přepsani souboru na připonu ENCODED

[ondris23]

Tak patřim mezi ty bordelaře našel jsem to teda taky na ploše tak co ted zaplatit 100 dolaru

[motji]

Uživatel před Vámi mi bohužel moc informací k viru nesdělil, neměla jsem se čeho chytnout. Podle toho co jste psal Vy, měl by zabrat postup z odkazu, který jsem Vám napsala.

Pár kliknutí tohle opravdu nenapraví.
Podle toho co jsem četla, po té co vir zašifruje data a smaže se, již se nedá jednoduše data rozšifrovat.
Pak budu ráda, když napíšete, jestli se Vám data povedlo rozšifrovat.

[ondris23]

Par souboru jsem dostal programkem testdisk-6.11.3.win

no a ten postup na odšifrovani jsem nepochopill

[bockelman]

jestli jsem to dobre pochopil, tak se nejedna o desifrovani soboru, ale o program, ktery dokaze ziskat zpet ztracene (smazane) soubory. vyuziva toho, ze vir nejdriv zasifroval soubory a pak ty puvodni smazal. Jenze tady nastava problem, kdyz uzivatel od te doby pocitac pouzival a stahoval dalsi veci, predpokladam...

Priznnam se, ze jsem nemel cas cist to cele podrobne, ale jak jsem to proletel, tak mi prijde, ze se jedna o tento postup...

[motji]

Máte pravdu.
Rozšifrovat ta data asi nepujde , je k tomu potřeba soukromý klíč, podle toho co jsem se dočetla.

[ondris23]

toto je muj klič asi

FDA0A5A93C5D9C7A493F10EBE93A37C73E77DFAF2C134AB90CEFA4F1C17BBA147698FE6494D09B6C0710020768E45BD26245CAE10AEAA84CB896E3C5B6A9BD23
38EF0235CAD1C8CE6AED340F8D5191AEBC239A6C9B30487F776C2595BA8492FF6D8891C1EF8F93A85DE745EAEBC81C3644A8B3F9A115EFEE2DD09CD8DF2AA087
5F73C8CE8F4E412B798C5383852C072EA53B65EA889843EBBD0B6FA745ACFB437B6DD74FEA15F32B9E0503AB2B057248A462DB0AE1E4302AF02EEB436E4CFA21
8AF33B320F7760BFC942C0A22FFDFE4E13569E308CF23C4098C67F387A87C24DF4D6DB1F2778D09E713E39E415307B936CF031CAB9413B9CFA2B05EE0AEE0948
E482F3C4745B2AD07B4B2A9468C3CA32156C8CEB2551803CDDFBBAEFE4D75B4618573E2C9A263189293EE7D2FED6ACF618269001DB154EB08B9B6EAA37701B91
FF2B1B7B2DA89F3E5C6CBF9DDD2D1FC9CC1E37546C4B64C265A4AC21B41E105035A93751EC2C1EB1250FF0F027D7D31F73C35C45C89E89BA1BC735DF46480E50
43F6E960C9085767971F0301866D85EC0D4525A483B1700F708C84F4C87F40E39117FCCA5D6745A790DED25C037E396D77A2A09FD31943229D603261F8F096B1
BAC1C8514E6CAEE39907D0C006CC0DCC2233F1ED957D7C60BCE4A4AA0C761B442C3CDA4DBEA5A06F9FC206E283B29F0BCAFD905E5DF92A504B818549F2096E91
7D3EA3FFC163E0A6E850D50D336A05FC9E21691C5B7114E3CD3E5251DFE74F1ACAB63B3704AD3E3CB0304FA6B9A513DDDA435F4D9D7C49F1F8C2446EAF8FD50C
644927F505E5864402B502155A53028A0477D0D31A5004905CA6D82CE73196798263270EF0A74A9C50AF07448EADD5AF9B44A82DE0216D2DCBC88B1FC8105B78
41759AEBF18A9737A1168BDFCAA8AE3FD3E108D897ACE394CE90986C359020B8A4F4F03F0AF1F7E9B91D099B9FCF13D4AA514CA671E12FECA973DAE729B90F60
5A7222BABCA39361D4AD005B8A8762AF8B674911716866A51CB587F2DBAA7B45BC0B5678C45A1C3583267AAFDE03015709824E41B86C6587158549BF46B8F561

[motji]

Já Vám to ale nerozšifruju .

