VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Firewall nelze vypnout

https://forum.viry.cz:443/viewtopic.php?t=137420

Stránka 3 z 3

Re: Firewall nelze vypnout

Napsal: 21 dub 2014 14:05
od dorkon
Takže vit registry našel 55 chyb a po opakování už nic.

Přikládám Look posedmé.


SystemLook 30.07.11 by jpshortstuff
Log created at 15:00 on 21/04/2014 by Dorkon
Administrator - Elevation successful

========== filefind ==========

Searching for "*comodo*"
C:\WINDOWS\system32\config\systemprofile\Cookies\system@secure.comodo[1].txt --a--c- 433 bytes [22:12 01/05/2011] [22:12 01/05/2011] 0C87D2352C456C6509D089028B35A004

Searching for "cmd*.dll"
C:\WINDOWS\$NtServicePackUninstall$\cmdevtgprov.dll -----c- 45568 bytes [12:28 26/12/2010] [13:49 17/08/2004] F3E7C840A28C0B24768CA10152822862
C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll -----c- 345600 bytes [12:28 26/12/2010] [13:49 17/08/2004] 23CF3D82971552DBBD3F348348ABE745
C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll -----c- 346624 bytes [03:21 14/04/2008] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\cmdial32.dll --a--c- 346624 bytes [13:49 17/08/2004] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\cmdvrt32.dll --a---- 284888 bytes [14:26 02/04/2014] [19:22 25/03/2014] 99F430FF00AB780342DA6A2E2A14F59B
C:\WINDOWS\system32\dllcache\cmdial32.dll --a--c- 346624 bytes [13:49 17/08/2004] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\wbem\cmdevtgprov.dll --a--c- 45056 bytes [13:49 17/08/2004] [03:21 14/04/2008] D87F13E8432736155BD4EA2C18F017D4
C:\_OTM\MovedFiles\04202014_182445\C_WINDOWS\System32\cmdcsr.dll --a---- 36000 bytes [15:38 03/04/2014] [19:22 25/03/2014] 2243672CC73947B9F71465417DE12541
C:\_OTM\MovedFiles\04202014_182445\C_WINDOWS\System32\cmdkbd32.dll --a---- 40664 bytes [14:26 02/04/2014] [19:22 25/03/2014] 13BAF2D26FB1F01422800DF199A7EDA6

========== regfind ==========

Searching for "comodo"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Uninstaller.exe"="Uninstaller"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"="CIS"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CBU\CBU.bat"="CBU"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CD\CD.bat"="CD"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CEVPN\CEVPN.bat"="CEVPN"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CGB\CGB.bat"="CGB"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CPM\CPM.bat"="CPM"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CSC\CSC.bat"="CSC"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CTC\CTC.bat"="CTC"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CU\CU.bat"="CU"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CMF\CMF.bat"="CMF"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CVA\CVA.bat"="CVA"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\apwiz.bat"="apwiz"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO]
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0]
"Name"="COMODO - Internet Security - 5.12.256249.2599"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings]
"QuarantinedPath"="C:\Program Files\COMODO\COMODO Internet Security\Quarantine"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings\Exclusions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings\Exclusions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\4\10]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\4\10]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6]
"Name"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\0]
"Filename"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\0]
"DeviceName"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\7]
"Filename"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\7]
"DeviceName"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7]
"Name"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\0]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\0]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\2]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\2]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\Firewall\Policy\0]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\0\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\0\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\1\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\1\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Protected Files\2]
"DeviceName"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Protected Keys\1]
"DeviceName"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1]
"Name"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\0]
"Filename"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\0]
"DeviceName"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\1]
"Filename"="*\SOFTWARE\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\1]
"DeviceName"="*\SOFTWARE\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1]
"Name"="COMODO - Proactive Security - 5.12.256249.2599"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings]
"QuarantinedPath"="C:\Program Files\COMODO\COMODO Internet Security\Quarantine"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings\Exclusions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings\Exclusions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\4\10]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\4\10]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6]
"Name"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\0]
"Filename"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\0]
"DeviceName"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\7]
"Filename"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\7]
"DeviceName"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7]
"Name"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\0]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\0]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\2]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\2]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\29]
"Filename"="C:\Program Files\COMODO\Registry Cleaner\CRC.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\29]
"DeviceName"="C:\Program Files\COMODO\Registry Cleaner\CRC.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\30]
"Filename"="C:\Program Files\COMODO\COMODO livePCsupport\CLPS.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\30]
"DeviceName"="C:\Program Files\COMODO\COMODO livePCsupport\CLPS.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\31]
"Filename"="C:\Program Files\COMODO\COMODO Cloud Scanner\CloudScanner.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\31]
"DeviceName"="C:\Program Files\COMODO\COMODO Cloud Scanner\CloudScanner.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\77]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\0\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\0\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\1\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\1\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\20\Rules\0\Allowed\10]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\20\Rules\0\Allowed\10]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Protected Files\2]
"DeviceName"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Protected Keys\1]
"DeviceName"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1]
"Name"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\0]
"Filename"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\0]
"DeviceName"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\1]
"Filename"="*\SOFTWARE\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\1]
"DeviceName"="*\SOFTWARE\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2]
"Name"="COMODO - Firewall Security - 5.12.256249.2599"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings]
"QuarantinedPath"="C:\Program Files\COMODO\COMODO Internet Security\Quarantine"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings\Exclusions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings\Exclusions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdinstall.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\4\10]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\4\10]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cavscan.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6]
"Name"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\0]
"Filename"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\0]
"DeviceName"="C:\Program Files\COMODO*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\7]
"Filename"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\7]
"DeviceName"="C:\Documents and Settings\All Users\Data aplikací\Comodo*|"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7]
"Name"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\0]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\0]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\2]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\2]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfpupdat.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\3]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\3]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\4]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\4]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\crashrep.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\Firewall\Policy\0]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4]
"DeviceName"="COMODO Internet Security"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\0\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\0\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\1\Exceptions\1]
"Filename"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\1\Exceptions\1]
"DeviceName"="C:\Program Files\COMODO\COMODO Internet Security\*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Protected Files\4]
"DeviceName"="Soubory/adresáře COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Protected Keys\1]
"DeviceName"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1]
"Name"="Klíče COMODO"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\0]
"Filename"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\0]
"DeviceName"="HKLM\System\Software\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\1]
"Filename"="*\SOFTWARE\Comodo*"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\1]
"DeviceName"="*\SOFTWARE\Comodo*"
[HKEY_USERS\.DEFAULT\Software\COMODO]
[HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\COMODO]
[HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\COMODO]
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Uninstaller.exe"="Uninstaller"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"="CIS"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CBU\CBU.bat"="CBU"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CD\CD.bat"="CD"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CEVPN\CEVPN.bat"="CEVPN"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CGB\CGB.bat"="CGB"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CPM\CPM.bat"="CPM"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CSC\CSC.bat"="CSC"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CTC\CTC.bat"="CTC"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CU\CU.bat"="CU"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CMF\CMF.bat"="CMF"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CVA\CVA.bat"="CVA"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\apwiz.bat"="apwiz"
[HKEY_USERS\S-1-5-18\Software\COMODO]
[HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\COMODO]
[HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\COMODO]

Searching for "cis"
[HKEY_CURRENT_USER\Software\CISRA]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"="CIS"
[HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\Install\Packages\W-05-000U-000-003-002-001-00-00\Localization\TRK]
"ProductName"="ATI Catalyst Yükleme Yöneticisi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Canon\ZoomBrowser EX\Task Categories\Print\{F33DF90B-EEB2-4d78-97B0-EE60BCFBC3E2}\Dependency]
"Key"="SOFTWARE\CISRA\PhotoRecord"
[HKEY_LOCAL_MACHINE\SOFTWARE\CISRA]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\33677ca6-d094-406f-a25c-e1e8d1655ec8]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\4680051D-F069-42C1-81E1-A28C7F507DCE]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\4E7644DA-C17B-11E2-8A2A-1A5B6188709B]
"lastAnswer"="CisCompleteOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\6274E4C9-87D7-45C9-B9B9-2F438CB9886A]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\C0BE8CA3-BE41-4609-8647-80B8642D920C]
"lastAnswer"="CisCompleteOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\CB297D8F-8036-4A20-8C56-19549FFA083E]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\E39F65A-F5CB-11E0-A0F4-06054824019B]
"lastAnswer"="CisPro.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0007AEEC-58C3-4461-A605-D2F25EDFAA52}]
@="ICisRmControl3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{08D1F165-8BCE-402A-B74B-FFBCC9157E80}]
@="ICisAgent2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{10D82495-7F93-4C84-901A-65A9E1DED8EB}]
@="ICisRmControl7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{157A3B3A-0924-4141-A222-F99BD5B2925A}]
@="ICisRmControl6"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{221745E8-E9C7-4A68-89EC-53A124187604}]
@="IDmvVolumeItemOriginalDecisionData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46E040B5-3395-4B9A-985D-E498640315AB}]
@="ICisRmControl2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BDBBCBE-8A78-4A7A-9A3B-D8265CCFBA27}]
@="ICisRmControl5"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A5E3A461-651E-4E3F-95A1-B765749C52CA}]
@="ICisRmControl8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A68C849C-2AFF-4F08-8EAA-80475AA2B199}]
@="ICisAgent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C6EBC129-535C-497C-AA55-59A712EF0C34}]
@="ICisControlCallback2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CEEFE079-2327-43E6-8002-94564FC09D56}]
@="ICisAgentCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D69AE3A4-3DEF-4031-B711-3D051A47C14D}]
@="ICisRmControl4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DEB43A60-3626-4EE4-AD3D-D96B84B7A47A}]
@="AsyncIShdocvwBroker"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2CC28CC-68B2-440E-AE74-C93399CF37E2}]
@="ICisControlCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F2B830DA-DF8E-4CBF-946F-DED196916210}]
@="ICisRmControl"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}]
"Provider"="Cisco Systems, Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\1]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\3]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\5]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\98B2CBBB391E84348AC38CDD28014ACA\InstallProperties]
"Publisher"="Cisra"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}]
"Publisher"="Cisra"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc]
"mciseq.dll"="(MCI) Midi Sequencer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI]
"Sequencer"="mciseq.drv"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI32]
"Sequencer"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{72385230-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{72385236-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{7238523c-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\License\Cam\CIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\CISRA]
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"="CIS"

========== dir ==========

*comodo* - Unable to find folder.

*cis* - Unable to find folder.

-= EOF =-

Re: Firewall nelze vypnout

Napsal: 21 dub 2014 15:51
od cernohous13
:arrow: Restartuj do Nouzového režimu a opakuj akci s OTM s tímto scriptem

Kód: Vybrat vše

:Commands
[emptytemp]
[clearallrestorepoints]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\system32\cmdvrt32.dll
C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool
C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Uninstaller.exe"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CBU\CBU.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CD\CD.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CEVPN\CEVPN.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CGB\CGB.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CPM\CPM.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CSC\CSC.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CTC\CTC.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CU\CU.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CMF\CMF.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CVA\CVA.bat"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\apwiz.bat"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\Firewall\Policy\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Policy\4\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Protected Files\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Protected Keys\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\0\HIPS\Registry Groups\1\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\29]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\29]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\30]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\30]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\31]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\31]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\Firewall\Policy\77]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\19\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\20\Rules\0\Allowed\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Policy\20\Rules\0\Allowed\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Protected Files\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Protected Keys\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\1\HIPS\Registry Groups\1\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\AV\Settings\Exclusions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\3\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\4\10]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\6\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\2]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\3]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\File Groups\7\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\Firewall\Policy\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\0\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Policy\4\Protections\1\Exceptions\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Protected Files\4]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Protected Keys\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\0]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\1]
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\2\HIPS\Registry Groups\1\1]
[-HKEY_USERS\.DEFAULT\Software\COMODO]
[-HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\COMODO]
[-HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\COMODO]
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Uninstaller.exe-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CBU\CBU.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CD\CD.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CEVPN\CEVPN.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CGB\CGB.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CPM\CPM.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CSC\CSC.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CTC\CTC.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CU\CU.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CMF\CMF.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CVA\CVA.bat"=-
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\apwiz.bat"=-
[-HKEY_USERS\S-1-5-18\Software\COMODO]
[-HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\COMODO]
[-HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\COMODO]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\{25B9C8A9-7B0C-4f9c-AF29-59A5608704F9}\License\Cam\CIS]
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Documents and Settings\Dorkon\Data aplikací\Uninstaller Tool(Comodo Forums)\Scripts\CIS\CIS.bat"=-

Re: Firewall nelze vypnout

Napsal: 21 dub 2014 18:29
od dorkon
OTM jsem zkoušel třikrát,jak v nouzovém,tak i normálním režimu a ani jednou nedoběhl dokonce a musel jsem restartovat sám. Nicméně i tak toho vymazal dost. Přikládám look poosmé.

