prosim vas o preventivku
Napsal: 06 říj 2010 15:46
prosim Vas o preventivku defender mi vyhodil nejaky problem pri spustani updateutil aplication . dakujem
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jozef at 2010-10-06 16:35:38
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 44 GB (56%) free of 79 GB
Total RAM: 958 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:36:13, on 6.10.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jozef\Downloads\RSIT.exe
C:\Program Files\trend micro\Jozef.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NetFxUpdate_v1.1.4322] "C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
--
End of file - 5171 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-07-09 503808]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-27 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-07-09 503808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-07-02 2202704]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NetFxUpdate_v1.1.4322"=C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe [2004-08-10 106496]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-10-06 16:35:38 ----D---- C:\rsit
2010-10-06 16:35:38 ----D---- C:\Program Files\trend micro
2010-10-02 10:35:41 ----D---- C:\ProgramData\vsosdk
2010-10-02 09:28:09 ----A---- C:\Windows\system32\sipr3260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\wvc1dmod.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\vp7vfw.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\Pncrt.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv43260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv33260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv23260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\cook3260.dll
2010-09-29 20:28:21 ----D---- C:\ProgramData\FarmFrenzy3_Arctica
2010-09-29 20:19:18 ----D---- C:\Program Files\Farm Frenzy 2
2010-09-29 19:31:34 ----D---- C:\ProgramData\AlawarWrapper
2010-09-29 11:47:54 ----A---- C:\Windows\system32\tzres.dll
2010-09-28 17:43:01 ----D---- C:\ProgramData\FarmFrenzy3
2010-09-28 16:33:45 ----D---- C:\ProgramData\FarmFrenzy2
2010-09-28 16:33:28 ----D---- C:\Windows\Farm Frenzy 2
2010-09-28 14:35:01 ----D---- C:\Users\Jozef\AppData\Roaming\vlc
2010-09-28 14:34:11 ----D---- C:\Program Files\VideoLAN
2010-09-28 14:33:17 ----A---- C:\Windows\avisplitter.ini
2010-09-28 14:33:14 ----A---- C:\Windows\system32\yv12vfw.dll
2010-09-28 14:33:14 ----A---- C:\Windows\system32\xvidvfw.dll
2010-09-28 14:33:14 ----A---- C:\Windows\system32\xvidcore.dll
2010-09-28 14:33:13 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-09-28 14:33:13 ----A---- C:\Windows\system32\ff_vfw.dll
2010-09-28 07:54:35 ----D---- C:\DirectX
2010-09-27 21:32:22 ----D---- C:\Users\Jozef\AppData\Roaming\BSplayer Pro
2010-09-27 21:32:22 ----D---- C:\Users\Jozef\AppData\Roaming\BSplayer
2010-09-27 21:32:10 ----D---- C:\Program Files\Webteh
2010-09-24 06:13:15 ----D---- C:\Users\Jozef\AppData\Roaming\avidemux
2010-09-18 12:04:29 ----D---- C:\Program Files\iWin.com Games
2010-09-17 13:41:44 ----D---- C:\Program Files\MumboJumbo
2010-09-15 21:39:42 ----D---- C:\ProgramData\T1 Games
2010-09-14 21:59:02 ----A---- C:\Windows\system32\usp10.dll
2010-09-14 21:59:00 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-14 21:58:59 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-09-14 21:58:55 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-12 10:42:59 ----D---- C:\ProgramData\hps
2010-09-12 10:36:16 ----D---- C:\Program Files\Fotolab
======List of files/folders modified in the last 1 months======
2010-10-06 16:35:52 ----D---- C:\Windows\Prefetch
2010-10-06 16:35:43 ----D---- C:\Windows\Temp
2010-10-06 16:35:38 ----RD---- C:\Program Files
2010-10-06 16:28:33 ----D---- C:\Windows\Microsoft.NET
2010-10-06 16:28:31 ----RSD---- C:\Windows\assembly
2010-10-06 08:14:28 ----D---- C:\Windows
2010-10-06 08:13:11 ----D---- C:\Windows\winsxs
2010-10-06 08:12:35 ----SHD---- C:\Windows\Installer
2010-10-06 08:12:34 ----SHD---- C:\Config.Msi
2010-10-06 08:11:44 ----SHD---- C:\System Volume Information
2010-10-06 08:02:34 ----D---- C:\Windows\system32\catroot
2010-10-04 16:28:14 ----D---- C:\Program Files\CCleaner
2010-10-04 10:48:01 ----D---- C:\Users\Jozef\AppData\Roaming\ICQ
2010-10-03 08:08:01 ----D---- C:\Users\Jozef\AppData\Roaming\uTorrent
2010-10-02 13:48:32 ----D---- C:\Users\Jozef\AppData\Roaming\Vso
2010-10-02 10:35:41 ----HD---- C:\ProgramData
2010-10-02 09:28:09 ----D---- C:\Windows\System32
2010-10-02 09:28:09 ----D---- C:\Program Files\VSO
2010-09-30 07:16:31 ----D---- C:\Windows\system32\catroot2
2010-09-29 17:39:52 ----D---- C:\Windows\rescache
2010-09-29 17:25:57 ----SD---- C:\Users\Jozef\AppData\Roaming\Microsoft
2010-09-29 14:31:37 ----D---- C:\Windows\system32\cs-CZ
2010-09-29 14:30:52 ----D---- C:\Program Files\Internet Explorer
2010-09-28 16:34:44 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-28 15:52:54 ----D---- C:\Users\Jozef\AppData\Roaming\Media Player Classic
2010-09-28 07:29:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-28 07:29:06 ----D---- C:\Windows\inf
2010-09-17 14:38:41 ----D---- C:\Program Files\Common Files
2010-09-17 14:38:24 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-17 12:56:24 ----D---- C:\Windows\Minidump
2010-09-17 12:56:24 ----D---- C:\Windows\Debug
2010-09-16 20:15:20 ----D---- C:\Program Files\Mozilla Firefox
2010-09-15 21:39:06 ----D---- C:\Windows\system32\Tasks
2010-09-14 22:16:51 ----A---- C:\Windows\system32\mrt.exe
2010-09-14 22:16:42 ----D---- C:\Program Files\Windows Mail
2010-09-13 20:42:49 ----D---- C:\Program Files\OXXOGames
2010-09-12 10:42:39 ----D---- C:\Program Files\Common Files\microsoft shared
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-11 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-28 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-06-24 136120]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-28 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-28 41312]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-28 32584]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-07-09 47360]
S3 a5kz9wmt;a5kz9wmt; C:\Windows\system32\drivers\a5kz9wmt.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-07-02 810144]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-29 31048]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-07-02 33584]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
-----------------EOF-----------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jozef at 2010-10-06 16:35:38
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 44 GB (56%) free of 79 GB
Total RAM: 958 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:36:13, on 6.10.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jozef\Downloads\RSIT.exe
C:\Program Files\trend micro\Jozef.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NetFxUpdate_v1.1.4322] "C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
--
End of file - 5171 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-07-09 503808]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-27 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-07-09 503808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-07-02 2202704]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NetFxUpdate_v1.1.4322"=C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe [2004-08-10 106496]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-10-06 16:35:38 ----D---- C:\rsit
2010-10-06 16:35:38 ----D---- C:\Program Files\trend micro
2010-10-02 10:35:41 ----D---- C:\ProgramData\vsosdk
2010-10-02 09:28:09 ----A---- C:\Windows\system32\sipr3260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\wvc1dmod.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\vp7vfw.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\Pncrt.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv43260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv33260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\drv23260.dll
2010-10-02 09:28:08 ----A---- C:\Windows\system32\cook3260.dll
2010-09-29 20:28:21 ----D---- C:\ProgramData\FarmFrenzy3_Arctica
2010-09-29 20:19:18 ----D---- C:\Program Files\Farm Frenzy 2
2010-09-29 19:31:34 ----D---- C:\ProgramData\AlawarWrapper
2010-09-29 11:47:54 ----A---- C:\Windows\system32\tzres.dll
2010-09-28 17:43:01 ----D---- C:\ProgramData\FarmFrenzy3
2010-09-28 16:33:45 ----D---- C:\ProgramData\FarmFrenzy2
2010-09-28 16:33:28 ----D---- C:\Windows\Farm Frenzy 2
2010-09-28 14:35:01 ----D---- C:\Users\Jozef\AppData\Roaming\vlc
2010-09-28 14:34:11 ----D---- C:\Program Files\VideoLAN
2010-09-28 14:33:17 ----A---- C:\Windows\avisplitter.ini
2010-09-28 14:33:14 ----A---- C:\Windows\system32\yv12vfw.dll
2010-09-28 14:33:14 ----A---- C:\Windows\system32\xvidvfw.dll
2010-09-28 14:33:14 ----A---- C:\Windows\system32\xvidcore.dll
2010-09-28 14:33:13 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-09-28 14:33:13 ----A---- C:\Windows\system32\ff_vfw.dll
2010-09-28 07:54:35 ----D---- C:\DirectX
2010-09-27 21:32:22 ----D---- C:\Users\Jozef\AppData\Roaming\BSplayer Pro
2010-09-27 21:32:22 ----D---- C:\Users\Jozef\AppData\Roaming\BSplayer
2010-09-27 21:32:10 ----D---- C:\Program Files\Webteh
2010-09-24 06:13:15 ----D---- C:\Users\Jozef\AppData\Roaming\avidemux
2010-09-18 12:04:29 ----D---- C:\Program Files\iWin.com Games
2010-09-17 13:41:44 ----D---- C:\Program Files\MumboJumbo
2010-09-15 21:39:42 ----D---- C:\ProgramData\T1 Games
2010-09-14 21:59:02 ----A---- C:\Windows\system32\usp10.dll
2010-09-14 21:59:00 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-14 21:58:59 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-09-14 21:58:55 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-12 10:42:59 ----D---- C:\ProgramData\hps
2010-09-12 10:36:16 ----D---- C:\Program Files\Fotolab
======List of files/folders modified in the last 1 months======
2010-10-06 16:35:52 ----D---- C:\Windows\Prefetch
2010-10-06 16:35:43 ----D---- C:\Windows\Temp
2010-10-06 16:35:38 ----RD---- C:\Program Files
2010-10-06 16:28:33 ----D---- C:\Windows\Microsoft.NET
2010-10-06 16:28:31 ----RSD---- C:\Windows\assembly
2010-10-06 08:14:28 ----D---- C:\Windows
2010-10-06 08:13:11 ----D---- C:\Windows\winsxs
2010-10-06 08:12:35 ----SHD---- C:\Windows\Installer
2010-10-06 08:12:34 ----SHD---- C:\Config.Msi
2010-10-06 08:11:44 ----SHD---- C:\System Volume Information
2010-10-06 08:02:34 ----D---- C:\Windows\system32\catroot
2010-10-04 16:28:14 ----D---- C:\Program Files\CCleaner
2010-10-04 10:48:01 ----D---- C:\Users\Jozef\AppData\Roaming\ICQ
2010-10-03 08:08:01 ----D---- C:\Users\Jozef\AppData\Roaming\uTorrent
2010-10-02 13:48:32 ----D---- C:\Users\Jozef\AppData\Roaming\Vso
2010-10-02 10:35:41 ----HD---- C:\ProgramData
2010-10-02 09:28:09 ----D---- C:\Windows\System32
2010-10-02 09:28:09 ----D---- C:\Program Files\VSO
2010-09-30 07:16:31 ----D---- C:\Windows\system32\catroot2
2010-09-29 17:39:52 ----D---- C:\Windows\rescache
2010-09-29 17:25:57 ----SD---- C:\Users\Jozef\AppData\Roaming\Microsoft
2010-09-29 14:31:37 ----D---- C:\Windows\system32\cs-CZ
2010-09-29 14:30:52 ----D---- C:\Program Files\Internet Explorer
2010-09-28 16:34:44 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-28 15:52:54 ----D---- C:\Users\Jozef\AppData\Roaming\Media Player Classic
2010-09-28 07:29:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-28 07:29:06 ----D---- C:\Windows\inf
2010-09-17 14:38:41 ----D---- C:\Program Files\Common Files
2010-09-17 14:38:24 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-17 12:56:24 ----D---- C:\Windows\Minidump
2010-09-17 12:56:24 ----D---- C:\Windows\Debug
2010-09-16 20:15:20 ----D---- C:\Program Files\Mozilla Firefox
2010-09-15 21:39:06 ----D---- C:\Windows\system32\Tasks
2010-09-14 22:16:51 ----A---- C:\Windows\system32\mrt.exe
2010-09-14 22:16:42 ----D---- C:\Program Files\Windows Mail
2010-09-13 20:42:49 ----D---- C:\Program Files\OXXOGames
2010-09-12 10:42:39 ----D---- C:\Program Files\Common Files\microsoft shared
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-11 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-28 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-06-24 136120]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-28 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-28 41312]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-28 32584]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-07-09 47360]
S3 a5kz9wmt;a5kz9wmt; C:\Windows\system32\drivers\a5kz9wmt.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-07-02 810144]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-29 31048]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-07-02 33584]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
-----------------EOF-----------------
