prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#31 Příspěvek od bluedicka »

prostě internet explorer :)
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#32 Příspěvek od vyosek »

Poprosim o novy log z RSIT
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#33 Příspěvek od bluedicka »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ji Pcal at 2012-04-26 09:03:24
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 30 GB (13%) free of 238 GB
Total RAM: 1023 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:03:39, on 26.4.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\DU Meter\DUMeter.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\eInstruction\Device Manager\Launch.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Jiří Pácal\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Jiří Pácal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: eInstruction Device Manager.lnk = C:\Program Files\eInstruction\Device Manager\Launch.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5970 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-02-26 16125440]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"DU Meter"=C:\Program Files\DU Meter\DUMeter.exe [2005-02-03 1469440]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-07-14 86016]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-07-14 13877248]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-03-07 4241512]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\netw]
C:\WINDOWS\svw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
C:\WINDOWS\system32\PSDrvCheck.exe [2004-03-10 406016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2007-01-02 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
C:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [2000-01-21 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Jiří Pácal^Nabídka Start^Programy^Po spuštění^OpenOffice.org 2.0.lnk]
C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
eInstruction Device Manager.lnk - C:\Program Files\eInstruction\Device Manager\Launch.exe

C:\Documents and Settings\Jiří Pácal\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoActiveDesktopChanges"=0
"NoSetActiveDesktop"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoActiveDesktopChanges"=1
"NoSetActiveDesktop"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eInstruction\Device Manager\Launch.exe"="C:\Program Files\eInstruction\Device Manager\Launch.exe:*:Enabled:eIDeviceManager"
"C:\Program Files\eInstruction\Device Manager\jre\bin\java.exe"="C:\Program Files\eInstruction\Device Manager\jre\bin\java.exe:*:Enabled:eIDeviceManagerJava"
"C:\Program Files\eInstruction\Device Manager\jre\bin\javaw.exe"="C:\Program Files\eInstruction\Device Manager\jre\bin\javaw.exe:*:Enabled:eIDeviceManagerJavaw"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"midi"=wdmaud.drv
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.wmv3"=wmv9vcm.dll
"vidc.MPG4"=mpg4c32.dll
"vidc.MP42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.MJPG"=Pvmjpg21.dll
"VIDC.PIM1"=pclepim1.dll
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.divx"=divx.dll
"vidc.xvid"=xvid.dll
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"vidc.tscc"=tsccvid.dll

======List of files/folders created in the last 1 month======

2012-04-25 18:14:56 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-04-25 18:14:55 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-04-24 15:31:28 ----D---- C:\Program Files\WhoCrashed
2012-04-24 15:14:31 ----A---- C:\WINDOWS\NIRCMD.exe
2012-04-24 15:14:25 ----SD---- C:\ComboFix
2012-04-24 10:26:15 ----D---- C:\_OTL
2012-04-23 18:38:28 ----D---- C:\rsit
2012-04-23 17:59:22 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\DriverCure
2012-04-23 17:59:21 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\ParetoLogic
2012-04-23 17:59:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\ParetoLogic
2012-04-22 23:29:12 ----A---- C:\Boot.bak
2012-04-22 23:29:03 ----RASHD---- C:\cmdcons
2012-04-22 23:26:28 ----A---- C:\WINDOWS\zip.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\SWXCACLS.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\SWSC.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\SWREG.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\sed.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\PEV.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\MBR.exe
2012-04-22 23:26:28 ----A---- C:\WINDOWS\grep.exe
2012-04-22 23:26:05 ----D---- C:\WINDOWS\ERDNT
2012-04-22 23:20:28 ----D---- C:\Qoobox
2012-04-22 22:07:59 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\Uniblue
2012-04-22 22:07:53 ----D---- C:\Program Files\Uniblue
2012-04-22 01:11:03 ----D---- C:\Program Files\Unlocker
2012-04-21 19:34:07 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-04-21 19:27:14 ----D---- C:\Program Files\Codec Pack - All In 1
2012-04-21 18:46:34 ----D---- C:\Program Files\BS_Player
2012-04-21 18:46:16 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer Pro
2012-04-21 18:46:16 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer
2012-04-21 18:46:15 ----D---- C:\Program Files\Webteh
2012-04-11 09:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2012-03-29 21:45:43 ----A---- C:\WINDOWS\system32\shimg.dll

======List of files/folders modified in the last 1 month======

2012-04-26 09:03:28 ----D---- C:\Program Files\trend micro
2012-04-26 08:35:58 ----D---- C:\WINDOWS\Temp
2012-04-26 05:11:55 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-04-25 20:03:12 ----D---- C:\WINDOWS\system32\drivers
2012-04-25 18:14:55 ----RD---- C:\Program Files
2012-04-25 13:58:52 ----D---- C:\WINDOWS\system32\CatRoot2
2012-04-24 18:47:25 ----D---- C:\WINDOWS\system32\drivers\etc
2012-04-24 18:47:22 ----D---- C:\WINDOWS\twain_32
2012-04-24 18:47:21 ----SHD---- C:\WINDOWS\Installer
2012-04-24 15:33:43 ----HD---- C:\Config.Msi
2012-04-24 15:16:42 ----D---- C:\WINDOWS\Minidump
2012-04-24 15:16:42 ----D---- C:\WINDOWS
2012-04-24 15:15:23 ----D---- C:\WINDOWS\system32
2012-04-24 10:26:21 ----SD---- C:\WINDOWS\Tasks
2012-04-24 09:24:13 ----A---- C:\WINDOWS\NeroDigital.ini
2012-04-23 18:17:51 ----D---- C:\Program Files\Common Files
2012-04-23 17:51:22 ----A---- C:\WINDOWS\wincmd.ini
2012-04-23 16:53:08 ----D---- C:\WINDOWS\AppPatch
2012-04-23 02:57:07 ----D---- C:\WINDOWS\network diagnostic
2012-04-22 23:29:12 ----RASH---- C:\boot.ini
2012-04-22 23:26:34 ----D---- C:\WINDOWS\Prefetch
2012-04-22 21:42:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-04-22 21:33:36 ----D---- C:\Documents and Settings\Jiří Pácal\Data aplikací\Media Player Classic
2012-04-22 01:34:24 ----A---- C:\WINDOWS\wininit.ini
2012-04-21 21:08:20 ----HD---- C:\WINDOWS\inf
2012-04-21 20:59:07 ----D---- C:\Program Files\Google
2012-04-21 20:59:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2012-04-21 20:55:56 ----HD---- C:\Program Files\InstallShield Installation Information
2012-04-21 20:44:11 ----D---- C:\Program Files\MediaCoder
2012-04-21 19:30:56 ----D---- C:\WINDOWS\system32\config
2012-04-21 19:30:32 ----D---- C:\WINDOWS\system32\wbem
2012-04-21 19:30:31 ----D---- C:\WINDOWS\Registration
2012-04-11 11:31:03 ----RSD---- C:\WINDOWS\assembly
2012-04-11 11:30:25 ----D---- C:\WINDOWS\Microsoft.NET
2012-04-11 09:52:43 ----D---- C:\Program Files\Internet Explorer
2012-04-11 09:51:13 ----D---- C:\WINDOWS\Debug
2012-04-11 09:17:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-04-11 09:16:59 ----D---- C:\WINDOWS\ie8updates
2012-04-11 09:16:03 ----HD---- C:\WINDOWS\$hf_mig$
2012-04-11 09:13:42 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-04-11 09:13:07 ----D---- C:\WINDOWS\WinSxS
2012-04-11 09:01:44 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iteatapi;ITEATAPI_Service_Install; C:\WINDOWS\system32\DRIVERS\iteatapi.sys [2005-10-29 27648]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2006-03-26 51200]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2006-03-13 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:\WINDOWS\System32\drivers\sfsync04.sys [2006-03-24 50176]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2006-10-19 12664]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2011-12-28 5632]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2004-03-10 11264]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-03-01 4484608]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-07-14 7741664]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-01-08 250624]
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 hidgame;Microsoft Hid to Joystick Port Enabler; C:\WINDOWS\system32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-12-06 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-12-06 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-12-06 21568]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-07-07 55216]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-07-07 79488]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-11-01 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-11-01 23168]
S3 PAC7311;Trust WB-3400T Webcam; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2007-03-14 449024]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-11-01 8192]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-11-01 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-03-07 44768]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-31 233472]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-07-14 168004]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2009-04-17 247152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 253088]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#34 Příspěvek od bluedicka »

Heleďte pane V, jestli tam nic nevidíte a nemáte čas se zabývat takovými "problémy" (jakožto studentka mám zřejmě stejně "mnoho" času), tak nic no :) , jednoduché řešení pro mne je přestat používat IE a zůstat na googlu. Ale přesto moc díky za Váš čas... :154: jste :thumbsup:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#35 Příspěvek od vyosek »

Heledte, za prve jsem mel tenhle tyden zapoctakovy a za druhe jsem byl cely den v praci, takze nebyl cas a klid se poradne na log podivat...

ja nedelam rozdil mezi logem v preventivkach nebo jestli tu ma nekdo zaliskane PC od sklepa na pudu. Ke kazdemu navstevnikovi a logu pristupuju poctive a ve snaze co nejvice a nejlepe pomoci.

Ja IE nepouzivam a i ostatnim doporucuji spise Firefox ci Operu...

Ten toolbar myslite v jake zalozce - pripadne dejte obrazek i s tim spravce co vyskakuje, at vim prenejsi na co se zamerit, kuju :)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#36 Příspěvek od bluedicka »

Dobře,
nemyslela jsem to ve zlém, aby nedošlo k mýlce, jen jsem chtěla vědět, jestli má smysl čekat na odpověď či ne :)

Když mi tam vyskočí Spravovat doplňky, není to napsané dole na liště.

Dále se mi "přejmenovali" soubory - nevím, co to ovlivnilo (jestli nějaký z těch programů?), mám u všech dokumentů - word, pdf, jpg. mp3 koncovku v názvu, tzn. že si u přejmenování (přejmenovávám často) musím dávat pozor, protože když ji nedopíšu, "změním" příponu souboru... + např. písničky se mi rozdělily na obrázek a mp3 zvlášť, např.: AlbumArt_{3AEDD51C-40EB-4079-B6E8-11385A8E2C0B}_Large.jpg je Radiohead - Karma Police.mp3, dřív to bylo "v jednom" a vyhrožuje mi to, že pokud odstraním obrázek, že mi to nepůjde spustit (tak jsem to zkusila a nestalo se, pustit to jde).

Už jsem z toho :frusty:
Přílohy
monitor.jpg
monitor.jpg (110.4 KiB) Zobrazeno 1232 x
Naposledy upravil(a) bluedicka dne 28 Dub 2012 12:12, celkem upraveno 1 x.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#37 Příspěvek od vyosek »

Navod na screen je zde http://forum.viry.cz/viewtopic.php?f=11&t=14114
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#38 Příspěvek od bluedicka »

A takhle vypadá v záložce babylon.....
Přílohy
babylon.jpg
babylon.jpg (51.47 KiB) Zobrazeno 1232 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#39 Příspěvek od vyosek »

Nekde nam tam zustal viset, udelejte znovu sken pomoci OTL http://forum.viry.cz/viewtopic.php?p=1108349#p1108349
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#40 Příspěvek od bluedicka »

OTL logfile created on: 29.4.2012 12:45:45 - Run 2
OTL by OldTimer - Version 3.2.41.0 Folder = C:\Documents and Settings\Jiří Pácal\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,11 Mb Total Physical Memory | 404,66 Mb Available Physical Memory | 39,55% Memory free
2,40 Gb Paging File | 1,97 Gb Available in Paging File | 81,93% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 28,78 Gb Free Space | 12,36% Space Free | Partition Type: NTFS

Computer Name: N-EF9026044A304 | User Name: | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.04.24 10:01:31 | 000,594,944 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jiří Pácal\Plocha\OTL.exe
PRC - [2012.04.12 09:37:36 | 001,224,176 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2012.03.07 02:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012.03.07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.06.21 14:34:10 | 000,306,480 | ---- | M] (eInstruction Corporation) -- C:\Program Files\eInstruction\Device Manager\Launch.exe
PRC - [2010.06.07 22:12:12 | 011,312,128 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010.06.07 22:12:08 | 011,318,784 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2009.03.31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005.02.03 08:20:42 | 001,469,440 | ---- | M] (Hagel Technologies) -- C:\Program Files\DU Meter\DUMeter.exe


========== Modules (No Company Name) ==========

MOD - [2012.04.29 12:42:11 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Local Settings\Temp\abt99561\BTCheckMS.dll
MOD - [2012.04.29 08:20:08 | 001,771,520 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12042900\algo.dll
MOD - [2012.04.28 16:18:57 | 001,771,008 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12042801\algo.dll
MOD - [2012.04.12 09:37:34 | 000,444,400 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.162\ppgooglenaclpluginchrome.dll
MOD - [2012.04.12 09:37:33 | 003,915,248 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.162\pdf.dll
MOD - [2012.04.12 09:36:08 | 000,122,880 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.162\avutil-51.dll
MOD - [2012.04.12 09:36:06 | 000,220,672 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.162\avformat-53.dll
MOD - [2012.04.12 09:36:05 | 001,747,456 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.162\avcodec-53.dll
MOD - [2010.11.22 11:28:05 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2010.06.21 14:34:10 | 000,095,744 | ---- | M] () -- C:\Program Files\eInstruction\Device Manager\NativeSupport.dll
MOD - [2010.06.21 14:33:06 | 000,057,344 | ---- | M] () -- C:\Program Files\eInstruction\Device Manager\jspWin.dll
MOD - [2002.10.05 01:04:26 | 000,092,672 | ---- | M] () -- C:\WINDOWS\system32\vorbis.dll
MOD - [2002.10.05 01:04:18 | 000,021,504 | ---- | M] () -- C:\WINDOWS\system32\ogg.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012.04.21 19:34:07 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.03.07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.01.04 14:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.03.31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - File not found [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt -- (EverestDriver)
DRV - [2012.03.07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.03.07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.03.07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012.03.07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.03.07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012.03.07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.03.07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.12.28 17:04:59 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2011.11.01 11:07:26 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2011.11.01 11:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011.11.01 11:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011.11.01 11:07:24 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.09.07 17:23:16 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2009.03.31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.03.20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009.03.20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009.03.20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007.03.14 11:57:56 | 000,449,024 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PA707UCM.SYS -- (PAC7311)
DRV - [2007.03.01 18:27:26 | 004,484,608 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.01.08 09:03:00 | 000,250,624 | R--- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2006.10.19 03:12:00 | 000,012,664 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2006.03.26 14:22:14 | 000,051,200 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2006.03.24 18:27:01 | 000,050,176 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync04.sys -- (sfsync04) StarForce Protection Synchronization Driver (version 4.x)
DRV - [2006.03.13 11:38:23 | 000,006,656 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005.08.30 17:59:00 | 000,094,000 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2005.08.30 17:58:56 | 000,008,304 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2005.08.30 17:57:18 | 000,058,320 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2005.07.28 09:18:40 | 000,685,056 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2005.07.07 16:26:04 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM)
DRV - [2005.07.07 16:25:50 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2005.02.23 15:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2004.08.13 10:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.03.10 16:27:18 | 000,011,264 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asapiW2k.sys -- (ASAPIW2k)
DRV - [2002.03.19 10:29:16 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI)
DRV - [2001.08.17 23:02:32 | 000,008,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidgame.sys -- (hidgame)
DRV - [2001.08.17 23:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
IE - HKLM\..\SearchScopes,DefaultScope =


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..extensions.enabledItems:
FF - prefs.js..extensions.enabledItems:
FF - prefs.js..extensions.enabledItems:
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_9.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_9.0 [2012.02.14 16:11:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_9.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012.02.14 16:11:12 | 000,000,000 | ---D | M]

[2008.10.06 14:28:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Mozilla\Extensions
[2012.04.22 01:10:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Mozilla\Firefox\Profiles\irs3v3y4.default\extensions
[2012.04.21 19:27:18 | 000,000,000 | ---D | M] (BS Player Community Toolbar) -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Mozilla\Firefox\Profiles\irs3v3y4.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}(2)
[2012.04.22 01:34:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Mozilla\Firefox\Profiles\irs3v3y4.default\extensions\ffxtlbr@babylon.com
[2010.09.24 20:28:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.04.22 01:10:49 | 000,002,423 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2009.09.21 12:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Ji\u0159\u00ED P\u00E1cal\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\NPAPIFlash\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Ji\u0159\u00ED P\u00E1cal\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.180.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java(TM) Platform SE 6 U18 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: Gmail = C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.04.24 18:47:25 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\eInstruction Device Manager.lnk = C:\Program Files\eInstruction\Device Manager\Launch.exe (eInstruction Corporation)
O4 - Startup: C:\Documents and Settings\Jiří Pácal\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-881969102-1076162383-1626423667-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.10.100.1 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1888D553-5F27-498E-B868-2CF96A1FAC45}: DhcpNameServer = 62.209.227.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1D5823EF-EB6A-467D-BD23-C5EC9ECEC5D4}: DhcpNameServer = 10.10.100.1 8.8.8.8
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autochec)
O34 - HKLM BootExecute: (autochec)
O34 - HKLM BootExecute: ()
O34 - HKLM BootExecute: (autochec)
O34 - HKLM BootExecute: (autochec)
O34 - HKLM BootExecute: (autochec)
O34 - HKLM BootExecute: (autochec)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1056

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.a3d - C:\WINDOWS\System32\a3d.dll (Aureal Semiconductor)
Drivers32: msacm.divxa - C:\WINDOWS\System32\divxa32.acm (build Pinky.cz)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3radius - C:\WINDOWS\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ogg - C:\WINDOWS\System32\ogg.dll ()
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: msacm.vorbisenc - C:\WINDOWS\System32\vorbisenc.dll ()
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.div3 - C:\WINDOWS\System32\divxc32.dll (build Pinky.cz)
Drivers32: vidc.div4 - C:\WINDOWS\System32\divxc32f.dll (Pinky.cz)
Drivers32: vidc.divx - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: VIDC.FMVC - C:\WINDOWS\System32\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.MJPG - C:\WINDOWS\System32\pvmjpg21.dll (Pegasus Imaging Corporation)
Drivers32: VIDC.PIM1 - C:\WINDOWS\System32\pclepim1.dll (Pinnacle Systems)
Drivers32: vidc.tscc - C:\WINDOWS\System32\tsccvid.dll (TechSmith Corporation)
Drivers32: VIDC.wmv3 - C:\WINDOWS\System32\WMV9VCM.dll (Microsoft Corporation)
Drivers32: vidc.xvid - xvid.dll File not found
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.04.25 18:14:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2012.04.25 18:14:56 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.04.25 18:14:55 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.04.24 15:31:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\WhoCrashed
[2012.04.24 15:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\WhoCrashed
[2012.04.24 15:14:31 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012.04.24 15:14:25 | 000,000,000 | --SD | C] -- C:\ComboFix
[2012.04.24 10:26:15 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.04.24 10:01:32 | 000,594,944 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jiří Pácal\Plocha\OTL.exe
[2012.04.24 09:19:29 | 004,472,597 | R--- | C] (Swearware) -- C:\Documents and Settings\Jiří Pácal\Plocha\ComboFix.exe
[2012.04.23 18:38:28 | 000,000,000 | ---D | C] -- C:\rsit
[2012.04.23 17:59:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\DriverCure
[2012.04.23 17:59:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ParetoLogic
[2012.04.23 17:59:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ParetoLogic
[2012.04.22 23:29:03 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.04.22 23:26:28 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012.04.22 23:26:28 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012.04.22 23:26:28 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012.04.22 23:26:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2012.04.22 23:20:28 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.04.22 23:20:00 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Jiří Pácal\Nabídka Start\Programy\Nástroje pro správu
[2012.04.22 22:07:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Uniblue
[2012.04.22 22:07:53 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2012.04.22 21:33:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jiří Pácal\Recent
[2 C:\Documents and Settings\Jiří Pácal\Data aplikací\*.tmp files -> C:\Documents and Settings\Jiří Pácal\Data aplikací\*.tmp -> ]
[1 C:\Documents and Settings\Jiří Pácal\Dokumenty\*.tmp files -> C:\Documents and Settings\Jiří Pácal\Dokumenty\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.04.29 12:47:31 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.04.29 12:42:17 | 000,000,579 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\.eInstructionDeviceManagerPreferences.xml
[2012.04.29 12:42:14 | 000,000,049 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\DeviceManagerState.properties
[2012.04.29 12:41:56 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.04.29 12:41:37 | 000,243,457 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2012.04.29 12:41:22 | 008,405,015 | ---- | M] () -- C:\WINDOWS\TempFile
[2012.04.29 12:41:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.29 12:41:06 | 1072,877,568 | -HS- | M] () -- C:\hiberfil.sys
[2012.04.28 16:49:32 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012.04.28 13:12:04 | 000,052,710 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Plocha\babylon.jpg
[2012.04.28 13:09:32 | 000,113,049 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Plocha\monitor.jpg
[2012.04.27 13:42:54 | 000,057,632 | ---- | M] () -- C:\PA7311.DAT
[2012.04.25 18:14:58 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.04.24 18:47:25 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2012.04.24 10:01:31 | 000,594,944 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jiří Pácal\Plocha\OTL.exe
[2012.04.24 09:23:44 | 000,193,024 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.24 09:20:00 | 004,472,597 | R--- | M] (Swearware) -- C:\Documents and Settings\Jiří Pácal\Plocha\ComboFix.exe
[2012.04.23 17:51:22 | 000,001,417 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2012.04.22 23:29:12 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012.04.22 18:47:04 | 000,441,714 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.04.22 18:47:04 | 000,438,388 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.04.22 18:47:04 | 000,083,384 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.04.22 18:47:04 | 000,071,840 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2 C:\Documents and Settings\Jiří Pácal\Data aplikací\*.tmp files -> C:\Documents and Settings\Jiří Pácal\Data aplikací\*.tmp -> ]
[1 C:\Documents and Settings\Jiří Pácal\Dokumenty\*.tmp files -> C:\Documents and Settings\Jiří Pácal\Dokumenty\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.04.28 13:12:04 | 000,052,710 | ---- | C] () -- C:\Documents and Settings\Jiří Pácal\Plocha\babylon.jpg
[2012.04.28 13:05:56 | 000,113,049 | ---- | C] () -- C:\Documents and Settings\Jiří Pácal\Plocha\monitor.jpg
[2012.04.25 18:14:58 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.04.24 16:08:30 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.04.23 21:15:58 | 000,000,049 | ---- | C] () -- C:\Documents and Settings\Jiří Pácal\DeviceManagerState.properties
[2012.04.22 23:29:12 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012.04.22 23:29:06 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2012.04.22 23:26:28 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.04.22 23:26:28 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.04.22 23:26:28 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.04.22 23:26:28 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.04.22 23:26:28 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.03.29 21:45:43 | 000,294,018 | ---- | C] () -- C:\WINDOWS\System32\shimg.dll
[2012.02.16 05:34:31 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.12.28 16:45:26 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.12.28 16:45:26 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.12.28 16:45:09 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Jiří Pácal\Data aplikací\$_hpcst$.hpc
[2011.11.15 10:15:51 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\nmocod.dll
[2011.11.15 10:15:50 | 000,056,320 | ---- | C] () -- C:\WINDOWS\gendel32.exe
[2011.08.14 20:35:21 | 000,120,872 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2011.01.06 17:57:46 | 000,468,084 | ---- | C] () -- C:\WINDOWS\cluninst.exe
[2011.01.06 17:56:38 | 000,000,021 | ---- | C] () -- C:\WINDOWS\etkinst.ini
[2010.11.13 18:21:30 | 000,146,068 | ---- | C] () -- C:\WINDOWS\hpoins12.dat.temp
[2010.11.13 18:21:30 | 000,001,470 | ---- | C] () -- C:\WINDOWS\hpomdl12.dat.temp
[2010.10.02 12:27:31 | 000,000,045 | -H-- | C] () -- C:\WINDOWS\dsez5157.dat
[2010.09.15 09:45:06 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\AsIO.dll
[2010.09.15 09:45:06 | 000,012,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2010.09.15 09:45:04 | 000,012,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp64.sys
[2010.09.15 09:45:04 | 000,010,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys

========== LOP Check ==========

[2010.03.28 16:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2008.06.21 07:31:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg7
[2007.05.21 16:24:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Hagel Technologies
[2012.01.24 21:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2010.12.25 16:35:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MakeMusic
[2012.02.14 16:10:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nokia
[2012.03.14 10:37:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2012.04.23 18:17:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ParetoLogic
[2011.07.25 20:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2007.10.05 14:20:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2011.07.03 12:23:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SmartSound Software Inc
[2011.02.25 18:59:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2009.05.26 17:12:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VistaCodecs
[2008.06.21 07:30:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\AVG7
[2012.04.21 18:46:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer
[2012.04.21 18:46:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer Pro
[2010.10.10 13:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\CPS Labs
[2012.04.23 17:59:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\DriverCure
[2010.07.23 19:05:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ESET
[2011.03.14 20:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\GTCO CalComp
[2011.09.28 15:11:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Image Zone Express
[2010.12.25 16:38:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\MakeMusic
[2012.02.14 16:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Nokia
[2011.08.14 19:30:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenCandy
[2010.11.22 11:28:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenOffice.org
[2012.04.23 17:59:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ParetoLogic
[2011.08.19 18:22:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\PC Suite
[2008.10.08 13:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Printer Info Cache
[2011.12.28 16:45:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Samsung
[2010.09.27 19:09:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\SoftGrid Client
[2010.09.27 18:57:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Softland
[2011.03.15 09:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\TeamViewer
[2010.10.02 12:51:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Tibo Software
[2010.09.27 18:41:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\TP
[2008.02.25 19:28:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\UltraGet
[2012.04.22 22:07:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Uniblue
[2009.05.26 17:14:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\VistaCodecs
[2007.04.30 11:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Zoner
[2007.04.30 11:46:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG7
[2010.09.27 18:57:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Softland

========== Purity Check ==========



========== Custom Scans ==========

< >

< >

< MD5 for: ATAPI.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2006.03.02 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
[2004.08.03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2006.03.02 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2006.03.02 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007.06.13 15:23:39 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=ED7B460B142A32097B8A8F6ECC941815 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.10.06 15:08:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.03 22:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2006.03.02 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SVCHOST.EXE >
[2012.04.04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=1CC09561E21A48A7F649A40F18235860 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2006.04.20 13:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2007.10.30 19:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2006.03.02 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2012.04.04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2006.03.02 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.12.13 16:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Adobe
[2007.05.02 20:44:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\AdobeUM
[2007.04.30 13:18:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Ahead
[2011.02.25 20:32:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Apple Computer
[2007.12.06 14:07:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ArcSoft
[2008.06.21 07:30:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\AVG7
[2012.04.21 18:46:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer
[2012.04.21 18:46:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\BSplayer Pro
[2010.10.10 13:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\CPS Labs
[2011.02.25 20:54:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\CyberLink
[2012.04.23 17:59:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\DriverCure
[2010.07.23 19:05:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ESET
[2007.05.19 09:00:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Google
[2011.03.14 20:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\GTCO CalComp
[2009.12.28 11:07:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Help
[2009.11.17 10:22:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\HP
[2011.03.10 08:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\HpUpdate
[2007.03.31 13:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Identities
[2011.09.28 15:11:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Image Zone Express
[2008.06.18 19:19:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Lavasoft
[2007.05.21 16:37:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Macromedia
[2010.12.25 16:38:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\MakeMusic
[2010.07.24 16:07:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Malwarebytes
[2012.04.22 21:33:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Media Player Classic
[2011.12.28 18:29:13 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Microsoft
[2007.05.21 16:21:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Microsoft Web Folders
[2008.10.06 14:28:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Mozilla
[2012.02.14 16:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Nokia
[2011.08.14 19:30:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenCandy
[2010.11.22 11:28:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenOffice.org
[2012.04.23 17:59:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\ParetoLogic
[2011.08.19 18:22:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\PC Suite
[2008.10.08 13:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Printer Info Cache
[2009.05.31 06:38:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Real
[2011.12.28 16:45:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Samsung
[2010.11.23 20:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Skype
[2010.11.23 19:43:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\skypePM
[2010.09.27 19:09:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\SoftGrid Client
[2010.09.27 18:57:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Softland
[2010.02.04 14:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Sun
[2011.03.15 09:52:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\TeamViewer
[2010.10.02 12:51:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Tibo Software
[2010.09.27 18:41:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\TP
[2008.02.25 19:28:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\UltraGet
[2012.04.22 22:07:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Uniblue
[2009.05.26 17:14:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\VistaCodecs
[2011.02.26 02:37:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\vlc
[2010.08.31 15:44:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\WinRAR
[2007.04.30 11:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Zoner

< %APPDATA%\*.exe /s >
[2011.02.16 19:40:28 | 000,037,345 | R--- | M] () -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Microsoft\Installer\{8456875B-F815-4B31-AF02-BD3ACADCF7C4}\controlPanelIcon.exe
[2011.02.16 19:40:28 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Microsoft\Installer\{8456875B-F815-4B31-AF02-BD3ACADCF7C4}\SystemFolder_msiexec.exe
[2011.08.14 19:30:27 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenCandy\OpenCandy_BC4D70FB2C694263AA111D42C09419CE\LatestDLMgr.exe
[2010.10.15 22:41:18 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\Jiří Pácal\Data aplikací\OpenCandy\OpenCandy_BC4D70FB2C694263AA111D42C09419CE\SpeedstarterCZ.exe
[2011.12.28 17:03:53 | 089,280,248 | ---- | M] (Samsung Electronics Co., Ltd. ) -- C:\Documents and Settings\Jiří Pácal\Data aplikací\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2007.03.31 15:43:08 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2007.03.31 15:43:08 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2007.03.31 15:43:08 | 000,471,040 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.04.29 12:41:37 | 000,243,457 | ---- | M] () -- C:\WINDOWS\system32\NvApps.xml
[2012.04.29 12:41:56 | 000,012,598 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.03.08 15:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2012.04.12 09:37:36 | 001,224,176 | ---- | M] (Google Inc.) MD5=073CA785104033CF4DE508AF52D97271 -- C:\Program Files\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.04.29 12:47:31 | 000,000,512 | ---- | M] () MD5=7A92C7FA075038D4D2F9942811FD40BB -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2004.08.31 18:02:58 | 004,440,620 | ---- | M] () -- \Program Files\Pinnacle\Studio 9\Sound Effects\UFX Explosions and Fires\Fire Crackle.wav
[2004.08.31 18:03:12 | 000,391,360 | ---- | M] () -- \Program Files\Pinnacle\Studio 9\Sound Effects\UFX Sports\Baseball - Bat Cracking.wav

