  • Kód: Vybrat vše

    :otl
    SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService)
    DRV - File not found [Kernel | On_Demand | Running] -- -- (XDva385)
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchcanvas.com/?ot=6
    IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
    IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
    IE - HKLM\..\URLSearchHook: {90b49673-5506-483e-b92b-ca0265bd9ca8} - Reg Error: Key error. File not found
    IE - HKLM\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (Conduit Ltd.)
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: - Reg Error: Key error. File not found
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll ()
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: {80b90af3-3a6f-417a-935e-55a93ff682bc} - C:\Program Files\myYearbook Toolbar\Helper.dll ()
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Hpp\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (Conduit Ltd.)
    IE - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
    FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
    FF - prefs.js..browser.startup.homepage: "http://start.icq.com/xmas/"
    FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
    [2011.02.10 00:31:15 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\2x20sn61.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
    [2011.04.04 22:32:24 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\2x20sn61.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
    [2010.09.08 20:14:53 | 000,000,000 | ---D | M] (Facemoods) -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\2x20sn61.default\extensions\ffxtlbr@Facemoods.com
    [2011.02.21 17:00:23 | 000,000,000 | ---D | M] (Nero Toolbar) -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\2x20sn61.default\extensions\toolbar@ask.com
    [2011.02.09 20:04:53 | 000,000,000 | ---D | M] (QipAuthorizer) -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\c8bqv7gz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
    [2011.03.15 15:55:16 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\c8bqv7gz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
    [2011.03.29 12:51:30 | 000,000,000 | ---D | M] (IMVU Inc Community Toolbar) -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\c8bqv7gz.default\extensions\{90b49673-5506-483e-b92b-ca0265bd9ca8}
    [2011.04.04 22:32:24 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\c8bqv7gz.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
    [2011.03.26 20:43:21 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\c8bqv7gz.default\extensions\plugin2@gameplaylabs.com
    [2010.06.21 18:35:24 | 000,001,042 | ---- | M] () -- C:\Users\Hpp\AppData\Roaming\Mozilla\Firefox\Profiles\2x20sn61.default\searchplugins\icqplugin.xml
    - BHO: (myYearbook Toolbar BHO) - {180E37B8-072D-48E4-800D-F353EE800672} - C:\Program Files\myYearbook Toolbar\Toolbar.dll ()
    O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
    O2 - BHO: (CentrumczToolbar BHO) - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll ()
    O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Hpp\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
    O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
    O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
    O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
    O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
    O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
    O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
    O3 - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
    O3 - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
    O3 - HKU\S-1-5-21-1858403596-3662356469-2680116690-1000\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
    O4 - HKLM..\Run: [reset] C:\Windows\reset.reg ()
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\Direct3DVideoOutput.dll] File not found
    O4 - HKLM..\RunOnce: [B Register C:\Program Files\DivX\DivX Plus Player\DSEPlugins\DivXPlaybackModule.dll] File not found
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    @Alternate Data Stream - 97 bytes -> C:\ProgramData\Temp:F33592E3
    @Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:0B4227B4
    @Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:302A9871
    @Alternate Data Stream - 104 bytes -> C:\ProgramData\Temp:D1B5B4F1
    
    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "UpdateLBPShortCut"=-
    "UpdatePSTShortCut"=-
    "UCam_Menu"=-
    "UpdateP2GoShortCut"=-
    "UpdatePDIRShortCut"=-
    "HP Software Update"=-
    "AdobeAAMUpdater-1.0"=-
    "Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    "DivXUpdate"=-
    "QuickTime Task"=-
    "IObit Security 360"=-
    "NBAgent"=-
    "SunJavaUpdateSched"=-
    "WinampAgent"=-
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Google Update"=-
    "uTorrent"=-
     
    :files
    C:\Program Files\Ask.com
    C:\Program Files\DAEMON Tools Toolbar
    C:\Program Files\SweetIM
    C:\Program Files\myBabylon_English\tbmyBa.dll 
    %windir%\system32\*.tmp.dll /s
    %windir%\system32\SET*.tmp /s
    %windir%\*.tmp
    
    :commands
    [RESETHOSTS]
    [EMPTYTEMP]
    [EMPTYFLASH]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět