pomalý start PC

Zpráva

chosse · #31 Příspěvek od **chosse** » 12 dub 2010 13:51

část 9

Reg HKLM\SOFTWARE\Classes\JScript\CLSID
Reg HKLM\SOFTWARE\Classes\JScript\CLSID@ {f414c260-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\JScript\OLEScript
Reg HKLM\SOFTWARE\Classes\JScript Author@ JScript Language Authoring
Reg HKLM\SOFTWARE\Classes\JScript Author\CLSID
Reg HKLM\SOFTWARE\Classes\JScript Author\CLSID@ {f414c261-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\JScript Author\OLEScript
Reg HKLM\SOFTWARE\Classes\JScript.Compact@ JScript Compact Profile (ECMA 327)
Reg HKLM\SOFTWARE\Classes\JScript.Compact\CLSID
Reg HKLM\SOFTWARE\Classes\JScript.Compact\CLSID@ {cc5bbec3-db4a-4bed-828d-08d78ee3e1ed}
Reg HKLM\SOFTWARE\Classes\JScript.Compact\OLEScript
Reg HKLM\SOFTWARE\Classes\JScript.Compact Author@ JScript Language Authoring
Reg HKLM\SOFTWARE\Classes\JScript.Compact Author\CLSID
Reg HKLM\SOFTWARE\Classes\JScript.Compact Author\CLSID@ {f414c261-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\JScript.Compact Author\OLEScript
Reg HKLM\SOFTWARE\Classes\JScript.Encode@ JScript Language Encoding
Reg HKLM\SOFTWARE\Classes\JScript.Encode\CLSID
Reg HKLM\SOFTWARE\Classes\JScript.Encode\CLSID@ {f414c262-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\JScript.Encode\OLEScript
Reg HKLM\SOFTWARE\Classes\JSFile.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\JSFile.HostEncode\CLSID@ {85131630-480C-11D2-B1F9-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\KmSvc.CKmsCertEnroll@ Cert Enrollment class
Reg HKLM\SOFTWARE\Classes\KmSvc.CKmsCertEnroll\CLSID
Reg HKLM\SOFTWARE\Classes\KmSvc.CKmsCertEnroll\CLSID@ {ff258fc0-99b1-4297-b857-539ad9bc13ed}
Reg HKLM\SOFTWARE\Classes\KresCOM.KrProgSvr@ KresCOM.KrProgSvr
Reg HKLM\SOFTWARE\Classes\KresCOM.KrProgSvr\CLSID
Reg HKLM\SOFTWARE\Classes\KresCOM.KrProgSvr\CLSID@ {BA795A5B-4B73-4525-858C-BB76087CA8FE}
Reg HKLM\SOFTWARE\Classes\LiveScript@ JScript Language
Reg HKLM\SOFTWARE\Classes\LiveScript\CLSID
Reg HKLM\SOFTWARE\Classes\LiveScript\CLSID@ {f414c260-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\LiveScript\OLEScript
Reg HKLM\SOFTWARE\Classes\LiveScript Author@ JScript Language Authoring
Reg HKLM\SOFTWARE\Classes\LiveScript Author\CLSID
Reg HKLM\SOFTWARE\Classes\LiveScript Author\CLSID@ {f414c261-6ac0-11cf-b6d1-00aa00bbbb58}
Reg HKLM\SOFTWARE\Classes\LiveScript Author\OLEScript
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper@ Macromedia Flash Paper
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\CLSID
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon@ C:\Program Files\Mozilla Firefox\firefox.exe,1
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command@ "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"
Reg HKLM\SOFTWARE\Classes\mailto@ URL:MailTo Protocol
Reg HKLM\SOFTWARE\Classes\mailto@URL Protocol
Reg HKLM\SOFTWARE\Classes\mailto@EditFlags 2
Reg HKLM\SOFTWARE\Classes\mailto\DefaultIcon
Reg HKLM\SOFTWARE\Classes\mailto\DefaultIcon@ C:\Program Files\Mozilla Thunderbird\thunderbird.exe,0
Reg HKLM\SOFTWARE\Classes\mailto\shell
Reg HKLM\SOFTWARE\Classes\mailto\shell\open
Reg HKLM\SOFTWARE\Classes\mailto\shell\open\command
Reg HKLM\SOFTWARE\Classes\mailto\shell\open\command@ "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" -osint -compose "%1"
Reg HKLM\SOFTWARE\Classes\mbam.script@ Malwarebytes' Anti-Malware script
Reg HKLM\SOFTWARE\Classes\mbam.script\shell
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open\command
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open\command@ "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" %1
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt@ MBAMShlExt Class
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt\CLSID
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt\CLSID@ {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt\CurVer
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt\CurVer@ MBAMExt.MBAMShlExt.1
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt.1@ MBAMShlExt Class
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt.1\CLSID
Reg HKLM\SOFTWARE\Classes\MBAMExt.MBAMShlExt.1\CLSID@ {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file@ Fotokniha-File
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\Moje Cewe Fotokniha.exe
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\Moje Cewe Fotokniha.exe@ Edit with Moje Cewe Fotokniha
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\Moje Cewe Fotokniha.exe\command
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\Moje Cewe Fotokniha.exe\command@ "C:\Program Files\CeWe Color\Moje Cewe Fotokniha\Moje Cewe Fotokniha.exe" "%1"
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\open
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\open\command
Reg HKLM\SOFTWARE\Classes\mcf-pbf-file\shell\open\command@ "C:\Program Files\CeWe Color\Moje Cewe Fotokniha\Moje Cewe Fotokniha.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager@ Messenger Extensions Manager Object
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CLSID@ {BC20CB75-A981-460e-81D4-F06F61B59247}
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CurVer@ Messenger.MessengerExtensions.1
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1@ Messenger Extensions Manager Object
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1\CLSID@ {BC20CB75-A981-460e-81D4-F06F61B59247}
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp@ Messenger Application
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CLSID@ {FB7199AB-79BF-11d2-8D94-0000F875C541}
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CurVer@ Messenger.MessengerApp.1
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1@ Messenger Application
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1\CLSID@ {FB7199AB-79BF-11d2-8D94-0000F875C541}
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CLSID@ {F3A614DC-ABE0-11d2-A441-00C04F795683}
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CurVer@ Messenger.MsgrObject.1
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1\CLSID@ {F3A614DC-ABE0-11d2-A441-00C04F795683}
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CLSID@ {B69003B3-C55E-4b48-836C-BC5946FC3B28}
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CurVer@ Messenger.UIAutomation.1
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1\CLSID@ {B69003B3-C55E-4b48-836C-BC5946FC3B28}
Reg HKLM\SOFTWARE\Classes\MessengerContactList@ Seznam kontakt?
Reg HKLM\SOFTWARE\Classes\MessengerContactList@NoOpen Tento soubor nelze otev??t p??mo. Mus?te jej otev??t pomoc? polo?ky "Importovat kontakty..." z nab?dky "Soubor" programu Windows Messenger.
Reg HKLM\SOFTWARE\Classes\MessengerContactList\DefaultIcon
Reg HKLM\SOFTWARE\Classes\MessengerContactList\DefaultIcon@ C:\Program Files\Messenger\msmsgs.exe,-1
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv@ Messenger Private Object
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CLSID
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CLSID@ {AB1D8565-40E9-4616-984D-98465687E82C}
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer@ MessengerPrivate.MessengerPriv.1
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1@ Messenger Private Object
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1\CLSID
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1\CLSID@ {AB1D8565-40E9-4616-984D-98465687E82C}
Reg HKLM\SOFTWARE\Classes\Microsoft.FeedsManager@ Feed Subscriptions
Reg HKLM\SOFTWARE\Classes\Microsoft.FeedsManager\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.FeedsManager\CLSID@ {faeb54c4-f66f-4806-83a0-805299f5e3ad}
Reg HKLM\SOFTWARE\Classes\Microsoft.InformationCard.ElementBehaviorFactory.1\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.InformationCard.ElementBehaviorFactory.1\CLSID@ {c2c4f00a-720e-4389-aeb9-e9c4b0d93c6f}
Reg HKLM\SOFTWARE\Classes\Microsoft.MMC.FrameworkSnapInFactory@ Microsoft.ManagementConsole.Advanced.FrameworkSnapInFactory
Reg HKLM\SOFTWARE\Classes\Microsoft.MMC.FrameworkSnapInFactory\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.MMC.FrameworkSnapInFactory\CLSID@ {D5AB5662-131D-453D-88C8-9BBA87502ADE}
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform@ ExecutivePlatform
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform\CLSID@ {B3FD5602-EB0F-415E-9F32-75DA391D6BF9}
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform\CurVer
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform\CurVer@ MMC.ExecutivePlatform.1
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform.1@ ExecutivePlatform
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform.1\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.ExecutivePlatform.1\CLSID@ {B3FD5602-EB0F-415E-9F32-75DA391D6BF9}
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter@ SnapInFailureReporter
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter\CLSID@ {4A65D267-1539-4BD1-921D-1C49B3E58EB7}
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter\CurVer
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter\CurVer@ MMC.SnapInFailureReporter.1
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter.1@ SnapInFailureReporter
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter.1\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.SnapInFailureReporter.1\CLSID@ {4A65D267-1539-4BD1-921D-1C49B3E58EB7}
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog@ WaitDialog
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog\CLSID@ {2D11CF10-4FE0-45B2-88DF-6FFBF92BE9AB}
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog\CurVer
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog\CurVer@ MMC.WaitDialog.1
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog.1@ WaitDialog
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog.1\CLSID
Reg HKLM\SOFTWARE\Classes\MMC.WaitDialog.1\CLSID@ {2D11CF10-4FE0-45B2-88DF-6FFBF92BE9AB}
Reg HKLM\SOFTWARE\Classes\MozillaMapi@ Mozilla MAPI
Reg HKLM\SOFTWARE\Classes\MozillaMapi\CLSID
Reg HKLM\SOFTWARE\Classes\MozillaMapi\CLSID@ {29F458BE-8866-11D5-A3DD-00B0D0F3BAA7}
Reg HKLM\SOFTWARE\Classes\MozillaMapi\CurVer
Reg HKLM\SOFTWARE\Classes\MozillaMapi\CurVer@ MozillaMapi.1
Reg HKLM\SOFTWARE\Classes\MozillaMapi.1@ Mozilla MAPI
Reg HKLM\SOFTWARE\Classes\MozillaMapi.1\CLSID
Reg HKLM\SOFTWARE\Classes\MozillaMapi.1\CLSID@ {29F458BE-8866-11D5-A3DD-00B0D0F3BAA7}
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog@ Microsoft Common Dialog Control, version 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog\CLSID
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog\CLSID@ {F9043C85-F6F2-101A-A3C9-08002B2F49FB}
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog\CurVer
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog\CurVer@ MSComDlg.CommonDialog.1
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog.1@ Microsoft Common Dialog Control, version 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSComDlg.CommonDialog.1\CLSID@ {F9043C85-F6F2-101A-A3C9-08002B2F49FB}
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm@ Microsoft Communications Control, version 6.0
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm\CLSID
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm\CLSID@ {648A5600-2C6E-101B-82B6-000000000014}
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm\CurVer
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm\CurVer@ MSCOMMLib.MSComm.1
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm.1@ Microsoft Communications Control, version 6.0
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSCOMMLib.MSComm.1\CLSID@ {648A5600-2C6E-101B-82B6-000000000014}
Reg HKLM\SOFTWARE\Classes\Msohelp.HtmlHelp.1@ HtmlHelp Class
Reg HKLM\SOFTWARE\Classes\Msohelp.HtmlHelp.1\CLSID
Reg HKLM\SOFTWARE\Classes\Msohelp.HtmlHelp.1\CLSID@ {31E0DFD7-2621-11D2-AFD7-006097C9A284}
Reg HKLM\SOFTWARE\Classes\MsohelpAWDlg.1@ MsoHelp AW Search Dialog
Reg HKLM\SOFTWARE\Classes\MsohelpAWDlg.1\CLSID
Reg HKLM\SOFTWARE\Classes\MsohelpAWDlg.1\CLSID@ {B58C2441-A1A3-11D2-B024-006097C9A284}
Reg HKLM\SOFTWARE\Classes\MsohelpKeyDlg.1@ MsoHelp Key Search Dialog
Reg HKLM\SOFTWARE\Classes\MsohelpKeyDlg.1\CLSID
Reg HKLM\SOFTWARE\Classes\MsohelpKeyDlg.1\CLSID@ {B58C2440-A1A3-11D2-B024-006097C9A284}
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP@ MsRDP Class v7
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP\CurVer
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP\CurVer@ MsRDP.MsRDP.6
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.2@ MsRDP Class v3
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.2\CLSID
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.2\CLSID@ {971127BB-259F-48c2-BD75-5F97A3331551}
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.3@ MsRDP Class v4
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.3\CLSID
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.3\CLSID@ {6A6F4B83-45C5-4ca9-BDD9-0D81C12295E4}
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.4@ MsRDP Class v5
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.4\CLSID
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.4\CLSID@ {54CE37E0-9834-41ae-9896-4DAB69DC022B}
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.5@ MsRDP Class v6
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.5\CLSID
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.5\CLSID@ {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2}
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.6@ MsRDP Class v7
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.6\CLSID
Reg HKLM\SOFTWARE\Classes\MsRDP.MsRDP.6\CLSID@ {7390f3d8-0439-4c05-91e3-cf5cb290c3d0}
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.4@ MsTscAx Class v4
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.4\CLSID
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.4\CLSID@ {ace575fd-1fcf-4074-9401-ebab990fa9de}
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.5@ MsTscAx Class v5
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.5\CLSID
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.5\CLSID@ {6AE29350-321B-42be-BBE5-12FB5270C0DE}
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.6@ MsTscAx Class v6
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.6\CLSID
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.6\CLSID@ {4eb2f086-c818-447e-b32c-c51ce2b30d31}
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.7@ MsTscAx Class v7
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.7\CLSID
Reg HKLM\SOFTWARE\Classes\MsTscAx.MsTscAx.7\CLSID@ {d2ea46a7-c2bf-426b-af24-e19c44456399}
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0@ XML DOM Document 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0\CLSID@ {88d96a05-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0@ Free Threaded XML DOM Document 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0\CLSID@ {88d96a06-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0@ MXHTMLWriter 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0\CLSID@ {88d96a10-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0@ MXNamespaceManager 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0\CLSID@ {88d96a11-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0@ MXXMLWriter 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0\CLSID@ {88d96a0f-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0@ SAXAttributes 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0\CLSID@ {88d96a0e-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0@ SAX XML Reader 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0\CLSID@ {88d96a0c-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0@ Server XML HTTP 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0\CLSID@ {88d96a0b-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0@

chosse · #32 Příspěvek od **chosse** » 12 dub 2010 13:51

část 10

Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0\CLSID@ {88d96a0a-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0@ XML Schema Cache 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0\CLSID@ {88d96a07-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0@ XSL Template 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0\CLSID@ {88d96a08-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document@ AutoCAD MTEXT Stacked Text
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\CLSID
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\CLSID@ {03A40800-BAF1-11CF-A644-00608CF2ECDF}
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\Insertable
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\Insertable@
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\NotInsertable
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\NotInsertable@
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol@
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing@
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\server
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\server@ C:\WINDOWS\system32\mtstack.exe
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\verb
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\verb@
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\verb\0
Reg HKLM\SOFTWARE\Classes\MTEXTStacked.Document\protocol\StdFileEditing\verb\0@ &Edit
Reg HKLM\SOFTWARE\Classes\NeroCDExtraType@ Nero CD EXTRA
Reg HKLM\SOFTWARE\Classes\NeroCDExtraType\shell
Reg HKLM\SOFTWARE\Classes\NeroCopyType@ NeroCopyType
Reg HKLM\SOFTWARE\Classes\NeroCopyType\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files7.ncd\ShellEx
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files7.nct\ShellEx
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.bmp@ Windows Bitmap obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.bmp@FriendlyTypeName Windows Bitmap obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.bmp\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.bmp\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.gif@ Graphics Interchange Format obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.gif@FriendlyTypeName Graphics Interchange Format obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.gif\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.gif\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jif@ Form?t JFIF (JPEG File Interchange Format)
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jif@FriendlyTypeName Form?t JFIF (JPEG File Interchange Format)
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jif\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jif\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jpg@ JPEG obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jpg@FriendlyTypeName JPEG obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jpg\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.jpg\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.mp4@ MPEG-4 multimedi?ln? soubor
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.mp4@FriendlyTypeName MPEG-4 multimedi?ln? soubor
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.mp4\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.mp4\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.pcx@ Paintbrush obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.pcx@FriendlyTypeName Paintbrush obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.pcx\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.pcx\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.png@ Portable Network Graphics obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.png@FriendlyTypeName Portable Network Graphics obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.png\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.png\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tga@ Truevision Targa obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tga@FriendlyTypeName Truevision Targa obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tga\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tga\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tif@ Tagged Image File Format obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tif@FriendlyTypeName Tagged Image File Format obr?zek
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tif\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.tif\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wmf@ Windows Metafile
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wmf@FriendlyTypeName Windows Metafile
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wmf\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wmf\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wpg@ Soubor WildTangent PNG
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wpg@FriendlyTypeName Soubor WildTangent PNG
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wpg\shell
Reg HKLM\SOFTWARE\Classes\NeroCoverDesigner.Files8.wpg\shell@ open
Reg HKLM\SOFTWARE\Classes\NeroCueSheetType@ NeroCueSheetType
Reg HKLM\SOFTWARE\Classes\NeroCueSheetType\shell
Reg HKLM\SOFTWARE\Classes\NeroDVDVideoType@ Nero DVD-Video
Reg HKLM\SOFTWARE\Classes\NeroDVDVideoType\shell
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.cue@ Soubory obraz?
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.cue@FriendlyTypeName Soubory obraz?
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.iso@ Soubory obraz?
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.iso@FriendlyTypeName Soubory obraz?
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nhf@ Kompilace HFS-CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nhf@FriendlyTypeName Kompilace HFS-CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nhv@ Kompilace HD-BURN-Video
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nhv@FriendlyTypeName Kompilace HD-BURN-Video
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nmd@ Kompilace miniDVD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nmd@FriendlyTypeName Kompilace miniDVD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nr3@ Kompilace CD-ROM (MP3)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nr3@FriendlyTypeName Kompilace CD-ROM (MP3)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nr4@ Kompilace CD-ROM (AAC)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nr4@FriendlyTypeName Kompilace CD-ROM (AAC)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nra@ Kompilace hudebn?ho CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nra@FriendlyTypeName Kompilace hudebn?ho CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrb@ Kompilace CD-ROM (spou?t?c?)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrb@FriendlyTypeName Kompilace CD-ROM (spou?t?c?)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrc@ Kompilace CD-ROM (UDF/ISO)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrc@FriendlyTypeName Kompilace CD-ROM (UDF/ISO)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrd@ Kompilace DVD-Video
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrd@FriendlyTypeName Kompilace DVD-Video
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nre@ Kompilace CD EXTRA
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nre@FriendlyTypeName Kompilace CD EXTRA
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrg@ Obraz disku
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrg@FriendlyTypeName Obraz disku
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrh@ Kompilace CD-ROM (hybridn?)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrh@FriendlyTypeName Kompilace CD-ROM (hybridn?)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nri@ Kompilace CD-ROM (ISO)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nri@FriendlyTypeName Kompilace CD-ROM (ISO)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrm@ Kompilace CD (sm??en? re?im)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrm@FriendlyTypeName Kompilace CD (sm??en? re?im)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrs@ Kompilace CD-ROM (spou?t?n? EFI)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrs@FriendlyTypeName Kompilace CD-ROM (spou?t?n? EFI)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nru@ Kompilace CD-ROM (UDF)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nru@FriendlyTypeName Kompilace CD-ROM (UDF)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrv@ Kompilace Video-CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrv@FriendlyTypeName Kompilace Video-CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrw@ Kompilace CD-ROM (WMA)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nrw@FriendlyTypeName Kompilace CD-ROM (WMA)
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nsd@ Kompilace Super Video CD
Reg HKLM\SOFTWARE\Classes\NeroExpress.Files8.nsd@FriendlyTypeName Kompilace Super Video CD
Reg HKLM\SOFTWARE\Classes\NeroHDBackupType@ Z?loha pevn?ho disku Nera
Reg HKLM\SOFTWARE\Classes\NeroHDBackupType\shell
Reg HKLM\SOFTWARE\Classes\NeroMP3Type@ Nero CD-ROM-MP3
Reg HKLM\SOFTWARE\Classes\NeroMP3Type\shell
Reg HKLM\SOFTWARE\Classes\NeroUDFISOType@ Nero CD-ROM (UDF/ISO)
Reg HKLM\SOFTWARE\Classes\NeroUDFISOType\shell
Reg HKLM\SOFTWARE\Classes\NeroWMAType@ Nero CD-ROM-WMA
Reg HKLM\SOFTWARE\Classes\NeroWMAType\shell
Reg HKLM\SOFTWARE\Classes\news@ URL:News Protocol
Reg HKLM\SOFTWARE\Classes\news@EditFlags 2
Reg HKLM\SOFTWARE\Classes\news@URL Protocol
Reg HKLM\SOFTWARE\Classes\news\DefaultIcon
Reg HKLM\SOFTWARE\Classes\news\DefaultIcon@ C:\Program Files\Outlook Express\msimn.exe, -3
Reg HKLM\SOFTWARE\Classes\news\shell
Reg HKLM\SOFTWARE\Classes\news\shell@
Reg HKLM\SOFTWARE\Classes\news\shell\open
Reg HKLM\SOFTWARE\Classes\news\shell\open@
Reg HKLM\SOFTWARE\Classes\news\shell\open\command
Reg HKLM\SOFTWARE\Classes\news\shell\open\command@ "C:\Program Files\Outlook Express\msimn.exe" /outnews /newsurl:%1
Reg HKLM\SOFTWARE\Classes\nntp@ URL:NNTP Protocol
Reg HKLM\SOFTWARE\Classes\nntp@EditFlags 2
Reg HKLM\SOFTWARE\Classes\nntp@URL Protocol
Reg HKLM\SOFTWARE\Classes\nntp\DefaultIcon
Reg HKLM\SOFTWARE\Classes\nntp\DefaultIcon@ C:\Program Files\Outlook Express\msimn.exe, -3
Reg HKLM\SOFTWARE\Classes\nntp\shell
Reg HKLM\SOFTWARE\Classes\nntp\shell@
Reg HKLM\SOFTWARE\Classes\nntp\shell\open
Reg HKLM\SOFTWARE\Classes\nntp\shell\open@
Reg HKLM\SOFTWARE\Classes\nntp\shell\open\command
Reg HKLM\SOFTWARE\Classes\nntp\shell\open\command@ "C:\Program Files\Outlook Express\msimn.exe" /outnews /newsurl:%1
Reg HKLM\SOFTWARE\Classes\ods_auto_file@
Reg HKLM\SOFTWARE\Classes\ods_auto_file\shell
Reg HKLM\SOFTWARE\Classes\ods_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\ods_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\ods_auto_file\shell\open\command@ "C:\Program Files\IrfanView\I_VIEW32.EXE" "%1"
Reg HKLM\SOFTWARE\Classes\odt_auto_file@
Reg HKLM\SOFTWARE\Classes\odt_auto_file\shell
Reg HKLM\SOFTWARE\Classes\odt_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\odt_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\odt_auto_file\shell\open\command@ "C:\Program Files\IrfanView\I_VIEW32.EXE" "%1"
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreator@ PDFCreator.clsPDFCreator
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreator\Clsid
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreator\Clsid@ {3A619AE4-50EC-46C8-B19E-BE8F50DD2F22}
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorError@ PDFCreator.clsPDFCreatorError
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorError\Clsid
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorError\Clsid@ {082391C9-8188-4364-B4FD-66A1524B2097}
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorInfoSpoolFile@ PDFCreator.clsPDFCreatorInfoSpoolFile
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorInfoSpoolFile\Clsid
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorInfoSpoolFile\Clsid@ {85BA86C8-F6FA-4731-BD3A-AD0E6E655BDD}
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorOptions@ PDFCreator.clsPDFCreatorOptions
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorOptions\Clsid
Reg HKLM\SOFTWARE\Classes\PDFCreator.clsPDFCreatorOptions\Clsid@ {F8F15298-30FD-427C-BDFA-55E9AB615632}
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.6@ Photoshop 7.0 Application
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.7\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.7\CLSID@ {6DECC242-87EF-11CF-86B4-444553540000}
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7@ Adobe Photoshop Image
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\CLSID@ {62B1F4A0-A0C5-4122-8ECE-57DF88C97C33}
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\DefaultIcon@ C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe,1
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\Insertable
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\protocol
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\protocol\StdFileEditing
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\protocol\StdFileEditing\server
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\protocol\StdFileEditing\server@ C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\open\command@ "C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\print
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\print\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shell\print\command@ C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe -p %1
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex\IconHandler
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex\IconHandler@ {0B6DC6EE-C4FD-11d1-819A-00C04FB69B4D}
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex\PropertySheetHandlers
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex\PropertySheetHandlers\PSDPage
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.7\shellex\PropertySheetHandlers\PSDPage@ {0B6DC6EE-C4FD-11d1-819A-00C04FB69B4D}
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\DefaultIcon@ C:\Program Files\Adobe\Photoshop 7.0\ImageReady.exe,28
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile\shell\open\command@ "C:\Program Files\Adobe\Photoshop 7.0\ImageReady.exe" "%1"
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\open
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\open\command
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\open\command@ "C:\WINDOWS\system32\StwRd50C.exe" /dde
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\print
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\print\command
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\print\command@ "C:\WINDOWS\system32\StwRd50C.exe" /dde
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\printto
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\printto\command
Reg HKLM\SOFTWARE\Classes\PohodaReport.Document\shell\printto\command@ "C:\WINDOWS\system32\StwRd50C.exe" /dde
Reg HKLM\SOFTWARE\Classes\ppifile@ Konfigura?n? soubor slu?by Microsoft Passport
Reg HKLM\SOFTWARE\Classes\ppifile\shell
Reg HKLM\SOFTWARE\Classes\PS@ AtlasKrPS
Reg HKLM\SOFTWARE\Classes\PS\CLSID
Reg HKLM\SOFTWARE\Classes\PS\CLSID@ {CCDEEBE2-58CD-4EAE-AB37-8839583677FE}
Reg HKLM\SOFTWARE\Classes\PS\CurVer
Reg HKLM\SOFTWARE\Classes\PS\CurVer@ PS.0.16
Reg HKLM\SOFTWARE\Classes\PS.0.16@ AtlasKrPS
Reg HKLM\SOFTWARE\Classes\PS.0.16\CLSID
Reg HKLM\SOFTWARE\Classes\PS.0.16\CLSID@ {CCDEEBE2-58CD-4EAE-AB37-8839583677FE}
Reg HKLM\SOFTWARE\Classes\RDS.DataControl@ RDS.DataControl
Reg HKLM\SOFTWARE\Classes\RDS.DataControl\Clsid
Reg HKLM\SOFTWARE\Classes\RDS.DataControl\Clsid@ {BD96C556-65A3-11D0-983A-00C04FC29E33}
Reg HKLM\SOFTWARE\Classes\RDS.DataControl.2.81@ RDS.DataControl
Reg HKLM\SOFTWARE\Classes\RDS.DataControl.2.81\Clsid
Reg HKLM\SOFTWARE\Classes\RDS.DataControl.2.81\Clsid@ {BD96C556-65A3-11D0-983A-00C04FC29E33}
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace@ RDS.DataSpace
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace\Clsid
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace\Clsid@ {BD96C556-65A3-11D0-983A-00C04FC29E36}
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace.2.81@ RDS.DataSpace
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace.2.81\Clsid
Reg HKLM\SOFTWARE\Classes\RDS.DataSpace.2.81\Clsid@ {BD96C556-65A3-11D0-983A-00C04FC29E36}
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress@ RstrProgress Class
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress\CLSID
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress\CLSID@ {bf404da2-7d3b-11d3-b9e5-00c04f79e399}
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress\CurVer
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress\CurVer@ RstrCC.RstrProgress.1
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress.1@ RstrProgress Class
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress.1\CLSID
Reg HKLM\SOFTWARE\Classes\RstrCC.RstrProgress.1\CLSID@ {bf404da2-7d3b-11d3-b9e5-00c04f79e399}
Reg HKLM\SOFTWARE\Classes\SC@ URL: SHOUTcast Protocol
Reg HKLM\SOFTWARE\Classes\SC@URL Protocol
Reg HKLM\SOFTWARE\Classes\SC\shell
Reg HKLM\SOFTWARE\Classes\SC\shell\open
Reg HKLM\SOFTWARE\Classes\SC\shell\open\command
Reg HKLM\SOFTWARE\Classes\SC\shell\open\command@ C:\Program Files\Winamp\winamp.exe %1
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary@ Scripting.Dictionary
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID@ {EE09B103-97E0-11CF-978F-00A02463E06F}
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder@ Script Encoder Object
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID@ {32DA2B15-CFED-11D1-B747-00C04FC2B085}
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject@ FileSystem Object
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID@ {0D43FE01-F093-11CF-8940-00A0C9054228}
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper@
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper\CLSID
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper\CLSID@ {0D458BE8-D99D-11D3-A92B-00105A088FAC}
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper.1@
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper.1\CLSID
Reg HKLM\SOFTWARE\Classes\Setup.SetupKernelWrapper.1\CLSID@ {0D458BE8-D99D-11D3-A92B-00105A088FAC}
Reg HKLM\SOFTWARE\Classes\ShellViewControls.TreeNode.71@ ShellViewControls.TreeNode.71
Reg HKLM\SOFTWARE\Classes\ShellViewControls.TreeNode.71\CLSID
Reg HKLM\SOFTWARE\Classes\ShellViewControls.TreeNode.71\CLSID@ {FAD31E4D-FB35-441F-8C11-E049CB7CBB48}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.9@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.9\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.9\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\SHOUT@ URL: SHOUTcast Protocol
Reg HKLM\SOFTWARE\Classes\SHOUT@URL Protocol
Reg HKLM\SOFTWARE\Classes\SHOUT\shell
Reg HKLM\SOFTWARE\Classes\SHOUT\shell\open
Reg HKLM\SOFTWARE\Classes\SHOUT\shell\open\command
Reg HKLM\SOFTWARE\Classes\SHOUT\shell\open\command@ C:\Program Files\Winamp\winamp.exe %1
Reg HKLM\SOFTWARE\Classes\snews@ URL:Snews Protocol
Reg HKLM\SOFTWARE\Classes\snews@EditFlags 2
Reg HKLM\SOFTWARE\Classes\snews@URL Protocol
Reg HKLM\SOFTWARE\Classes\snews\DefaultIcon
Reg HKLM\SOFTWARE\Classes\snews\DefaultIcon@ C:\Program Files\Outlook Express\msimn.exe, -3
Reg HKLM\SOFTWARE\Classes\snews\shell
Reg HKLM\SOFTWARE\Classes\snews\shell@
Reg HKLM\SOFTWARE\Classes\snews\shell\open
Reg HKLM\SOFTWARE\Classes\snews\shell\open@
Reg HKLM\SOFTWARE\Classes\snews\shell\open\command
Reg HKLM\SOFTWARE\Classes\snews\shell\open\command@ "C:\Program Files\Outlook Express\msimn.exe" /outnews /newsurl:%1
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer@ SSubTimer6.CTimer
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid@ {71A27034-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass@ SSubTimer6.GSubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid@ {71A27032-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass@ SSubTimer6.ISubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid@ {71A2702F-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\StandardACISText@ Standard ACIS Text
Reg HKLM\SOFTWARE\Classes\StandardACISText\DefaultIcon
Reg HKLM\SOFTWARE\Classes\StandardACISText\DefaultIcon@ C:\WINDOWS\system32\acadficn.dll,114
Reg HKLM\SOFTWARE\Classes\Stormware.PDFPrinterSettings@ Stormware.PDFPrinterSettings
Reg HKLM\SOFTWARE\Classes\Stormware.PDFPrinterSettings\Clsid
Reg HKLM\SOFTWARE\Classes\Stormware.PDFPrinterSettings\Clsid@ {1F4C2B6F-A3A7-4EBE-AFE9-53DB3A50AC4C}
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab@ Microsoft Tabbed Dialog Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab\CLSID
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab\CLSID@ {BDC217C5-ED16-11CD-956C-0000C04E4C0A}
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab\CurVer
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab\CurVer@ TabDlg.SSTab.1
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab.1@ Microsoft Tabbed Dialog Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab.1\CLSID
Reg HKLM\SOFTWARE\Classes\TabDlg.SSTab.1\CLSID@ {BDC217C5-ED16-11CD-956C-0000C04E4C0A}
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto@ Thunderbird URL
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto@FriendlyTypeName Thunderbird URL
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto@URL Protocol
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto@EditFlags 2
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\DefaultIcon@ C:\Program Files\Mozilla Thunderbird\thunderbird.exe,0
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\shell
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\shell\open
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\shell\open\command
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.mailto\shell\open\command@ "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" -osint -compose "%1"
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news@ Thunderbird (News) URL
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news@FriendlyTypeName Thunderbird (News) URL
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news@URL Protocol
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news@EditFlags 2
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\DefaultIcon@ C:\Program Files\Mozilla Thunderbird\thunderbird.exe,0
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\shell
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\shell\open
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\shell\open\command
Reg HKLM\SOFTWARE\Classes\Thunderbird.Url.news\shell\open\command@ "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" -osint -mail "%1"
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML@ Thunderbird Document
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML@FriendlyTypeName Thunderbird Document
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\DefaultIcon
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\DefaultIcon@ C:\Program Files\Mozilla Thunderbird\thunderbird.exe,0
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\shell
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\shell\open
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\shell\open\command
Reg HKLM\SOFTWARE\Classes\ThunderbirdEML\shell\open\command@ "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Toky@ Atlas Kres Toky Server
Reg HKLM\SOFTWARE\Classes\Toky\CLSID
Reg HKLM\SOFTWARE\Classes\Toky\CLSID@ {BE526524-B880-4564-B9EE-3BA78C72A06C}
Reg HKLM\SOFTWARE\Classes\Toky\CurVer
Reg HKLM\SOFTWARE\Classes\Toky\CurVer@ Toky.0.1
Reg HKLM\SOFTWARE\Classes\Toky.0.1@ Atlas Kres Toky Server
Reg HKLM\SOFTWARE\Classes\Toky.0.1\CLSID
Reg HKLM\SOFTWARE\Classes\Toky.0.1\CLSID@ {BE526524-B880-4564-B9EE-3BA78C72A06C}
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar@ Seznam Li?ti?ka
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar\CLSID@ {B71B15CE-3093-459C-B764-AEB2486F2273}
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar\CurVer
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar\CurVer@ Toolbar.ToolbarToolBar.1
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar.1@ Seznam Li?ti?ka
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar.1\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar.ToolbarToolBar.1\CLSID@ {B71B15CE-3093-459C-B764-AEB2486F2273}
Reg HKLM\SOFTWARE\Classes\UNSV@ URL: Ultravox Protocol
Reg HKLM\SOFTWARE\Classes\UNSV@URL Protocol
Reg HKLM\SOFTWARE\Classes\UNSV\shell
Reg HKLM\SOFTWARE\Classes\UNSV\shell\open
Reg HKLM\SOFTWARE\Classes\UNSV\shell\open\command
Reg HKLM\SOFTWARE\Classes\UNSV\shell\open\command@ C:\Program Files\Winamp\winamp.exe %1
Reg HKLM\SOFTWARE\Classes\UVOX@ URL: Ultravox Protocol
Reg HKLM\SOFTWARE\Classes\UVOX@URL Protocol
Reg HKLM\SOFTWARE\Classes\UVOX\shell
Reg HKLM\SOFTWARE\Classes\UVOX\shell\open
Reg HKLM\SOFTWARE\Classes\UVOX\shell\open\command
Reg HKLM\SOFTWARE\Classes\UVOX\shell\open\command@ C:\Program Files\Winamp\winamp.exe %1
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell@

chosse · #33 Příspěvek od **chosse** » 12 dub 2010 13:52

část 11

Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid@ {9BD3A001-42A2-491E-AACA-9512F6CF4CDB}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject@ vbAcceleratorSGrid6.cGridSortObject
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid@ {D2129738-6A78-4BCB-915A-412982CAA23D}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw@ vbAcceleratorSGrid6.IGridCellOwnerDraw
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid@ {DC90EAA6-69B8-4DE4-9A7B-5B2C5B3FEACD}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid@ vbAccelerator Grid Control
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid@ {C5DA1F2B-B2BF-4DFC-BC9A-439133543A67}
Reg HKLM\SOFTWARE\Classes\VBS@ VB Script Language
Reg HKLM\SOFTWARE\Classes\VBS\CLSID
Reg HKLM\SOFTWARE\Classes\VBS\CLSID@ {B54F3741-5B07-11cf-A4B0-00AA004A55E8}
Reg HKLM\SOFTWARE\Classes\VBS\OLEScript
Reg HKLM\SOFTWARE\Classes\VBS Author@ VB Script Language Authoring
Reg HKLM\SOFTWARE\Classes\VBS Author\CLSID
Reg HKLM\SOFTWARE\Classes\VBS Author\CLSID@ {B54F3742-5B07-11cf-A4B0-00AA004A55E8}
Reg HKLM\SOFTWARE\Classes\VBS Author\OLEScript
Reg HKLM\SOFTWARE\Classes\VBScript@ VB Script Language
Reg HKLM\SOFTWARE\Classes\VBScript\CLSID
Reg HKLM\SOFTWARE\Classes\VBScript\CLSID@ {B54F3741-5B07-11cf-A4B0-00AA004A55E8}
Reg HKLM\SOFTWARE\Classes\VBScript\OLEScript
Reg HKLM\SOFTWARE\Classes\VBScript Author@ VB Script Language Authoring
Reg HKLM\SOFTWARE\Classes\VBScript Author\CLSID
Reg HKLM\SOFTWARE\Classes\VBScript Author\CLSID@ {B54F3742-5B07-11cf-A4B0-00AA004A55E8}
Reg HKLM\SOFTWARE\Classes\VBScript Author\OLEScript
Reg HKLM\SOFTWARE\Classes\VBScript.Encode@ VBScript Language Encoding
Reg HKLM\SOFTWARE\Classes\VBScript.Encode\CLSID
Reg HKLM\SOFTWARE\Classes\VBScript.Encode\CLSID@ {B54F3743-5B07-11cf-A4B0-00AA004A55E8}
Reg HKLM\SOFTWARE\Classes\VBScript.Encode\OLEScript
Reg HKLM\SOFTWARE\Classes\VBScript.RegExp@ VBScript Regular Expression
Reg HKLM\SOFTWARE\Classes\VBScript.RegExp\CLSID
Reg HKLM\SOFTWARE\Classes\VBScript.RegExp\CLSID@ {3F4DACA4-160D-11D2-A8E9-00104B365C9F}
Reg HKLM\SOFTWARE\Classes\VBScript.RegExp\OLEScript
Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID@ {85131631-480C-11D2-B1F9-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\VoloView Document@ VoloView Document
Reg HKLM\SOFTWARE\Classes\VoloView Document\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VoloView Document\DefaultIcon@ C:\Program Files\Volo View Express\axcmresv.dll,3
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open@ &Open
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open\command
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open\command@ "C:\Program Files\Volo View Express\voloview.exe"
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open\ddeexec
Reg HKLM\SOFTWARE\Classes\VoloView Document\shell\Open\ddeexec@ [open("%1")]
Reg HKLM\SOFTWARE\Classes\VoloView.Application@ Volo View Application Class
Reg HKLM\SOFTWARE\Classes\VoloView.Application\CLSID
Reg HKLM\SOFTWARE\Classes\VoloView.Application\CLSID@ {6C9FD3A6-78FA-11d2-9208-0060B0870405}
Reg HKLM\SOFTWARE\Classes\VoloView.Application\CurVer
Reg HKLM\SOFTWARE\Classes\VoloView.Application\CurVer@ VoloView.Application.1
Reg HKLM\SOFTWARE\Classes\VoloView.Application.1@ Volo View Application Class
Reg HKLM\SOFTWARE\Classes\VoloView.Application.1\CLSID
Reg HKLM\SOFTWARE\Classes\VoloView.Application.1\CLSID@ {28F4C27C-DCC1-11D2-BD52-0060B0A12A50}
Reg HKLM\SOFTWARE\Classes\VoloView.Document@ Volo View Document
Reg HKLM\SOFTWARE\Classes\VoloView.Document\CLSID
Reg HKLM\SOFTWARE\Classes\VoloView.Document\CLSID@ {6C9FD2AD-78FA-11d2-9208-0060B0870405}
Reg HKLM\SOFTWARE\Classes\VoloView.Document\CurVer
Reg HKLM\SOFTWARE\Classes\VoloView.Document\CurVer@ VoloView.Document.1
Reg HKLM\SOFTWARE\Classes\VoloView.Document\Shell
Reg HKLM\SOFTWARE\Classes\VoloView.Document\Shell\Open
Reg HKLM\SOFTWARE\Classes\VoloView.Document\Shell\Open\command
Reg HKLM\SOFTWARE\Classes\VoloView.Document\Shell\Open\command@ C:\PROGRA~1\VOLOVI~1\VoloView.exe
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1@ VoloView Document
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\CLSID
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\CLSID@ {6C9FD2AD-78FA-11D2-9208-0060B0870405}
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\DefaultIcon@ C:\PROGRA~1\VOLOVI~1\VoloView.exe,1
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\DocObject
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\DocObject@ 0
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Insertable
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Insertable@
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing\server
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing\server@ C:\PROGRA~1\VOLOVI~1\VoloView.exe
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing\verb
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing\verb\0
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\protocol\StdFileEditing\verb\0@ &Edit
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\Open
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\Open\command
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\Open\command@ C:\PROGRA~1\VOLOVI~1\VoloView.exe /dde
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\Open\ddeexec
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\Open\ddeexec@ [open("%1")]
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\print
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\print\command
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\print\command@ C:\PROGRA~1\VOLOVI~1\VoloView.exe /dde
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\print\ddeexec
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\print\ddeexec@ [print("%1")]
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\printto
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\printto\command
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\printto\command@ C:\PROGRA~1\VOLOVI~1\VoloView.exe /dde
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\printto\ddeexec
Reg HKLM\SOFTWARE\Classes\VoloView.Document.1\Shell\printto\ddeexec@ [printto("%1","%2","%3","%4")]
Reg HKLM\SOFTWARE\Classes\wdpfile@ Windows Media Photo
Reg HKLM\SOFTWARE\Classes\wdpfile@FriendlyTypeName @wmphoto.dll,-500
Reg HKLM\SOFTWARE\Classes\wdpfile\CLSID
Reg HKLM\SOFTWARE\Classes\wdpfile\CLSID@ {25336920-03F9-11cf-8FD0-00AA00686F13}
Reg HKLM\SOFTWARE\Classes\wdpfile\shell
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\print
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\print\command
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\print\command@ rundll32.exe %SystemRoot%\system32\shimgvw.dll,ImageView_Fullscreen %1
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\print\DropTarget
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\print\DropTarget@Clsid {60FD46DE-F830-4894-A628-6FA81BC0190D}
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\printto
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\printto\command
Reg HKLM\SOFTWARE\Classes\wdpfile\shell\printto\command@ rundll32.exe %SystemRoot%\system32\shimgvw.dll,ImageView_PrintTo /pt "%1" "%2" "%3" "%4"
Reg HKLM\SOFTWARE\Classes\Winamp\shell
Reg HKLM\SOFTWARE\Classes\Winamp\shell\WinampMTPHandler
Reg HKLM\SOFTWARE\Classes\Winamp\shell\WinampMTPHandler@command C:\Program Files\Winamp\winamp.exe
Reg HKLM\SOFTWARE\Classes\Winamp.File@ Winamp media file
Reg HKLM\SOFTWARE\Classes\Winamp.File\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.File\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell@ Play
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue@ &Enqueue in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue\command
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue\command@ "C:\Program Files\Winamp\winamp.exe" /ADD "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Enqueue\DropTarget@Clsid {77A366BA-2BE4-4a1e-9263-7734AA3E99A2}
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\ListBookmark
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\ListBookmark@ Add to Winamp's &Bookmark list
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\ListBookmark\command
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\ListBookmark\command@ "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open@
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open\command
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\open\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play@ &Play in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\command
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff@ Apple Audio Interchange File
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell@ Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue@ &Enqueue in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue\command@ "C:\Program Files\Winamp\winamp.exe" /ADD "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Enqueue\DropTarget@Clsid {77A366BA-2BE4-4a1e-9263-7734AA3E99A2}
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\ListBookmark
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\ListBookmark@ Add to Winamp's &Bookmark list
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\ListBookmark\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\ListBookmark\command@ "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open@
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\open\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play@ &Play in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.aiff\shell\Play\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4@ MPEG-4 File Format
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell@ Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue@ &Enqueue in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue\command@ "C:\Program Files\Winamp\winamp.exe" /ADD "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Enqueue\DropTarget@Clsid {77A366BA-2BE4-4a1e-9263-7734AA3E99A2}
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\ListBookmark
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\ListBookmark@ Add to Winamp's &Bookmark list
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\ListBookmark\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\ListBookmark\command@ "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open@
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\open\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play@ &Play in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.MP4\shell\Play\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2@ Sound Designer II Audio File
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell@ Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue@ &Enqueue in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue\command@ "C:\Program Files\Winamp\winamp.exe" /ADD "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Enqueue\DropTarget@Clsid {77A366BA-2BE4-4a1e-9263-7734AA3E99A2}
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\ListBookmark
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\ListBookmark@ Add to Winamp's &Bookmark list
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\ListBookmark\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\ListBookmark\command@ "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open@
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\open\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play@ &Play in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play\command
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play\DropTarget
Reg HKLM\SOFTWARE\Classes\Winamp.File.sd2\shell\Play\DropTarget@Clsid {46986115-84D6-459c-8F95-52DD653E532E}
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList@ Winamp playlist file
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell@ Play
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Enqueue
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Enqueue@ &Enqueue in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Enqueue\command
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Enqueue\command@ "C:\Program Files\Winamp\winamp.exe" /ADD "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\ListBookmark
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\ListBookmark@ Add to Winamp's &Bookmark list
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\ListBookmark\command
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\ListBookmark\command@ "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\open
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\open@
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\open\command
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\open\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Play
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Play@ &Play in Winamp
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Play\command
Reg HKLM\SOFTWARE\Classes\Winamp.PlayList\shell\Play\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip@ Winamp extension installation file
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\DefaultIcon@ C:\Program Files\Winamp\winamp.exe,1
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell@ Install
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell\install
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell\install@
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell\install\command
Reg HKLM\SOFTWARE\Classes\Winamp.SkinZip\shell\install\command@ "C:\Program Files\Winamp\winamp.exe" "%1"
Reg HKLM\SOFTWARE\Classes\WindowsMetafile@ Windows Metafile
Reg HKLM\SOFTWARE\Classes\WindowsMetafile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\WindowsMetafile\DefaultIcon@ C:\WINDOWS\system32\acadficn.dll,141
Reg HKLM\SOFTWARE\Classes\WinRAR@ WinRAR archiv
Reg HKLM\SOFTWARE\Classes\WinRAR\DefaultIcon
Reg HKLM\SOFTWARE\Classes\WinRAR\DefaultIcon@ C:\Program Files\WinRAR\WinRAR.exe,0
Reg HKLM\SOFTWARE\Classes\WinRAR\shell
Reg HKLM\SOFTWARE\Classes\WinRAR\shell\open
Reg HKLM\SOFTWARE\Classes\WinRAR\shell\open\command
Reg HKLM\SOFTWARE\Classes\WinRAR\shell\open\command@ "C:\Program Files\WinRAR\WinRAR.exe" "%1"
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\ContextMenuHandlers

chosse · #34 Příspěvek od **chosse** » 12 dub 2010 13:54

část 12 - poslední

Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}@
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\DropHandler
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\DropHandler@ {B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}@
Reg HKLM\SOFTWARE\Classes\WinRAR.REV@ Z?chrann? segment RAR archivu
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\DefaultIcon
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\DefaultIcon@ C:\Program Files\WinRAR\WinRAR.exe,1
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\shell
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\shell\open
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\shell\open\command
Reg HKLM\SOFTWARE\Classes\WinRAR.REV\shell\open\command@ "C:\Program Files\WinRAR\WinRAR.exe" "%1"
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP@ WinRAR ZIP archiv
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\DefaultIcon
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\DefaultIcon@ C:\Program Files\WinRAR\WinRAR.exe,0
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shell
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shell\open
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shell\open\command
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shell\open\command@ "C:\Program Files\WinRAR\WinRAR.exe" "%1"
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}@
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\DropHandler
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\DropHandler@ {B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
Reg HKLM\SOFTWARE\Classes\WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}@
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager@ NSSManager Class
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager\CLSID
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager\CLSID@ {92498132-4d1a-4297-9b78-9e2e4ba99c07}
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager\CurVer
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager\CurVer@ WMPNSSCI.NSSManager.1
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager.1@ NSSManager Class
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\WMPNSSCI.NSSManager.1\CLSID@ {92498132-4d1a-4297-9b78-9e2e4ba99c07}
Reg HKLM\SOFTWARE\Classes\WRTE.Document.1\UID
Reg HKLM\SOFTWARE\Classes\WRTE.Document.1\UID@Frame13 @733625
Reg HKLM\SOFTWARE\Classes\XPHdata@ STORMWARE eForm
Reg HKLM\SOFTWARE\Classes\XPHdata\DefaultIcon
Reg HKLM\SOFTWARE\Classes\XPHdata\DefaultIcon@ C:\PROGRA~1\STORMW~1\Pohoda\StwPh.exe,-108
Reg HKLM\SOFTWARE\Classes\XPHdata\shell
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\command
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\command@ C:\PROGRA~1\STORMW~1\Pohoda\StwPh.exe "%1"
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\ddeexec
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\ddeexec@ [open("%1")]
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\ddeexec\application
Reg HKLM\SOFTWARE\Classes\XPHdata\shell\open\ddeexec\application@ STWPH
Reg HKLM\SOFTWARE\Classes\ZPHzal@ Tiskov? z?loha POHODA
Reg HKLM\SOFTWARE\Classes\ZPHzal\DefaultIcon
Reg HKLM\SOFTWARE\Classes\ZPHzal\DefaultIcon@ C:\PROGRA~1\COMMON~1\STORMW~1\StwRv50C.exe,1
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\open
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\open\command
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\open\command@ C:\PROGRA~1\COMMON~1\STORMW~1\StwRv50C.exe "%1"
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\print
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\print\command
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\print\command@ C:\PROGRA~1\COMMON~1\STORMW~1\StwRv50C.exe /p "%1"
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\printto
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\printto\command
Reg HKLM\SOFTWARE\Classes\ZPHzal\shell\printto\command@ C:\PROGRA~1\COMMON~1\STORMW~1\StwRv50C.exe /pt "%1" "%2" "%3" "%4"

---- EOF - GMER 1.0.15 ----

#35 Příspěvek od **Caroprd111** » 12 dub 2010 15:47

Pokračujte podle návodu AVPTool http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

chosse · #36 Příspěvek od **chosse** » 14 dub 2010 08:14

Dobrý den,
tady je log z kapversky:

Autoscan: completed 4 minutes ago (events: 5, objects: 249448, time: 17:54:48)
13.4.2010 15:14:39 Task started
13.4.2010 20:32:40 Detected: HEUR:Trojan-Downloader.Win32.Generic C:\Documents and Settings\samec\instal\acad2006\Acad 2006\Bin\acadFeui\support\Flash\Silent Install Flash Player 7 AX.exe/data0000.cab/GetFlash.exe
13.4.2010 21:44:55 Detected: not-a-virus:AdWare.Win32.Agent.qhi C:\Documents and Settings\samec\Local Settings\Data aplikací\DoubleD\GamingHarbor Toolbar\4.2.0.21210\bin\stbup.exe
14.4.2010 9:09:24 Deleted: not-a-virus:AdWare.Win32.Agent.qhi C:\Documents and Settings\samec\Local Settings\Data aplikací\DoubleD\GamingHarbor Toolbar\4.2.0.21210\bin\stbup.exe
14.4.2010 9:09:27 Task completed

#37 Příspěvek od **Caroprd111** » 14 dub 2010 12:49

Stáhni si MSDaRT pro svůj příslušný operační systém:

Windows XP -> http://www.mediafire.com/?ddsfd2xdndw
Windows Vista -> http://www.mediafire.com/?knvmygelfxy
Windows 7 -> http://www.mediafire.com/?5qmmdkzjeg3

Nainstaluj program dle pokynů staženého instalátoru.
Po dokončení instalace spusť tento soubor: C:\Program Files\Microsoft Diagnostics and Recovery Toolset\ERDC.exe
Klikej postupně na tlačítko Next, nech vytvořit .iso soubor a pomocí průvodce ho vypal na CD.

2) Restartuj počítač, na kterém máš problémy a vlož do jeho mechaniky vypálené CD. Předtím, než se Windows načtou, mačkej libovolnou klávesu a počítač začne bootovat z CD.
Po nabootování jdi přes menu Start - System Tools - System Files Repair.
Spustí se průvodce, který vyhledá virem narušené / poškozené systémové soubory. Všechny soubory, které najde, nech opravit.

Jdi přes menu Start - Log Off - Restart - OK a tvůj počítač se restartuje.

3) Po restartu počítače jdi v OS přes menu Start - Nastavení - Ovládací panely - Přidat nebo odebrat programy - vyber: Microsoft Diagnostics and Recovery Toolset - klikni na Odebrat. Tohle MSDaRT zase odinstaluje.

Napiš výsledky.

chosse · #38 Příspěvek od **chosse** » 15 dub 2010 12:06

Dobrý den,
vše jsme provedl dle uvedeného postupu. MSDaRT nenalezl poškozený soubor. Restart trval cca 50 minut. Problém se zařazováním tisku stále trvá. Processor téměř pořád chroustá a počítač občas zamrzá.

#39 Příspěvek od **Caroprd111** » 15 dub 2010 13:00

Poprosím o nový log z RSIT.

chosse · #40 Příspěvek od **chosse** » 18 dub 2010 16:33

Dobrý den,
log z rsit je zde:

Logfile of random's system information tool 1.06 (written by random/random)
Run by samec at 2010-04-18 17:21:39
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 31 GB (20%) free of 153 GB
Total RAM: 511 MB (7% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:23:28, on 18.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Corel\Graphics8\Programs\MFIndexer.exe
C:\Program Files\ICQ\Icq.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\samec\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\samec.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: &Seznam Lištička - {B71B15CE-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Listicka\Toolbar.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Corel MEDIA FOLDERS INDEXER 8.LNK = C:\Corel\Graphics8\Programs\MFIndexer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Přelož do češtiny - res://C:\Program Files\Seznam\Listicka\Toolbar.dll/5034
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Hlede&j v ČR - res://C:\Program Files\Seznam\Listicka\Toolbar.dll/5033
O8 - Extra context menu item: Hledej v &encyklopedii - res://C:\Program Files\Seznam\Listicka\Toolbar.dll/5108
O8 - Extra context menu item: Hledej ve &světě - res://C:\Program Files\Seznam\Listicka\Toolbar.dll/5035
O8 - Extra context menu item: Hledej ve &zboží - res://C:\Program Files\Seznam\Listicka\Toolbar.dll/5107
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/ ... s-i586.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\FileZilla Server\FileZilla Server.exe (file missing)
O23 - Service: HASP License Manager (hasplms) - Unknown owner - C:\WINDOWS\system32\hasplms.exe (file missing)
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7380 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B71B15CE-3093-459C-B764-AEB2486F2273} - &Seznam Lištička - C:\Program Files\Seznam\Listicka\Toolbar.dll [2007-11-04 793960]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-07-20 7581696]
"nwiz"=nwiz.exe /install []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Corel MEDIA FOLDERS INDEXER 8.LNK - C:\Corel\Graphics8\Programs\MFIndexer.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\samec\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ\Icq.exe"="C:\Program Files\ICQ\Icq.exe:*:Enabled:ICQ"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - C:\WINDOWS\NOTEPAD.EXE "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-18 17:21:50 ----D---- C:\Program Files\trend micro
2010-04-18 17:21:39 ----D---- C:\rsit
2010-04-15 12:12:05 ----D---- C:\~ErdUserProfile.$$$
2010-04-15 03:19:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-15 03:18:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-15 03:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-15 03:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-15 03:03:32 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 03:02:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-15 03:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-13 15:05:50 ----D---- C:\Program Files\Virus Removal Tool
2010-04-12 10:03:09 ----A---- C:\WINDOWS\ntbtlog.txt
2010-04-07 09:39:22 ----SHD---- C:\RECYCLER
2010-04-01 03:10:19 ----A---- C:\WINDOWS\imsins.BAK
2010-03-31 11:33:25 ----A---- C:\mbam-error.txt
2010-03-29 19:22:32 ----A---- C:\ComboFix.txt
2010-03-29 13:52:21 ----A---- C:\WINDOWS\zip.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\SWSC.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\SWREG.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\sed.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\PEV.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\NIRCMD.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\MBR.exe
2010-03-29 13:52:21 ----A---- C:\WINDOWS\grep.exe
2010-03-29 13:52:07 ----D---- C:\WINDOWS\ERDNT
2010-03-29 13:51:43 ----D---- C:\Qoobox
2010-03-25 11:33:06 ----D---- C:\Documents and Settings\samec\Data aplikací\CheckPoint
2010-03-25 11:30:21 ----D---- C:\Program Files\CheckPoint
2010-03-25 11:29:35 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-03-25 11:29:12 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-03-25 11:29:11 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-03-25 11:28:47 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-03-25 11:28:24 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-03-25 11:28:22 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-03-25 11:28:20 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-03-25 11:28:20 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-03-25 11:28:19 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-03-25 11:28:13 ----D---- C:\Program Files\Zone Labs
2010-03-25 11:25:53 ----D---- C:\WINDOWS\Internet Logs
2010-03-25 11:25:40 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-03-25 11:25:40 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-03-25 11:25:40 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-03-25 11:00:52 ----D---- C:\Program Files\CCleaner

======List of files/folders modified in the last 1 months======

2010-04-18 17:22:40 ----D---- C:\WINDOWS\Prefetch
2010-04-18 17:21:50 ----RD---- C:\Program Files
2010-04-18 17:20:17 ----A---- C:\WINDOWS\wincmd.ini
2010-04-18 17:11:44 ----D---- C:\WINDOWS\Temp
2010-04-15 14:05:39 ----D---- C:\TEMP
2010-04-15 14:05:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kodak
2010-04-15 13:52:18 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-15 13:49:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-15 13:43:14 ----SHD---- C:\WINDOWS\Installer
2010-04-15 13:43:14 ----D---- C:\Program Files\Common Files
2010-04-15 13:42:54 ----D---- C:\Program Files\IKEA HomePlanner
2010-04-15 13:35:34 ----D---- C:\WINDOWS\system32\drivers
2010-04-15 13:34:22 ----HD---- C:\WINDOWS\inf
2010-04-15 13:28:48 ----D---- C:\Program Files\Nvu
2010-04-15 13:27:45 ----D---- C:\Program Files\UltraVNC
2010-04-15 13:26:50 ----D---- C:\WINDOWS
2010-04-15 13:25:07 ----D---- C:\Program Files\Lavasoft
2010-04-15 13:24:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-04-15 13:24:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-15 11:16:29 ----SHD---- C:\System Volume Information
2010-04-15 11:16:29 ----D---- C:\WINDOWS\system32\Restore
2010-04-15 09:18:44 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-15 03:41:01 ----AD---- C:\WINDOWS\system32
2010-04-15 03:21:31 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-15 03:19:23 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-15 03:11:23 ----D---- C:\WINDOWS\Debug
2010-04-09 10:52:11 ----D---- C:\WINDOWS\Minidump
2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe
2010-04-06 16:02:27 ----D---- C:\Program Files\Mozilla Firefox
2010-04-01 10:36:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-01 03:07:37 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-01 03:07:33 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:04:38 ----D---- C:\WINDOWS\ie7updates
2010-03-31 14:45:16 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{AAAE891E-DC50-4DD4-A79D-C19DDB94E30E}
2010-03-31 11:33:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-03-29 19:13:24 ----A---- C:\WINDOWS\system.ini
2010-03-29 19:09:06 ----D---- C:\WINDOWS\AppPatch
2010-03-25 10:03:36 ----D---- C:\Documents and Settings\samec\Data aplikací\Lavasoft
2010-03-25 10:03:35 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-03-23 12:05:03 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 18527021;18527021; C:\WINDOWS\system32\DRIVERS\18527021.sys [2009-09-25 128016]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 setup_9.0.0.722_13.04.2010_15-11drv;setup_9.0.0.722_13.04.2010_15-11drv; C:\WINDOWS\system32\DRIVERS\1852702.sys [2009-10-09 315408]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 aksfridge;HASP Fridge; C:\WINDOWS\system32\DRIVERS\aksfridge.sys [2008-03-18 350720]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2005-07-26 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-07-20 3685152]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:\WINDOWS\system32\DRIVERS\SiSGbeXP.sys [2006-05-17 40960]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-01-20 930308]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 akshasp;Aladdin HASP Key; C:\WINDOWS\system32\DRIVERS\akshasp.sys [2007-07-05 238976]
S3 akshhl;Aladdin HASP HL Key; C:\WINDOWS\system32\DRIVERS\akshhl.sys [2007-07-23 46336]
S3 aksusb;Aladdin USB Key; C:\WINDOWS\system32\DRIVERS\aksusb.sys [2007-07-05 14976]
S3 catchme;catchme; \??\C:\DOCUME~1\samec\LOCALS~1\Temp\catchme.sys []
S3 C-Dilla;C-Dilla; \??\C:\WINDOWS\system32\drivers\CDANT.SYS []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 C-DillaSrv;C-DillaSrv; C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [2001-04-06 32256]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-07-20 143426]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-09-07 570880]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S2 FileZilla Server;FileZilla Server FTP server; C:\Program Files\FileZilla Server\FileZilla Server.exe []
S2 hasplms;HASP License Manager; C:\WINDOWS\system32\hasplms.exe -run []
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-02-28 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#41 Příspěvek od **Caroprd111** » 18 dub 2010 16:52

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe

Spusťte, poté do spodního políčka vložte následující skript.

Kód: Vybrat vše

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys 
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys 
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav 
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
CREATERESTOREPOINT

Označte položku Pro všechny uživatele.
Označte položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Klikněte na tlačítko Prohledat
Po dokončení, sem vložte logy OTL.Txt a Extras.txt

chosse · #42 Příspěvek od **chosse** » 20 dub 2010 09:05

Log OTL:

OTL logfile created on: 19.4.2010 10:04:05 - Run 1
OTL by OldTimer - Version 3.2.1.3 Folder = C:\Documents and Settings\samec\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 42,00 Mb Available Physical Memory | 8,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 60,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 28,12 Gb Free Space | 18,87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SAMCI
Current User Name: samec
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.04.19 10:01:05 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\samec\Dokumenty\Stažené soubory\OTL.exe
PRC - [2010.04.06 15:59:19 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.25 01:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009.11.22 16:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
PRC - [2009.11.22 16:42:50 | 001,037,192 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2009.10.14 15:30:26 | 000,476,528 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe
PRC - [2009.10.14 15:30:06 | 000,730,480 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
PRC - [2009.09.07 12:09:19 | 000,570,880 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\sp_rsser.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004.12.13 05:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2003.10.14 19:03:50 | 001,880,639 | ---- | M] (ICQ Inc.) -- C:\Program Files\ICQ\Icq.exe
PRC - [2001.04.06 23:24:54 | 000,032,256 | ---- | M] (C-Dilla Ltd) -- C:\WINDOWS\system32\drivers\CDANTSRV.EXE
PRC - [1998.01.12 18:05:52 | 000,083,456 | ---- | M] (Corel Corporation) -- C:\Corel\Graphics8\Programs\MFIndexer.exe

========== Modules (SafeList) ==========

MOD - [2010.04.19 10:01:05 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\samec\Dokumenty\Stažené soubory\OTL.exe
MOD - [2009.10.14 15:30:36 | 000,628,080 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
MOD - [2008.07.25 11:17:20 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
MOD - [2008.07.25 11:17:20 | 000,558,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (hasplms)
SRV - File not found [Auto | Stopped] -- -- (FileZilla Server)
SRV - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.11.22 16:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2009.10.14 15:30:26 | 000,476,528 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)
SRV - [2009.09.07 12:09:19 | 000,570,880 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2004.12.13 05:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2001.04.06 23:24:54 | 000,032,256 | ---- | M] (C-Dilla Ltd) [Auto | Running] -- C:\WINDOWS\system32\drivers\CDANTSRV.EXE -- (C-DillaSrv)

========== Driver Services (SafeList) ==========

DRV - [2009.11.25 01:50:59 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009.11.25 01:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.11.25 01:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.11.25 01:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.11.25 01:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009.11.25 01:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009.11.22 16:42:54 | 000,486,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2009.10.22 13:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\18527022.sys -- (18527022)
DRV - [2009.10.14 15:30:02 | 000,025,208 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2009.10.09 23:31:10 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\1852702.sys -- (setup_9.0.0.722_13.04.2010_15-11drv)
DRV - [2009.09.25 17:59:42 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\18527021.sys -- (18527021)
DRV - [2009.04.02 10:36:07 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.03.18 16:09:16 | 000,350,720 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2008.02.11 16:55:04 | 000,586,240 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2007.07.23 15:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl)
DRV - [2007.07.05 15:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)
DRV - [2007.07.05 15:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)
DRV - [2006.08.24 12:37:50 | 004,374,016 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.07.20 21:58:00 | 003,685,152 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006.05.17 13:00:00 | 000,040,960 | R--- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SiSGbeXP.sys -- (SiSGbeXP)
DRV - [2006.01.20 14:38:02 | 000,930,308 | R--- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2005.07.26 04:07:14 | 000,010,368 | ---- | M] (InterVideo, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\iviaspi.sys -- (Iviaspi)
DRV - [2005.01.07 18:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2001.04.06 23:24:54 | 000,056,592 | ---- | M] (Macrovision) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CDANT.SYS -- (C-Dilla)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz
IE - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "GamingHarbor"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}:5.0.12.99
FF - prefs.js..extensions.enabledItems: {FFB96CC1-7EB3-449D-B827-DB661701C6BB}:1.5.53.4
FF - prefs.js..keyword.URL: "http://www.gamingharbor.com/search.do?d ... y&keyword="

FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2010.03.25 12:06:32 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.04.06 16:01:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.04.06 16:01:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010.04.12 10:41:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2009.12.23 11:08:05 | 000,000,000 | ---D | M]