[ondris23]

To ja vim nikdo vtedle republice

5 let stare: Známí kryptologové prezentovali na semináři v Massachusetts Institute of Technology příspěvek, v kterém uvádí, že lze vytvořit uživatelský hardware, který zrychlí prolomení 1024 bitové RSA klíče na dobu jednoho roku



sifrovani na 1024 je docela problem v roce 2007 dokazal stroj za 1 milion dolaru dokazal rozsifrovat data za 8 mesicu, a metoda sifrovani RSA je star vic nez 30 let.

[motji]

Našla jsem i rozšifrování asi za 10 dní , ale neznám nikoho kdo by to zvládl.
Pokud by jste tvůrci viru zaslal peníze, nemyslím si ž eby Vám zaslal klíč na rozšifrování, takže tohle bych nedělala.
Byly tu i podobné viry, tam se ale klíč rozšifrovat podařilo.

[ondris23]

Myslite že tvurci budou radi že maji penize a vic je zajmat nebude ??? nebo jake jsou skušenosti stakovma připadama ?

todle odepsali :

just pay and we will help you

[stell]

Ak mozem.

just pay and we will help you,
len zaplatiť a my Vám pomôžeme

Toto nie je pravda, ak posles peniaze nikdy nic neuvidis, preco by kazili vlastny kseft?
Takze nic neposielat""!!!!

Podla mna sa jedna o variantu trojana ransom.Kolegyna uz napisala ze ma pouzit rector decryptor, ale nevidim ze si to pouzil.Takze sprav toto.
Stiahni na plochu rectordecryptor

Rozbal to na plochu-klik-start-klik-spustit a skopiruj do okna prikaz
"%userprofile%\plocha\RectorDecryptor.exe" -l "%userprofile%\plocha\RectorDecryptor.txt"

stlac enter-po skonceni, skenu stlac klaves, cierne okno sa zatvori, na ploche najdes log, vloz sem.

Ten isty postup, xoristdecryptor

Ale do okna teraz zkopiruj tento prikaz:
"%userprofile%\plocha\xoristdecryptor.exe" -l "%userprofile%\plocha\xoristdecryptor.txt"
log vloz sem.

[ondris23]

nějak to nefunguje ten vaš postup.... pišeto umistěni neni dostupne

[stell]

C:\Users\Ondra\Desktop

No preto ze ty tam mas po anglicky>>plocha=desktop.Treba to opravit.
1:prikaz bude:
"%userprofile%\Desktop\RectorDecryptor.exe" -l "%userprofile%\Desktop\RectorDecryptor.txt"

2:prikaz:
"%userprofile%\Desktop\xoristdecryptor.exe" -l "%userprofile%\Desktop\xoristdecryptor.txt"

[JayDee]

Dobrý den,

řeším stejný problém s přepsanými soubory na příponu ENCODED.
Zkoušel jsem už i rectordescriptor dle postupu ale nic nenašel.
Mohu prosit o kontrolu logu z RSIT ?

Kód: Vybrat vše

http://www.uloz.to/6320859/log-txt

[stell]

zdravim
Ano pocitac mas totalne infikovane, skusime pc najprv vycistit a uvidime ze co a ako s Encoded, je to dajaka nova infekcia.
Logy treba davat sem.
Logfile of random's system information tool 1.08 (written by random/random)
Run by ACDC at 2010-10-26 01:59:16
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 25 GB (65%) free of 38 GB
Total RAM: 1015 MB (63% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{3041d03e-fd4b-44e0-b742-2d9b88305f98}
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-06-02 1018616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-01-23 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-01-23 126976]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2004-12-20 88358]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-02-22 180224]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-02-22 2889216]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-01-11 516096]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2005-01-08 102491]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-01-08 692315]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-23 149280]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"COMODO SafeSurf"=C:\Program Files\COMODO\SafeSurf\cssurf.exe [2010-02-07 278264]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-02-07 1797880]
"svchost"=C:\Documents and Settings\ACDC\Data aplikací\Microsoft\svchost.exe [2010-10-21 96768]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"WindowsDriverControl"=C:\Documents and Settings\ACDC\Data aplikací\C-76947-8457-2745\wincdrsvn.exe [2010-10-12 88064]
"WindowsBootController"=C:\Documents and Settings\ACDC\Data aplikací\L-77685-67895-5687\winsvnc32.exe [2010-10-21 73268]
"MSNUpdateServices"=C:\Documents and Settings\ACDC\Data aplikací\S-3685-5437-5687\winsrvn.exe [2010-10-20 208896]
"MSConfig"=C:\Documents and Settings\ACDC\uddbqt.exe [2010-10-26 17920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
C:\PROGRA~1\AVG\AVG9\avgtray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ6.5\ICQ.exe silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IJKUK66HMN]
C:\DOCUME~1\ACDC\LOCALS~1\Temp\Nlx.exe [2010-10-14 208896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
C:\Documents and Settings\ACDC\rcq.exe [2010-10-24 18432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMH2B46TDP]
C:\DOCUME~1\ACDC\LOCALS~1\Temp\Nl8.exe [2010-10-24 270336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^0238idj.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\0238idj.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^1lmh7jj.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\1lmh7jj.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^1si8pff.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\1si8pff.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^3dttpff.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\3dttpff.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^5u0lwms.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\5u0lwms.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^6tjz272.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\6tjz272.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^70souvg.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\70souvg.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^86k81wh.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\86k81wh.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^86k81wx.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\86k81wx.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^9l0xiid.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\9l0xiid.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^a6grc5yyt.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\a6grc5yyt.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^c5ouvgrmxit.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\c5ouvgrmxit.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^cdjz26vwrc.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\cdjz26vwrc.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^e1awwrii.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\e1awwrii.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^eafbbc70o6.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\eafbbc70o6.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^epav0871td.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\epav0871td.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^eza6qm6c.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\eza6qm6c.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^favbhhdt.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\favbhhdt.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^fwwriiduupg.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\fwwriiduupg.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^ggr1dnyz3.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\ggr1dnyz3.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^h0souvgrm.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\h0souvgrm.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^hioe9vwh.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\hioe9vwh.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^id031q7272.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\id031q7272.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^j9uvl26y.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\j9uvl26y.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^jzzva6mm.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\jzzva6mm.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^kfl66snjzk.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\kfl66snjzk.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^kfvwrx66uk.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\kfvwrx66uk.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^llhxxtjjfvv.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\llhxxtjjfvv.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^m0oojaaq5h1.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\m0oojaaq5h1.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^mh03ojp2.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\mh03ojp2.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^nj8p61r4.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\nj8p61r4.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^nooe3vw0m3.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\nooe3vw0m3.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^oojaavmc.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\oojaavmc.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^oojafbbc.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\oojafbbc.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk.ENCODED]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk.ENCODED []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^otz2fbm1cd.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\otz2fbm1cd.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^oufk86mm1i.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\oufk86mm1i.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^puvlghhyt.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\puvlghhyt.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^q70rnii6u.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\q70rnii6u.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^r70njzzva3.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\r70njzzva3.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^rmm6yy6kk.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\rmm6yy6kk.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^rndy5klmxi.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\rndy5klmxi.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^s5j0pq1g3s.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\s5j0pq1g3s.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^snojzqqlrn.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\snojzqqlrn.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^syy5klmxi.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\syy5klmxi.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^tkkfbbxnnjz.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\tkkfbbxnnjz.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^to1kggbc70.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\to1kggbc70.exe [2010-10-24 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^tpkk6ww7.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\tpkk6ww7.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^tzuvl26yjj.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\tzuvl26yjj.exe [2010-10-21 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^ufk86mm1i87.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\ufk86mm1i87.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^uu6gg6ss6ee.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\uu6gg6ss6ee.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^vwxnnjzz.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\vwxnnjzz.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^z66q81cn.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\z66q81cn.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^zal6ccxy.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\zal6ccxy.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^ze870bxns.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\ze870bxns.exe [2010-10-20 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^zpa1qg0hdd2.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\zpa1qg0hdd2.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^zqqlccxo.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\zqqlccxo.exe [2010-10-23 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^ACDC^Nabídka Start^Programy^Po spuštění^zz3ggbssn.exe]
C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění\zz3ggbssn.exe [2010-10-20 44544]

C:\Documents and Settings\ACDC\Nabídka Start\Programy\Po spuštění
0238idj.exe
1lmh7jj.exe
1si8pff.exe
3dttpff.exe
5u0lwms.exe
6tjz272.exe
70souvg.exe
86k81wh.exe
86k81wx.exe
9l0xiid.exe
a6grc5yyt.exe
c5ouvgrmxit.exe
cdjz26vwrc.exe
e1awwrii.exe
eafbbc70o6.exe
epav0871td.exe
eza6qm6c.exe
favbhhdt.exe
fwwriiduupg.exe
ggr1dnyz3.exe
h0souvgrm.exe
hioe9vwh.exe
id031q7272.exe
j9uvl26y.exe
jzzva6mm.exe
kfl66snjzk.exe
kfvwrx66uk.exe
llhxxtjjfvv.exe
m0oojaaq5h1.exe
mh03ojp2.exe
nj8p61r4.exe
nooe3vw0m3.exe
oojaavmc.exe
oojafbbc.exe
otz2fbm1cd.exe
oufk86mm1i.exe
puvlghhyt.exe
q70rnii6u.exe
r70njzzva3.exe
rmm6yy6kk.exe
rndy5klmxi.exe
s5j0pq1g3s.exe
snojzqqlrn.exe
syy5klmxi.exe
tkkfbbxnnjz.exe
to1kggbc70.exe
tpkk6ww7.exe
tzuvl26yjj.exe
ufk86mm1i87.exe
uu6gg6ss6ee.exe
vwxnnjzz.exe
z66q81cn.exe
zal6ccxy.exe
ze870bxns.exe
zpa1qg0hdd2.exe
zqqlccxo.exe
zz3ggbssn.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\system32\guard32.dll C:\WINDOWS\system32\cssdll32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32]
C:\WINDOWS\system32\cryptnet32.dll [2010-10-23 46592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-01-23 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\qvhmbpzl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\qvhmbpzl.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Documents and Settings\ACDC\Local Settings\Data aplikací\Opera\Opera\temporary_downloads\IMG100264031.JPG-www.facebook.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Documents and Settings\ACDC\Data aplikací\C-76947-8457-2745\wincdrsvn.exe"="C:\Documents and Settings\ACDC\Data aplikací\C-76947-8457-2745\wincdrsvn.exe:*:Enabled:WindowsDriverControl"
"C:\Documents and Settings\ACDC\Data aplikací\S-3685-5437-5687\winsrvn.exe"="C:\Documents and Settings\ACDC\Data aplikací\S-3685-5437-5687\winsrvn.exe:*:Enabled:MSNUpdateServices"
"C:\Documents and Settings\ACDC\Data aplikací\L-77685-67895-5687\winsvnc32.exe"="C:\Documents and Settings\ACDC\Data aplikací\L-77685-67895-5687\winsvnc32.exe:*:Enabled:WindowsBootController"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Administrator\Data aplikací\C-76947-8457-2745\wincdrsvn.exe"="C:\Documents and Settings\Administrator\Data aplikací\C-76947-8457-2745\wincdrsvn.exe:*:Enabled:WindowsDriverControl"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-10-26 01:59:17 ----D---- C:\Program Files\trend micro