SystemLook 30.07.11 by jpshortstuff
Log created at 19:20 on 21/04/2014 by Dorkon
Administrator - Elevation successful

========== filefind ==========

Searching for "*comodo*"
C:\WINDOWS\system32\config\systemprofile\Cookies\system@secure.comodo[1].txt --a--c- 433 bytes [22:12 01/05/2011] [22:12 01/05/2011] 0C87D2352C456C6509D089028B35A004

Searching for "cmd*.dll"
C:\WINDOWS\$NtServicePackUninstall$\cmdevtgprov.dll -----c- 45568 bytes [12:28 26/12/2010] [13:49 17/08/2004] F3E7C840A28C0B24768CA10152822862
C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll -----c- 345600 bytes [12:28 26/12/2010] [13:49 17/08/2004] 23CF3D82971552DBBD3F348348ABE745
C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll -----c- 346624 bytes [03:21 14/04/2008] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\cmdial32.dll --a--c- 346624 bytes [13:49 17/08/2004] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\cmdvrt32.dll --a---- 284888 bytes [14:26 02/04/2014] [19:22 25/03/2014] 99F430FF00AB780342DA6A2E2A14F59B
C:\WINDOWS\system32\dllcache\cmdial32.dll --a--c- 346624 bytes [13:49 17/08/2004] [03:21 14/04/2008] CF8EFEED513F751546EA0BF88900D4AD
C:\WINDOWS\system32\wbem\cmdevtgprov.dll --a--c- 45056 bytes [13:49 17/08/2004] [03:21 14/04/2008] D87F13E8432736155BD4EA2C18F017D4
C:\_OTM\MovedFiles\04202014_182445\C_WINDOWS\System32\cmdcsr.dll --a---- 36000 bytes [15:38 03/04/2014] [19:22 25/03/2014] 2243672CC73947B9F71465417DE12541
C:\_OTM\MovedFiles\04202014_182445\C_WINDOWS\System32\cmdkbd32.dll --a---- 40664 bytes [14:26 02/04/2014] [19:22 25/03/2014] 13BAF2D26FB1F01422800DF199A7EDA6

========== regfind ==========

Searching for "comodo"
No data found.

Searching for "cis"
[HKEY_CURRENT_USER\Software\CISRA]
[HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\Install\Packages\W-05-000U-000-003-002-001-00-00\Localization\TRK]
"ProductName"="ATI Catalyst Yükleme Yöneticisi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Canon\ZoomBrowser EX\Task Categories\Print\{F33DF90B-EEB2-4d78-97B0-EE60BCFBC3E2}\Dependency]
"Key"="SOFTWARE\CISRA\PhotoRecord"
[HKEY_LOCAL_MACHINE\SOFTWARE\CISRA]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\33677ca6-d094-406f-a25c-e1e8d1655ec8]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\4680051D-F069-42C1-81E1-A28C7F507DCE]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\4E7644DA-C17B-11E2-8A2A-1A5B6188709B]
"lastAnswer"="CisCompleteOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\6274E4C9-87D7-45C9-B9B9-2F438CB9886A]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\C0BE8CA3-BE41-4609-8647-80B8642D920C]
"lastAnswer"="CisCompleteOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\CB297D8F-8036-4A20-8C56-19549FFA083E]
"lastAnswer"="CisProOffer.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCFF154D-A97B-4138-A1AC-A2B0C3C05696}\E39F65A-F5CB-11E0-A0F4-06054824019B]
"lastAnswer"="CisPro.NextOne.Yes"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0007AEEC-58C3-4461-A605-D2F25EDFAA52}]
@="ICisRmControl3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{08D1F165-8BCE-402A-B74B-FFBCC9157E80}]
@="ICisAgent2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{10D82495-7F93-4C84-901A-65A9E1DED8EB}]
@="ICisRmControl7"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{157A3B3A-0924-4141-A222-F99BD5B2925A}]
@="ICisRmControl6"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{221745E8-E9C7-4A68-89EC-53A124187604}]
@="IDmvVolumeItemOriginalDecisionData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46E040B5-3395-4B9A-985D-E498640315AB}]
@="ICisRmControl2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BDBBCBE-8A78-4A7A-9A3B-D8265CCFBA27}]
@="ICisRmControl5"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A5E3A461-651E-4E3F-95A1-B765749C52CA}]
@="ICisRmControl8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A68C849C-2AFF-4F08-8EAA-80475AA2B199}]
@="ICisAgent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C6EBC129-535C-497C-AA55-59A712EF0C34}]
@="ICisControlCallback2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CEEFE079-2327-43E6-8002-94564FC09D56}]
@="ICisAgentCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D69AE3A4-3DEF-4031-B711-3D051A47C14D}]
@="ICisRmControl4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DEB43A60-3626-4EE4-AD3D-D96B84B7A47A}]
@="AsyncIShdocvwBroker"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2CC28CC-68B2-440E-AE74-C93399CF37E2}]
@="ICisControlCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F2B830DA-DF8E-4CBF-946F-DED196916210}]
@="ICisRmControl"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}]
"Provider"="Cisco Systems, Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\1]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\3]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2598479\Filelist\5]
"FileName"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\98B2CBBB391E84348AC38CDD28014ACA\InstallProperties]
"Publisher"="Cisra"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}]
"Publisher"="Cisra"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc]
"mciseq.dll"="(MCI) Midi Sequencer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI]
"Sequencer"="mciseq.drv"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI32]
"Sequencer"="mciseq.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385234-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
"ClassName"="ipsecISAKMPPolicy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}]
"name"="ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{72385230-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385231-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{72385236-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{72385237-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{7238523c-70fa-11d1-864c-14a300000000}]
"ipsecISAKMPReference"="SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{7238523d-70fa-11d1-864c-14a300000000}"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905]
"OEMName"="Gravis Eliminator Precision Pro (GamePort)"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW]
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
"ImagePath"="%SystemRoot%\system32\cisvc.exe"
[HKEY_USERS\S-1-5-21-823518204-706699826-839522115-1003\Software\CISRA]