[2008.08.29 12:08:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Mozilla\Extensions
[2010.04.18 17:20:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Mozilla\Firefox\Profiles\y0b0hny7.default\extensions
[2009.09.02 09:18:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\samec\Data aplikací\Mozilla\Firefox\Profiles\y0b0hny7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.04.07 09:46:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Documents and Settings\samec\Data aplikací\Mozilla\Firefox\Profiles\y0b0hny7.default\extensions\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
[2009.04.15 14:59:36 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\samec\Data aplikací\Mozilla\Firefox\Profiles\y0b0hny7.default\searchplugins\winamp-search.xml
[2010.04.07 09:44:52 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2008.06.24 21:39:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
[2009.06.23 07:35:04 | 000,001,619 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\FFToolbar.xml
[2010.03.29 12:09:29 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.03.29 12:09:29 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.03.29 12:09:30 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.03.29 12:09:32 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.03.29 12:09:32 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.09.30 19:20:24 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (&Seznam Lištička) - {B71B15CE-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (no name) - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - No CLSID value found.
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (&Seznam Lištička) - {B71B15CE-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_13.04.2010_15-11.lnk = C:\Program Files\Virus Removal Tool\setup_9.0.0.722_13.04.2010_15-11\startup.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Corel MEDIA FOLDERS INDEXER 8.LNK = C:\Corel\Graphics8\Programs\MFIndexer.exe (Corel Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\samec\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &Přelož do češtiny - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Hlede&j v ČR - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O8 - Extra context menu item: Hledej v &encyklopedii - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O8 - Extra context menu item: Hledej ve &světě - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O8 - Extra context menu item: Hledej ve &zboží - C:\Program Files\Seznam\Listicka\Toolbar.dll (Seznam.cz a.s.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\Icq.exe (ICQ Inc.)
O9 - Extra 'Tools' menuitem : ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\Icq.exe (ICQ Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://javadl-esd.sun.com/update/1.5.0/ ... s-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\fsc_wallpaper_mistymountain.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\fsc_wallpaper_mistymountain.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2006.10.24 15:49:54 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.mp42 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mp43 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mpg4 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (59967780790730752)

========== Files/Folders - Created Within 30 Days ==========

[2010.04.18 17:21:50 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.04.18 17:21:39 | 000,000,000 | ---D | C] -- C:\rsit
[2010.04.15 12:12:05 | 000,000,000 | ---D | C] -- C:\~ErdUserProfile.$$$
[2010.04.13 15:05:50 | 000,315,408 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\1852702.sys
[2010.04.13 15:05:50 | 000,128,016 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\18527021.sys
[2010.04.13 15:05:50 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\18527022.sys
[2010.04.13 15:05:50 | 000,000,000 | ---D | C] -- C:\Program Files\Virus Removal Tool
[2010.04.07 09:39:37 | 000,880,624 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\samec\Plocha\SPTDinst-v162-x86.exe
[2010.04.07 09:39:22 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.03.29 13:52:21 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.03.29 13:52:21 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.03.29 13:52:21 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.03.29 13:52:21 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.03.29 13:52:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.03.29 13:51:43 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.03.25 11:33:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\samec\Dokumenty\ForceField Shared Files
[2010.03.25 11:33:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\samec\Data aplikací\CheckPoint
[2010.03.25 11:30:21 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2010.03.25 11:29:35 | 000,058,248 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsregexp.dll
[2010.03.25 11:29:12 | 000,103,816 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\zlcommdb.dll
[2010.03.25 11:29:11 | 000,069,000 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\zlcomm.dll
[2010.03.25 11:28:47 | 000,041,864 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vswmi.dll
[2010.03.25 11:28:24 | 001,238,408 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\zpeng25.dll
[2010.03.25 11:28:22 | 000,109,960 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsxml.dll
[2010.03.25 11:28:20 | 000,299,912 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vspubapi.dll
[2010.03.25 11:28:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ZoneLabs
[2010.03.25 11:28:19 | 000,107,912 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsmonapi.dll
[2010.03.25 11:28:14 | 000,486,280 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsdatant.sys
[2010.03.25 11:28:13 | 000,000,000 | ---D | C] -- C:\Program Files\Zone Labs
[2010.03.25 11:25:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\Internet Logs
[2010.03.25 11:25:40 | 000,621,960 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsutil.dll
[2010.03.25 11:25:40 | 000,227,720 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsinit.dll
[2010.03.25 11:25:40 | 000,112,008 | ---- | C] (Check Point Software Technologies LTD) -- C:\WINDOWS\System32\vsdata.dll
[2010.03.25 11:03:13 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\samec\Recent
[2010.03.25 11:00:52 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2009.01.14 19:47:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Help
[2009.01.14 19:47:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Help
[2007.03.22 08:45:53 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2007.03.22 08:44:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2006.10.24 15:52:46 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2006.10.24 15:52:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[6 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[28 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.04.18 17:40:51 | 000,001,053 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2010.04.16 15:34:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010.04.15 14:04:30 | 000,051,048 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010.04.15 13:59:09 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.15 13:51:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.15 13:51:11 | 535,416,832 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.15 13:48:51 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\samec\ntuser.ini
[2010.04.15 13:48:50 | 006,291,456 | -H-- | M] () -- C:\Documents and Settings\samec\NTUSER.DAT
[2010.04.15 11:45:41 | 152,805,376 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\ERD50.iso
[2010.04.15 09:00:42 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.15 03:22:44 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.04.14 11:54:03 | 000,067,760 | ---- | M] () -- C:\Documents and Settings\samec\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.12 10:48:36 | 000,029,608 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\gmer2.zip
[2010.04.08 10:08:18 | 000,077,312 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\mbr.exe
[2010.04.07 13:35:25 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\samec\defogger_reenable
[2010.04.07 13:32:55 | 000,050,477 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\Defogger.exe
[2010.04.07 09:39:38 | 000,880,624 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\samec\Plocha\SPTDinst-v162-x86.exe
[2010.04.06 18:11:18 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.04.01 10:36:50 | 000,442,602 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.04.01 10:36:48 | 000,439,152 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.04.01 10:36:48 | 000,071,868 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.04.01 10:36:46 | 001,051,184 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.04.01 10:36:46 | 000,083,388 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.03.30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.03.30 00:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.03.29 19:13:24 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.03.29 13:49:35 | 003,905,577 | R--- | M] () -- C:\Documents and Settings\samec\Plocha\ComboFix.exe
[2010.03.25 11:36:14 | 000,422,437 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2010.03.25 11:29:59 | 000,004,212 | -H-- | M] () -- C:\WINDOWS\System32\zllictbl.dat
[2010.03.25 11:29:56 | 000,000,737 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\ZoneAlarm Security.lnk
[2010.03.25 11:08:27 | 001,154,662 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\cc_20100325_100754.reg
[2010.03.25 11:00:59 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\samec\Plocha\CCleaner.lnk
[2010.03.25 10:24:43 | 000,255,864 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.03.23 11:48:22 | 000,002,599 | ---- | M] () -- C:\WINDOWS\System32\config.nt
[6 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[28 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.15 11:35:33 | 152,805,376 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\ERD50.iso
[2010.04.14 09:18:45 | 535,416,832 | -HS- | C] () -- C:\hiberfil.sys
[2010.04.12 10:48:36 | 000,029,608 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\gmer2.zip
[2010.04.08 10:16:14 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\mrcha.com
[2010.04.08 10:08:14 | 000,077,312 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\mbr.exe
[2010.04.07 13:35:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\samec\defogger_reenable
[2010.04.07 13:32:52 | 000,050,477 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\Defogger.exe
[2010.04.01 03:10:19 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.03.29 16:22:06 | 003,905,577 | R--- | C] () -- C:\Documents and Settings\samec\Plocha\ComboFix.exe
[2010.03.29 13:52:21 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.03.29 13:52:21 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.03.29 13:52:21 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.03.29 13:52:21 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.03.29 13:52:21 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.03.25 11:29:59 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2010.03.25 11:29:56 | 000,000,737 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\ZoneAlarm Security.lnk
[2010.03.25 11:28:14 | 000,422,437 | ---- | C] () -- C:\WINDOWS\System32\vsconfig.xml
[2010.03.25 11:08:05 | 001,154,662 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\cc_20100325_100754.reg
[2010.03.25 11:00:56 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\samec\Plocha\CCleaner.lnk
[2009.09.07 12:09:18 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
[2009.04.02 10:36:07 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2008.07.16 16:54:12 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\vshp1018.dll
[2008.05.25 21:44:56 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\acdbres.dll
[2008.03.21 12:37:22 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007.11.03 09:30:25 | 000,000,271 | ---- | C] () -- C:\WINDOWS\Atlas3.ini
[2007.10.22 21:32:26 | 000,000,370 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2007.02.28 20:13:31 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\samec\Data aplikací\AVSDVDPlayer.m3u
[2007.02.28 20:12:14 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys
[2007.02.28 20:11:33 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2007.02.28 20:11:33 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007.02.14 18:35:13 | 000,007,680 | ---- | C] () -- C:\Documents and Settings\samec\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.02.14 08:53:07 | 000,000,157 | ---- | C] () -- C:\Documents and Settings\samec\default.pls
[2007.02.14 08:47:29 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007.01.08 10:28:26 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\sh33w32.dll
[2007.01.05 11:40:06 | 000,001,053 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2007.01.04 09:56:11 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007.01.03 16:19:43 | 006,291,456 | -H-- | C] () -- C:\Documents and Settings\samec\NTUSER.DAT
[2007.01.03 16:19:43 | 000,024,576 | -H-- | C] () -- C:\Documents and Settings\samec\ntuser.dat.LOG
[2007.01.03 16:19:43 | 000,000,272 | -HS- | C] () -- C:\Documents and Settings\samec\ntuser.ini
[2007.01.03 16:19:43 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\samec\Local Settings\Data aplikací\fusioncache.dat
[2007.01.03 16:19:24 | 000,262,144 | ---- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT
[2007.01.03 16:19:24 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT.LOG
[2006.10.24 17:29:28 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006.10.24 16:46:04 | 000,000,180 | ---- | C] () -- C:\WINDOWS\Option.ini
[2006.10.24 15:53:21 | 000,000,828 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006.10.24 15:47:39 | 000,003,568 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2006.10.24 10:45:33 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006.10.24 10:45:33 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006.10.24 10:45:33 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006.10.24 10:45:33 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006.10.24 10:45:32 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006.10.24 10:45:27 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56spn.dll
[2006.10.24 10:45:27 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56itl.dll
[2006.10.24 10:45:27 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56eng.dll
[2006.10.24 10:45:27 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56brz.dll
[2006.10.24 10:45:27 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56ger.dll
[2006.10.24 10:45:27 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56fra.dll
[2006.10.24 10:45:27 | 000,053,248 | ---- | C] () -- C:\WINDOWS\sm56jpn.dll
[2006.10.24 10:45:27 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56cht.dll
[2006.10.24 10:45:27 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56chs.dll
[2005.08.03 00:03:51 | 000,224,768 | ---- | C] () -- C:\WINDOWS\System32\b4fm.dll
[2001.10.28 18:42:30 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2000.09.19 01:50:28 | 000,202,752 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll

========== LOP Check ==========

[2010.04.13 18:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ICQ
[2010.04.12 10:41:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Thunderbird
[2007.11.06 17:18:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pattern Maker for cross stitch
[2009.09.07 12:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
[2007.01.03 20:28:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ulead Systems
[2010.03.31 14:45:16 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{AAAE891E-DC50-4DD4-A79D-C19DDB94E30E}
[2010.03.25 11:33:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\CheckPoint
[2007.01.04 19:22:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\ICQ
[2007.01.03 20:13:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\InterVideo
[2007.02.14 19:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Nvu
[2008.02.28 21:07:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Opera
[2009.09.07 12:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Spyware Terminator
[2007.02.14 18:00:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Thunderbird
[2010.04.16 15:34:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

========== Purity Check ==========

========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 05:22:36 | 001,695,232 | ---- | M] (Microsoft Corporation)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< c:\windows\*.* /U >
[1 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2009.03.17 10:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Adobe
[2007.01.05 18:01:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\AdobeUM
[2007.02.14 22:06:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Ahead
[2010.03.25 11:33:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\CheckPoint
[2007.01.08 21:42:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Corel
[2007.02.20 17:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Help
[2007.01.04 19:22:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\ICQ
[2006.10.24 15:53:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Identities
[2007.01.03 20:13:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\InterVideo
[2010.03.25 10:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Lavasoft
[2008.02.01 11:31:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Macromedia
[2009.10.01 11:21:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Malwarebytes
[2009.12.23 11:08:15 | 000,000,000 | --SD | M] -- C:\Documents and Settings\samec\Data aplikací\Microsoft
[2008.08.29 12:08:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Mozilla
[2007.10.09 17:40:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Nero
[2007.02.14 19:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Nvu
[2008.02.28 21:07:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Opera
[2007.01.10 20:07:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\PSpad
[2008.09.01 15:26:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Skype
[2009.09.07 12:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Spyware Terminator
[2008.06.24 21:39:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Sun
[2007.02.14 18:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Talkback
[2007.02.14 18:00:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\Thunderbird
[2009.11.10 16:13:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\samec\Data aplikací\WinRAR

< %APPDATA%\*.exe /s >

< MD5 for: AGP440.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:AGP440.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:atapi.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.18 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.18 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.18 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB884883$\explorer.exe
[2005.04.07 20:48:41 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=88260E46E778EC78345959A08F047634 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:hal.dll
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.18 14:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtUninstallKB889673$\hal.dll
[2004.11.16 03:37:04 | 000,131,712 | ---- | M] (Microsoft Corporation) MD5=F9A83D160C80EE6F45AA577CB101B83F -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:Changer.sys
[2009.01.03 11:15:25 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: LSASS.EXE >
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.18 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.18 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
[2004.08.18 14:00:00 | 000,481,792 | ---- | M] (Microsoft Corporation) MD5=CB56F803D2CAF6B3F32E82D2F73F4B3A -- C:\WINDOWS\I386\SYSTEM32\SMSS.EXE

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2005.05.25 21:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.18 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB889527$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.18 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[28 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2006.10.24 17:43:04 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2006.10.24 17:43:04 | 000,638,976 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2006.10.24 17:43:04 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[28 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< End of report >

chosse · #43 Příspěvek od **chosse** » 20 dub 2010 09:10

Log Extras:

OTL Extras logfile created on: 19.4.2010 10:04:05 - Run 1
OTL by OldTimer - Version 3.2.1.3 Folder = C:\Documents and Settings\samec\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 42,00 Mb Available Physical Memory | 8,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 60,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 28,12 Gb Free Space | 18,87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SAMCI
Current User Name: samec
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-4203346930-2640352479-1968813775-1006\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1947:TCP" = 1947:TCP:*:Enabled:HASP SRM
"1947:UDP" = 1947:UDP:*:Enabled:HASP SRM
"5900:TCP" = 5900:TCP:*:Enabled:vnc5900
"5800:TCP" = 5800:TCP:*:Enabled:vnc5800
"21:TCP" = 21:TCP:*:Enabled:FTP
"1023:TCP" = 1023:TCP:*:Enabled:FTP passive mode
"20:TCP" = 20:TCP:*:Enabled:FTP active mode

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ\Icq.exe" = C:\Program Files\ICQ\Icq.exe:*:Enabled:ICQ -- (ICQ Inc.)
"C:\Program Files\totalcmd\TOTALCMD.EXE" = C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows -- (C. Ghisler & Co.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{1B602410-D983-4947-98FE-EE749073D15E}" = GamingHarbor Toolbar
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{2BD5C305-1B27-4D41-B690-7A61172D2FEB}" = Macromedia Flash 8
"{3248F0A8-6813-11D6-A77B-00B0D0150120}" = J2SE Runtime Environment 5.0 Update 12
"{34F0D55F-C386-4195-9A5B-961D3F6ACD46}" = InterVideo MediaOne Gallery
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}" = Skype Plugin Manager
"{4CAB32B9-6668-4D27-93BB-E0C34859DE4E}" = Atlas DMT, v. 4.70.3
"{4D0E4E36-C227-40F5-9433-F242F3D5471F}" = StormWare Pohoda CZ
"{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}" = Macromedia Extension Manager
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5783F2D7-0101-0405-0002-0060B0CE6BBA}" = AutoCAD 2002 česká verze
"{7148F0A8-6813-11D6-A77B-00B0D0142010}" = Java 2 Runtime Environment, SE v1.4.2_01
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7A0CF189-CBF5-406A-BC0D-F18F39E1D6A6}" = STORMWARE POHODA CZ
"{81C22ED5-2A06-497F-9A2D-CF7D36A5886E}" = StormWare Pohoda CZ
"{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}" = Macromedia Flash 8 Video Encoder
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90280405-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional s aplikací FrontPage
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AC76BA86-7AD7-1029-7B44-A70500000002}" = Adobe Reader 7.0.5 - Czech
"{B259D3B9-EAF2-447F-BF9F-C64821DA0E90}" = STORMWARE POHODA CZ
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DE5D78ED-145E-4FA3-9D75-C92A09E1FEB1}" = Pattern Maker Viewer - v4
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"avast!" = avast! Antivirus
"Burn4Free" = Burn4Free CD and DVD
"Burn4Free Toolbar" = Burn4Free Toolbar
"CCleaner" = CCleaner (remove only)
"Corel Uninstaller" = Corel Uninstaller
"DVD Shrink_is1" = DVD Shrink 3.2
"HijackThis" = HijackThis 2.0.2
"HP OrderReminder" = HP OrderReminder
"HP-LaserJet 1018" = LaserJet 1018
"ICQ" = ICQ
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ImageScapeLT1" = ImageScape LT V1.0
"Imagineer2" = Imagineer Technical
"IrfanView" = IrfanView (remove only)
"Kalendar254" = Kalendar254
"LMS" = C-Dilla Licence Management System
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"Mozilla Thunderbird (2.0.0.24)" = Mozilla Thunderbird (2.0.0.24)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Pracovní kalendář" = Pracovní kalendář
"PSPad editor_is1" = PSPad editor
"QuickTime" = QuickTime
"Skype_is1" = Skype 3.0
"SMSERIAL" = Motorola SM56 Data Fax Modem
"Spyware Terminator_is1" = Spyware Terminator
"STORMWARE PDF Printer_is1" = STORMWARE PDF Printer 5.0.0.614
"SZNToolbar" = Seznam Lištička
"Totalcmd" = Total Commander (Remove or Repair)
"Volo View Express" = Volo View Express
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"ZoneAlarm" = ZoneAlarm
"ZoneAlarm Toolbar" = ZoneAlarm Toolbar

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 17.9.2008 4:37:45 | Computer Name = SAMCI | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of Příchozí e-mail 'obalovy material' Od: City Self-Storage Dejvice <dejvice@cityselfstorage.com>,
Komu: Undisclosed recipients:; failed, 00000026.

Error - 6.10.2009 3:29:58 | Computer Name = SAMCI | Source = avast! | ID = 33554522
Description = Chyba v knihovně avUInt: ActiveSkin not installed or not registered
properly.

Error - 6.10.2009 3:30:28 | Computer Name = SAMCI | Source = avast! | ID = 33554522
Description = Chyba v knihovně avUInt: ActiveSkin not installed or not registered
properly.

Error - 6.10.2009 3:30:35 | Computer Name = SAMCI | Source = avast! | ID = 33554522
Description = Chyba v knihovně avUInt: ActiveSkin not installed or not registered
properly.

Error - 6.10.2009 3:33:27 | Computer Name = SAMCI | Source = avast! | ID = 33554522
Description = Chyba v knihovně avUInt: ActiveSkin not installed or not registered
properly.

[ Application Events ]
Error - 18.3.2010 14:05:36 | Computer Name = SAMCI | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace StwPh.exe, verze 5.0.9005.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 25.3.2010 9:04:25 | Computer Name = SAMCI | Source = Application Error | ID = 1000
Description = Chybující aplikace stwph.exe, verze 5.0.9005.0, chybující modul stwph.exe,
verze 5.0.9005.0, adresa chyby 0x000cdcd0.

Error - 29.3.2010 9:42:01 | Computer Name = SAMCI | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 31.3.2010 5:41:28 | Computer Name = SAMCI | Source = Application Error | ID = 1000
Description = Chybující aplikace icq.exe, verze 5.5.6.3916, chybující modul ntdll.dll,
verze 5.1.2600.5755, adresa chyby 0x0001b21a.

Error - 1.4.2010 8:18:53 | Computer Name = SAMCI | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace iexplore.exe, verze 7.0.6000.17023, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 1.4.2010 8:18:54 | Computer Name = SAMCI | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace iexplore.exe, verze 7.0.6000.17023, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 1.4.2010 8:19:24 | Computer Name = SAMCI | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace iexplore.exe, verze 7.0.6000.17023, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 1.4.2010 12:56:45 | Computer Name = SAMCI | Source = Application Error | ID = 1000
Description = Chybující aplikace stwph.exe, verze 5.0.9005.0, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 6.4.2010 9:57:41 | Computer Name = SAMCI | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace TOTALCMD.EXE, verze 6.0.1.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 14.4.2010 9:09:04 | Computer Name = SAMCI | Source = Application Error | ID = 1000
Description = Chybující aplikace stwph.exe, verze 5.0.9005.0, chybující modul stwph.exe,
verze 5.0.9005.0, adresa chyby 0x000cdcd0.

[ System Events ]
Error - 19.4.2010 3:57:52 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:00:19 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:34:55 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:36:47 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:44:35 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:45:11 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:56:36 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 4:57:26 | Computer Name = SAMCI | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 19.4.2010 5:20:58 | Computer Name = SAMCI | Source = atapi | ID = 262153
Description = Zařízení \Device\Ide\IdePort2 neodpovídá v periodě časového limitu.

Error - 19.4.2010 5:39:55 | Computer Name = SAMCI | Source = atapi | ID = 262153
Description = Zařízení \Device\Ide\IdePort2 neodpovídá v periodě časového limitu.

< End of report >

#44 Příspěvek od **Caroprd111** » 20 dub 2010 14:21

Spusťte OTL a do spodního okna vložte následující skript.

Kód: Vybrat vše

:OTL
SRV - File not found [Auto | Stopped] -- -- (hasplms)
SRV - File not found [Auto | Stopped] -- -- (FileZilla Server)
FF - prefs.js..browser.search.selectedEngine: "GamingHarbor"
FF - prefs.js..keyword.URL: "http://www.gamingharbor.com/search.do?desktopsmiley&keyword="
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKU\S-1-5-21-4203346930-2640352479-1968813775-1006\..\Toolbar\WebBrowser: (no name) - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - No CLSID value found.
[6 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[28 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

:Commands
[EMPTYTEMP] 
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[RESETHOSTS] 
[CREATERESTOREPOINT]

Poté klikněte na Opravit, PC se restartuje, log vložte sem.

Obrázek

Podívejte se do správce zařízení, jestli tam není nějaký otazník.

chosse · #45 Příspěvek od **chosse** » 29 dub 2010 17:00

Ahoj,
zdravím po dlouhé době. Omlouváme se za přerušení. Log z OTL se objevil po ukončení scanu. Bohužel PC se totálně zasekl, tak jsme provedl restart a log už jsem potom nedokázal najít. Počítač najížděl cca 2 hodiny než byl trochu použitelný. Ted jsem ho tři dny nevypínal a fungoval, ikdyž se hodně zpomaloval a zasekával. Dnes kolem páté hodiny se totálně zasekl a pomohl až tvrdý restart. ted funguju v nouzovém režimu. Co to může být?

VIRY.CZ

pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC

Re: pomalý start PC