2010-10-26 01:59:16 ----D---- C:\rsit
2010-10-25 23:56:43 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-10-25 23:56:42 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-10-25 23:56:40 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-10-25 23:56:38 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-10-25 23:56:36 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-10-25 23:56:36 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-10-25 23:56:35 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-10-25 23:56:05 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-10-25 22:55:06 ----D---- C:\WINDOWS\pss
2010-10-25 22:49:30 ----ASH---- C:\hiberfil.sys
2010-10-24 11:01:29 ----A---- C:\WINDOWS\Nfeseg.exe
2010-10-23 23:26:27 ----A---- C:\WINDOWS\Nfesef.exe
2010-10-23 19:05:14 ----A---- C:\WINDOWS\system32\cryptnet32.dll
2010-10-23 18:28:19 ----D---- C:\Program Files\Google
2010-10-23 18:17:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-10-23 17:59:59 ----A---- C:\WINDOWS\system32\shimg.dll
2010-10-23 17:37:18 ----AH---- C:\Documents and Settings\ACDC\Data aplikací\wimk888h.txt
2010-10-21 21:38:43 ----AH---- C:\Documents and Settings\ACDC\Data aplikací\wimk888h.txt.ENCODED
2010-10-21 21:27:46 ----RSHD---- C:\Documents and Settings\ACDC\Data aplikací\L-77685-67895-5687
2010-10-20 23:33:15 ----A---- C:\WINDOWS\Nfesee.exe
2010-10-20 14:32:14 ----AH---- C:\Documents and Settings\ACDC\Data aplikací\wimknrncds.txt
2010-10-20 14:31:42 ----RSHD---- C:\Documents and Settings\ACDC\Data aplikací\S-3685-5437-5687
2010-10-20 13:25:57 ----A---- C:\WINDOWS\system32\drivers\qvhmbpzl.sys
2010-10-20 13:15:45 ----RSH---- C:\Documents and Settings\ACDC\Data aplikací\juzjf.exe
2010-10-16 13:20:32 ----A---- C:\WINDOWS\PhotoSnapViewer.INI
2010-10-15 10:03:41 ----A---- C:\WINDOWS\Nfesed.exe
2010-10-14 17:35:13 ----A---- C:\WINDOWS\Nfesec.exe
2010-10-13 18:46:37 ----A---- C:\amd64.exe
2010-10-12 21:25:13 ----A---- C:\s.exe
2010-10-07 21:48:00 ----AH---- C:\WINDOWS\system32\winrtsnr.txt
2010-10-07 21:42:35 ----RSHD---- C:\Documents and Settings\ACDC\Data aplikací\C-76947-8457-2745
2010-09-29 18:06:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$

======List of files/folders modified in the last 1 months======

2010-10-26 01:59:17 ----RD---- C:\Program Files
2010-10-26 01:58:36 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-26 01:58:33 ----D---- C:\WINDOWS
2010-10-26 01:56:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\_comodo_
2010-10-26 01:55:01 ----AD---- C:\WINDOWS\Temp
2010-10-26 01:54:13 ----D---- C:\Documents and Settings\ACDC\Data aplikací\Skype
2010-10-26 01:34:27 ----D---- C:\WINDOWS\system32
2010-10-26 01:32:11 ----A---- C:\WINDOWS\ModemLog_Axesstel USB Modem.txt
2010-10-26 01:05:28 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-26 00:53:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-10-26 00:42:33 ----SHD---- C:\System Volume Information
2010-10-26 00:22:42 ----SH---- C:\boot.ini
2010-10-26 00:22:42 ----A---- C:\WINDOWS\win.ini
2010-10-26 00:22:42 ----A---- C:\WINDOWS\system.ini
2010-10-26 00:11:11 ----D---- C:\Documents and Settings\ACDC\Data aplikací\skypePM
2010-10-25 23:56:43 ----D---- C:\WINDOWS\system32\drivers
2010-10-25 23:56:25 ----SHD---- C:\WINDOWS\Installer
2010-10-25 23:56:25 ----D---- C:\WINDOWS\WinSxS
2010-10-25 23:38:21 ----D---- C:\WINDOWS\Debug
2010-10-25 23:34:05 ----SD---- C:\Documents and Settings\ACDC\Data aplikací\Microsoft
2010-10-25 22:45:26 ----HD---- C:\WINDOWS\inf
2010-10-25 22:44:40 ----D---- C:\Documents and Settings
2010-10-24 22:34:02 ----SHD---- C:\RECYCLER
2010-10-24 11:05:10 ----SD---- C:\WINDOWS\Tasks
2010-10-24 10:54:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-10-23 18:17:54 ----D---- C:\Program Files\Alwil Software
2010-10-23 17:35:54 ----AC---- C:\WINDOWS\ODBC.INI
2010-10-22 00:30:37 ----D---- C:\Documents and Settings\ACDC\Data aplikací\ICQ
2010-10-21 23:09:19 ----D---- C:\WINDOWS\system32\Restore
2010-10-21 23:09:13 ----D---- C:\WINDOWS\system32\ias
2010-10-21 23:09:12 ----AC---- C:\WINDOWS\system32\eula.txt.ENCODED
2010-10-21 23:09:12 ----A---- C:\WINDOWS\system32\drivers\gmreadme.txt.ENCODED
2010-10-21 23:04:29 ----AC---- C:\WINDOWS\ModemLog_AnyDATA CDMA USB Modem (PID 6502) #2.txt.ENCODED
2010-10-21 23:03:31 ----D---- C:\Program Files\Windows Media Player
2010-10-21 23:03:29 ----D---- C:\Program Files\Windows Media Connect 2
2010-10-21 23:03:28 ----D---- C:\Program Files\Windows Media Bonus Pack for Windows XP
2010-10-21 23:03:24 ----D---- C:\Program Files\Outlook Express
2010-10-21 23:03:23 ----D---- C:\Program Files\Opera
2010-10-21 23:03:22 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-21 23:02:53 ----D---- C:\Program Files\Online Services
2010-10-21 23:01:12 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-21 23:00:23 ----D---- C:\Program Files\Common Files\Services
2010-10-21 21:08:54 ----D---- C:\WINDOWS\Network Diagnostic
2010-10-14 18:02:12 ----D---- C:\WINDOWS\Prefetch
2010-10-09 19:57:26 ----D---- C:\WINDOWS\Microsoft.NET
2010-10-09 19:51:56 ----RSD---- C:\WINDOWS\assembly
2010-10-08 01:47:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2010-02-07 79504]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 qvhmbpzl;qvhmbpzl; C:\WINDOWS\System32\Drivers\qvhmbpzl.sys [2010-10-20 40128]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-02-07 101776]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-02-07 31504]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 osaio;osaio; C:\WINDOWS\system32\drivers\osaio.sys [2005-03-04 8704]
R2 osanbm;osanbm; C:\WINDOWS\system32\drivers\osanbm.sys [2005-01-14 4010]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2007-01-30 45568]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 16896]
R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2005-01-13 57984]
R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2005-02-21 36992]
R3 ESMCR;ESMCR; C:\WINDOWS\system32\DRIVERS\ESM7SK.sys [2005-01-26 330368]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-01-23 804317]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2004-06-16 46080]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-01-08 191456]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2008-01-07 2216064]
R4 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys []
S3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-12-20 1271463]
S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-03-26 38784]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-02-07 618232]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-23 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-23 136176]
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------