< *keygen* /s >

< *loader* /s >
[2011.11.22 11:53:46 | 000,010,144 | ---- | M] () -- \Documents and Settings\Jiří Pácal\Data aplikací\Mozilla\Firefox\Profiles\irs3v3y4.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}(2)\modules(2)\ExternalLibraryLoader.jsm
[2012.04.29 07:54:42 | 000,003,783 | ---- | M] () -- \Documents and Settings\Jiří Pácal\Local Settings\Temporary Internet Files\Content.IE5\YLJTGLG7\loader[1].js
[2012.04.28 07:24:09 | 000,014,590 | ---- | M] () -- \Documents and Settings\Jiří Pácal\Local Settings\Temporary Internet Files\Content.IE5\Z16KX50N\preloader[1].gif
[2007.03.22 16:26:00 | 000,363,008 | ---- | M] () -- \Program Files\ASUS\AASP\1.00.33\AsLoader.exe
[2006.10.19 17:43:00 | 000,000,647 | ---- | M] () -- \Program Files\ASUS\AASP\1.00.33\AsLoader.exe.manifest
[2006.11.09 22:31:32 | 000,163,840 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2011.09.01 13:13:30 | 000,112,128 | ---- | M] () -- \Program Files\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2008.08.27 15:26:46 | 000,008,159 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\mm\Uploader.kc
[2008.08.27 15:26:12 | 000,278,528 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\mm\_Uploader.dll
[2008.04.10 20:12:00 | 000,011,882 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\mm\MediaCtrl\ImageLoader.kc
[2008.04.11 14:54:50 | 000,001,989 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\mm\MediaCtrl\UploaderCtrl.kc
[2008.04.10 20:12:10 | 000,003,460 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\widget\langloader.kc
[2008.04.10 20:12:10 | 000,012,370 | ---- | M] () -- \Program Files\CyberLink\PCM4Everio\widget\layoutloader.kc
[2009.07.27 19:24:06 | 002,475,304 | ---- | M] () -- \Program Files\CyberLink\Shared Files\Plugin\6.0\CES_3DLoaderFBX.dll
[2010.10.26 16:17:42 | 000,005,194 | ---- | M] () -- \Program Files\MPMAN\MP Manager\bootloader.jar
[2010.06.07 22:11:08 | 000,006,262 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2010.11.22 11:27:54 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.06.07 22:19:10 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2010.11.22 11:28:13 | 000,029,184 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.06.09 17:21:40 | 000,003,874 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2004.07.30 15:01:32 | 000,441,344 | ---- | M] () -- \Program Files\proDAD\Heroglyph-1.0\imageloader1exp.dll
[2011.12.28 17:05:11 | 000,086,016 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\cryptoloader.dll
[2011.12.28 17:05:18 | 000,287,744 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\NPSAndroidDownloader.dll
[2011.12.28 17:05:09 | 000,069,632 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\NPSEmpLoader.dll
[2011.12.28 17:05:25 | 000,285,184 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\NPSLinuxMitsDownloader.dll
[2011.12.28 17:05:03 | 000,281,600 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\NPSLinuxMitsNpDownloader.dll
[2011.12.28 17:04:33 | 000,208,896 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\Symbian_Downloader_DLL.dll
[2011.12.28 17:05:02 | 000,262,144 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\ModelExtension\NPSBinaryLoader.dll
[2011.12.28 17:05:49 | 000,266,240 | ---- | M] () -- \Program Files\Samsung\Samsung New PC Studio\ModelExtension\NPSBinaryLoader2.dll
[2006.12.21 17:10:00 | 000,018,944 | ---- | M] () -- \Program Files\Samsung\Samsung PC Studio 3\CMLoader.dll
[2010.02.10 18:10:14 | 000,045,056 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2006.03.02 14:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 20:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 20:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2009.04.28 09:55:06 | 000,070,936 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll

< End of report >
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#41 Příspěvek od vyosek »

Spustte Internet Explorer - v tom panelu doplnku pohledejte ten Babylon, nekde tam bude zasity a musime ho odtamtud dostat - log vypada totiz cisty
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
bluedicka
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 23 Dub 2012 17:44

Re: prosím o kontrolu logu

#42 Příspěvek od bluedicka »

OK, tam není - zakázala jsem ho už dávno, kouknu se na nastavení záložek, kde je ten šotek.
Moc děkuji :wink:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosím o kontrolu logu

#43 Příspěvek od vyosek »

neni zac, pak napiste ci se povedlo...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“