Prosím o kontrolu logu-zpomaleni

Zpráva

deni96 · #1 Příspěvek od **deni96** » 13 srp 2010 18:54

Prosím o kontrolu logu zacal jsme mi zpomalovat pocitac, dekuji

Logfile of random's system information tool 1.08 (written by random/random)
Run by xxx at 2010-08-13 19:44:55
Microsoft Windows 7 Ultimate
System drive C: has 131 GB (60%) free of 220 GB
Total RAM: 3327 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:46:07, on 13.8.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Users\xxx\Desktop\RSIT.exe
C:\Program Files\trend micro\xxx.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odebírat RSS/Podcast pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_rss.htm
O8 - Extra context menu item: Přidat stránku do DownloadStudio obrázkového alba... - C:\Program Files\Conceiva\DownloadStudio\ds_snap.htm
O8 - Extra context menu item: Stáhnout obrázek pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_img.htm
O8 - Extra context menu item: Stáhnout odkaz pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_file.htm
O8 - Extra context menu item: Stáhnout stránku pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_all.htm
O8 - Extra context menu item: Stáhnout video pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_video.htm
O8 - Extra context menu item: Stáhnout výběr pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_sel.htm
O8 - Extra context menu item: Zobrazit odkazy stránky pomocí DownloadStudia... - C:\Program Files\Conceiva\DownloadStudio\ds_link.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{8E2B37FE-115B-4DD1-B3F6-43D3603D057A}: NameServer = 192.168.1.254,212.80.66.7
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe

--
End of file - 7398 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MsmqIntCert"=regsvr32 /s mqrt.dll []
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2009-11-05 1505144]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-07-02 2202704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-10-06 7772704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\FlashFXP\FlashFXP.exe"="C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files\FlashFXP\FlashFXP.exe"="C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-08-13 19:44:55 ----DC---- C:\rsit
2010-08-13 19:44:55 ----D---- C:\Program Files\trend micro
2010-08-11 20:54:51 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-08-10 20:43:10 ----A---- C:\Windows\system32\rtutils.dll
2010-08-10 20:43:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-10 20:43:08 ----A---- C:\Windows\system32\msxml3.dll
2010-08-10 20:43:07 ----A---- C:\Windows\system32\ir32_32.dll
2010-08-10 20:43:07 ----A---- C:\Windows\system32\iccvid.dll
2010-08-10 20:43:06 ----A---- C:\Windows\system32\win32k.sys
2010-08-10 20:43:04 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-08-10 20:43:04 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-10 20:43:04 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-10 20:43:00 ----A---- C:\Windows\system32\mshtml.dll
2010-08-10 20:42:58 ----A---- C:\Windows\system32\wininet.dll
2010-08-10 20:42:58 ----A---- C:\Windows\system32\urlmon.dll
2010-08-10 20:42:58 ----A---- C:\Windows\system32\ieframe.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\mstime.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-10 20:42:57 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\ieui.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\iepeers.dll
2010-08-10 20:42:57 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-10 20:42:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-10 20:42:54 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-10 20:41:33 ----A---- C:\Windows\system32\schannel.dll
2010-08-03 17:22:59 ----A---- C:\Windows\system32\shell32.dll
2010-07-30 15:14:27 ----A---- C:\Windows\wininit.ini
2010-07-28 18:40:00 ----D---- C:\Users\xxx\AppData\Roaming\vlc
2010-07-27 12:35:18 ----D---- C:\Program Files\Common Files\Skype
2010-07-27 12:35:17 ----RD---- C:\Program Files\Skype
2010-07-26 23:31:06 ----D---- C:\Program Files\Alcohol Soft
2010-07-25 19:34:30 ----D---- C:\ProgramData\ESET

======List of files/folders modified in the last 1 months======

2010-08-13 19:45:10 ----D---- C:\Windows\Prefetch
2010-08-13 19:44:55 ----RD---- C:\Program Files
2010-08-13 19:44:04 ----D---- C:\Windows\Temp
2010-08-13 19:43:31 ----AD---- C:\Windows
2010-08-13 19:35:52 ----D---- C:\Windows\system32\inetsrv
2010-08-13 19:35:30 ----D---- C:\Windows\system32\config
2010-08-13 19:34:04 ----D---- C:\ProgramData\NVIDIA
2010-08-13 19:20:00 ----D---- C:\Program Files\Google
2010-08-13 19:11:22 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-08-13 19:11:17 ----D---- C:\ProgramData\DVD Shrink
2010-08-13 19:11:13 ----D---- C:\ProgramData\Bluetooth
2010-08-13 19:11:10 ----D---- C:\Program Files\PC Connectivity Solution
2010-08-13 19:10:49 ----D---- C:\ProgramData\Microsoft Help
2010-08-13 19:10:43 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-08-13 19:10:38 ----D---- C:\ProgramData\QuickMediaConverter
2010-08-13 19:06:50 ----SD---- C:\ProgramData\Microsoft
2010-08-13 19:06:50 ----HD---- C:\ProgramData
2010-08-13 19:06:50 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-08-13 19:06:50 ----D---- C:\ProgramData\PC Suite
2010-08-13 19:06:50 ----D---- C:\ProgramData\Nero
2010-08-13 19:06:49 ----D---- C:\ProgramData\DivX
2010-08-13 19:06:49 ----D---- C:\ProgramData\Adobe
2010-08-13 19:06:49 ----D---- C:\inetpub
2010-08-13 18:54:49 ----SHD---- C:\Windows\Installer
2010-08-13 18:54:49 ----SHD---- C:\Config.Msi
2010-08-13 18:54:49 ----RSD---- C:\Windows\assembly
2010-08-13 18:54:19 ----SHD---- C:\System Volume Information
2010-08-13 18:48:42 ----D---- C:\Users\xxx\AppData\Roaming\Macromedia
2010-08-13 16:54:27 ----D---- C:\UCTO2010
2010-08-13 16:45:45 ----D---- C:\Program Files\JDownloader
2010-08-12 18:31:43 ----D---- C:\Program Files\ICQ6.5
2010-08-12 17:39:48 ----D---- C:\Program Files\Opera
2010-08-12 08:36:56 ----D---- C:\Windows\system32\LogFiles
2010-08-11 21:22:13 ----D---- C:\Windows\system32\drivers\etc
2010-08-11 20:54:54 ----D---- C:\Users\xxx\AppData\Roaming\Adobe
2010-08-11 20:54:52 ----D---- C:\Program Files\Adobe
2010-08-11 20:54:51 ----D---- C:\Program Files\Common Files
2010-08-11 14:55:48 ----D---- C:\Windows\Microsoft.NET
2010-08-11 10:40:12 ----D---- C:\Windows\winsxs
2010-08-10 22:54:45 ----D---- C:\Windows\system32\drivers
2010-08-10 22:54:45 ----D---- C:\Windows\System32
2010-08-10 22:54:44 ----D---- C:\Windows\system32\migration
2010-08-10 22:54:44 ----D---- C:\Program Files\Internet Explorer
2010-08-10 20:49:47 ----D---- C:\Windows\debug
2010-08-10 20:45:04 ----D---- C:\Windows\Downloaded Program Files
2010-08-10 20:42:43 ----D---- C:\Windows\system32\catroot2
2010-08-10 20:42:43 ----D---- C:\Windows\system32\catroot
2010-08-10 20:00:22 ----D---- C:\Program Files\Common Files\Nero
2010-08-10 19:44:34 ----D---- C:\Program Files\HandBrake
2010-08-10 19:43:05 ----D---- C:\Program Files\DivX
2010-08-10 19:43:04 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-08-10 19:38:01 ----D---- C:\Users\xxx\AppData\Roaming\ArcSoft
2010-08-10 19:36:37 ----D---- C:\Windows\ehome
2010-08-10 15:44:15 ----D---- C:\Windows\Tasks
2010-08-10 15:44:14 ----D---- C:\Program Files\Glary Utilities
2010-08-09 16:36:05 ----D---- C:\Program Files\Ashampoo
2010-08-09 13:10:47 ----A---- C:\Windows\system32\OpenAL32.dll
2010-08-08 20:21:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-08 20:21:25 ----D---- C:\Windows\inf
2010-08-08 19:54:16 ----SD---- C:\Users\xxx\AppData\Roaming\Microsoft
2010-08-04 21:54:01 ----D---- C:\Program Files\WinRAR
2010-08-04 16:23:53 ----D---- C:\Program Files\CDBurnerXP
2010-08-04 16:23:21 ----D---- C:\Program Files\Defraggler
2010-08-03 20:09:31 ----A---- C:\Windows\system32\MRT.exe
2010-07-30 17:23:08 ----D---- C:\Windows\system32\Tasks
2010-07-28 18:37:12 ----D---- C:\Users\xxx\AppData\Roaming\dvdcss
2010-07-27 19:59:55 ----D---- C:\Program Files\Wyzo
2010-07-27 12:35:17 ----D---- C:\ProgramData\Skype
2010-07-26 20:33:13 ----D---- C:\Program Files\CCleaner
2010-07-26 10:28:44 ----D---- C:\Windows\system32\wdi
2010-07-25 19:34:42 ----D---- C:\Windows\system32\DriverStore
2010-07-25 13:06:07 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-26 697328]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-28 114984]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2009-09-23 55040]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2009-09-23 294912]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-06-24 136120]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-28 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-28 41312]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-07-14 117248]
R3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-28 32584]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-10-06 2779104]
R3 MQAC;@mqutil.dll,-6101; C:\Windows\system32\drivers\mqac.sys [2009-07-14 141824]
R3 NfsRdr;@%windir%\system32\nfsrc.dll,-5003; C:\Windows\system32\drivers\nfsrdr.sys [2009-07-14 201216]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-11-05 47360]
R3 PsxDrv;@%systemroot%\system32\suares.dll,-107; C:\Windows\system32\drivers\psxdrv.sys [2009-07-14 9216]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
R3 RpcXdr;@%windir%\system32\nfsrc.dll,-5011; C:\Windows\system32\drivers\rpcxdr.sys [2009-07-14 86528]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-04 277536]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2009-09-23 165376]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2009-09-23 78336]
S1 archlp;archlp; C:\Windows\system32\drivers\archlp.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
S3 FLASHSYS;FLASHSYS; \??\C:\Program Files\MSI\Live Update 3\FLASHSYS.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TVICHW32;TVICHW32; \??\C:\Windows\system32\DRIVERS\TVICHW32.SYS [2009-11-08 23600]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2009-07-14 20480]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-07-02 810144]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2009-07-14 13824]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MSMQ;@mqutil.dll,-6102; C:\Windows\system32\mqsvc.exe [2009-07-14 8704]
R2 MSMQTriggers;@mqutil.dll,-6203; C:\Windows\system32\mqtgsvc.exe [2009-07-14 126464]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
R2 NfsClnt;@%windir%\system32\nfsrc.dll,-5001; C:\Windows\system32\nfsclnt.exe [2009-07-14 52736]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 129640]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 9216]
R2 SNMP;@%SystemRoot%\system32\snmp.exe,-3; C:\Windows\System32\snmp.exe [2009-07-14 47616]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-07-06 1051968]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-10 136176]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-07-02 33584]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-07-12 435008]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-03-26 1343400]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-07-14 71680]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 14 srp 2010 08:11

Zdravim a pekne dopoledne preji

Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R

Vyskoci na Vas okenko, do ktereho zkopirujte text nize
Kód: Vybrat vše
```
services.msc
```
Kliknete na OK
Najdete sluzby nize
Služba Google Update
U kazde provedte toto
- Klik na ni pravym mysidlem a zvolit Vlastnosti
- Nyní klik na Zastavit
- Typ spousteni nastavit na Zakazano
- Potvrdte kliknutim na OK

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D5D47440-0750-463D-BAEF-A47D02414806}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

Kliknete na cervene tlacitko MoveIt!
Sem pote dejte obsah okna Results (pod zelenou carou)
Pokud budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

deni96 · #3 Příspěvek od **deni96** » 15 srp 2010 15:28

tady je ten log z toho OTM

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AlcoholAutomount deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)\ deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder moved successfully.
C:\Windows\Globalization\es-005-Nokia.tmp0 moved successfully.
C:\Windows\Globalization\tl-PH-Nokia.tmp0 moved successfully.
C:\Windows\Globalization\tl-PH.tmp0 moved successfully.
C:\Windows\Installer\MSI5E54.tmp moved successfully.
C:\Windows\Installer\MSI8AD.tmp moved successfully.
C:\Windows\Installer\MSIBD69.tmp moved successfully.
C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\wltC545.tmp moved successfully.
C:\Windows\System32\tmpBF54.tmp moved successfully.
C:\Windows\System32\tmpBF93.tmp moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: xxx
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 27219372 bytes
->FireFox cache emptied: 106676362 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 562 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 128,00 mb

OTM by OldTimer - Version 3.1.15.0 log created on 08152010_161205

#4 Příspěvek od **vyosek** » 15 srp 2010 15:35

Co pocitac, zlepsil se jeho stav

deni96 · #5 Příspěvek od **deni96** » 15 srp 2010 15:53

o trochu ano

#6 Příspěvek od **vyosek** » 15 srp 2010 15:55

Je problem pri startu PC nebo pri jeho behu - pomale spousteni aplikaci, pomale nacitani stranek atd.?

Pouzivate Grub nebo nejaky jiny bootloader - vecicka, ktera Vam dava na vyber, pri startu PC, ktery system chcete spustit (napr. jestli Win ci Linux)

Stahnete Bootkit Remover http://www.esagelab.com/files/bootkit_remover.rar

Rozbalte nejlepe na plochu a spustte
Kliknete pravym mysidlem do okna a klik na Vybrat vše - text bude na bilem pozadi a pak stisknout Enter - text bude na cernem pozadi (pokud po enteru pozadi nezcerna, tak stisknete Ctrl+C)
Stisknete libovolnou klavesu pro ukoceni utility
Sem pak vlozte log pomoci tradicni zkratky Ctrl+V

deni96 · #7 Příspěvek od **deni96** » 15 srp 2010 15:59

1.spis je problem se startem PC kdys us pak nabehne tak je vse v poradlu a rychle, a jeste kdys zapnu firefox po startu, tak trva si tak 3 minuty nes se spamatuje internet a jde neco otevrit ale to asi stim nesouvisi
2. mam jenom jeden Windows 7
3. jdu na ten Bootkit Remover

deni96 · #8 Příspěvek od **deni96** » 15 srp 2010 16:02

takze jsem zmackl enter a pozadi zcernalo takze sem nic nemam kopirovat?

#9 Příspěvek od **vyosek** » 15 srp 2010 16:03

Nakopirujte sem log...je tam prave ruznost pri kopirovani nekomu to jde Enterem nekomu CTRL+C...Vam to slo enterem, takze ted jen do odpovedi CTRL+V a melo by to tu byt...pokud ne, tak znovu spustit Bootkit remover a pouzit CTRL+C

deni96 · #10 Příspěvek od **deni96** » 15 srp 2010 16:06

Tohle jste chtel?

Bootkit Remover
(c) 2009 eSage Lab
www.esagelab.com

Program version: 1.1.0.0
OS Version: Microsoft Windows 7 Ultimate Edition (build 7600), 32-bit

System volume is \\.\C:
\\.\C: -> \\.\PhysicalDrive0 at offset 0x00000000`00007e00
Boot sector MD5 is: bb4f1627d8b9beda49ac0d010229f3ff

Size Device Name MBR Status
--------------------------------------------
465 GB \\.\PhysicalDrive0 OK (DOS/Win32 Boot code found)

Done;
Press any key to quit...

#11 Příspěvek od **vyosek** » 15 srp 2010 16:09

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte

deni96 · #12 Příspěvek od **deni96** » 15 srp 2010 16:15

chtel bych se jeste zaptat nes zacnu aby se neco nestalo tenhle bod musim provest ?Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)

#13 Příspěvek od **vyosek** » 15 srp 2010 16:23

Je neco co Vam v nem brani

ComboFix dokaze hledat a mazat havet i na flash discich, proto je vhodne je mit zapojene, kdyby neco na jich bylo...Jen Vas uklidnim, ze pokud CF neco maze, tak vytvari zalohu smazanych veci

deni96 · #14 Příspěvek od **deni96** » 15 srp 2010 17:11

tady je ten log ale mam velkej problem ten program nam smazal ucto 2010 jak to muzu obnovit???

ComboFix 10-08-14.06 - xxx 15.08.2010 17:37:22.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3327.2630 [GMT 2:00]
Spuštěný z: c:\users\xxx\Desktop\ComboFix.exe
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý

.
ADS - Windows: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\FlashGet Network
c:\program files\FlashGet Network\FlashGet 3\perf.ini
C:\UCTO2010
c:\ucto2010\{GLOB}\ADRWEB.000
c:\ucto2010\{GLOB}\BANKY.000
c:\ucto2010\{GLOB}\BANKY.X00
c:\ucto2010\{GLOB}\BANKYHB.008
c:\ucto2010\{GLOB}\CISOKR.097
c:\ucto2010\{GLOB}\DATA.000
c:\ucto2010\{GLOB}\DATA.X00
c:\ucto2010\{GLOB}\EXPDEKLA.099
c:\ucto2010\{GLOB}\EXPDEKLA.T99
c:\ucto2010\{GLOB}\FAQ.000
c:\ucto2010\{GLOB}\FAQ.X00
c:\ucto2010\{GLOB}\FIRMY.000
c:\ucto2010\{GLOB}\FORMS.099
c:\ucto2010\{GLOB}\FORMS.T99
c:\ucto2010\{GLOB}\KODPOJ.004
c:\ucto2010\{GLOB}\MODULY.000
c:\ucto2010\{GLOB}\NAHRNEM.004
c:\ucto2010\{GLOB}\NAHRNEM.X04
c:\ucto2010\{GLOB}\NEZDAN.000
c:\ucto2010\{GLOB}\NEZDAN.X00
c:\ucto2010\{GLOB}\OKRESY.000
c:\ucto2010\{GLOB}\OKRESY.X00
c:\ucto2010\{GLOB}\PAR02A1.002
c:\ucto2010\{GLOB}\PARAM1.000
c:\ucto2010\{GLOB}\PLATIDLA.004
c:\ucto2010\{GLOB}\PLATIDLA.X04
c:\ucto2010\{GLOB}\POSTY.000
c:\ucto2010\{GLOB}\POSTY.X00
c:\ucto2010\{GLOB}\REPORT.099
c:\ucto2010\{GLOB}\REPORT.T99
c:\ucto2010\{GLOB}\REPORT.X99
c:\ucto2010\{GLOB}\SAZDPH.000
c:\ucto2010\{GLOB}\SAZDPH.X00
c:\ucto2010\{GLOB}\SAZDZP.000
c:\ucto2010\{GLOB}\SAZDZP.X00
c:\ucto2010\{GLOB}\SAZDZPM.004
c:\ucto2010\{GLOB}\SAZDZPM.X04
c:\ucto2010\{GLOB}\SAZODP.009
c:\ucto2010\{GLOB}\SAZODP.X09
c:\ucto2010\{GLOB}\SLOVNIK.006
c:\ucto2010\{GLOB}\ZALDZP.004
c:\ucto2010\{GLOB}\ZALDZP.X04
c:\ucto2010\{GLOB}\ZDRSOC.004
c:\ucto2010\{GLOB}\ZDRSOC.X04
c:\ucto2010\{GLOB}\ZUJ.097
c:\ucto2010\{INFO}\ADRZPRAV.000
c:\ucto2010\{INFO}\ADRZPRAV.T00
c:\ucto2010\{INFO}\INFOAUTO.000
c:\ucto2010\{INFO}\INFOAUTO.X00
c:\ucto2010\{INFO}\INFOPROB.000
c:\ucto2010\{INFO}\INFOPROB.T00
c:\ucto2010\{INFO}\INFOPROB.X00
c:\ucto2010\{INFO}\INFOTEMA.000
c:\ucto2010\{INFO}\KONFEREN.000
c:\ucto2010\{INFO}\KONFEREN.T00
c:\ucto2010\{INFO}\PGMKOD.000
c:\ucto2010\{INFO}\PROGRAMY.000
c:\ucto2010\{INFO}\PROGRAMY.T00
c:\ucto2010\{INFO}\SLUZKOD.000
c:\ucto2010\{NOVA}\ADRESY.000
c:\ucto2010\{NOVA}\ADRESY.T00
c:\ucto2010\{NOVA}\CISABS.004
c:\ucto2010\{NOVA}\CISDOKL.001
c:\ucto2010\{NOVA}\CISDRUH.001
c:\ucto2010\{NOVA}\CISPOH.001
c:\ucto2010\{NOVA}\CISPOZN.000
c:\ucto2010\{NOVA}\CISPOZN.T00
c:\ucto2010\{NOVA}\CIST.000
c:\ucto2010\{NOVA}\CISTXT.006
c:\ucto2010\{NOVA}\CISVYKON.001
c:\ucto2010\{NOVA}\KATEG.004
c:\ucto2010\{NOVA}\PARAM2.000
c:\ucto2010\{NOVA}\PARAM2.T00
c:\ucto2010\{NOVA}\PRACSML.004
c:\ucto2010\{NOVA}\PRACSML.T04
c:\ucto2010\{NOVA}\TRIDY.004
c:\ucto2010\{NOVA}\TYPDOKL.001
c:\ucto2010\{NOVA}\UKOLY.000
c:\ucto2010\{NOVA}\UKOLY.T00
c:\ucto2010\{NOVA}\UZAV.001
c:\ucto2010\{NOVA}\ZAOKFA.006
c:\ucto2010\{OBNV}.BAT
c:\ucto2010\{OBNV}\BANKYHB.008
c:\ucto2010\{OBNV}\KODPOJ.004
c:\ucto2010\{OBNV}\MODULY.000
c:\ucto2010\{OBNV}\NAHRNEM.004
c:\ucto2010\{OBNV}\NEZDAN.000
c:\ucto2010\{OBNV}\PLATIDLA.004
c:\ucto2010\{OBNV}\SAZDPH.000
c:\ucto2010\{OBNV}\SAZDZP.000
c:\ucto2010\{OBNV}\SAZDZPM.004
c:\ucto2010\{OBNV}\SAZODP.009
c:\ucto2010\{OBNV}\SLOVNIK.006
c:\ucto2010\{OBNV}\UCTO2010.CAT
c:\ucto2010\{OBNV}\UCTOOL.EX
c:\ucto2010\{OBNV}\UTISK04.EX
c:\ucto2010\{OBNV}\ZALDZP.004
c:\ucto2010\{OBNV}\ZDRSOC.004
c:\ucto2010\{PDF1}\DAVKYK2.PDF
c:\ucto2010\{PDF1}\DAVKYK3.PDF
c:\ucto2010\{PDF1}\DAVKYP2.PDF
c:\ucto2010\{PDF1}\DAVKYP3.PDF
c:\ucto2010\{PDF1}\DPH15.PDF
c:\ucto2010\{PDF1}\DPH15P.PDF
c:\ucto2010\{PDF1}\DPH16.PDF
c:\ucto2010\{PDF1}\DPH16P.PDF
c:\ucto2010\{PDF1}\DZP.PDF
c:\ucto2010\{PDF1}\DZP_1.PDF
c:\ucto2010\{PDF1}\DZP_2.PDF
c:\ucto2010\{PDF1}\DZP_3.PDF
c:\ucto2010\{PDF1}\DZP_7.PDF
c:\ucto2010\{PDF1}\DZPP.PDF
c:\ucto2010\{PDF1}\ELDP09B.PDF
c:\ucto2010\{PDF1}\ELDP09B.TXT
c:\ucto2010\{PDF1}\ELDP09B.XFDF
c:\ucto2010\{PDF1}\ELDP09F.PDF
c:\ucto2010\{PDF1}\ELDP09F.TXT
c:\ucto2010\{PDF1}\ELDP09F.XFDF
c:\ucto2010\{PDF1}\ELDP09K.PDF
c:\ucto2010\{PDF1}\ELDP09K.TXT
c:\ucto2010\{PDF1}\ELDP09K.XFDF
c:\ucto2010\{PDF1}\ELDP09M.PDF
c:\ucto2010\{PDF1}\ELDP09P.PDF
c:\ucto2010\{PDF1}\ELDPF.PDF
c:\ucto2010\{PDF1}\ELDPK.PDF
c:\ucto2010\{PDF1}\ELDPM.PDF
c:\ucto2010\{PDF1}\ELDPP.PDF
c:\ucto2010\{PDF1}\HROMOZN.PDF
c:\ucto2010\{PDF1}\HROMOZNP.PDF
c:\ucto2010\{PDF1}\CHYBCAST.PDF
c:\ucto2010\{PDF1}\NEMOC.PDF
c:\ucto2010\{PDF1}\NEMOCP.PDF
c:\ucto2010\{PDF1}\ODCITPOL.PDF
c:\ucto2010\{PDF1}\ONZ.PDF
c:\ucto2010\{PDF1}\ONZ.TXT
c:\ucto2010\{PDF1}\ONZ.XFDF
c:\ucto2010\{PDF1}\ONZK.PDF
c:\ucto2010\{PDF1}\ONZK.TXT
c:\ucto2010\{PDF1}\ONZK.XFDF
c:\ucto2010\{PDF1}\ONZP.PDF
c:\ucto2010\{PDF1}\OSSZ.PDF
c:\ucto2010\{PDF1}\OSSZK.PDF
c:\ucto2010\{PDF1}\OSSZP.PDF
c:\ucto2010\{PDF1}\POCZAM.PDF
c:\ucto2010\{PDF1}\POJZAM.PDF
c:\ucto2010\{PDF1}\SILDAN.PDF
c:\ucto2010\{PDF1}\SILDANPO.PDF
c:\ucto2010\{PDF1}\SILDANPR.PDF
c:\ucto2010\{PDF1}\SOUHLAS.PDF
c:\ucto2010\{PDF1}\SOUHLASP.PDF
c:\ucto2010\{PDF1}\VYUCT.PDF
c:\ucto2010\{PDF1}\VYUCTP.PDF
c:\ucto2010\{PDF1}\VYUCTSRP.PDF
c:\ucto2010\{PDF1}\VYUCTSRZ.PDF
c:\ucto2010\{PDF1}\VZP.PDF
c:\ucto2010\{PDF1}\VZPP.PDF
c:\ucto2010\{PDF2}\DLBL.PDF
c:\ucto2010\{PDF2}\DLBL2.PDF
c:\ucto2010\{PDF2}\DLBW.PDF
c:\ucto2010\{PDF2}\DLBW2.PDF
c:\ucto2010\{PDF2}\DLGR.PDF
c:\ucto2010\{PDF2}\DLGR2.PDF
c:\ucto2010\{PDF2}\FABL.PDF
c:\ucto2010\{PDF2}\FABL2.PDF
c:\ucto2010\{PDF2}\FABW.PDF
c:\ucto2010\{PDF2}\FABW2.PDF
c:\ucto2010\{PDF2}\FAGR.PDF
c:\ucto2010\{PDF2}\FAGR2.PDF
c:\ucto2010\{PDF2}\OBBL.PDF
c:\ucto2010\{PDF2}\OBBL2.PDF
c:\ucto2010\{PDF2}\OBBW.PDF
c:\ucto2010\{PDF2}\OBBW2.PDF
c:\ucto2010\{PDF2}\OBGR.PDF
c:\ucto2010\{PDF2}\OBGR2.PDF
c:\ucto2010\{PDF3}\DAVKYK2X.DEF
c:\ucto2010\{PDF3}\DAVKYK2X.PDF
c:\ucto2010\{PDF3}\DAVKYK3X.DEF
c:\ucto2010\{PDF3}\DAVKYK3X.PDF
c:\ucto2010\{PDF3}\DPH15X.DEF
c:\ucto2010\{PDF3}\DPH15X.PDF
c:\ucto2010\{PDF3}\DPH16X.DEF
c:\ucto2010\{PDF3}\DPH16X.PDF
c:\ucto2010\{PDF3}\DZP_1X.DEF
c:\ucto2010\{PDF3}\DZP_1X.PDF
c:\ucto2010\{PDF3}\DZP_2X.DEF
c:\ucto2010\{PDF3}\DZP_2X.PDF
c:\ucto2010\{PDF3}\DZP_3X.DEF
c:\ucto2010\{PDF3}\DZP_3X.PDF
c:\ucto2010\{PDF3}\DZPX.DEF
c:\ucto2010\{PDF3}\DZPX.PDF
c:\ucto2010\{PDF3}\HROMOZNX.DEF
c:\ucto2010\{PDF3}\HROMOZNX.PDF
c:\ucto2010\{PDF3}\CHYBCASX.DEF
c:\ucto2010\{PDF3}\CHYBCASX.PDF
c:\ucto2010\{PDF3}\NEMOCX.DEF
c:\ucto2010\{PDF3}\NEMOCX.PDF
c:\ucto2010\{PDF3}\OSSZKX.DEF
c:\ucto2010\{PDF3}\OSSZKX.PDF
c:\ucto2010\{PDF3}\OSSZX.DEF
c:\ucto2010\{PDF3}\OSSZX.PDF
c:\ucto2010\{PDF3}\POCZAMX.DEF
c:\ucto2010\{PDF3}\POCZAMX.PDF
c:\ucto2010\{PDF3}\POJZAMX.DEF
c:\ucto2010\{PDF3}\POJZAMX.PDF
c:\ucto2010\{PDF3}\SILDANPX.DEF
c:\ucto2010\{PDF3}\SILDANPX.PDF
c:\ucto2010\{PDF3}\SILDANX.DEF
c:\ucto2010\{PDF3}\SILDANX.PDF
c:\ucto2010\{PDF3}\SOUHLASX.DEF
c:\ucto2010\{PDF3}\SOUHLASX.PDF
c:\ucto2010\{PDF3}\VYUCTSRX.DEF
c:\ucto2010\{PDF3}\VYUCTSRX.PDF
c:\ucto2010\{PDF3}\VYUCTX.DEF
c:\ucto2010\{PDF3}\VYUCTX.PDF
c:\ucto2010\{PDF3}\VZPX.DEF
c:\ucto2010\{PDF3}\VZPX.PDF
c:\ucto2010\{PRIK}\ABSENCE.004
c:\ucto2010\{PRIK}\ADRESY.000
c:\ucto2010\{PRIK}\ADRESY.T00
c:\ucto2010\{PRIK}\ADRSPEC.000
c:\ucto2010\{PRIK}\ADRSPEC.T00
c:\ucto2010\{PRIK}\ARCHIVM.004
c:\ucto2010\{PRIK}\ARCHIVM.T04
c:\ucto2010\{PRIK}\AUTA.005
c:\ucto2010\{PRIK}\AUTA.T05
c:\ucto2010\{PRIK}\BANKA1.008
c:\ucto2010\{PRIK}\CE_AUTA.006
c:\ucto2010\{PRIK}\CE_AUTA.T06
c:\ucto2010\{PRIK}\CE_TRASY.006
c:\ucto2010\{PRIK}\CEST_FH.006
c:\ucto2010\{PRIK}\CEST_FH.T06
c:\ucto2010\{PRIK}\CEST_FP.006
c:\ucto2010\{PRIK}\CEST_FS.006
c:\ucto2010\{PRIK}\CEST_VH.006
c:\ucto2010\{PRIK}\CEST_VH.T06
c:\ucto2010\{PRIK}\CEST_VP.006
c:\ucto2010\{PRIK}\CEST_VS.006
c:\ucto2010\{PRIK}\CISABS.004
c:\ucto2010\{PRIK}\CISCEST.005
c:\ucto2010\{PRIK}\CISDOKL.001
c:\ucto2010\{PRIK}\CISDRUH.001
c:\ucto2010\{PRIK}\CISPOH.001
c:\ucto2010\{PRIK}\CISPOL.006
c:\ucto2010\{PRIK}\CISPOZN.000
c:\ucto2010\{PRIK}\CISPOZN.T00
c:\ucto2010\{PRIK}\CIST.000
c:\ucto2010\{PRIK}\CISTEXT.001
c:\ucto2010\{PRIK}\CISTXT.006
c:\ucto2010\{PRIK}\CISUCEL.005
c:\ucto2010\{PRIK}\CISUKOL.004
c:\ucto2010\{PRIK}\CISVYKON.001
c:\ucto2010\{PRIK}\DAP15.003
c:\ucto2010\{PRIK}\DAP15.T03
c:\ucto2010\{PRIK}\DAP16.003
c:\ucto2010\{PRIK}\DAP16.T03
c:\ucto2010\{PRIK}\DENIK.001
c:\ucto2010\{PRIK}\DENIK.T01
c:\ucto2010\{PRIK}\DETI.004
c:\ucto2010\{PRIK}\DETI15.003
c:\ucto2010\{PRIK}\DETI16.003
c:\ucto2010\{PRIK}\DODL_AH.006
c:\ucto2010\{PRIK}\DODL_AH.T06
c:\ucto2010\{PRIK}\DODL_AP.006
c:\ucto2010\{PRIK}\DODL_AS.006
c:\ucto2010\{PRIK}\DODL_FH.006
c:\ucto2010\{PRIK}\DODL_FH.T06
c:\ucto2010\{PRIK}\DODL_FP.006
c:\ucto2010\{PRIK}\DODL_FS.006
c:\ucto2010\{PRIK}\DODL_VH.006
c:\ucto2010\{PRIK}\DODL_VH.T06
c:\ucto2010\{PRIK}\DODL_VP.006
c:\ucto2010\{PRIK}\DODL_VS.006
c:\ucto2010\{PRIK}\DOPISY.002
c:\ucto2010\{PRIK}\DOPISY.T02
c:\ucto2010\{PRIK}\DOPISYMM.002
c:\ucto2010\{PRIK}\DOPISYMM.T02
c:\ucto2010\{PRIK}\DOVROK.004
c:\ucto2010\{PRIK}\DROBMAJ.009
c:\ucto2010\{PRIK}\DROBMAJ.T09
c:\ucto2010\{PRIK}\EDIT.000
c:\ucto2010\{PRIK}\EDITPAR.000
c:\ucto2010\{PRIK}\EDITTAB.000
c:\ucto2010\{PRIK}\EDITTAB.T00
c:\ucto2010\{PRIK}\FAKT_AH.006
c:\ucto2010\{PRIK}\FAKT_AH.T06
c:\ucto2010\{PRIK}\FAKT_AP.006
c:\ucto2010\{PRIK}\FAKT_AS.006
c:\ucto2010\{PRIK}\FAKT_FH.006
c:\ucto2010\{PRIK}\FAKT_FH.T06
c:\ucto2010\{PRIK}\FAKT_FP.006
c:\ucto2010\{PRIK}\FAKT_FS.006
c:\ucto2010\{PRIK}\FAKT_VH.006
c:\ucto2010\{PRIK}\FAKT_VH.T06
c:\ucto2010\{PRIK}\FAKT_VP.006
c:\ucto2010\{PRIK}\FAKT_VS.006
c:\ucto2010\{PRIK}\FINANCE.001
c:\ucto2010\{PRIK}\FINANCE.T01
c:\ucto2010\{PRIK}\JIZDY.005
c:\ucto2010\{PRIK}\JIZDY.T05
c:\ucto2010\{PRIK}\KATEG.004
c:\ucto2010\{PRIK}\MAT_HP.007
c:\ucto2010\{PRIK}\MAT_PP.007
c:\ucto2010\{PRIK}\MATERIAL.001
c:\ucto2010\{PRIK}\MATERIAL.T01
c:\ucto2010\{PRIK}\MZDY.004
c:\ucto2010\{PRIK}\MZDY.T04
c:\ucto2010\{PRIK}\OBJE_FH.006
c:\ucto2010\{PRIK}\OBJE_FH.T06
c:\ucto2010\{PRIK}\OBJE_FP.006
c:\ucto2010\{PRIK}\OBJE_FS.006
c:\ucto2010\{PRIK}\OBJE_VH.006
c:\ucto2010\{PRIK}\OBJE_VH.T06
c:\ucto2010\{PRIK}\OBJE_VP.006
c:\ucto2010\{PRIK}\OBJE_VS.006
c:\ucto2010\{PRIK}\ODPISY.009
c:\ucto2010\{PRIK}\ODVODYM.004
c:\ucto2010\{PRIK}\OSSZ08.003
c:\ucto2010\{PRIK}\OST15.003
c:\ucto2010\{PRIK}\OST16.003
c:\ucto2010\{PRIK}\PARAM2.000
c:\ucto2010\{PRIK}\PARAM2.T00
c:\ucto2010\{PRIK}\PARHB.008
c:\ucto2010\{PRIK}\PARZAS.001
c:\ucto2010\{PRIK}\PHM.005
c:\ucto2010\{PRIK}\PLATBY.001
c:\ucto2010\{PRIK}\PLATBY.T01
c:\ucto2010\{PRIK}\POHLZAV.001
c:\ucto2010\{PRIK}\POHLZAV.T01
c:\ucto2010\{PRIK}\POHYBM.001
c:\ucto2010\{PRIK}\POHYBV.001
c:\ucto2010\{PRIK}\POHYBZ.001
c:\ucto2010\{PRIK}\POJIST.004
c:\ucto2010\{PRIK}\POSTA.002
c:\ucto2010\{PRIK}\POSTA.T02
c:\ucto2010\{PRIK}\PRACOV.004
c:\ucto2010\{PRIK}\PRACOV.T04
c:\ucto2010\{PRIK}\PRACSML.004
c:\ucto2010\{PRIK}\PRACSML.T04
c:\ucto2010\{PRIK}\PRAVJIZD.005
c:\ucto2010\{PRIK}\PRAVJIZD.T05
c:\ucto2010\{PRIK}\PRIKH.008
c:\ucto2010\{PRIK}\PRIKP.008
c:\ucto2010\{PRIK}\SCIT_H.099
c:\ucto2010\{PRIK}\SCIT_H.T99
c:\ucto2010\{PRIK}\SCIT_P.099
c:\ucto2010\{PRIK}\SHIFTF3.000
c:\ucto2010\{PRIK}\SIL.005
c:\ucto2010\{PRIK}\SIL.T05
c:\ucto2010\{PRIK}\SILDAN.005
c:\ucto2010\{PRIK}\SILVOZ.005
c:\ucto2010\{PRIK}\SRAZKY.004
c:\ucto2010\{PRIK}\SRAZKY.T04
c:\ucto2010\{PRIK}\STATY.000
c:\ucto2010\{PRIK}\STRAV.004
c:\ucto2010\{PRIK}\TECHZHOD.009
c:\ucto2010\{PRIK}\TEXTY.002
c:\ucto2010\{PRIK}\TEXTY.T02
c:\ucto2010\{PRIK}\TRIDY.004
c:\ucto2010\{PRIK}\TYPDOKL.001
c:\ucto2010\{PRIK}\UCTY.000
c:\ucto2010\{PRIK}\UKOL.004
c:\ucto2010\{PRIK}\UKOLY.000
c:\ucto2010\{PRIK}\UKOLY.T00
c:\ucto2010\{PRIK}\UPR15.003
c:\ucto2010\{PRIK}\UPR16.003
c:\ucto2010\{PRIK}\UZAV.001
c:\ucto2010\{PRIK}\VYKMAZA.UUU
c:\ucto2010\{PRIK}\VYR_HP.007
c:\ucto2010\{PRIK}\VYR_HV.007
c:\ucto2010\{PRIK}\VYR_PP.007
c:\ucto2010\{PRIK}\VYR_PV.007
c:\ucto2010\{PRIK}\VYRIZUJE.002
c:\ucto2010\{PRIK}\VYROBA.001
c:\ucto2010\{PRIK}\VYROBKY.001
c:\ucto2010\{PRIK}\VYROBKY.T01
c:\ucto2010\{PRIK}\VYUCSRAZ.097
c:\ucto2010\{PRIK}\VYUCZAL.097
c:\ucto2010\{PRIK}\VZP08.003
c:\ucto2010\{PRIK}\ZAL_H.099
c:\ucto2010\{PRIK}\ZAL_H.T99
c:\ucto2010\{PRIK}\ZAOKFA.006
c:\ucto2010\{PRIK}\ZBO_HP.007
c:\ucto2010\{PRIK}\ZBO_HV.007
c:\ucto2010\{PRIK}\ZBO_PP.007
c:\ucto2010\{PRIK}\ZBO_PV.007
c:\ucto2010\{PRIK}\ZBOZI.001
c:\ucto2010\{PRIK}\ZBOZI.T01
c:\ucto2010\{PRIK}\ZP.009
c:\ucto2010\{PRIK}\ZP.T09
c:\ucto2010\{SEST}\SEST00.PDF
c:\ucto2010\{SEST}\SEST00.TXT
c:\ucto2010\{SEST}\SEST01.PDF
c:\ucto2010\{SEST}\SEST01.TXT
c:\ucto2010\{SEST}\SEST02.PDF
c:\ucto2010\{SEST}\SEST02.TXT
c:\ucto2010\{SEST}\SEST03.PDF
c:\ucto2010\{SEST}\SEST03.TXT
c:\ucto2010\{SEST}\SEST04.PDF
c:\ucto2010\{SEST}\SEST04.TXT
c:\ucto2010\{SEST}\SEST05.PDF
c:\ucto2010\{SEST}\SEST05.TXT
c:\ucto2010\{SEST}\SEST06.PDF
c:\ucto2010\{SEST}\SEST06.TXT
c:\ucto2010\{SEST}\SEST07.PDF
c:\ucto2010\{SEST}\SEST07.TXT
c:\ucto2010\{SEST}\SEST08.PDF
c:\ucto2010\{SEST}\SEST08.TXT
c:\ucto2010\{SEST}\SEST09.PDF
c:\ucto2010\{SEST}\SEST09.TXT
c:\ucto2010\{SEST}\SEST10.PDF
c:\ucto2010\{SEST}\SEST10.TXT
c:\ucto2010\{SLOZ}\BALIK_O.HTM
c:\ucto2010\{SLOZ}\BALIK_O.JS
c:\ucto2010\{SLOZ}\BALIK_P.HTM
c:\ucto2010\{SLOZ}\BALIK_P.JS
c:\ucto2010\{SLOZ}\SLOZ_A.HTM
c:\ucto2010\{SLOZ}\SLOZ_A.JS
c:\ucto2010\{SLOZ}\SLOZ_C.HTM
c:\ucto2010\{SLOZ}\SLOZ_C.JS
c:\ucto2010\{STAN}\BACKUP.000
c:\ucto2010\{STAN}\BKPSTAT.000
c:\ucto2010\{STAN}\DANZAT.004
c:\ucto2010\{STAN}\DPH15.009
c:\ucto2010\{STAN}\HESLA.000
c:\ucto2010\{STAN}\HESLA.T00
c:\ucto2010\{STAN}\KALEXEK.099
c:\ucto2010\{STAN}\KALSZM06.099
c:\ucto2010\{STAN}\KASA.099
c:\ucto2010\{STAN}\LEAS.099
c:\ucto2010\{STAN}\LEAS.T99
c:\ucto2010\{STAN}\MESMZD.097
c:\ucto2010\{STAN}\PAR01A3.001
c:\ucto2010\{STAN}\PAR02A3.002
c:\ucto2010\{STAN}\PAR03A3.003
c:\ucto2010\{STAN}\PAR03A3.T03
c:\ucto2010\{STAN}\PAR04A3.004
c:\ucto2010\{STAN}\PAR04A3.T04
c:\ucto2010\{STAN}\PAR06A3.006
c:\ucto2010\{STAN}\PAR07A3.007
c:\ucto2010\{STAN}\PAR09A3.009
c:\ucto2010\{STAN}\PAR97A3.097
c:\ucto2010\{STAN}\PARAM3.000
c:\ucto2010\{STAN}\PARAM3.T00
c:\ucto2010\{STAN}\PATHS.000
c:\ucto2010\{STAN}\PATHS.X00
c:\ucto2010\{STAN}\PGM.000
c:\ucto2010\{STAN}\PRZADAV.097
c:\ucto2010\{STAN}\SCITAC.099
c:\ucto2010\{STAN}\STAT.000
c:\ucto2010\{STAN}\TELSEZN.099
c:\ucto2010\{STAN}\VEDKALK.099
c:\ucto2010\{TISK}\ALISFAND.EXE
c:\ucto2010\{TISK}\alisfand.ttf
c:\ucto2010\{TISK}\CALLER.EXE
c:\ucto2010\{TISK}\CMDIALOG.VBX
c:\ucto2010\{TISK}\DISKSIZW.EXE
c:\ucto2010\{TISK}\DISKY.EXE
c:\ucto2010\{TISK}\ELPODPIS.EXE
c:\ucto2010\{TISK}\FAND2PDF.EXE
c:\ucto2010\{TISK}\FANDCLIP.EXE
c:\ucto2010\{TISK}\IEUCTO.EXE
c:\ucto2010\{TISK}\MSINET.OCX
c:\ucto2010\{TISK}\MSMAPI32.OCX
c:\ucto2010\{TISK}\MSVBVM60.DLL
c:\ucto2010\{TISK}\PDFTISK1.EXE
c:\ucto2010\{TISK}\PDFTISK2.EXE
c:\ucto2010\{TISK}\PDFTISK3.EXE
c:\ucto2010\{TISK}\REGISTER.EXE
c:\ucto2010\{TISK}\SETUPCP.EXE
c:\ucto2010\{TISK}\SIFRCSSZ.CER
c:\ucto2010\{TISK}\UCTOFONT.FON
c:\ucto2010\{TISK}\UCTOFT98.EXE
c:\ucto2010\{TISK}\UCTOFTP.EXE
c:\ucto2010\{TISK}\UCTOGRAF.EXE
c:\ucto2010\{TISK}\UCTOGRAF.INI
c:\ucto2010\{TISK}\UCTOLNK.EXE
c:\ucto2010\{TISK}\UCTOLNK.UUU
c:\ucto2010\{TISK}\UCTOLNK.W7
c:\ucto2010\{TISK}\UCTOLNK.WV
c:\ucto2010\{TISK}\UCTOLNK.WXP
c:\ucto2010\{TISK}\UCTOOL.EXE
c:\ucto2010\{TISK}\UEMAIL.EXE
c:\ucto2010\{TISK}\UEMAIL06.EXE
c:\ucto2010\{TISK}\UTISK01.EXE
c:\ucto2010\{TISK}\UTISK04.EXE
c:\ucto2010\{TISK}\UTISK98.EXE
c:\ucto2010\{TISK}\UTISK98.INI
c:\ucto2010\{TISK}\VBRUN300.DLL
c:\ucto2010\{TISK}\WINVERZE.EXE
c:\ucto2010\{TREN}\ABSENCE.004
c:\ucto2010\{TREN}\ABSENCE.X04
c:\ucto2010\{TREN}\ADRESY.000
c:\ucto2010\{TREN}\ADRESY.T00
c:\ucto2010\{TREN}\ADRESY.X00
c:\ucto2010\{TREN}\ARCHIVD.001
c:\ucto2010\{TREN}\ARCHIVD.T01
c:\ucto2010\{TREN}\ARCHIVM.004
c:\ucto2010\{TREN}\ARCHIVM.T04
c:\ucto2010\{TREN}\BANKA1.008
c:\ucto2010\{TREN}\CISABS.004
c:\ucto2010\{TREN}\CISABS.X04
c:\ucto2010\{TREN}\CISDOKL.001
c:\ucto2010\{TREN}\CISDRUH.001
c:\ucto2010\{TREN}\CISDRUH.X01
c:\ucto2010\{TREN}\CISPOH.001
c:\ucto2010\{TREN}\CISPOH.X01
c:\ucto2010\{TREN}\CISPOZN.000
c:\ucto2010\{TREN}\CISPOZN.T00
c:\ucto2010\{TREN}\CIST.000
c:\ucto2010\{TREN}\CIST.X00
c:\ucto2010\{TREN}\CISTXT.006
c:\ucto2010\{TREN}\CISTXT.X06
c:\ucto2010\{TREN}\CISVYKON.001
c:\ucto2010\{TREN}\CISVYKON.X01
c:\ucto2010\{TREN}\DAP16.003
c:\ucto2010\{TREN}\DAP16.T03
c:\ucto2010\{TREN}\DENIK.001
c:\ucto2010\{TREN}\DENIK.T01
c:\ucto2010\{TREN}\DOVROK.004
c:\ucto2010\{TREN}\DOVROK.X04
c:\ucto2010\{TREN}\DROBMAJ.009
c:\ucto2010\{TREN}\DROBMAJ.T09
c:\ucto2010\{TREN}\EDIT.000
c:\ucto2010\{TREN}\EDIT.X00
c:\ucto2010\{TREN}\EDITPAR.000
c:\ucto2010\{TREN}\EDITPAR.X00
c:\ucto2010\{TREN}\EDITTAB.000
c:\ucto2010\{TREN}\EDITTAB.T00
c:\ucto2010\{TREN}\EDITTAB.X00
c:\ucto2010\{TREN}\ELDP.097
c:\ucto2010\{TREN}\ELDP.T97
c:\ucto2010\{TREN}\FINANCE.001
c:\ucto2010\{TREN}\FINANCE.T01
c:\ucto2010\{TREN}\KATEG.004
c:\ucto2010\{TREN}\KATEG.X04
c:\ucto2010\{TREN}\ODPISY.009
c:\ucto2010\{TREN}\ODPISY.X09
c:\ucto2010\{TREN}\ODVODYM.004
c:\ucto2010\{TREN}\ODVODYMX.004
c:\ucto2010\{TREN}\OSOBY16.003
c:\ucto2010\{TREN}\OSOBY16.X03
c:\ucto2010\{TREN}\OSSZ09.003
c:\ucto2010\{TREN}\OST16.003
c:\ucto2010\{TREN}\OST16.X03
c:\ucto2010\{TREN}\OZNPOJ.004
c:\ucto2010\{TREN}\PAR01A2.001
c:\ucto2010\{TREN}\PAR01A4.001
c:\ucto2010\{TREN}\PAR03A4.003
c:\ucto2010\{TREN}\PAR04A2.004
c:\ucto2010\{TREN}\PAR04A2X.004
c:\ucto2010\{TREN}\PAR06A4.006
c:\ucto2010\{TREN}\PAR09A2.009
c:\ucto2010\{TREN}\PAR09A2.T09
c:\ucto2010\{TREN}\PAR09A4.009
c:\ucto2010\{TREN}\PAR97A2.097
c:\ucto2010\{TREN}\PARAM2.000
c:\ucto2010\{TREN}\PARAM2.T00
c:\ucto2010\{TREN}\PARAM4.000
c:\ucto2010\{TREN}\PARAM4.T00
c:\ucto2010\{TREN}\PARZAS.001
c:\ucto2010\{TREN}\POHLZAV.001
c:\ucto2010\{TREN}\POHLZAV.T01
c:\ucto2010\{TREN}\POJIST.004
c:\ucto2010\{TREN}\POJIST.X04
c:\ucto2010\{TREN}\PRACOV.004
c:\ucto2010\{TREN}\PRACOV.T04
c:\ucto2010\{TREN}\PRACOV.X04
c:\ucto2010\{TREN}\PRACSML.004
c:\ucto2010\{TREN}\PRACSML.T04
c:\ucto2010\{TREN}\PRIHL.097
c:\ucto2010\{TREN}\SHIFTF3.000
c:\ucto2010\{TREN}\SHIFTF3.X00
c:\ucto2010\{TREN}\SIL.005
c:\ucto2010\{TREN}\SIL.T05
c:\ucto2010\{TREN}\TRIDY.004
c:\ucto2010\{TREN}\TRIDY.X04
c:\ucto2010\{TREN}\TYPDOKL.001
c:\ucto2010\{TREN}\TYPDOKL.X01
c:\ucto2010\{TREN}\UKOLY.000
c:\ucto2010\{TREN}\UKOLY.T00
c:\ucto2010\{TREN}\UPR16.003
c:\ucto2010\{TREN}\UPR16.X03
c:\ucto2010\{TREN}\UZAV.001
c:\ucto2010\{TREN}\VYUCZAL.097
c:\ucto2010\{TREN}\VZP09.003
c:\ucto2010\{TREN}\ZAOKFA.006
c:\ucto2010\{TREN}\ZAOKFA.X06
c:\ucto2010\{TREN}\ZP.009
c:\ucto2010\{TREN}\ZP.T09
c:\ucto2010\{TREN}\ZP.X09
c:\ucto2010\{TREN}\ZURNALD.001
c:\ucto2010\{UDOC}\CENIK.TXT
c:\ucto2010\{UDOC}\D2008.PDF
c:\ucto2010\{UDOC}\FAKTURA.TXT
c:\ucto2010\{UDOC}\INFO.TXT
c:\ucto2010\{UDOC}\LICENCE.TXT
c:\ucto2010\{UDOC}\OBJ.TXT
c:\ucto2010\{UDOC}\OBJZPR.TXT
c:\ucto2010\{UDOC}\ONAS.TXT
c:\ucto2010\{UDOC}\POUPG.TXT
c:\ucto2010\{UDOC}\PRIRUCKA.TXT
c:\ucto2010\{UDOC}\PRPRDOK.TXT
c:\ucto2010\{UDOC}\R2010.PDF
c:\ucto2010\{UDOC}\U2010.PDF
c:\ucto2010\{UDOC}\UCTOWIN7.TXT
c:\ucto2010\{UDOC}\ZPROSTRE.TXT
c:\ucto2010\{WWWW}\install.msg
c:\ucto2010\{WWWW}\komplet.exe
c:\ucto2010\{WWWW}\komplet1.pak
c:\ucto2010\{WWWW}\VERZEWWW.UUU
c:\ucto2010\{ZAL2}\{TREN}.J2B
c:\ucto2010\{ZAL2}\{TREN}.J2T
c:\ucto2010\{ZAL2}\{TREN}.J2Z
c:\ucto2010\{ZAL2}\AUTA.J2B
c:\ucto2010\{ZAL2}\AUTA.J2T
c:\ucto2010\{ZAL2}\AUTA.J2Z
c:\ucto2010\{ZAL2}\FIRMA1.J2B
c:\ucto2010\{ZAL2}\FIRMA1.J2T
c:\ucto2010\{ZAL2}\FIRMA1.J2Z
c:\ucto2010\{ZAL2}\KOUPELNY.J2B
c:\ucto2010\{ZAL2}\KOUPELNY.J2T
c:\ucto2010\{ZAL2}\KOUPELNY.J2Z
c:\ucto2010\{ZAL2}\POLAK.J2B
c:\ucto2010\{ZAL2}\POLAK.J2T
c:\ucto2010\{ZAL2}\POLAK.J2Z
c:\ucto2010\ÚČTO2010.W9X
c:\ucto2010\AUTA\ADRESY.000
c:\ucto2010\AUTA\ADRESY.T00
c:\ucto2010\AUTA\ADRESY.X00
c:\ucto2010\AUTA\BANKA1.008
c:\ucto2010\AUTA\CISABS.004
c:\ucto2010\AUTA\CISABS.X04
c:\ucto2010\AUTA\CISDOKL.001
c:\ucto2010\AUTA\CISDRUH.001
c:\ucto2010\AUTA\CISDRUH.X01
c:\ucto2010\AUTA\CISPOH.001
c:\ucto2010\AUTA\CISPOH.X01
c:\ucto2010\AUTA\CISPOZN.000
c:\ucto2010\AUTA\CISPOZN.T00
c:\ucto2010\AUTA\CIST.000
c:\ucto2010\AUTA\CIST.X00
c:\ucto2010\AUTA\CISTXT.006
c:\ucto2010\AUTA\CISTXT.X06
c:\ucto2010\AUTA\CISVYKON.001
c:\ucto2010\AUTA\CISVYKON.X01
c:\ucto2010\AUTA\DAP16.003
c:\ucto2010\AUTA\DAP16.T03
c:\ucto2010\AUTA\DENIK.001
c:\ucto2010\AUTA\DENIK.T01
c:\ucto2010\AUTA\DETI16.003
c:\ucto2010\AUTA\DETI16.X03
c:\ucto2010\AUTA\DROBMAJ.009
c:\ucto2010\AUTA\DROBMAJ.T09
c:\ucto2010\AUTA\EDIT.000
c:\ucto2010\AUTA\EDIT.X00
c:\ucto2010\AUTA\EDITPAR.000
c:\ucto2010\AUTA\EDITPAR.X00
c:\ucto2010\AUTA\FINANCE.001
c:\ucto2010\AUTA\FINANCE.T01
c:\ucto2010\AUTA\KATEG.004
c:\ucto2010\AUTA\KATEG.X04
c:\ucto2010\AUTA\OSOBY16.003
c:\ucto2010\AUTA\OSOBY16.X03
c:\ucto2010\AUTA\OSSZ09.003
c:\ucto2010\AUTA\OZNPOJ.004
c:\ucto2010\AUTA\PAR01A2.001
c:\ucto2010\AUTA\PAR01A4.001
c:\ucto2010\AUTA\PAR02A2.002
c:\ucto2010\AUTA\PAR02A4.002
c:\ucto2010\AUTA\PAR03A4.003
c:\ucto2010\AUTA\PAR04A2.004
c:\ucto2010\AUTA\PAR06A4.006
c:\ucto2010\AUTA\PAR07A4.007
c:\ucto2010\AUTA\PAR09A2.009
c:\ucto2010\AUTA\PAR09A2.T09
c:\ucto2010\AUTA\PAR09A4.009
c:\ucto2010\AUTA\PAR97A2.097
c:\ucto2010\AUTA\PARAM2.000
c:\ucto2010\AUTA\PARAM2.T00
c:\ucto2010\AUTA\PARAM4.000
c:\ucto2010\AUTA\PARAM4.T00
c:\ucto2010\AUTA\PARZAS.001
c:\ucto2010\AUTA\POHLZAV.001
c:\ucto2010\AUTA\POHLZAV.T01
c:\ucto2010\AUTA\POJIST.004
c:\ucto2010\AUTA\POJIST.X04
c:\ucto2010\AUTA\PRACOV.004
c:\ucto2010\AUTA\PRACOV.T04
c:\ucto2010\AUTA\PRACOV.X04
c:\ucto2010\AUTA\PRACSML.004
c:\ucto2010\AUTA\PRACSML.T04
c:\ucto2010\AUTA\PRIHL.097
c:\ucto2010\AUTA\SHIFTF3.000
c:\ucto2010\AUTA\SHIFTF3.X00
c:\ucto2010\AUTA\TRIDY.004
c:\ucto2010\AUTA\TRIDY.X04
c:\ucto2010\AUTA\TYPDOKL.001
c:\ucto2010\AUTA\TYPDOKL.X01
c:\ucto2010\AUTA\UKOLY.000
c:\ucto2010\AUTA\UKOLY.T00
c:\ucto2010\AUTA\UZAV.001
c:\ucto2010\AUTA\VYRIZUJE.002
c:\ucto2010\AUTA\VYRIZUJE.X02
c:\ucto2010\AUTA\VZP09.003
c:\ucto2010\AUTA\ZAOKFA.006
c:\ucto2010\AUTA\ZAOKFA.X06
c:\ucto2010\AUTA\ZBO_HP.007
c:\ucto2010\AUTA\ZURNALD.001
c:\ucto2010\B&W.PAL
c:\ucto2010\BLUE.PAL
c:\ucto2010\BROWN.PAL
c:\ucto2010\CAT.BAT
c:\ucto2010\CISABS.UUU
c:\ucto2010\CISDRUH.UUU
c:\ucto2010\CISPOH.UUU
c:\ucto2010\CISSLOUP.000
c:\ucto2010\CONFIG.TXT
c:\ucto2010\DELFILE.EXE
c:\ucto2010\DISKSIZE.EXE
c:\ucto2010\DNY.000
c:\ucto2010\FAND.CFG
c:\ucto2010\FAND.RES
c:\ucto2010\FANDCFG.09
c:\ucto2010\FANDCFG.10
c:\ucto2010\FANDCFG.BAK
c:\ucto2010\FANDHTML.EXE
c:\ucto2010\FANDINST.EXE
c:\ucto2010\FANDT602.EXE
c:\ucto2010\FILESIZE.EXE
c:\ucto2010\FIRMA1\ABSENCE.004
c:\ucto2010\FIRMA1\ABSENCE.X04
c:\ucto2010\FIRMA1\ADRESY.000
c:\ucto2010\FIRMA1\ADRESY.T00
c:\ucto2010\FIRMA1\ADRESY.X00
c:\ucto2010\FIRMA1\ARCHIVM.004
c:\ucto2010\FIRMA1\ARCHIVM.T04
c:\ucto2010\FIRMA1\BANKA1.008
c:\ucto2010\FIRMA1\CISABS.004
c:\ucto2010\FIRMA1\CISABS.X04
c:\ucto2010\FIRMA1\CISDOKL.001
c:\ucto2010\FIRMA1\CISDRUH.001
c:\ucto2010\FIRMA1\CISDRUH.X01
c:\ucto2010\FIRMA1\CISPOH.001
c:\ucto2010\FIRMA1\CISPOH.X01
c:\ucto2010\FIRMA1\CISPOZN.000
c:\ucto2010\FIRMA1\CISPOZN.T00
c:\ucto2010\FIRMA1\CIST.000
c:\ucto2010\FIRMA1\CISTXT.006
c:\ucto2010\FIRMA1\CISVYKON.001
c:\ucto2010\FIRMA1\CISVYKON.X01
c:\ucto2010\FIRMA1\DENIK.001
c:\ucto2010\FIRMA1\DENIK.T01
c:\ucto2010\FIRMA1\DOVROK.004
c:\ucto2010\FIRMA1\DOVROK.X04
c:\ucto2010\FIRMA1\EDIT.000
c:\ucto2010\FIRMA1\EDIT.X00
c:\ucto2010\FIRMA1\FINANCE.001
c:\ucto2010\FIRMA1\FINANCE.T01
c:\ucto2010\FIRMA1\KATEG.004
c:\ucto2010\FIRMA1\KATEG.X04
c:\ucto2010\FIRMA1\MZDY.004
c:\ucto2010\FIRMA1\MZDY.T04
c:\ucto2010\FIRMA1\ODVODYMX.004
c:\ucto2010\FIRMA1\PAR01A2.001
c:\ucto2010\FIRMA1\PAR01A4.001
c:\ucto2010\FIRMA1\PAR03A4.003
c:\ucto2010\FIRMA1\PAR04A2.004
c:\ucto2010\FIRMA1\PAR04A2X.004
c:\ucto2010\FIRMA1\PAR08A2.008
c:\ucto2010\FIRMA1\PAR09A2.009
c:\ucto2010\FIRMA1\PAR09A2.T09
c:\ucto2010\FIRMA1\PAR09A4.009
c:\ucto2010\FIRMA1\PAR97A2.097
c:\ucto2010\FIRMA1\PARAM2.000
c:\ucto2010\FIRMA1\PARAM2.T00
c:\ucto2010\FIRMA1\PARAM4.000
c:\ucto2010\FIRMA1\PARAM4.T00
c:\ucto2010\FIRMA1\PARZAS.001
c:\ucto2010\FIRMA1\POHLZAV.001
c:\ucto2010\FIRMA1\POHLZAV.T01
c:\ucto2010\FIRMA1\POJIST.004
c:\ucto2010\FIRMA1\POJIST.X04
c:\ucto2010\FIRMA1\PRACOV.004
c:\ucto2010\FIRMA1\PRACOV.T04
c:\ucto2010\FIRMA1\PRACOV.X04
c:\ucto2010\FIRMA1\PRACSML.004
c:\ucto2010\FIRMA1\PRACSML.T04
c:\ucto2010\FIRMA1\TRIDY.004
c:\ucto2010\FIRMA1\TRIDY.X04
c:\ucto2010\FIRMA1\TYPDOKL.001
c:\ucto2010\FIRMA1\TYPDOKL.X01
c:\ucto2010\FIRMA1\UKOLY.000
c:\ucto2010\FIRMA1\UKOLY.T00
c:\ucto2010\FIRMA1\UZAV.001
c:\ucto2010\FIRMA1\VYBERADR.000
c:\ucto2010\FIRMA1\VYBERADR.X00
c:\ucto2010\FIRMA1\ZAOKFA.006
c:\ucto2010\FIRMA1\ZURNALD.001
c:\ucto2010\FNDFILES.EXE
c:\ucto2010\HEAD602.UUU
c:\ucto2010\HELP.000
c:\ucto2010\HELP.T00
c:\ucto2010\HELP02.000
c:\ucto2010\HELP02.T00
c:\ucto2010\HELP03.000
c:\ucto2010\HELP03.T00
c:\ucto2010\HELP04.000
c:\ucto2010\HELP04.T00
c:\ucto2010\HELP05.000
c:\ucto2010\HELP05.T00
c:\ucto2010\HELP06.000
c:\ucto2010\HELP06.T00
c:\ucto2010\HELP08.000
c:\ucto2010\HELP08.T00
c:\ucto2010\HELP98.000
c:\ucto2010\HELP98.T00
c:\ucto2010\HELP99.000
c:\ucto2010\HELP99.T00
c:\ucto2010\IMPORT.PRO
c:\ucto2010\IMPORT.TRO
c:\ucto2010\INFOHLP.000
c:\ucto2010\INFOHLP.T00
c:\ucto2010\ISSHARE.EXE
c:\ucto2010\KALENDAR.000
c:\ucto2010\KALKDPH.000
c:\ucto2010\KALKPOJP.000
c:\ucto2010\KALKPOJZ.000
c:\ucto2010\KALKPRUM.000
c:\ucto2010\KALKPV08.000
c:\ucto2010\KALKTABD.000
c:\ucto2010\KATEG.UUU
c:\ucto2010\KOUPELNY\ABSENCE.004
c:\ucto2010\KOUPELNY\ABSENCE.X04
c:\ucto2010\KOUPELNY\ADRESY.000
c:\ucto2010\KOUPELNY\ADRESY.T00
c:\ucto2010\KOUPELNY\ADRESY.X00
c:\ucto2010\KOUPELNY\ARCHIVM.004
c:\ucto2010\KOUPELNY\ARCHIVM.T04
c:\ucto2010\KOUPELNY\BANKA1.008
c:\ucto2010\KOUPELNY\CISABS.004
c:\ucto2010\KOUPELNY\CISABS.X04
c:\ucto2010\KOUPELNY\CISDOKL.001
c:\ucto2010\KOUPELNY\CISDRUH.001
c:\ucto2010\KOUPELNY\CISDRUH.X01
c:\ucto2010\KOUPELNY\CISPOH.001
c:\ucto2010\KOUPELNY\CISPOH.X01
c:\ucto2010\KOUPELNY\CISPOZN.000
c:\ucto2010\KOUPELNY\CISPOZN.T00
c:\ucto2010\KOUPELNY\CIST.000
c:\ucto2010\KOUPELNY\CIST.X00
c:\ucto2010\KOUPELNY\CISTXT.006
c:\ucto2010\KOUPELNY\CISTXT.X06
c:\ucto2010\KOUPELNY\CISVYKON.001
c:\ucto2010\KOUPELNY\CISVYKON.X01
c:\ucto2010\KOUPELNY\DAP16.003
c:\ucto2010\KOUPELNY\DAP16.T03
c:\ucto2010\KOUPELNY\DENIK.001
c:\ucto2010\KOUPELNY\DENIK.T01
c:\ucto2010\KOUPELNY\DOVROK.004
c:\ucto2010\KOUPELNY\DROBMAJ.009
c:\ucto2010\KOUPELNY\DROBMAJ.T09
c:\ucto2010\KOUPELNY\EDIT.000
c:\ucto2010\KOUPELNY\EDIT.X00
c:\ucto2010\KOUPELNY\EDITPAR.000
c:\ucto2010\KOUPELNY\EDITPAR.X00
c:\ucto2010\KOUPELNY\EDITTAB.000
c:\ucto2010\KOUPELNY\EDITTAB.T00
c:\ucto2010\KOUPELNY\EDITTAB.X00
c:\ucto2010\KOUPELNY\ELDP.097
c:\ucto2010\KOUPELNY\ELDP.T97
c:\ucto2010\KOUPELNY\FINANCE.001
c:\ucto2010\KOUPELNY\FINANCE.T01
c:\ucto2010\KOUPELNY\KATEG.004
c:\ucto2010\KOUPELNY\KATEG.X04
c:\ucto2010\KOUPELNY\ODPISY.009
c:\ucto2010\KOUPELNY\ODPISY.X09
c:\ucto2010\KOUPELNY\ODVODYM.004
c:\ucto2010\KOUPELNY\ODVODYMX.004
c:\ucto2010\KOUPELNY\OSOBY16.003
c:\ucto2010\KOUPELNY\OSOBY16.X03
c:\ucto2010\KOUPELNY\OSSZ09.003
c:\ucto2010\KOUPELNY\OST16.003
c:\ucto2010\KOUPELNY\OST16.X03
c:\ucto2010\KOUPELNY\OZNPOJ.004
c:\ucto2010\KOUPELNY\PAR01A2.001
c:\ucto2010\KOUPELNY\PAR01A4.001
c:\ucto2010\KOUPELNY\PAR03A4.003
c:\ucto2010\KOUPELNY\PAR04A2.004
c:\ucto2010\KOUPELNY\PAR04A2X.004
c:\ucto2010\KOUPELNY\PAR06A4.006
c:\ucto2010\KOUPELNY\PAR09A2.009
c:\ucto2010\KOUPELNY\PAR09A2.T09
c:\ucto2010\KOUPELNY\PAR09A4.009
c:\ucto2010\KOUPELNY\PAR97A2.097
c:\ucto2010\KOUPELNY\PARAM2.000
c:\ucto2010\KOUPELNY\PARAM2.T00
c:\ucto2010\KOUPELNY\PARAM4.000
c:\ucto2010\KOUPELNY\PARAM4.T00
c:\ucto2010\KOUPELNY\PARZAS.001
c:\ucto2010\KOUPELNY\POHLZAV.001
c:\ucto2010\KOUPELNY\POHLZAV.T01
c:\ucto2010\KOUPELNY\POJIST.004
c:\ucto2010\KOUPELNY\POJIST.X04
c:\ucto2010\KOUPELNY\PRACOV.004
c:\ucto2010\KOUPELNY\PRACOV.T04
c:\ucto2010\KOUPELNY\PRACSML.004
c:\ucto2010\KOUPELNY\PRACSML.T04
c:\ucto2010\KOUPELNY\PRIHL.097
c:\ucto2010\KOUPELNY\SHIFTF3.000
c:\ucto2010\KOUPELNY\SHIFTF3.X00
c:\ucto2010\KOUPELNY\SIL.005
c:\ucto2010\KOUPELNY\SIL.T05
c:\ucto2010\KOUPELNY\TRIDY.004
c:\ucto2010\KOUPELNY\TRIDY.X04
c:\ucto2010\KOUPELNY\TYPDOKL.001
c:\ucto2010\KOUPELNY\TYPDOKL.X01
c:\ucto2010\KOUPELNY\UKOLY.000
c:\ucto2010\KOUPELNY\UKOLY.T00
c:\ucto2010\KOUPELNY\UPR16.003
c:\ucto2010\KOUPELNY\UPR16.X03
c:\ucto2010\KOUPELNY\UZAV.001
c:\ucto2010\KOUPELNY\VYUCZAL.097
c:\ucto2010\KOUPELNY\VZP09.003
c:\ucto2010\KOUPELNY\ZAOKFA.006
c:\ucto2010\KOUPELNY\ZAOKFA.X06
c:\ucto2010\KOUPELNY\ZP.009
c:\ucto2010\KOUPELNY\ZP.T09
c:\ucto2010\KOUPELNY\ZURNALD.001
c:\ucto2010\LASTAKT.TXT
c:\ucto2010\LCD1.PAL
c:\ucto2010\LCD2.PAL
c:\ucto2010\MAKEDIR.BAT
c:\ucto2010\MF5460-1.UUU
c:\ucto2010\MODUL01.PRO
c:\ucto2010\MODUL01.TRO
c:\ucto2010\MODUL02.PRO
c:\ucto2010\MODUL02.TRO
c:\ucto2010\MODUL03.PRO
c:\ucto2010\MODUL03.TRO
c:\ucto2010\MODUL04.PRO
c:\ucto2010\MODUL04.TRO
c:\ucto2010\MODUL05.PRO
c:\ucto2010\MODUL05.TRO
c:\ucto2010\MODUL06.PRO
c:\ucto2010\MODUL06.TRO
c:\ucto2010\MODUL07.PRO
c:\ucto2010\MODUL07.TRO
c:\ucto2010\MODUL08.PRO
c:\ucto2010\MODUL08.TRO
c:\ucto2010\MODUL09.PRO
c:\ucto2010\MODUL09.TRO
c:\ucto2010\MODUL97.PRO
c:\ucto2010\MODUL97.TRO
c:\ucto2010\MODUL98.PRO
c:\ucto2010\MODUL98.TRO
c:\ucto2010\MODUL99.PRO
c:\ucto2010\MODUL99.TRO
c:\ucto2010\MZDYPU.000
c:\ucto2010\NUMKB.EXE
c:\ucto2010\NUMKB3.EXE
c:\ucto2010\OPRAVY.UUU
c:\ucto2010\PGM.CAT
c:\ucto2010\PGM.RDB
c:\ucto2010\PGM.TTT
c:\ucto2010\POLAK\ADRESY.000
c:\ucto2010\POLAK\ADRESY.T00
c:\ucto2010\POLAK\ARCHIVM.004
c:\ucto2010\POLAK\ARCHIVM.T04
c:\ucto2010\POLAK\BANKA1.008
c:\ucto2010\POLAK\CISABS.004
c:\ucto2010\POLAK\CISABS.X04
c:\ucto2010\POLAK\CISDOKL.001
c:\ucto2010\POLAK\CISDRUH.001
c:\ucto2010\POLAK\CISDRUH.X01
c:\ucto2010\POLAK\CISPOH.001
c:\ucto2010\POLAK\CISPOH.X01
c:\ucto2010\POLAK\CISPOZN.000
c:\ucto2010\POLAK\CISPOZN.T00
c:\ucto2010\POLAK\CIST.000
c:\ucto2010\POLAK\CIST.X00
c:\ucto2010\POLAK\CISTXT.006
c:\ucto2010\POLAK\CISTXT.X06
c:\ucto2010\POLAK\CISVYKON.001
c:\ucto2010\POLAK\CISVYKON.X01
c:\ucto2010\POLAK\DENIK.001
c:\ucto2010\POLAK\DENIK.T01
c:\ucto2010\POLAK\DOVROK.004
c:\ucto2010\POLAK\DROBMAJ.009
c:\ucto2010\POLAK\DROBMAJ.T09
c:\ucto2010\POLAK\EDIT.000
c:\ucto2010\POLAK\EDIT.X00
c:\ucto2010\POLAK\EDITPAR.000
c:\ucto2010\POLAK\EDITPAR.X00
c:\ucto2010\POLAK\FAKT_FH.006
c:\ucto2010\POLAK\FAKT_FH.T06
c:\ucto2010\POLAK\FAKT_VH.006
c:\ucto2010\POLAK\FAKT_VH.T06
c:\ucto2010\POLAK\FINANCE.001
c:\ucto2010\POLAK\FINANCE.T01
c:\ucto2010\POLAK\KATEG.004
c:\ucto2010\POLAK\KATEG.X04
c:\ucto2010\POLAK\OZNPOJ.004
c:\ucto2010\POLAK\PAR01A2.001
c:\ucto2010\POLAK\PAR01A4.001
c:\ucto2010\POLAK\PAR04A2.004
c:\ucto2010\POLAK\PAR06A4.006
c:\ucto2010\POLAK\PAR09A2.009
c:\ucto2010\POLAK\PAR09A2.T09
c:\ucto2010\POLAK\PAR09A4.009
c:\ucto2010\POLAK\PAR97A2.097
c:\ucto2010\POLAK\PARAM2.000
c:\ucto2010\POLAK\PARAM2.T00
c:\ucto2010\POLAK\PARAM4.000
c:\ucto2010\POLAK\PARAM4.T00
c:\ucto2010\POLAK\PARZAS.001
c:\ucto2010\POLAK\POHLZAV.001
c:\ucto2010\POLAK\POHLZAV.T01
c:\ucto2010\POLAK\POJIST.004
c:\ucto2010\POLAK\POJIST.X04
c:\ucto2010\POLAK\PRACOV.004
c:\ucto2010\POLAK\PRACOV.T04
c:\ucto2010\POLAK\PRACSML.004
c:\ucto2010\POLAK\PRACSML.T04
c:\ucto2010\POLAK\PRIHL.097
c:\ucto2010\POLAK\TRIDY.004
c:\ucto2010\POLAK\TRIDY.X04
c:\ucto2010\POLAK\TYPDOKL.001
c:\ucto2010\POLAK\TYPDOKL.X01
c:\ucto2010\POLAK\UKOLY.000
c:\ucto2010\POLAK\UKOLY.T00
c:\ucto2010\POLAK\UZAV.001
c:\ucto2010\POLAK\ZAOKFA.006
c:\ucto2010\POLAK\ZAOKFA.X06
c:\ucto2010\POLAK\ZURNALD.001
c:\ucto2010\PRINTER.TXT
c:\ucto2010\RADKY.TXT
c:\ucto2010\RENFILES.BAT
c:\ucto2010\RO.EXE
c:\ucto2010\SEARCHX.EXE
c:\ucto2010\SEST01.PRO
c:\ucto2010\SEST01.TRO
c:\ucto2010\SEST02.PRO
c:\ucto2010\SEST02.TRO
c:\ucto2010\SEST03.PRO
c:\ucto2010\SEST03.TRO
c:\ucto2010\SEST04.PRO
c:\ucto2010\SEST04.TRO
c:\ucto2010\SEST05.PRO
c:\ucto2010\SEST05.TRO
c:\ucto2010\SEST06.PRO
c:\ucto2010\SEST06.TRO
c:\ucto2010\SEST07.PRO
c:\ucto2010\SEST07.TRO
c:\ucto2010\SEST08.PRO
c:\ucto2010\SEST08.TRO
c:\ucto2010\SEST09.PRO
c:\ucto2010\SEST09.TRO
c:\ucto2010\SESTAVY.CAT
c:\ucto2010\SESTAVY.RDB
c:\ucto2010\SESTAVY.TTT
c:\ucto2010\SETDATE.EXE
c:\ucto2010\SETFILES.EXE
c:\ucto2010\SEZNTISK.000
c:\ucto2010\SEZNTISK.T00
c:\ucto2010\SLOVY.000
c:\ucto2010\SLOVY.X00
c:\ucto2010\SPEC01.PRO
c:\ucto2010\SPEC01.TRO
c:\ucto2010\SPEC02.PRO
c:\ucto2010\SPEC02.TRO
c:\ucto2010\SPEC03.PRO
c:\ucto2010\SPEC03.TRO
c:\ucto2010\SPEC04.PRO
c:\ucto2010\SPEC04.TRO
c:\ucto2010\SPEC05.PRO
c:\ucto2010\SPEC05.TRO
c:\ucto2010\SPEC06.PRO
c:\ucto2010\SPEC06.TRO
c:\ucto2010\SPEC07.PRO
c:\ucto2010\SPEC07.TRO
c:\ucto2010\SUBDIR.EXE
c:\ucto2010\SUDLICH.EXE
c:\ucto2010\TIPY.000
c:\ucto2010\TIPY.T00
c:\ucto2010\TIPY.X00
c:\ucto2010\TTT.CAT
c:\ucto2010\TTT.RDB
c:\ucto2010\TTT.TTT
c:\ucto2010\TTTNEW.UUU
c:\ucto2010\TXTNARTF.EXE
c:\ucto2010\U.BAT
c:\ucto2010\UCTO.000
c:\ucto2010\UCTO.PAL
c:\ucto2010\UCTO2010.CAT
c:\ucto2010\UCTO2010.ICO
c:\ucto2010\UCTO2010.RDB
c:\ucto2010\UCTO2010.TTT
c:\ucto2010\UCTOINFO.PRO
c:\ucto2010\UCTOINFO.TRO
c:\ucto2010\UCTOTXT.UUU
c:\ucto2010\UFAND.EXE
c:\ucto2010\UFAND.OVR
c:\ucto2010\UFANDHLP.000
c:\ucto2010\UFANDHLP.T00
c:\ucto2010\UK.BAT
c:\ucto2010\UPG.PRO
c:\ucto2010\UPG.TRO
c:\ucto2010\UPG01.PRO
c:\ucto2010\UPG01.TRO
c:\ucto2010\UPG02.PRO
c:\ucto2010\UPG02.TRO
c:\ucto2010\UPG03.PRO
c:\ucto2010\UPG03.TRO
c:\ucto2010\UPG04.PRO
c:\ucto2010\UPG04.TRO
c:\ucto2010\UPG05.PRO
c:\ucto2010\UPG05.TRO
c:\ucto2010\UPG06.PRO
c:\ucto2010\UPG06.TRO
c:\ucto2010\UPG07.PRO
c:\ucto2010\UPG07.TRO
c:\ucto2010\UPG08.PRO
c:\ucto2010\UPG08.TRO
c:\ucto2010\UPG09.PRO
c:\ucto2010\UPG09.TRO
c:\ucto2010\UPG97.PRO
c:\ucto2010\UPG97.TRO
c:\ucto2010\UPG99.PRO
c:\ucto2010\UPG99.TRO
c:\ucto2010\UPGPAR.000
c:\ucto2010\VEDLCIN.UUU
c:\ucto2010\VERZE.UUU
c:\ucto2010\VYBERTXT.EXE
c:\ucto2010\VZORTISK.000
c:\ucto2010\ZASTUPCE.CAT
c:\ucto2010\ZASTUPCE.INI
c:\ucto2010\ZASTUPCE.RDB
c:\ucto2010\ZASTUPCE.TTT
c:\ucto2010\ZETROZET.PAL
c:\ucto2010\ZZZ.BAT
c:\users\xxx\AppData\Roaming\BITS
c:\users\xxx\AppData\Roaming\BITS\BITS.ini
c:\users\xxx\AppData\Roaming\BITS\DHTTable.dat
c:\users\xxx\AppData\Roaming\BITS\P2PCfg.ini
c:\users\xxx\AppData\Roaming\BITS\ProxyList.ini
c:\users\xxx\AppData\Roaming\BITS\pstat.dat
c:\users\xxx\AppData\Roaming\BITS\pup.dat
c:\users\xxx\AppData\Roaming\FlashGetBHO
c:\users\xxx\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll
c:\users\xxx\AppData\Roaming\FlashGetBHO\FlashGetHook.dll
c:\users\xxx\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
c:\users\xxx\AppData\Roaming\FlashGetBHO\GetUrl.htm
c:\windows\system32\%appdata%
c:\windows\system32\secustat.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-15 do 2010-08-15 )))))))))))))))))))))))))))))))
.

2010-08-15 15:51 . 2010-08-15 15:55 -------- d-----w- c:\users\xxx\AppData\Local\temp
2010-08-15 15:30 . 2010-08-15 15:31 -------- dc----w- C:\32788R22FWJFW
2010-08-15 14:52 . 2010-08-15 14:52 -------- d-----w- c:\users\xxx\AppData\Local\Cooliris
2010-08-13 18:15 . 2010-08-13 18:15 -------- d-----w- c:\users\xxx\AppData\Roaming\FlashGet
2010-08-13 17:44 . 2010-08-13 17:46 -------- d-----w- c:\program files\trend micro
2010-08-11 18:54 . 2010-08-11 18:54 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-10 18:43 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2010-08-10 18:43 . 2010-06-14 06:12 1286016 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-08-10 18:43 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2010-08-10 18:43 . 2010-07-29 06:30 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-08-10 18:43 . 2010-07-29 06:30 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-08-10 18:43 . 2010-06-19 04:07 2326016 ----a-w- c:\windows\system32\win32k.sys
2010-08-10 18:43 . 2010-06-22 02:47 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-10 18:43 . 2010-06-22 02:47 307200 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-08-10 18:43 . 2010-06-22 02:47 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-08-10 18:42 . 2010-06-30 06:25 978432 ----a-w- c:\windows\system32\wininet.dll
2010-08-10 18:42 . 2010-06-19 06:33 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-08-10 18:42 . 2010-06-19 06:33 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-08-10 18:41 . 2010-06-16 05:48 224256 ----a-w- c:\windows\system32\schannel.dll
2010-07-31 21:26 . 2010-07-31 21:26 -------- d-----w- c:\users\xxx\AppData\Local\Electronic_Arts_Inc
2010-07-28 16:40 . 2010-07-28 16:40 -------- d-----w- c:\users\xxx\AppData\Roaming\vlc
2010-07-27 10:35 . 2010-07-27 10:35 -------- d-----w- c:\program files\Common Files\Skype
2010-07-27 10:35 . 2010-07-27 10:35 -------- d-----r- c:\program files\Skype
2010-07-26 21:31 . 2010-07-26 21:31 -------- d-----w- c:\program files\Alcohol Soft
2010-07-25 20:39 . 2010-07-25 20:39 -------- d-----w- c:\users\xxx\dwhelper

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-15 15:53 . 2009-11-03 20:17 4194304 ----a-w- c:\windows\ServiceProfiles\NetworkService\msmqlog.bin
2010-08-15 14:04 . 2010-01-17 11:55 -------- d-----w- c:\program files\JDownloader
2010-08-13 17:50 . 2009-11-18 20:45 -------- d-----w- c:\programdata\Microsoft Help
2010-08-13 17:50 . 2009-11-18 20:52 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-08-13 17:34 . 2009-11-03 21:27 -------- d-----w- c:\programdata\NVIDIA
2010-08-13 17:20 . 2010-04-10 20:10 -------- d-----w- c:\program files\Google
2010-08-13 17:11 . 2009-11-09 16:04 -------- d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-08-13 17:11 . 2009-11-03 21:21 -------- d-----w- c:\programdata\DVD Shrink
2010-08-13 17:11 . 2010-01-14 19:29 -------- d-----w- c:\programdata\Bluetooth
2010-08-13 17:11 . 2010-06-06 13:24 -------- d-----w- c:\program files\PC Connectivity Solution
2010-08-13 17:10 . 2009-11-04 14:47 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-08-13 17:10 . 2010-01-12 13:10 -------- d-----w- c:\programdata\QuickMediaConverter
2010-08-13 17:06 . 2010-02-27 09:59 -------- d-----w- c:\programdata\PC Suite
2010-08-13 17:06 . 2009-11-05 20:47 -------- d-----w- c:\programdata\Nero
2010-08-13 17:06 . 2009-11-03 21:49 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-08-13 17:06 . 2010-04-15 15:03 -------- d-----w- c:\programdata\DivX
2010-08-12 16:31 . 2009-11-05 15:54 -------- d-----w- c:\program files\ICQ6.5
2010-08-12 15:39 . 2009-11-03 20:32 -------- d-----w- c:\program files\Opera
2010-08-10 18:00 . 2009-11-05 20:47 -------- d-----w- c:\program files\Common Files\Nero
2010-08-10 17:44 . 2010-06-14 16:30 -------- d-----w- c:\program files\HandBrake
2010-08-10 17:43 . 2010-01-31 18:43 -------- d-----w- c:\program files\DivX
2010-08-10 17:43 . 2010-06-14 16:57 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-08-10 17:38 . 2009-11-27 13:08 -------- d-----w- c:\users\xxx\AppData\Roaming\ArcSoft
2010-08-10 13:44 . 2009-11-03 21:05 -------- d-----w- c:\program files\Glary Utilities
2010-08-09 14:36 . 2009-12-04 17:54 -------- d-----w- c:\program files\Ashampoo
2010-08-09 11:10 . 2010-01-05 16:27 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2010-08-04 14:23 . 2009-11-06 14:23 -------- d-----w- c:\program files\CDBurnerXP
2010-08-04 14:23 . 2009-11-03 21:03 -------- d-----w- c:\program files\Defraggler
2010-07-28 16:37 . 2010-02-27 18:33 -------- d-----w- c:\users\xxx\AppData\Roaming\dvdcss
2010-07-27 17:59 . 2009-11-03 20:44 -------- d-----w- c:\program files\Wyzo
2010-07-27 10:35 . 2009-11-05 15:36 -------- d-----w- c:\programdata\Skype
2010-07-26 18:45 . 2009-11-05 14:05 697328 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-26 18:33 . 2009-11-03 20:31 -------- d-----w- c:\program files\CCleaner
2010-07-12 08:17 . 2009-11-09 18:50 -------- d-----w- c:\program files\TuneUp Utilities 2010
2010-07-11 21:46 . 2010-07-11 21:46 -------- d-----w- c:\program files\Common Files\Java
2010-07-11 21:45 . 2010-04-15 12:53 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-11 17:45 . 2010-07-11 17:45 -------- d-----w- c:\program files\TeamViewer
2010-07-11 11:55 . 2010-02-27 09:59 -------- d-----w- c:\users\xxx\AppData\Roaming\PC Suite
2010-07-11 11:55 . 2010-07-11 11:55 0 ---ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-07-06 11:57 . 2009-11-09 18:51 30528 ----a-w- c:\windows\system32\TURegOpt.exe
2010-07-06 11:52 . 2010-07-12 08:17 21312 ----a-w- c:\windows\system32\authuitu.dll
2010-07-06 11:52 . 2010-07-12 08:17 30016 ----a-w- c:\windows\system32\uxtuneup.dll
2010-07-04 20:24 . 2009-12-07 17:53 -------- d-----w- c:\users\xxx\AppData\Roaming\TeamViewer
2010-06-30 15:24 . 2009-11-05 21:06 -------- d-----w- c:\users\xxx\AppData\Roaming\Nero
2010-06-25 10:33 . 2009-11-07 16:36 -------- d-----w- c:\program files\NVIDIA Corporation
2010-06-25 10:33 . 2009-11-07 16:35 -------- d-----w- c:\program files\AGEIA Technologies
2010-06-25 10:33 . 2009-11-07 16:35 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-06-24 07:04 . 2010-06-24 07:04 136120 ----a-w- c:\windows\system32\drivers\eamonm.sys
2010-06-23 12:55 . 2009-11-18 20:54 -------- d-----w- c:\program files\Microsoft.NET
2010-06-22 13:44 . 2009-11-04 16:53 -------- d-----w- c:\programdata\NOS
2010-06-21 17:26 . 2010-06-21 17:26 -------- d-----w- c:\users\xxx\AppData\Roaming\NVIDIA
2010-06-21 17:23 . 2010-06-21 17:23 -------- d-----w- c:\programdata\SEGA Corporation
2010-06-19 18:15 . 2010-06-05 16:21 -------- d-----w- c:\programdata\LightScribe
2010-06-19 18:10 . 2010-06-19 18:10 -------- d-----w- c:\users\xxx\AppData\Roaming\2XL
2010-06-19 18:06 . 2010-01-05 16:27 -------- d-----w- c:\program files\OpenAL
2010-06-08 13:55 . 2009-11-03 20:09 109608 ----a-w- c:\users\xxx\AppData\Local\GDIPFONTCACHEV1.DAT
2010-06-02 02:55 . 2010-07-11 13:43 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-06-02 02:55 . 2010-07-11 13:43 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-06-02 02:55 . 2010-07-11 13:43 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2010-05-27 07:24 . 2010-06-08 19:31 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-27 03:49 . 2010-06-08 19:31 293888 ----a-w- c:\windows\system32\atmfd.dll
2010-05-26 09:41 . 2010-07-11 13:43 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-05-26 09:41 . 2010-07-11 13:43 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-05-26 09:41 . 2010-07-11 13:43 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-05-26 09:41 . 2010-07-11 13:43 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2010-05-26 09:41 . 2010-07-11 13:43 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-05-21 12:14 . 2009-11-03 20:02 221568 ------w- c:\windows\system32\MpSigStub.exe
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

------- Sigcheck -------

[-] 2010-03-26 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsmqIntCert"="mqrt.dll" [2009-07-14 152064]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-11-05 1505144]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-07-02 2202704]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2009-10-06 17:08 7772704 ------w- c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"FileHippo.com"="c:\program files\FileHippo.com\UpdateChecker.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

R1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
R3 FLASHSYS;FLASHSYS;c:\program files\MSI\Live Update 3\FLASHSYS.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
R3 TVICHW32;TVICHW32;c:\windows\system32\DRIVERS\TVICHW32.SYS [2009-11-08 23600]
R3 WatAdminSvc;WatAdminSvc;c:\windows\system32\Wat\WatAdminSvc.exe [2010-03-26 1343400]
R4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-10 136176]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-26 697328]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-28 114984]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-06-24 136120]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-07-02 810144]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-28 41312]
S2 NfsClnt;Klient pro systém souborů NFS;c:\windows\system32\nfsclnt.exe [2009-07-14 52736]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-07-06 1051968]
S3 NfsRdr;Přesměrovač klienta systému souborů NFS;c:\windows\system32\drivers\nfsrdr.sys [2009-07-13 201216]
S3 PsxDrv;PsxDrv;c:\windows\system32\drivers\psxdrv.sys [2009-07-13 9216]
S3 RpcXdr;Server pro systém souborů NFS – protokol ONCRPC;c:\windows\system32\drivers\rpcxdr.sys [2009-07-13 86528]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-03-04 277536]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
ipripsvc REG_MULTI_SZ iprip
LPDService REG_MULTI_SZ LPDSVC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-08-15 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-11-03 09:21]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
IE: Odebírat RSS/Podcast pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_rss.htm
IE: Přidat stránku do DownloadStudio obrázkového alba... - c:\program files\Conceiva\DownloadStudio\ds_snap.htm
IE: Stáhnout obrázek pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_img.htm
IE: Stáhnout odkaz pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_file.htm
IE: Stáhnout stránku pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_all.htm
IE: Stáhnout video pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_video.htm
IE: Stáhnout výběr pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_sel.htm
IE: Zobrazit odkazy stránky pomocí DownloadStudia... - c:\program files\Conceiva\DownloadStudio\ds_link.htm
IE: ????3?? - c:\users\xxx\AppData\Roaming\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\users\xxx\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
TCP: {8E2B37FE-115B-4DD1-B3F6-43D3603D057A} = 192.168.1.254,212.80.66.7
FF - ProfilePath - c:\users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\o7rx63ft.default\
FF - prefs.js: browser.search.selectedEngine - Centrum.cz Search
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.centrum.cz/index.php?toolbar=centrum-1.0.0&q=
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\Wat\npWatWeb.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1385847557-317183542-903443359-1001\Software\Andreas Haak\a*Ű]
@Allowed: (Read) (RestrictedCode)
"Language"="English"

[HKEY_USERS\S-1-5-21-1385847557-317183542-903443359-1001\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@="c:\\Users\\xxx\\AppData\\Roaming\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022

[HKEY_USERS\S-1-5-21-1385847557-317183542-903443359-1001\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@="c:\\Users\\xxx\\AppData\\Roaming\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3

[HKEY_USERS\S-1-5-21-1385847557-317183542-903443359-1001\Software\SecuROM\License information*]
"datasecu"=hex:c9,a7,a3,97,8f,04,63,07,74,77,cb,33,b6,b4,bd,9e,47,9d,72,26,68,
34,69,7e,4c,93,eb,fc,b8,cd,bc,30,a7,0c,fa,63,bf,ba,bd,65,10,d8,1a,af,eb,92,\
"rkeysecu"=hex:8f,a7,7a,5d,93,81,74,11,cb,1d,12,20,23,c7,40,55

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(5764)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\psxss.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\CISVC.EXE
c:\windows\system32\taskhost.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\windows\system32\mqsvc.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\System32\tcpsvcs.exe
c:\windows\System32\snmp.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\mqtgsvc.exe
c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\AUDIODG.EXE
.
**************************************************************************
.
Celkový čas: 2010-08-15 18:06:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-08-15 16:06

Před spuštěním: Volných bajtů: 133 851 619 328
Po spuštění: Volných bajtů: 133 417 345 024

- - End Of File - - 5718DBBE7A7121BB42820482C4E833C7

#15 Příspěvek od **vyosek** » 15 srp 2010 17:30

Predpokladam ze slozku C:\UCTO2010 budete chtit zpatky ze

On je CF bohuzel na tohle paranoidni

VIRY.CZ

Prosím o kontrolu logu-zpomaleni

Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni

Re: Prosím o kontrolu logu-zpomaleni