========== dir ==========

*comodo* - Unable to find folder.

*cis* - Unable to find folder.

-= EOF =-

Re: Firewall nelze vypnout

Napsal: 22 dub 2014 03:35
od cernohous13
Registry odstraněny :thumbsup:

:arrow: Spusť opět OTM -> CleanUp! - odinstaluje a vyčistí po sobě.
Stahni Avenger zde:
http://swandog46.geekstogo.com/avenger.exe
Spusť a všude souhlas „Yes“
Hlavní okno
Obrázek
dole dej fajfku do obou čtverečků

Do pole „Input script here“ zkopíruj zelený text scriptu -> „Execute“ -> „Yes“
Bude restart a je potřeba vyčkat na otevření Notepadu a jeho obsah sem vložit. (C:\avenger.txt)
Script

Kód: Vybrat vše

Files to delete:
C:\WINDOWS\system32\config\systemprofile\Cookies\system@secure.comodo[1].txt
C:\WINDOWS\system32\cmdvrt32.dll

Re: Firewall nelze vypnout

Napsal: 23 dub 2014 13:14
od dorkon
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\system32\config\systemprofile\Cookies\system@secure.comodo[1].txt" deleted successfully.
File "C:\WINDOWS\system32\cmdvrt32.dll" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

Re: Firewall nelze vypnout

Napsal: 23 dub 2014 14:20
od cernohous13
:arrow: Stáhni a spusť T-cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
- uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš
Stáhni Ccleaner - http://www.filehippo.com/download_ccleaner
Při instalaci vyhodit fajfku u nabízených toolbarů
Můžeš nastavit potřebný jazyk
zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
spustit "Nástroje" > "Start" - tady můžeš zkusit deaktivovat procesy, které při spuštění nepotřebuješ (pokud by ti potom něco nechodilo, stejným způsobem je povolíš)
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.

Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx
Ten si můžeš nechat i na budoucí občasné čištění.

:arrow: Zkus nainstalovat Comodo

Re: Firewall nelze vypnout

Napsal: 24 dub 2014 13:31
od dorkon
Takže Comodo už běží,ale asi jen do první aktualizace. Problém,který byl na začátku a který je původcem všech potíží ,je tu stále. Přišel jsem na to náhodou i teď. Včera jsem omylem nainstaloval jinou verzi Comodo než chci a při aktualizaci opět vyskočila hláška o chybějícím disku,která je celá uvedená v prvním příspěvku k tomuhle tématu. Comodo od té doby přestalo jít a zablokovalo každou internetovou stránku. Nicméně šlo bez problémů odinstalovat. Nainstaloval jsem nejnovější verzi Comoda a ta zatím aktualizovat nechce. Nevíte co stím?

Re: Firewall nelze vypnout

Napsal: 24 dub 2014 14:09
od cernohous13
:???: Comodo běží jak má?

A na otázku "coby kdyby" ti nezavěštím - FW se zas až tak moc často neaktualizují :?:

Re: Firewall nelze vypnout

Napsal: 24 dub 2014 14:18
od dorkon
Comodo běží v pořádku a doufám,že to dlouho vydrží. Děkuji Vám za pomoc.

Re: Firewall nelze vypnout

Napsal: 24 dub 2014 14:30
od cernohous13
I za kolegu - nemáš zač a jsme tady i příště :fez:
Všechny časy jsou v UTC+01:00
Stránka 3 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz