Stránka 1 z 1

kontrola logu

Napsal: 02 kvě 2010 17:50
od bek69
Zdravím.Prosím o kontrolu logu. Logfile of random's system information tool 1.06 (written by random/random)
Run by René Harrer at 2010-05-02 18:48:45
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 7 GB (22%) free of 33 GB
Total RAM: 511 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:49:09, on 2.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ASWL2K.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\WINDOWS\system32\DfrgFat.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\René Harrer\Plocha\RSIT.exe
C:\Program Files\trend micro\René Harrer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: 64.237.37.47 auto.search.msn.com
O1 - Hosts: 64.237.37.47 auto.search.msn.com
O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: %BRAND Smileys - {16FE352D-F643-4A81-BC61-2C051F3A757D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: %BRAND eCards - {82E2B317-7C9C-4F12-B920-AC37D928CD43} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7426442968
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 8239 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
{0974BA1E-64EC-11DE-B2A5-E43756D89593}
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2004-11-22 94208]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-09-09 344064]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-18 1848648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-11 689488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\Ahead\InCD\InCD.exe [2004-09-13 1450096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
C:\Program Files\Scansoft\PaperPort\IndexSearch.exe [2002-08-12 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power_Gear]
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2004-01-19 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock]
D:\Program Files\RocketDock\RocketDock.exe [2007-03-19 630784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
D:\Program Files\uTorrent.exe [2009-06-17 286000]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
ASUS ChkMail.lnk - C:\Program Files\Asus\Asus ChkMail\ChkMail.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-10-07 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\uTorrent.exe"="D:\Program Files\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe"="C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Enabled:Zoo Tycoon 2 Executable"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-04-23 16:15:06 ----SHD---- C:\FOUND.002
2010-04-11 20:13:33 ----D---- C:\Documents and Settings\René Harrer\Data aplikací\Corel
2010-04-11 20:13:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2010-04-11 20:09:11 ----D---- C:\Program Files\Common Files\Corel
2010-04-11 15:04:15 ----D---- C:\Program Files\DsNET Corp
2010-04-03 19:05:46 ----SHD---- C:\FOUND.001
2010-04-03 13:57:35 ----D---- C:\Program Files\Electronic Arts

======List of files/folders modified in the last 1 months======

2010-05-02 10:56:48 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-04-26 20:19:00 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD Athlon64; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-03-09 37888]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2004-07-20 20096]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2004-09-13 28672]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-01-26 52224]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-19 11043]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-10-07 798208]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-08-19 1043072]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-08-19 197504]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2004-11-22 5632]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2004-11-23 53376]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2004-11-23 413824]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-08-19 678400]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\yukonwxp.sys [2004-08-19 142464]
R3 ZD1211U(ASUS);ASUS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ASUS); C:\WINDOWS\system32\DRIVERS\zd1211u.sys [2005-01-12 261632]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2004-09-13 93440]
S3 a2mqnfu5;a2mqnfu5; C:\WINDOWS\system32\drivers\a2mqnfu5.sys []
S3 actser;actser; C:\WINDOWS\system32\drivers\actser.sys [2004-06-07 29440]
S3 brfilt;Ovladač filtru Brother MFC; C:\WINDOWS\System32\Drivers\Brfilt.sys [2001-08-17 2944]
S3 BrSerWDM;Sériový ovladač Brother; C:\WINDOWS\System32\Drivers\BrSerWdm.sys [2001-08-17 60416]
S3 BrUsbMdm;Pouze faxový modem Brother MFC USB; C:\WINDOWS\System32\Drivers\BrUsbMdm.sys [2001-08-17 11008]
S3 BrUsbScn;Ovladač skeneru Brother MFC USB; C:\WINDOWS\System32\Drivers\BrUsbScn.sys [2001-08-17 10368]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\RENÉHA~1\LOCALS~1\Temp\catchme.sys []
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mf;mf; C:\WINDOWS\system32\DRIVERS\mf.sys [2008-04-13 63744]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-07-01 9856]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 siusbmod;siusbmod; C:\WINDOWS\system32\DRIVERS\siusbmod.sys []
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 StMp3Rec;Player Recovery Device Control Driver; C:\WINDOWS\System32\Drivers\StMp3Rec.sys [2006-01-20 71358]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D.sys []
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASWLSVC;ASWLSVC; C:\WINDOWS\system32\ASWLSVC.exe [2004-05-06 496640]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-10-07 405504]
R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2004-07-20 90112]
R2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-12 57344]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
R2 InCDsrv;InCD Helper; C:\Program Files\Ahead\InCD\InCDsrv.exe [2004-09-13 1192050]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-02 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: kontrola logu

Napsal: 02 kvě 2010 18:14
od 1danab
zdravím :)
na Vašem logu se pracuje

Re: kontrola logu

Napsal: 02 kvě 2010 18:21
od 1danab
stáhněte si OTL z tohoto odkazu http://ottools.noahdfear.net/OTL.exe

stažený soubor spusťte jako správce

v otevřeném okně stiskněte tlačítko Prohledat, čímž spustíte sken; vyčkejte prosím dokončení skenu (cca 5 minut); poté se vám otevře okno Poznámkového bloku s logem, jehož obsah sem zkopírujte

Re: kontrola logu

Napsal: 02 kvě 2010 18:52
od bek69
OTL logfile created on: 2.5.2010 19:47:54 - Run 1
OTL by OldTimer - Version 3.2.3.1 Folder = C:\Documents and Settings\René Harrer\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 147,00 Mb Available Physical Memory | 29,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 64,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 32,45 Gb Total Space | 7,08 Gb Free Space | 21,82% Space Free | Partition Type: FAT32
Drive D: | 21,57 Gb Total Space | 9,19 Gb Free Space | 42,61% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465,65 Gb Total Space | 4,09 Gb Free Space | 0,88% Space Free | Partition Type: FAT32

Computer Name: ASUS
Current User Name: René Harrer
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
PRC - [2010.03.31 22:43:04 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.24 11:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
PRC - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.11.16 09:03:32 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.01.22 18:35:52 | 000,103,808 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2005.03.07 12:00:38 | 000,506,880 | ---- | M] () -- C:\WINDOWS\system32\ASWL2K.exe
PRC - [2004.11.22 03:04:48 | 001,654,784 | ---- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2004.11.22 03:04:48 | 000,094,208 | ---- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
PRC - [2004.09.13 11:49:42 | 001,192,050 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe
PRC - [2004.07.20 14:15:20 | 000,090,112 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\WINDOWS\ATKKBService.exe
PRC - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () -- C:\WINDOWS\system32\ASWLSVC.exe
PRC - [2003.09.12 20:25:30 | 000,032,768 | ---- | M] (asus) -- C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
PRC - [2001.12.13 00:01:00 | 000,045,056 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\system32\brss01a.exe


========== Modules (SafeList) ==========

MOD - [2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
MOD - [2006.05.03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll


========== Win32 Services (SafeList) ==========

SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.06.02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2008.01.22 18:35:52 | 000,103,808 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2004.09.13 11:49:42 | 001,192,050 | ---- | M] (Ahead Software AG) [Auto | Running] -- C:\Program Files\Ahead\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2004.07.20 14:15:20 | 000,090,112 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService)
SRV - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC)
SRV - [2002.04.12 00:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) [Auto | Stopped] -- C:\WINDOWS\system32\brsvc01a.exe -- (Brother XP spl Service)


========== Driver Services (SafeList) ==========

DRV - [2009.11.16 09:06:50 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009.05.29 07:29:20 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.02.17 11:43:30 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.02.17 11:43:28 | 000,055,024 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009.02.17 11:43:28 | 000,008,944 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.02.09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.02.09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.02.09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.02.09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 20:36:42 | 000,063,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mf.sys -- (mf)
DRV - [2006.01.20 16:27:14 | 000,071,358 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StMp3Rec.sys -- (StMp3Rec)
DRV - [2005.08.30 17:59:00 | 000,094,000 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2005.08.30 17:58:56 | 000,008,304 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2005.08.30 17:57:18 | 000,058,320 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2005.03.03 18:53:58 | 000,048,640 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005.02.23 16:59:56 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005.01.12 20:31:16 | 000,261,632 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZD1211U.sys -- (ZD1211U(ASUS)) ASUS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ASUS)
DRV - [2004.12.03 11:20:42 | 000,020,544 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2004.11.23 02:31:50 | 000,021,120 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)
DRV - [2004.11.23 02:31:36 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA(R) nForce(TM)
DRV - [2004.11.23 02:31:34 | 000,413,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA(R) nForce(TM)
DRV - [2004.11.22 03:04:46 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2004.10.07 06:20:56 | 000,798,208 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004.09.17 00:42:54 | 000,027,264 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\risdpntk.sys -- (risdpntk)
DRV - [2004.09.13 11:54:46 | 000,028,672 | ---- | M] (Ahead Software AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDpass.sys -- (InCDPass)
DRV - [2004.09.13 11:54:06 | 000,093,440 | ---- | M] (Ahead Software AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2004.08.19 01:56:36 | 001,043,072 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2004.08.19 01:56:36 | 000,197,504 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2004.08.19 01:56:34 | 000,678,400 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004.08.19 01:52:00 | 000,142,464 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yukonwxp.sys -- (yukonwxp)
DRV - [2004.07.20 14:19:16 | 000,020,096 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt)
DRV - [2004.07.05 16:14:58 | 000,057,088 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\R592.sys -- (R592)
DRV - [2004.06.07 18:40:32 | 000,029,440 | ---- | M] (Siemens AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\actser.sys -- (actser)
DRV - [2004.01.26 16:36:36 | 000,095,552 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.01.26 16:01:30 | 000,052,224 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.07.01 18:47:08 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2002.09.09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)
DRV - [2001.08.17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
DRV - [2001.08.17 21:12:22 | 000,010,368 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrUsbScn.sys -- (BrUsbScn)
DRV - [2001.08.17 21:12:20 | 000,060,416 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrSerWdm.sys -- (BrSerWDM)
DRV - [2001.08.17 21:12:20 | 000,011,008 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrUsbMdm.sys -- (BrUsbMdm)
DRV - [2001.08.17 21:12:12 | 000,002,944 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrFilt.sys -- (brfilt)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = My Web Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultUrl = http://www.mywebsearch.com/jsp/cfg_redi ... earchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: "http://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://seznam.cz/"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.0
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.2.119
FF - prefs.js..extensions.enabledItems: cs@dictionaries.addons.mozilla.org:1.0.1
FF - prefs.js..extensions.enabledItems: bloodfire@example.com:3.6
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?clien ... e=en_EU&q="
FF - prefs.js..network.proxy.no_proxies_on: "localhost"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Yahoo! Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "|www.seznam.cz"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.icq.com/search/afe_result ... id=afex&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\firefox\
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.07.02 12:12:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2006.09.07 19:12:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2006.09.07 19:12:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.04.26 19:01:30 | 000,000,000 | ---D | M]

[2008.08.30 08:35:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Extensions
[2006.09.07 19:12:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions
[2009.08.14 16:07:32 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2007.12.06 13:21:14 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2006.12.31 15:25:28 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2009.12.11 22:32:56 | 000,000,000 | ---D | M] (MediaBar) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
[2009.08.04 16:24:58 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2010.04.17 12:10:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\bloodfire@example.com
[2008.09.25 18:13:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\cs@dictionaries.addons.mozilla.org
[2010.04.11 15:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\toolbar@ask.com
[2010.01.20 10:30:44 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\askcom.xml
[2009.07.18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\BearShareWebSearch.xml
[2009.12.17 19:51:32 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-25.xml
[2010.03.20 08:29:20 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-27.xml
[2010.02.12 15:51:42 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-26.xml
[2010.03.28 10:11:18 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-28.xml
[2010.04.12 16:20:46 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-29.xml
[2010.05.02 10:36:18 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-11.xml
[2007.12.06 17:01:02 | 000,005,348 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\karieracz.xml
[2009.08.04 16:24:54 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\sweetim.xml
[2009.09.02 09:45:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-10.xml
[2009.09.03 17:22:14 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-1.xml
[2009.09.04 19:05:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-7.xml
[2009.09.11 16:36:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-23.xml
[2009.09.12 21:08:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-16.xml
[2009.09.20 21:54:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-17.xml
[2009.09.21 14:00:36 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-5.xml
[2009.09.28 17:41:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-18.xml
[2009.10.06 21:15:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-19.xml
[2009.10.07 14:52:26 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-3.xml
[2009.10.07 22:38:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-12.xml
[2009.10.08 11:40:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-13.xml
[2009.10.20 17:14:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-8.xml
[2009.10.20 23:35:50 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin.xml
[2009.10.21 08:48:38 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-9.xml
[2009.10.21 21:51:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-6.xml
[2009.10.22 14:57:58 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-4.xml
[2009.10.28 15:05:16 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\daemon-search.xml
[2009.10.29 13:42:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-24.xml
[2009.10.30 10:52:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-20.xml
[2009.11.06 14:43:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-21.xml
[2009.11.06 21:02:04 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-14.xml
[2009.11.14 08:37:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-22.xml
[2009.11.14 18:36:22 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-15.xml
[2009.11.15 00:40:12 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-2.xml
[2006.09.07 19:12:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.07.15 20:27:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.03.31 09:13:28 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2008.11.11 09:38:54 | 000,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2009.11.03 02:45:38 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.11.03 02:45:38 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.11.03 02:45:38 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.11.03 02:45:38 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.11.03 02:45:38 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
[2009.07.18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml

O1 HOSTS File: ([2008.08.03 13:34:14 | 000,239,984 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 64.237.37.47 auto.search.msn.com
O1 - Hosts: 64.237.37.47 auto.search.msn.com
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.1001-search.info
O1 - Hosts: 127.0.0.1 1001-search.info
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 8393 more lines...
O2 - BHO: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - No CLSID value found.
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe (asus)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: %BRAND Smileys - {16FE352D-F643-4A81-BC61-2C051F3A757D} - Reg Error: Key error. File not found
O9 - Extra Button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra Button: %BRAND eCards - {82E2B317-7C9C-4F12-B920-AC37D928CD43} - Reg Error: Key error. File not found
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftup ... 7426442968 (MUWebControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - Reg Error: Key error. File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.07.01 18:28:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.02 19:46:25 | 000,562,176 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
[2010.05.02 14:15:57 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\René Harrer\Recent
[2010.04.23 16:15:06 | 000,000,000 | -HSD | C] -- C:\FOUND.002
[2010.04.13 20:02:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Plocha\Juno
[2010.04.11 20:13:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Data aplikací\Corel
[2010.04.11 20:13:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\InstallShield
[2010.04.11 20:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Corel
[2010.04.11 16:04:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\WMTools Downloaded Files
[2010.04.11 15:23:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\AskToolbar
[2010.04.11 15:04:15 | 000,000,000 | ---D | C] -- C:\Program Files\DsNET Corp
[2010.04.03 19:05:46 | 000,000,000 | -HSD | C] -- C:\FOUND.001
[2010.04.03 14:15:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\Electronic Arts
[2010.04.03 13:57:35 | 000,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2004.10.07 06:21:04 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.05.02 19:49:22 | 014,155,776 | ---- | M] () -- C:\Documents and Settings\René Harrer\ntuser.dat
[2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
[2010.05.02 19:44:22 | 000,000,950 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.05.02 19:01:02 | 000,000,246 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.05.02 18:51:36 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\Skype.lnk
[2010.05.02 14:14:08 | 000,161,792 | ---- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.02 13:44:04 | 000,000,946 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.05.02 12:16:06 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.02 12:15:52 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.02 12:15:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.02 12:15:42 | 535,678,976 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.02 10:56:36 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2010.05.02 10:56:26 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\René Harrer\ntuser.ini
[2010.04.27 18:11:14 | 000,001,452 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\CCleaner.lnk
[2010.04.26 20:19:00 | 000,000,202 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.04.26 18:47:54 | 078,001,391 | ---- | M] () -- C:\Documents and Settings\René Harrer\Dokumenty\NOD 32 a ESET SMART SECURITY v. 4.0.474.0 + predlžovač licencie.rar
[2010.04.17 17:48:34 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
[2010.04.17 12:15:10 | 000,001,633 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.04.14 16:07:30 | 004,464,253 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\beyonce broken-hearted girl.mp3
[2010.04.14 16:04:28 | 005,544,336 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\crazy_baby_boom.mp3
[2010.04.12 15:18:26 | 000,297,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.04.11 20:14:18 | 000,082,760 | ---- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.11 16:04:48 | 000,000,534 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\Zástupce - moviemk.lnk
[2010.04.11 15:23:22 | 000,000,743 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\aTube Catcher.lnk
[2010.04.11 10:50:28 | 004,291,734 | -H-- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\IconCache.db
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.26 18:47:52 | 078,001,391 | ---- | C] () -- C:\Documents and Settings\René Harrer\Dokumenty\NOD 32 a ESET SMART SECURITY v. 4.0.474.0 + predlžovač licencie.rar
[2010.04.17 17:48:33 | 000,001,819 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
[2010.04.14 16:07:29 | 004,464,253 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\beyonce broken-hearted girl.mp3
[2010.04.14 16:04:26 | 005,544,336 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\crazy_baby_boom.mp3
[2010.04.11 16:04:47 | 000,000,534 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\Zástupce - moviemk.lnk
[2010.04.11 15:22:48 | 000,000,246 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.04.11 15:04:22 | 000,000,743 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\aTube Catcher.lnk
[2010.04.09 12:12:55 | 000,001,633 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.03.30 17:16:12 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.12.22 12:25:44 | 000,002,828 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2009.11.16 11:13:59 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009.11.16 11:13:49 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.11.16 11:13:49 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.11.16 11:13:41 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.11.16 11:13:41 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009.06.07 13:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009.05.29 07:29:17 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008.12.22 19:46:03 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007.12.13 23:00:13 | 004,050,432 | ---- | C] () -- C:\WINDOWS\System32\PODATELNA.DLL
[2006.08.29 18:41:41 | 000,000,075 | ---- | C] () -- C:\WINDOWS\drawinghand.ini
[2006.08.29 18:41:37 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\TSUZ.DLL
[2006.03.07 11:30:02 | 000,000,040 | ---- | C] () -- C:\WINDOWS\opt_2460.ini
[2006.01.28 20:24:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2006.01.13 17:37:09 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2005.11.29 15:46:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2005.11.14 18:21:57 | 000,000,051 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2005.11.14 18:13:18 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2005.11.14 18:12:48 | 000,002,651 | ---- | C] () -- C:\WINDOWS\BRMFBIDI.INI
[2005.11.14 18:10:53 | 000,000,454 | ---- | C] () -- C:\WINDOWS\brwmark.ini
[2005.11.14 18:10:53 | 000,000,240 | ---- | C] () -- C:\WINDOWS\Brpcfx.ini
[2005.11.14 18:10:53 | 000,000,079 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2005.11.14 18:08:39 | 000,000,806 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2005.10.24 19:32:53 | 000,000,063 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005.10.04 20:44:07 | 000,001,940 | ---- | C] () -- C:\WINDOWS\ROUTE66.INI
[2005.10.04 20:39:23 | 000,002,758 | -H-- | C] () -- C:\WINDOWS\as456.ini
[2005.09.05 14:11:05 | 000,001,193 | ---- | C] () -- C:\WINDOWS\disney.ini
[2005.09.05 14:10:59 | 000,000,374 | ---- | C] () -- C:\WINDOWS\disneysy.ini
[2005.09.04 20:39:52 | 000,000,092 | ---- | C] () -- C:\WINDOWS\telephon.ini
[2005.08.09 14:24:28 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2005.08.09 14:24:28 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2005.08.09 13:05:15 | 000,000,161 | ---- | C] () -- C:\WINDOWS\level.ini
[2005.07.26 21:53:54 | 000,000,189 | ---- | C] () -- C:\WINDOWS\Hypotéka.INI
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2005.07.25 13:38:38 | 000,000,335 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll
[2005.07.25 13:38:38 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2005.07.25 13:16:46 | 000,315,392 | ---- | C] () -- C:\WINDOWS\System32\AuthorStreamingEng.dll
[2005.07.25 13:16:46 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\libisomedia.dll
[2005.07.25 13:16:46 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\pvmediacom_lic.dll
[2005.07.25 13:16:46 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\logger.dll
[2005.07.25 13:16:41 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\osclpthread.dll
[2005.07.25 11:10:11 | 000,276,186 | ---- | C] () -- C:\WINDOWS\System32\rtfctl32.dll
[2005.07.23 16:14:19 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.07.23 16:14:15 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2005.07.23 15:45:06 | 000,001,608 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2005.07.22 10:33:14 | 000,000,052 | ---- | C] () -- C:\WINDOWS\CESTINA.INI
[2005.07.22 10:14:26 | 000,000,132 | ---- | C] () -- C:\WINDOWS\SILCOM_P.INI
[2005.07.22 07:14:15 | 000,000,202 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2005.07.22 07:07:59 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
[2005.07.20 20:25:57 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005.07.20 16:12:54 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2005.07.20 15:57:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2005.07.01 18:35:47 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\ASLM75.SYS
[2005.07.01 18:35:46 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASLM75.SYS
[2005.07.01 18:34:29 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\ATKCheckDispIDs.dll
[2005.07.01 18:34:29 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\ATKOSDMini.DLL
[2005.07.01 18:34:29 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\atkid.ini
[2005.07.01 18:33:32 | 000,000,042 | ---- | C] () -- C:\WINDOWS\AcrobatSetupStatus.ini
[2005.07.01 12:46:05 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004.11.22 03:04:46 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2004.11.20 11:15:21 | 000,007,424 | R--- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS
[2004.11.20 11:15:21 | 000,002,538 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2003.04.09 15:38:04 | 000,005,664 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002.08.12 08:19:42 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\Welsof32.dll
[2002.01.08 16:57:34 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
< End of report >

Re: kontrola logu

Napsal: 02 kvě 2010 19:59
od 1danab
nejdříve smažte celý soubor hosts, naleznete zde C:\Windows\System32\drivers\etc\hosts; posléze restartujte pc

po restartu dejte otestovat tyto soubory na VIRUSTOTALu
C:\WINDOWS\System32\logger.dll
C:\WINDOWS\System32\Welsof32.dll
C:\WINDOWS\System32\Jpeg32.dll

Re: kontrola logu

Napsal: 03 kvě 2010 08:02
od bek69
Soubor smazán a ty tři jsem otestoval a jsou v pořádku...

Re: kontrola logu

Napsal: 03 kvě 2010 08:09
od 1danab
poprosím ještě jednou o nový log z OTL :)

Re: kontrola logu

Napsal: 03 kvě 2010 14:53
od bek69
OTL logfile created on: 3.5.2010 15:39:52 - Run 2
OTL by OldTimer - Version 3.2.3.1 Folder = C:\Documents and Settings\René Harrer\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,00 Mb Total Physical Memory | 187,00 Mb Available Physical Memory | 37,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 32,45 Gb Total Space | 7,15 Gb Free Space | 22,02% Space Free | Partition Type: FAT32
Drive D: | 21,57 Gb Total Space | 9,19 Gb Free Space | 42,61% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ASUS
Current User Name: René Harrer
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
PRC - [2010.03.31 22:43:04 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.11.16 09:03:32 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.01.22 18:35:52 | 000,103,808 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2005.03.07 12:00:38 | 000,506,880 | ---- | M] () -- C:\WINDOWS\system32\ASWL2K.exe
PRC - [2004.11.22 03:04:48 | 001,654,784 | ---- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2004.11.22 03:04:48 | 000,094,208 | ---- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
PRC - [2004.09.13 11:49:42 | 001,192,050 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe
PRC - [2004.07.20 14:15:20 | 000,090,112 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\WINDOWS\ATKKBService.exe
PRC - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () -- C:\WINDOWS\system32\ASWLSVC.exe
PRC - [2003.09.12 20:25:30 | 000,032,768 | ---- | M] (asus) -- C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
PRC - [2002.04.12 00:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\system32\brsvc01a.exe
PRC - [2001.12.13 00:01:00 | 000,045,056 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\system32\brss01a.exe


========== Modules (SafeList) ==========

MOD - [2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
MOD - [2006.05.03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll


========== Win32 Services (SafeList) ==========

SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.06.02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2008.01.22 18:35:52 | 000,103,808 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2004.09.13 11:49:42 | 001,192,050 | ---- | M] (Ahead Software AG) [Auto | Running] -- C:\Program Files\Ahead\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2004.07.20 14:15:20 | 000,090,112 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService)
SRV - [2004.05.06 12:21:04 | 000,496,640 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC)
SRV - [2002.04.12 00:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) [Auto | Running] -- C:\WINDOWS\system32\brsvc01a.exe -- (Brother XP spl Service)


========== Driver Services (SafeList) ==========

DRV - [2009.11.16 09:06:50 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009.05.29 07:29:20 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.02.17 11:43:30 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.02.17 11:43:28 | 000,055,024 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009.02.17 11:43:28 | 000,008,944 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.02.09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.02.09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.02.09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.02.09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 20:36:42 | 000,063,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mf.sys -- (mf)
DRV - [2006.01.20 16:27:14 | 000,071,358 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StMp3Rec.sys -- (StMp3Rec)
DRV - [2005.08.30 17:59:00 | 000,094,000 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2005.08.30 17:58:56 | 000,008,304 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2005.08.30 17:57:18 | 000,058,320 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2005.03.03 18:53:58 | 000,048,640 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005.02.23 16:59:56 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005.01.12 20:31:16 | 000,261,632 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZD1211U.sys -- (ZD1211U(ASUS)) ASUS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ASUS)
DRV - [2004.12.03 11:20:42 | 000,020,544 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2004.11.23 02:31:50 | 000,021,120 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)
DRV - [2004.11.23 02:31:36 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA(R) nForce(TM)
DRV - [2004.11.23 02:31:34 | 000,413,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA(R) nForce(TM)
DRV - [2004.11.22 03:04:46 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2004.10.07 06:20:56 | 000,798,208 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004.09.17 00:42:54 | 000,027,264 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\risdpntk.sys -- (risdpntk)
DRV - [2004.09.13 11:54:46 | 000,028,672 | ---- | M] (Ahead Software AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDpass.sys -- (InCDPass)
DRV - [2004.09.13 11:54:06 | 000,093,440 | ---- | M] (Ahead Software AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2004.08.19 01:56:36 | 001,043,072 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2004.08.19 01:56:36 | 000,197,504 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2004.08.19 01:56:34 | 000,678,400 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004.08.19 01:52:00 | 000,142,464 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yukonwxp.sys -- (yukonwxp)
DRV - [2004.07.20 14:19:16 | 000,020,096 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt)
DRV - [2004.07.05 16:14:58 | 000,057,088 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\R592.sys -- (R592)
DRV - [2004.06.07 18:40:32 | 000,029,440 | ---- | M] (Siemens AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\actser.sys -- (actser)
DRV - [2004.01.26 16:36:36 | 000,095,552 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.01.26 16:01:30 | 000,052,224 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.07.01 18:47:08 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2002.09.09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)
DRV - [2001.08.17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
DRV - [2001.08.17 21:12:22 | 000,010,368 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrUsbScn.sys -- (BrUsbScn)
DRV - [2001.08.17 21:12:20 | 000,060,416 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrSerWdm.sys -- (BrSerWDM)
DRV - [2001.08.17 21:12:20 | 000,011,008 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrUsbMdm.sys -- (BrUsbMdm)
DRV - [2001.08.17 21:12:12 | 000,002,944 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrFilt.sys -- (brfilt)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = My Web Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultUrl = http://www.mywebsearch.com/jsp/cfg_redi ... earchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: "http://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://seznam.cz/"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: {E84D42CA-64EB-11DE-A65F-8C3656D89593}:3.0
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.2.119
FF - prefs.js..extensions.enabledItems: cs@dictionaries.addons.mozilla.org:1.0.1
FF - prefs.js..extensions.enabledItems: bloodfire@example.com:3.6
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?clien ... e=en_EU&q="
FF - prefs.js..network.proxy.no_proxies_on: "localhost"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Yahoo! Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "|www.seznam.cz"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.icq.com/search/afe_result ... id=afex&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\firefox\
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.07.02 12:12:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2006.09.07 19:12:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2006.09.07 19:12:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.04.26 19:01:30 | 000,000,000 | ---D | M]

[2008.08.30 08:35:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Extensions
[2006.09.07 19:12:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions
[2009.08.14 16:07:32 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2007.12.06 13:21:14 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2006.12.31 15:25:28 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2009.12.11 22:32:56 | 000,000,000 | ---D | M] (MediaBar) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
[2009.08.04 16:24:58 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2010.04.17 12:10:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\bloodfire@example.com
[2008.09.25 18:13:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\cs@dictionaries.addons.mozilla.org
[2010.04.11 15:22:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\extensions\toolbar@ask.com
[2010.01.20 10:30:44 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\askcom.xml
[2009.07.18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\BearShareWebSearch.xml
[2009.12.17 19:51:32 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-25.xml
[2010.03.20 08:29:20 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-27.xml
[2010.02.12 15:51:42 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-26.xml
[2010.03.28 10:11:18 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-28.xml
[2010.04.12 16:20:46 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-29.xml
[2010.05.02 10:36:18 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-11.xml
[2007.12.06 17:01:02 | 000,005,348 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\karieracz.xml
[2009.08.04 16:24:54 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\sweetim.xml
[2009.09.02 09:45:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-10.xml
[2009.09.03 17:22:14 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-1.xml
[2009.09.04 19:05:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-7.xml
[2009.09.11 16:36:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-23.xml
[2009.09.12 21:08:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-16.xml
[2009.09.20 21:54:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-17.xml
[2009.09.21 14:00:36 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-5.xml
[2009.09.28 17:41:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-18.xml
[2009.10.06 21:15:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-19.xml
[2009.10.07 14:52:26 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-3.xml
[2009.10.07 22:38:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-12.xml
[2009.10.08 11:40:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-13.xml
[2009.10.20 17:14:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-8.xml
[2009.10.20 23:35:50 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin.xml
[2009.10.21 08:48:38 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-9.xml
[2009.10.21 21:51:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-6.xml
[2009.10.22 14:57:58 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-4.xml
[2009.10.28 15:05:16 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\daemon-search.xml
[2009.10.29 13:42:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-24.xml
[2009.10.30 10:52:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-20.xml
[2009.11.06 14:43:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-21.xml
[2009.11.06 21:02:04 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-14.xml
[2009.11.14 08:37:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-22.xml
[2009.11.14 18:36:22 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-15.xml
[2009.11.15 00:40:12 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\René Harrer\Data aplikací\Mozilla\Firefox\Profiles\2mv1abxt.default\searchplugins\icqplugin-2.xml
[2006.09.07 19:12:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.07.15 20:27:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.03.31 09:13:28 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2008.11.11 09:38:54 | 000,663,552 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2009.11.03 02:45:38 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.11.03 02:45:38 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.11.03 02:45:38 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.11.03 02:45:38 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.11.03 02:45:38 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
[2009.07.18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml

Hosts file not found
O2 - BHO: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - No CLSID value found.
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe (asus)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: %BRAND Smileys - {16FE352D-F643-4A81-BC61-2C051F3A757D} - Reg Error: Key error. File not found
O9 - Extra Button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra Button: %BRAND eCards - {82E2B317-7C9C-4F12-B920-AC37D928CD43} - Reg Error: Key error. File not found
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftup ... 7426442968 (MUWebControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - Reg Error: Key error. File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.07.01 18:28:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.02 19:46:25 | 000,562,176 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
[2010.05.02 14:15:57 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\René Harrer\Recent
[2010.04.23 16:15:06 | 000,000,000 | -HSD | C] -- C:\FOUND.002
[2010.04.13 20:02:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Plocha\Juno
[2010.04.11 20:13:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Data aplikací\Corel
[2010.04.11 20:13:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\InstallShield
[2010.04.11 20:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Corel
[2010.04.11 16:04:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\WMTools Downloaded Files
[2010.04.11 15:23:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\AskToolbar
[2010.04.11 15:04:15 | 000,000,000 | ---D | C] -- C:\Program Files\DsNET Corp
[2010.04.03 19:05:46 | 000,000,000 | -HSD | C] -- C:\FOUND.001
[2004.10.07 06:21:04 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.05.03 15:01:02 | 000,000,246 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.05.03 14:44:02 | 000,000,950 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.05.03 13:44:02 | 000,000,946 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.05.03 08:50:26 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.03 08:50:08 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.03 08:50:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.03 08:49:58 | 535,678,976 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.03 08:48:56 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2010.05.03 08:48:34 | 015,204,352 | ---- | M] () -- C:\Documents and Settings\René Harrer\ntuser.dat
[2010.05.03 08:48:34 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\René Harrer\ntuser.ini
[2010.05.02 19:46:48 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\René Harrer\Plocha\OTL.exe
[2010.05.02 18:51:36 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\Skype.lnk
[2010.05.02 14:14:08 | 000,161,792 | ---- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.27 18:11:14 | 000,001,452 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\CCleaner.lnk
[2010.04.26 20:19:00 | 000,000,202 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.04.26 18:47:54 | 078,001,391 | ---- | M] () -- C:\Documents and Settings\René Harrer\Dokumenty\NOD 32 a ESET SMART SECURITY v. 4.0.474.0 + predlžovač licencie.rar
[2010.04.17 17:48:34 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
[2010.04.17 12:15:10 | 000,001,633 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.04.14 16:07:30 | 004,464,253 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\beyonce broken-hearted girl.mp3
[2010.04.14 16:04:28 | 005,544,336 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\crazy_baby_boom.mp3
[2010.04.12 15:18:26 | 000,297,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.04.11 20:14:18 | 000,082,760 | ---- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.11 16:04:48 | 000,000,534 | ---- | M] () -- C:\Documents and Settings\René Harrer\Plocha\Zástupce - moviemk.lnk
[2010.04.11 15:23:22 | 000,000,743 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\aTube Catcher.lnk
[2010.04.11 10:50:28 | 004,291,734 | -H-- | M] () -- C:\Documents and Settings\René Harrer\Local Settings\Data aplikací\IconCache.db
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.26 18:47:52 | 078,001,391 | ---- | C] () -- C:\Documents and Settings\René Harrer\Dokumenty\NOD 32 a ESET SMART SECURITY v. 4.0.474.0 + predlžovač licencie.rar
[2010.04.17 17:48:33 | 000,001,819 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
[2010.04.14 16:07:29 | 004,464,253 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\beyonce broken-hearted girl.mp3
[2010.04.14 16:04:26 | 005,544,336 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\crazy_baby_boom.mp3
[2010.04.11 16:04:47 | 000,000,534 | ---- | C] () -- C:\Documents and Settings\René Harrer\Plocha\Zástupce - moviemk.lnk
[2010.04.11 15:22:48 | 000,000,246 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.04.11 15:04:22 | 000,000,743 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\aTube Catcher.lnk
[2010.04.09 12:12:55 | 000,001,633 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.03.30 17:16:12 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.12.22 12:25:44 | 000,002,828 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2009.11.16 11:13:59 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009.11.16 11:13:49 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.11.16 11:13:49 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.11.16 11:13:41 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.11.16 11:13:41 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009.06.07 13:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009.05.29 07:29:17 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008.12.22 19:46:03 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007.12.13 23:00:13 | 004,050,432 | ---- | C] () -- C:\WINDOWS\System32\PODATELNA.DLL
[2006.08.29 18:41:41 | 000,000,075 | ---- | C] () -- C:\WINDOWS\drawinghand.ini
[2006.08.29 18:41:37 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\TSUZ.DLL
[2006.03.07 11:30:02 | 000,000,040 | ---- | C] () -- C:\WINDOWS\opt_2460.ini
[2006.01.28 20:24:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2006.01.13 17:37:09 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2005.11.29 15:46:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2005.11.14 18:21:57 | 000,000,051 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2005.11.14 18:13:18 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2005.11.14 18:12:48 | 000,002,651 | ---- | C] () -- C:\WINDOWS\BRMFBIDI.INI
[2005.11.14 18:10:53 | 000,000,454 | ---- | C] () -- C:\WINDOWS\brwmark.ini
[2005.11.14 18:10:53 | 000,000,240 | ---- | C] () -- C:\WINDOWS\Brpcfx.ini
[2005.11.14 18:10:53 | 000,000,079 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2005.11.14 18:08:39 | 000,000,806 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2005.10.24 19:32:53 | 000,000,063 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005.10.04 20:44:07 | 000,001,940 | ---- | C] () -- C:\WINDOWS\ROUTE66.INI
[2005.10.04 20:39:23 | 000,002,758 | -H-- | C] () -- C:\WINDOWS\as456.ini
[2005.09.05 14:11:05 | 000,001,193 | ---- | C] () -- C:\WINDOWS\disney.ini
[2005.09.05 14:10:59 | 000,000,374 | ---- | C] () -- C:\WINDOWS\disneysy.ini
[2005.09.04 20:39:52 | 000,000,092 | ---- | C] () -- C:\WINDOWS\telephon.ini
[2005.08.09 14:24:28 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2005.08.09 14:24:28 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2005.08.09 13:05:15 | 000,000,161 | ---- | C] () -- C:\WINDOWS\level.ini
[2005.07.26 21:53:54 | 000,000,189 | ---- | C] () -- C:\WINDOWS\Hypotéka.INI
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2005.07.25 13:38:38 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2005.07.25 13:38:38 | 000,000,335 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll
[2005.07.25 13:38:38 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2005.07.25 13:16:46 | 000,315,392 | ---- | C] () -- C:\WINDOWS\System32\AuthorStreamingEng.dll
[2005.07.25 13:16:46 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\libisomedia.dll
[2005.07.25 13:16:46 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\pvmediacom_lic.dll
[2005.07.25 13:16:46 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\logger.dll
[2005.07.25 13:16:41 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\osclpthread.dll
[2005.07.25 11:10:11 | 000,276,186 | ---- | C] () -- C:\WINDOWS\System32\rtfctl32.dll
[2005.07.23 16:14:19 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.07.23 16:14:15 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2005.07.23 15:45:06 | 000,001,608 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2005.07.22 10:33:14 | 000,000,052 | ---- | C] () -- C:\WINDOWS\CESTINA.INI
[2005.07.22 10:14:26 | 000,000,132 | ---- | C] () -- C:\WINDOWS\SILCOM_P.INI
[2005.07.22 07:14:15 | 000,000,202 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2005.07.22 07:07:59 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
[2005.07.20 20:25:57 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005.07.20 16:12:54 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2005.07.20 15:57:25 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2005.07.01 18:35:47 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\ASLM75.SYS
[2005.07.01 18:35:46 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASLM75.SYS
[2005.07.01 18:34:29 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\ATKCheckDispIDs.dll
[2005.07.01 18:34:29 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\ATKOSDMini.DLL
[2005.07.01 18:34:29 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\atkid.ini
[2005.07.01 18:33:32 | 000,000,042 | ---- | C] () -- C:\WINDOWS\AcrobatSetupStatus.ini
[2005.07.01 12:46:05 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004.11.22 03:04:46 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2004.11.20 11:15:21 | 000,007,424 | R--- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS
[2004.11.20 11:15:21 | 000,002,538 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2003.04.09 15:38:04 | 000,005,664 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002.08.12 08:19:42 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\Welsof32.dll
[2002.01.08 16:57:34 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
< End of report >

Re: kontrola logu

Napsal: 03 kvě 2010 15:06
od 1danab
soubor hosts promazán, teď už ok :wink:

Re: kontrola logu

Napsal: 03 kvě 2010 15:08
od bek69
Díky :worship:

Re: kontrola logu

Napsal: 03 kvě 2010 15:09
od 1danab
nemáte zač :)