Stránka 4 z 7

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 14:54
od vaclavka83
Asi největší problém byl když sem instaloval ovladače k mojí herní myši genius ergo 525. Tak mi při instalaci avast uložil do truhly soubor gCentral.exe . S označením Win32:Trojan-gen. Nevim jestli to je falešný poplach, ale raději sem s ním nic nedělal. Je možno aby byl napaden soubor z originálního CD?

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 14:56
od Caroprd111
Otestujte soubor na http://www.virustotal.com/cs/

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:02
od vaclavka83
Akorát nevím kde ho mám najít?

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:06
od Caroprd111
Obrázek Stáhněte a uložte na plochu http://jpshortstuff.247fixes.com/SystemLook.exe nebo http://images.malwareremoval.com/jpshor ... emLook.exe
  • Dvojklikem na ikonu program spusťte.
  • Do bílého okénka zkopírujte text z následujícího bílého pole.

Kód: Vybrat vše

:filefind
gCentral.exe
  • Klikněte na Look, po dokončení skenu na Vás vyskočí log, zkopírujte ho sem.
  • Log se také bude nacházet na ploše v souboru SystemLook.txt

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:10
od vaclavka83
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 16:09 on 20/06/2010 by Miluji Tě (Administrator - Elevation successful)

========== filefind ==========

Searching for "gCentral.exe"
No files found.

-=End Of File=-

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:16
od Caroprd111
Obnovte soubor z karantény Avastu a zopakujte prohledávání pomocí SystemLooku.

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:18
od vaclavka83
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 16:17 on 20/06/2010 by Miluji Tě (Administrator - Elevation successful)

========== filefind ==========

Searching for "gCentral.exe"
C:\Genius\ioCentre\gCentral.exe --a--- 622592 bytes [14:17 20/06/2010] [14:17 20/06/2010] A789A3D88308D87659B38FE1143ABE19

-=End Of File=-

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:20
od Caroprd111
Obrázek Následující soubor/y otestujte na http://www.virustotal.com/cs/
C:\Genius\ioCentre\gCentral.exe

(Soubor/y nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:34
od vaclavka83
Je možné, že se kontrola může nějak zaseknout. Běží už deset minut a nic se neděje. Je to u AVG.
http://www.virustotal.com/cs/analisis/8 ... 1277043824

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 15:40
od Caroprd111
Soubor smažte a ovladače stáhněte z webu výrobce a nainstalujte. Pak soubor znovu otestujte.

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 17:12
od vaclavka83
Díky za redu. Tak sem stáhnul ovladače ze stránek výrobce.A je to v pohodě.Nevim jestli mi s dalším problémem můžete poradit. Jde o to, že ve správci zařízení mám vykřičník u SCSI/RAID Host Controller. Nevim k čemu to patří. Už sem zkoušel různé ovladače základní desky atd.. Ale nevim si rady.

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 17:47
od vaclavka83
A taky mi nejde automatické spuštění po vložení cd nebo dvd. Musim dát prozkoumat a najít spouštěcí soubor ručně a pak spustit.

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 18:04
od vaclavka83
Když sem chtěl zpustit daemon tools, tak mi to napsalo, že mam vypnout kernel debugger. Nevim co to znamená?

Re: Avast našel Win32:Jeefo

Napsal: 20 čer 2010 20:31
od Caroprd111
vaclavka83 píše:Díky za redu. Tak sem stáhnul ovladače ze stránek výrobce.A je to v pohodě.Nevim jestli mi s dalším problémem můžete poradit. Jde o to, že ve správci zařízení mám vykřičník u SCSI/RAID Host Controller. Nevim k čemu to patří. Už sem zkoušel různé ovladače základní desky atd.. Ale nevim si rady.
Pokud nemáte problémy, tak to nechte být. :)
vaclavka83 píše:A taky mi nejde automatické spuštění po vložení cd nebo dvd. Musim dát prozkoumat a najít spouštěcí soubor ručně a pak spustit.
Automatické spuštění vypíná ComboFix, je to opatření proti virům. Pokud i přesto chcete automatické spouštění zapnout, tak napište a já Vám pošlu postup.
vaclavka83 píše:Když sem chtěl zpustit daemon tools, tak mi to napsalo, že mam vypnout kernel debugger. Nevim co to znamená?
Daemon Tools si po dokončení léčení přeinstalujte.


Obrázek Stáhněte OTL http://oldtimer.geekstogo.com/OTL.exe na plochu
  • Spusťte, poté do spodního políčka vložte následující skript.

Kód: Vybrat vše

 netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys 
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys 
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys 
cdrom.sys 
autochk.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav 
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT
 
  • Označte položku Pro všechny uživatele.
  • Označte položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
  • Klikněte na tlačítko Prohledat
  • Po dokončení, sem vložte logy OTL.Txt a Extras.txt

Re: Avast našel Win32:Jeefo

Napsal: 21 čer 2010 13:39
od vaclavka83
OTL Extras logfile created on: 21.6.2010 14:28:28 - Run 1
OTL by OldTimer - Version 3.2.6.1 Folder = C:\Documents and Settings\Miluji Tě\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 83,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 91,00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,07 Gb Total Space | 14,76 Gb Free Space | 37,79% Space Free | Partition Type: NTFS
Drive D: | 109,97 Gb Total Space | 101,22 Gb Free Space | 92,04% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: VACLAVIK-4CCC27
Current User Name: Miluji Tě
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- File not found

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- File not found
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" = C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup -- File not found
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe" = C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator -- (Crawler.com)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"D:\Games\Far Cry2\Far Cry 2\bin\FarCry2.exe" = D:\Games\Far Cry2\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2 -- File not found
"C:\Documents and Settings\Miluji Tě\Local Settings\Temporary Internet Files\Content.IE5\AWBN8Y6G\winbox[1].exe" = C:\Documents and Settings\Miluji Tě\Local Settings\Temporary Internet Files\Content.IE5\AWBN8Y6G\winbox[1].exe:*:Enabled:winbox[1] -- File not found
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Documents and Settings\Miluji Tě\temp\TeamViewer\Version5\TeamViewer.exe" = C:\Documents and Settings\Miluji Tě\temp\TeamViewer\Version5\TeamViewer.exe:*:Disabled:TeamViewer -- File not found


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{08CA9554-B5FE-4313-938F-D4A417B81175}" = QuickTime
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series" = Canon MP140 series
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}" = Cool & Quiet
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 20
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{436BD6D1-707C-43D3-BF99-24ED23291029}" = Nero 8 Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7EF900F4-61A8-4D95-8A65-488D3BECA206}" = iLook 300
"{7F947BFE-C2DF-4779-9909-5BEE746BD0C4}" = Microsoft .NET Framework 2.0 Language Pack - CSY
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{90F50409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core
"{90F60409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core - English
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{95120000-00AF-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (Czech)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A2B4621B-CEB9-4E44-95FD-3500D4DB3727}" = ioCentre
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1029-7B44-A93000000001}" = Adobe Reader 9.3.2 - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{BA12FD6C-169A-11D7-A6A9-00C026281E5A}" = PC DUAL SHOCK
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB98E4B2-AD84-4A4F-8B25-2ECF88C43E51}" = Samsung Multimedia Keyboard
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D1504C77-1B19-4AF0-8DEC-946666123B55}" = CrazyTalk CamSuite PRO
"{D1B7EF59-A3E2-452A-882E-076E1A18D94A}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Singleplayer Patch
"{D4006E71-FF32-44FF-AD5A-B5EE4389B825}_is1" = FlatOut2
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{DEE88727-779B-47A9-ACEF-F87CA5F92A65}" = ScanSoft OmniPage SE 4
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{F7338FA3-DAB5-49B2-900D-0AFB5760C166}" = PC Probe II
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast5" = avast! Free Antivirus
"CCleaner" = CCleaner
"C-Media PCI Audio Driver" = C-Media PCI Audio Device
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.53.1
"Easy-PhotoPrint" = Canon Utilities Easy-PhotoPrint
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"FormatFactory" = FormatFactory 2.00
"Free CD to MP3 Converter" = Free CD to MP3 Converter
"Free Download Manager_is1" = Free Download Manager 3.0
"GoldWave v5.55" = GoldWave v5.55
"InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.0.5 (Full)
"KYE" = Gaming Mouse
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - CSY" = Microsoft .NET Framework 2.0 Language Pack - CSY
"MP Navigator 3.1" = Canon MP Navigator 3.1
"rayatitray" = Ray Adams ATI Tray Tools
"Registrace uživatele zařízení Canon MP140 series" = Registrace uživatele zařízení Canon MP140 series
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"Totalcmd" = Total Commander (Remove or Repair)
"Unlocker" = Unlocker 1.8.7
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Xvid CZ 1.01_is1" = Xvid CZ 1.01
"Zoner Photo Studio 9_is1" = Zoner Photo Studio 9

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1708537768-1123561945-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Verdict Free" = Slovník Verdict Free

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 5.4.2010 14:07:10 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:11 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:11 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:11 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:53 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:53 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:53 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:07:53 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:12:11 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

Error - 5.4.2010 14:12:11 | Computer Name = VACLAVIK-4CCC27 | Source = avast! | ID = 33554522
Description =

[ System Events ]
Error - 20.6.2010 14:26:17 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.2 pro síťovou kartu s adresou 001D60755435
byla serverem DHCP 0.0.0.0 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 20.6.2010 21:01:29 | Computer Name = VACLAVIK-4CCC27 | Source = Print | ID = 23
Description = Tiskárnu Lexmark X1100 Series,0 se nepodařilo inicializovat, protože
potřebný ovladač Lexmark X1100 Series nebyl nalezen.

Error - 20.6.2010 21:01:33 | Computer Name = VACLAVIK-4CCC27 | Source = Service Control Manager | ID = 7000
Description = Služba PIXMA Extended Survey Program neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 20.6.2010 21:01:33 | Computer Name = VACLAVIK-4CCC27 | Source = Service Control Manager | ID = 7000
Description = Služba Prime95 Service neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 20.6.2010 21:01:33 | Computer Name = VACLAVIK-4CCC27 | Source = Service Control Manager | ID = 7000
Description = Služba StarWind AE Service neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 20.6.2010 22:00:51 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.2 pro síťovou kartu s adresou 001D60755435
byla serverem DHCP 0.0.0.0 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 20.6.2010 22:01:17 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.2 pro síťovou kartu s adresou 001D60755435
byla serverem DHCP 0.0.0.0 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 20.6.2010 22:01:21 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1001
Description = Počítači nebyla přiřazena síťová adresa (serverem DHCP) pro síťovou
kartu se síťovou adresou 001D60755435. Došlo k následující chybě: %%13. Počítač se
bude pokoušet získat síťovou adresu samostatně ze serveru DHCP.

Error - 20.6.2010 22:05:39 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.2 pro síťovou kartu s adresou 001D60755435
byla serverem DHCP 0.0.0.0 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 21.6.2010 8:25:31 | Computer Name = VACLAVIK-4CCC27 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.2 pro síťovou kartu s adresou 001D60755435
byla serverem DHCP 0.0.0.0 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).


< End of report >