VIRY.CZ

Dobrý den, MSIE mi náhodně druhý den hlásí přítomnost Trojan Downloaderu (jedná se asi o variantu Win32/Obfuscated). Nedaří se mi ho bohužel odstranit. Mohli byste mi prosím kouknout na log? Děkuji...

Logfile of random's system information tool 1.08 (written by random/random)
Run by MaJ at 2011-02-10 23:25:06
Microsoft Windows 7 Ultimate
System drive C: has 746 GB (78%) free of 954 GB
Total RAM: 3582 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:25:22, on 10.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\MaJ\Downloads\RSIT(2).exe
C:\Program Files\trend micro\MaJ.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\Windows\system32\viakaraokesrv.exe

--
End of file - 4400 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-07 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2010-12-22 2047088]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-10-29 1352272]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-04 336384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2009-11-09 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^MaJ^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
C:\PROGRA~1\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

C:\Users\MaJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-10-28 64592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-10 23:25:06 ----D---- C:\rsit
2011-02-10 23:25:06 ----D---- C:\Program Files\trend micro
2011-02-10 23:02:41 ----D---- C:\Program Files\ESET
2011-02-09 22:41:12 ----D---- C:\ProgramData\TEMP
2011-02-09 22:34:31 ----D---- C:\ProgramData\Simply Super Software
2011-02-09 22:34:31 ----D---- C:\Program Files\Trojan Remover
2011-02-09 21:26:21 ----D---- C:\ProgramData\SecTaskMan
2011-02-09 21:06:38 ----D---- C:\UCTO2011
2011-02-09 14:01:23 ----D---- C:\9eb84de53fe975ad73fa6eeb104b16
2011-02-09 13:03:04 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 13:03:02 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 13:03:01 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 13:03:01 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 13:03:00 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\ieui.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 13:02:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\jsproxy.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 13:02:50 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 13:02:50 ----A---- C:\Windows\system32\atmfd.dll
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntdll.dll
2011-02-07 23:50:09 ----HD---- C:\Windows\msdownld.tmp
2011-02-07 23:50:09 ----D---- C:\Windows\system32\directx
2011-02-07 23:13:43 ----D---- C:\Program Files\Atari
2011-02-07 18:52:50 ----D---- C:\ProgramData\ATI
2011-02-07 18:52:42 ----D---- C:\Program Files\ATI Stream
2011-02-07 18:50:05 ----D---- C:\ATI
2011-02-07 18:48:23 ----D---- C:\RaidTool
2011-02-07 18:48:23 ----A---- C:\Windows\system32\xRaidSetup.exe
2011-02-07 18:48:23 ----A---- C:\Windows\system32\xRaidAPI.dll
2011-02-07 18:48:16 ----D---- C:\Windows\RaidTool
2011-02-07 18:45:59 ----A---- C:\Windows\system32\RTNUninst32.dll
2011-02-07 18:45:59 ----A---- C:\Windows\system32\RtNicProp32.dll
2011-02-07 18:45:59 ----A---- C:\Windows\system32\drivers\Rt86win7.sys
2011-02-07 18:44:52 ----D---- C:\Program Files\Renesas Electronics
2011-02-07 18:44:05 ----D---- C:\ProgramData\Downloaded Installations
2011-02-07 18:43:03 ----D---- C:\Program Files\Logitech
2011-02-07 18:41:11 ----A---- C:\Windows\system32\VIASysFx.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViakaraokeSrv.exe
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaKaraokePropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaKaraokeApo.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\Dts2APO.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RtkHDMI.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEP32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEL32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEG32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEED32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RHDMIExt.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RHCoInst.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RH3DHT32.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\drivers\RtHDMIV.sys
2011-02-07 18:33:38 ----A---- C:\Windows\system32\RH3DAA32.dll
2011-02-07 18:33:29 ----HD---- C:\Program Files\Temp
2011-02-06 20:04:03 ----D---- C:\Program Files\Driver-Soft
2011-02-06 19:23:51 ----A---- C:\Windows\UC.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\RAR.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\PKZIP.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\PKUNZIP.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\NOCLOSE.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\LHA.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\ARJ.PIF
2011-02-06 19:23:50 ----D---- C:\Users\MaJ\AppData\Roaming\GHISLER
2011-02-06 19:23:50 ----D---- C:\Program Files\totalcmd
2011-01-19 18:49:34 ----D---- C:\Program Files\Xilisoft
2011-01-19 18:13:48 ----D---- C:\Users\MaJ\AppData\Roaming\Real
2011-01-19 18:03:21 ----A---- C:\Program Files\RMPly00.exe
2011-01-19 17:55:26 ----A---- C:\Windows\system32\devil.dll
2011-01-19 17:55:26 ----A---- C:\Windows\system32\avisynth.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\yv12vfw.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\i420vfw.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\AVSredirect.dll
2011-01-19 17:55:24 ----D---- C:\Program Files\AviSynth 2.5
2011-01-12 12:45:46 ----A---- C:\Windows\system32\odbc32.dll

======List of files/folders modified in the last 1 months======

2011-02-10 23:25:22 ----D---- C:\Windows\Prefetch
2011-02-10 23:25:06 ----D---- C:\Program Files
2011-02-10 23:24:39 ----D---- C:\Windows\Temp
2011-02-10 22:58:55 ----D---- C:\Windows\System32
2011-02-10 22:57:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-10 22:57:26 ----D---- C:\Windows\inf
2011-02-10 20:18:54 ----D---- C:\Windows\system32\config
2011-02-10 08:38:37 ----SHD---- C:\System Volume Information
2011-02-09 23:06:03 ----SHD---- C:\Windows\Installer
2011-02-09 22:59:59 ----D---- C:\ProgramData
2011-02-09 22:38:36 ----A---- C:\Windows\ntbtlog.txt
2011-02-09 21:20:37 ----D---- C:\Windows\winsxs
2011-02-09 21:19:21 ----D---- C:\Windows\system32\migration
2011-02-09 21:19:21 ----D---- C:\Program Files\Internet Explorer
2011-02-09 21:06:02 ----D---- C:\UCTO2010
2011-02-09 20:23:18 ----RSD---- C:\Windows\Fonts
2011-02-09 14:01:23 ----A---- C:\Windows\system32\MRT.exe
2011-02-09 13:02:44 ----D---- C:\Windows\system32\catroot
2011-02-09 13:02:33 ----D---- C:\Windows\system32\catroot2
2011-02-07 23:50:09 ----D---- C:\Windows
2011-02-07 23:48:24 ----RSD---- C:\Windows\assembly
2011-02-07 18:52:30 ----D---- C:\Program Files\ATI Technologies
2011-02-07 18:51:31 ----D---- C:\Windows\system32\drivers
2011-02-07 18:51:27 ----D---- C:\Windows\system32\DriverStore
2011-02-07 18:48:24 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-07 18:45:59 ----D---- C:\Program Files\Realtek
2011-02-07 18:43:42 ----SD---- C:\Users\MaJ\AppData\Roaming\Microsoft
2011-02-07 18:43:30 ----D---- C:\Program Files\Common Files\LogiShrd
2011-02-07 18:43:13 ----D---- C:\ProgramData\Logishrd
2011-02-06 19:24:29 ----D---- C:\Program Files\totalcmd 7.56
2011-02-06 19:22:49 ----D---- C:\Users\MaJ\AppData\Roaming\uTorrent
2011-02-04 14:12:35 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-10-29 104536]
R0 mv91xx;mv91xx; C:\Windows\system32\DRIVERS\mv91xx.sys [2010-08-06 257064]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2009-08-04 11296]
R1 AsUpIO;AsUpIO; C:\Windows\system32\drivers\AsUpIO.sys [2009-07-06 11448]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKslc0ef9924;MpKslc0ef9924; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1650A159-C20D-4684-9F4F-A1F7AE4917DB}\MpKslc0ef9924.sys [2011-02-10 28752]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-05 6789120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-05 235520]
R3 ElbyDelay;ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [2007-02-16 11984]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-08-24 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-08-24 37328]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 62336]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 141440]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2010-11-23 263464]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-12-29 327784]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-12-14 1153648]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-05 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2010-12-14 27760]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-10-28 293456]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-04 1343400]

-----------------EOF-----------------

Zdravím, stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Díky za podporu.. jak koukám smazalo mi to účetnictví.. naštěstí starou verzi. Log je tady (ve vou částech kvůli povolenému počtu znaků):

ComboFix 11-02-09.05 - MaJ 11.02.2011 0:53.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3582.2473 [GMT 1:00]
Spuštěný z: c:\users\MaJ\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
ADS - Windows: deleted 48 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\UCTO2010
c:\ucto2010\{GLOB}\ADRWEB.000
c:\ucto2010\{GLOB}\BANKY.000
c:\ucto2010\{GLOB}\BANKY.X00
c:\ucto2010\{GLOB}\BANKYHB.008
c:\ucto2010\{GLOB}\CISOKR.097
c:\ucto2010\{GLOB}\DATA.000
c:\ucto2010\{GLOB}\DATA.X00
c:\ucto2010\{GLOB}\EXPDEKLA.099
c:\ucto2010\{GLOB}\EXPDEKLA.T99
c:\ucto2010\{GLOB}\FAQ.000
c:\ucto2010\{GLOB}\FAQ.X00
c:\ucto2010\{GLOB}\FIRMY.000
c:\ucto2010\{GLOB}\FORMS.099
c:\ucto2010\{GLOB}\FORMS.T99
c:\ucto2010\{GLOB}\KODPOJ.004
c:\ucto2010\{GLOB}\MODULY.000
c:\ucto2010\{GLOB}\NAHRNEM.004
c:\ucto2010\{GLOB}\NEZDAN.000
c:\ucto2010\{GLOB}\NEZDAN.X00
c:\ucto2010\{GLOB}\OKRESY.000
c:\ucto2010\{GLOB}\OKRESY.X00
c:\ucto2010\{GLOB}\PARAM1.000
c:\ucto2010\{GLOB}\PLATIDLA.004
c:\ucto2010\{GLOB}\POSTY.000
c:\ucto2010\{GLOB}\POSTY.X00
c:\ucto2010\{GLOB}\REPORT.099
c:\ucto2010\{GLOB}\REPORT.T99
c:\ucto2010\{GLOB}\REPORT.X99
c:\ucto2010\{GLOB}\SAZDPH.000
c:\ucto2010\{GLOB}\SAZDPH.X00
c:\ucto2010\{GLOB}\SAZDZP.000
c:\ucto2010\{GLOB}\SAZDZP.X00
c:\ucto2010\{GLOB}\SAZDZPM.004
c:\ucto2010\{GLOB}\SAZDZPM.X04
c:\ucto2010\{GLOB}\SAZODP.009
c:\ucto2010\{GLOB}\SLOVNIK.006
c:\ucto2010\{GLOB}\ZALDZP.004
c:\ucto2010\{GLOB}\ZALDZP.X04
c:\ucto2010\{GLOB}\ZDRSOC.004
c:\ucto2010\{GLOB}\ZDRSOC.X04
c:\ucto2010\{GLOB}\ZUJ.097
c:\ucto2010\{INFO}\ADRZPRAV.000
c:\ucto2010\{INFO}\ADRZPRAV.T00
c:\ucto2010\{INFO}\INFOAUTO.000
c:\ucto2010\{INFO}\INFOAUTO.X00
c:\ucto2010\{INFO}\INFOPROB.000
c:\ucto2010\{INFO}\INFOPROB.T00
c:\ucto2010\{INFO}\INFOPROB.X00
c:\ucto2010\{INFO}\INFOTEMA.000
c:\ucto2010\{INFO}\KONFEREN.000
c:\ucto2010\{INFO}\KONFEREN.T00
c:\ucto2010\{INFO}\PGMKOD.000
c:\ucto2010\{INFO}\PROGRAMY.000
c:\ucto2010\{INFO}\PROGRAMY.T00
c:\ucto2010\{INFO}\SLUZKOD.000
c:\ucto2010\{NOVA}\ADRESY.000
c:\ucto2010\{NOVA}\ADRESY.T00
c:\ucto2010\{NOVA}\CISABS.004
c:\ucto2010\{NOVA}\CISDOKL.001
c:\ucto2010\{NOVA}\CISDRUH.001
c:\ucto2010\{NOVA}\CISPOH.001
c:\ucto2010\{NOVA}\CISPOZN.000
c:\ucto2010\{NOVA}\CISPOZN.T00
c:\ucto2010\{NOVA}\CIST.000
c:\ucto2010\{NOVA}\CISTXT.006
c:\ucto2010\{NOVA}\CISVYKON.001
c:\ucto2010\{NOVA}\KATEG.004
c:\ucto2010\{NOVA}\PARAM2.000
c:\ucto2010\{NOVA}\PARAM2.T00
c:\ucto2010\{NOVA}\PRACSML.004
c:\ucto2010\{NOVA}\PRACSML.T04
c:\ucto2010\{NOVA}\TRIDY.004
c:\ucto2010\{NOVA}\TYPDOKL.001
c:\ucto2010\{NOVA}\UKOLY.000
c:\ucto2010\{NOVA}\UKOLY.T00
c:\ucto2010\{NOVA}\UZAV.001
c:\ucto2010\{NOVA}\ZAOKFA.006
c:\ucto2010\{OBNV}.BAT
c:\ucto2010\{OBNV}\BANKYHB.008
c:\ucto2010\{OBNV}\KODPOJ.004
c:\ucto2010\{OBNV}\MODULY.000
c:\ucto2010\{OBNV}\NAHRNEM.004
c:\ucto2010\{OBNV}\NEZDAN.000
c:\ucto2010\{OBNV}\PLATIDLA.004
c:\ucto2010\{OBNV}\SAZDPH.000
c:\ucto2010\{OBNV}\SAZDZP.000
c:\ucto2010\{OBNV}\SAZDZPM.004
c:\ucto2010\{OBNV}\SAZODP.009
c:\ucto2010\{OBNV}\SLOVNIK.006
c:\ucto2010\{OBNV}\UCTO2010.CAT
c:\ucto2010\{OBNV}\UTISK04.EX
c:\ucto2010\{OBNV}\ZALDZP.004
c:\ucto2010\{OBNV}\ZDRSOC.004
c:\ucto2010\{PDF1}\DAVKYK2.PDF
c:\ucto2010\{PDF1}\DAVKYK3.PDF
c:\ucto2010\{PDF1}\DAVKYP2.PDF
c:\ucto2010\{PDF1}\DAVKYP3.PDF
c:\ucto2010\{PDF1}\DPH15.PDF
c:\ucto2010\{PDF1}\DPH15P.PDF
c:\ucto2010\{PDF1}\DPH16.PDF
c:\ucto2010\{PDF1}\DPH16P.PDF
c:\ucto2010\{PDF1}\DZP.PDF
c:\ucto2010\{PDF1}\DZP_1.PDF
c:\ucto2010\{PDF1}\DZP_2.PDF
c:\ucto2010\{PDF1}\DZP_3.PDF
c:\ucto2010\{PDF1}\DZP_7.PDF
c:\ucto2010\{PDF1}\DZPP.PDF
c:\ucto2010\{PDF1}\ELDP09B.PDF
c:\ucto2010\{PDF1}\ELDP09F.PDF
c:\ucto2010\{PDF1}\ELDP09K.PDF
c:\ucto2010\{PDF1}\ELDP09M.PDF
c:\ucto2010\{PDF1}\ELDP09P.PDF
c:\ucto2010\{PDF1}\ELDPF.PDF
c:\ucto2010\{PDF1}\ELDPK.PDF
c:\ucto2010\{PDF1}\ELDPM.PDF
c:\ucto2010\{PDF1}\ELDPP.PDF
c:\ucto2010\{PDF1}\HROMOZN.PDF
c:\ucto2010\{PDF1}\HROMOZNP.PDF
c:\ucto2010\{PDF1}\CHYBCAST.PDF
c:\ucto2010\{PDF1}\NEMOC.PDF
c:\ucto2010\{PDF1}\NEMOCP.PDF
c:\ucto2010\{PDF1}\ODCITPOL.PDF
c:\ucto2010\{PDF1}\ONZ.PDF
c:\ucto2010\{PDF1}\ONZK.PDF
c:\ucto2010\{PDF1}\ONZP.PDF
c:\ucto2010\{PDF1}\OSSZ.PDF
c:\ucto2010\{PDF1}\OSSZK.PDF
c:\ucto2010\{PDF1}\OSSZP.PDF
c:\ucto2010\{PDF1}\POCZAM.PDF
c:\ucto2010\{PDF1}\POJZAM.PDF
c:\ucto2010\{PDF1}\SILDAN.PDF
c:\ucto2010\{PDF1}\SILDANPO.PDF
c:\ucto2010\{PDF1}\SILDANPR.PDF
c:\ucto2010\{PDF1}\SOUHLAS.PDF
c:\ucto2010\{PDF1}\SOUHLASP.PDF
c:\ucto2010\{PDF1}\VYUCT.PDF
c:\ucto2010\{PDF1}\VYUCTP.PDF
c:\ucto2010\{PDF1}\VYUCTSRP.PDF
c:\ucto2010\{PDF1}\VYUCTSRZ.PDF
c:\ucto2010\{PDF1}\VZP.PDF
c:\ucto2010\{PDF1}\VZPP.PDF
c:\ucto2010\{PDF2}\DLBL.PDF
c:\ucto2010\{PDF2}\DLBL2.PDF
c:\ucto2010\{PDF2}\DLBW.PDF
c:\ucto2010\{PDF2}\DLBW2.PDF
c:\ucto2010\{PDF2}\DLGR.PDF
c:\ucto2010\{PDF2}\DLGR2.PDF
c:\ucto2010\{PDF2}\FABL.PDF
c:\ucto2010\{PDF2}\FABL2.PDF
c:\ucto2010\{PDF2}\FABW.PDF
c:\ucto2010\{PDF2}\FABW2.PDF
c:\ucto2010\{PDF2}\FAGR.PDF
c:\ucto2010\{PDF2}\FAGR2.PDF
c:\ucto2010\{PDF2}\OBBL.PDF
c:\ucto2010\{PDF2}\OBBL2.PDF
c:\ucto2010\{PDF2}\OBBW.PDF
c:\ucto2010\{PDF2}\OBBW2.PDF
c:\ucto2010\{PDF2}\OBGR.PDF
c:\ucto2010\{PDF2}\OBGR2.PDF
c:\ucto2010\{PDF3}\DAVKYK2X.DEF
c:\ucto2010\{PDF3}\DAVKYK2X.PDF
c:\ucto2010\{PDF3}\DAVKYK3X.DEF
c:\ucto2010\{PDF3}\DAVKYK3X.PDF
c:\ucto2010\{PDF3}\DPH15X.DEF
c:\ucto2010\{PDF3}\DPH15X.PDF
c:\ucto2010\{PDF3}\DPH16X.DEF
c:\ucto2010\{PDF3}\DPH16X.PDF
c:\ucto2010\{PDF3}\DZP_1X.DEF
c:\ucto2010\{PDF3}\DZP_1X.PDF
c:\ucto2010\{PDF3}\DZP_2X.DEF
c:\ucto2010\{PDF3}\DZP_2X.PDF
c:\ucto2010\{PDF3}\DZP_3X.DEF
c:\ucto2010\{PDF3}\DZP_3X.PDF
c:\ucto2010\{PDF3}\DZPX.DEF
c:\ucto2010\{PDF3}\DZPX.PDF
c:\ucto2010\{PDF3}\HROMOZNX.DEF
c:\ucto2010\{PDF3}\HROMOZNX.PDF
c:\ucto2010\{PDF3}\CHYBCASX.DEF
c:\ucto2010\{PDF3}\CHYBCASX.PDF
c:\ucto2010\{PDF3}\NEMOCX.DEF
c:\ucto2010\{PDF3}\NEMOCX.PDF
c:\ucto2010\{PDF3}\OSSZKX.DEF
c:\ucto2010\{PDF3}\OSSZKX.PDF
c:\ucto2010\{PDF3}\OSSZX.DEF
c:\ucto2010\{PDF3}\OSSZX.PDF
c:\ucto2010\{PDF3}\POCZAMX.DEF
c:\ucto2010\{PDF3}\POCZAMX.PDF
c:\ucto2010\{PDF3}\POJZAMX.DEF
c:\ucto2010\{PDF3}\POJZAMX.PDF
c:\ucto2010\{PDF3}\SILDANPX.DEF
c:\ucto2010\{PDF3}\SILDANPX.PDF
c:\ucto2010\{PDF3}\SILDANX.DEF
c:\ucto2010\{PDF3}\SILDANX.PDF
c:\ucto2010\{PDF3}\SOUHLASX.DEF
c:\ucto2010\{PDF3}\SOUHLASX.PDF
c:\ucto2010\{PDF3}\VYUCTSRX.DEF
c:\ucto2010\{PDF3}\VYUCTSRX.PDF
c:\ucto2010\{PDF3}\VYUCTX.DEF
c:\ucto2010\{PDF3}\VYUCTX.PDF
c:\ucto2010\{PDF3}\VZPX.DEF
c:\ucto2010\{PDF3}\VZPX.PDF
c:\ucto2010\{PRIK}\ABSENCE.004
c:\ucto2010\{PRIK}\ADRESY.000
c:\ucto2010\{PRIK}\ADRESY.T00
c:\ucto2010\{PRIK}\ADRSPEC.000
c:\ucto2010\{PRIK}\ADRSPEC.T00
c:\ucto2010\{PRIK}\ARCHIVM.004
c:\ucto2010\{PRIK}\ARCHIVM.T04
c:\ucto2010\{PRIK}\AUTA.005
c:\ucto2010\{PRIK}\AUTA.T05
c:\ucto2010\{PRIK}\BANKA1.008
c:\ucto2010\{PRIK}\CE_AUTA.006
c:\ucto2010\{PRIK}\CE_AUTA.T06
c:\ucto2010\{PRIK}\CE_TRASY.006
c:\ucto2010\{PRIK}\CEST_FH.006
c:\ucto2010\{PRIK}\CEST_FH.T06
c:\ucto2010\{PRIK}\CEST_FP.006
c:\ucto2010\{PRIK}\CEST_FS.006
c:\ucto2010\{PRIK}\CEST_VH.006
c:\ucto2010\{PRIK}\CEST_VH.T06
c:\ucto2010\{PRIK}\CEST_VP.006
c:\ucto2010\{PRIK}\CEST_VS.006
c:\ucto2010\{PRIK}\CISABS.004
c:\ucto2010\{PRIK}\CISCEST.005
c:\ucto2010\{PRIK}\CISDOKL.001
c:\ucto2010\{PRIK}\CISDRUH.001
c:\ucto2010\{PRIK}\CISPOH.001
c:\ucto2010\{PRIK}\CISPOL.006
c:\ucto2010\{PRIK}\CISPOZN.000
c:\ucto2010\{PRIK}\CISPOZN.T00
c:\ucto2010\{PRIK}\CIST.000
c:\ucto2010\{PRIK}\CISTEXT.001
c:\ucto2010\{PRIK}\CISTXT.006
c:\ucto2010\{PRIK}\CISUCEL.005
c:\ucto2010\{PRIK}\CISUKOL.004
c:\ucto2010\{PRIK}\CISVYKON.001
c:\ucto2010\{PRIK}\DAP15.003
c:\ucto2010\{PRIK}\DAP15.T03
c:\ucto2010\{PRIK}\DAP16.003
c:\ucto2010\{PRIK}\DAP16.T03
c:\ucto2010\{PRIK}\DENIK.001
c:\ucto2010\{PRIK}\DENIK.T01
c:\ucto2010\{PRIK}\DETI.004
c:\ucto2010\{PRIK}\DETI15.003
c:\ucto2010\{PRIK}\DETI16.003
c:\ucto2010\{PRIK}\DODL_AH.006
c:\ucto2010\{PRIK}\DODL_AH.T06
c:\ucto2010\{PRIK}\DODL_AP.006
c:\ucto2010\{PRIK}\DODL_AS.006
c:\ucto2010\{PRIK}\DODL_FH.006
c:\ucto2010\{PRIK}\DODL_FH.T06
c:\ucto2010\{PRIK}\DODL_FP.006
c:\ucto2010\{PRIK}\DODL_FS.006
c:\ucto2010\{PRIK}\DODL_VH.006
c:\ucto2010\{PRIK}\DODL_VH.T06
c:\ucto2010\{PRIK}\DODL_VP.006
c:\ucto2010\{PRIK}\DODL_VS.006
c:\ucto2010\{PRIK}\DOPISY.002
c:\ucto2010\{PRIK}\DOPISY.T02
c:\ucto2010\{PRIK}\DOPISYMM.002
c:\ucto2010\{PRIK}\DOPISYMM.T02
c:\ucto2010\{PRIK}\DOVROK.004
c:\ucto2010\{PRIK}\DROBMAJ.009
c:\ucto2010\{PRIK}\DROBMAJ.T09
c:\ucto2010\{PRIK}\EDIT.000
c:\ucto2010\{PRIK}\EDITPAR.000
c:\ucto2010\{PRIK}\EDITTAB.000
c:\ucto2010\{PRIK}\EDITTAB.T00
c:\ucto2010\{PRIK}\FAKT_AH.006
c:\ucto2010\{PRIK}\FAKT_AH.T06
c:\ucto2010\{PRIK}\FAKT_AP.006
c:\ucto2010\{PRIK}\FAKT_AS.006
c:\ucto2010\{PRIK}\FAKT_FH.006
c:\ucto2010\{PRIK}\FAKT_FH.T06
c:\ucto2010\{PRIK}\FAKT_FP.006
c:\ucto2010\{PRIK}\FAKT_FS.006
c:\ucto2010\{PRIK}\FAKT_VH.006
c:\ucto2010\{PRIK}\FAKT_VH.T06
c:\ucto2010\{PRIK}\FAKT_VP.006
c:\ucto2010\{PRIK}\FAKT_VS.006
c:\ucto2010\{PRIK}\FINANCE.001
c:\ucto2010\{PRIK}\FINANCE.T01
c:\ucto2010\{PRIK}\JIZDY.005
c:\ucto2010\{PRIK}\JIZDY.T05
c:\ucto2010\{PRIK}\KATEG.004
c:\ucto2010\{PRIK}\MAT_HP.007
c:\ucto2010\{PRIK}\MAT_PP.007
c:\ucto2010\{PRIK}\MATERIAL.001
c:\ucto2010\{PRIK}\MATERIAL.T01
c:\ucto2010\{PRIK}\MZDY.004
c:\ucto2010\{PRIK}\MZDY.T04
c:\ucto2010\{PRIK}\OBJE_FH.006
c:\ucto2010\{PRIK}\OBJE_FH.T06
c:\ucto2010\{PRIK}\OBJE_FP.006
c:\ucto2010\{PRIK}\OBJE_FS.006
c:\ucto2010\{PRIK}\OBJE_VH.006
c:\ucto2010\{PRIK}\OBJE_VH.T06
c:\ucto2010\{PRIK}\OBJE_VP.006
c:\ucto2010\{PRIK}\OBJE_VS.006
c:\ucto2010\{PRIK}\ODPISY.009
c:\ucto2010\{PRIK}\ODVODYM.004
c:\ucto2010\{PRIK}\OSSZ08.003
c:\ucto2010\{PRIK}\OST15.003
c:\ucto2010\{PRIK}\OST16.003
c:\ucto2010\{PRIK}\PARAM2.000
c:\ucto2010\{PRIK}\PARAM2.T00
c:\ucto2010\{PRIK}\PARHB.008
c:\ucto2010\{PRIK}\PARZAS.001
c:\ucto2010\{PRIK}\PHM.005
c:\ucto2010\{PRIK}\PLATBY.001
c:\ucto2010\{PRIK}\PLATBY.T01
c:\ucto2010\{PRIK}\POHLZAV.001
c:\ucto2010\{PRIK}\POHLZAV.T01
c:\ucto2010\{PRIK}\POHYBM.001
c:\ucto2010\{PRIK}\POHYBV.001
c:\ucto2010\{PRIK}\POHYBZ.001
c:\ucto2010\{PRIK}\POJIST.004
c:\ucto2010\{PRIK}\POSTA.002
c:\ucto2010\{PRIK}\POSTA.T02
c:\ucto2010\{PRIK}\PRACOV.004
c:\ucto2010\{PRIK}\PRACOV.T04
c:\ucto2010\{PRIK}\PRACSML.004
c:\ucto2010\{PRIK}\PRACSML.T04
c:\ucto2010\{PRIK}\PRAVJIZD.005
c:\ucto2010\{PRIK}\PRAVJIZD.T05
c:\ucto2010\{PRIK}\PRIKH.008
c:\ucto2010\{PRIK}\PRIKP.008
c:\ucto2010\{PRIK}\SCIT_H.099
c:\ucto2010\{PRIK}\SCIT_H.T99
c:\ucto2010\{PRIK}\SCIT_P.099
c:\ucto2010\{PRIK}\SHIFTF3.000
c:\ucto2010\{PRIK}\SIL.005
c:\ucto2010\{PRIK}\SIL.T05
c:\ucto2010\{PRIK}\SILDAN.005
c:\ucto2010\{PRIK}\SILVOZ.005
c:\ucto2010\{PRIK}\SRAZKY.004
c:\ucto2010\{PRIK}\SRAZKY.T04
c:\ucto2010\{PRIK}\STATY.000
c:\ucto2010\{PRIK}\STRAV.004
c:\ucto2010\{PRIK}\TECHZHOD.009
c:\ucto2010\{PRIK}\TEXTY.002
c:\ucto2010\{PRIK}\TEXTY.T02
c:\ucto2010\{PRIK}\TRIDY.004
c:\ucto2010\{PRIK}\TYPDOKL.001
c:\ucto2010\{PRIK}\UCTY.000
c:\ucto2010\{PRIK}\UKOL.004
c:\ucto2010\{PRIK}\UKOLY.000
c:\ucto2010\{PRIK}\UKOLY.T00
c:\ucto2010\{PRIK}\UPR15.003
c:\ucto2010\{PRIK}\UPR16.003
c:\ucto2010\{PRIK}\UZAV.001
c:\ucto2010\{PRIK}\VYKMAZA.UUU
c:\ucto2010\{PRIK}\VYR_HP.007
c:\ucto2010\{PRIK}\VYR_HV.007
c:\ucto2010\{PRIK}\VYR_PP.007
c:\ucto2010\{PRIK}\VYR_PV.007
c:\ucto2010\{PRIK}\VYRIZUJE.002
c:\ucto2010\{PRIK}\VYROBA.001
c:\ucto2010\{PRIK}\VYROBKY.001
c:\ucto2010\{PRIK}\VYROBKY.T01
c:\ucto2010\{PRIK}\VYUCSRAZ.097
c:\ucto2010\{PRIK}\VYUCZAL.097
c:\ucto2010\{PRIK}\VZP08.003
c:\ucto2010\{PRIK}\ZAL_H.099
c:\ucto2010\{PRIK}\ZAL_H.T99
c:\ucto2010\{PRIK}\ZAOKFA.006
c:\ucto2010\{PRIK}\ZBO_HP.007
c:\ucto2010\{PRIK}\ZBO_HV.007
c:\ucto2010\{PRIK}\ZBO_PP.007
c:\ucto2010\{PRIK}\ZBO_PV.007
c:\ucto2010\{PRIK}\ZBOZI.001
c:\ucto2010\{PRIK}\ZBOZI.T01
c:\ucto2010\{PRIK}\ZP.009
c:\ucto2010\{PRIK}\ZP.T09
c:\ucto2010\{SEST}\SEST00.PDF
c:\ucto2010\{SEST}\SEST00.TXT
c:\ucto2010\{SEST}\SEST01.PDF
c:\ucto2010\{SEST}\SEST01.TXT
c:\ucto2010\{SEST}\SEST02.PDF
c:\ucto2010\{SEST}\SEST02.TXT
c:\ucto2010\{SEST}\SEST03.PDF
c:\ucto2010\{SEST}\SEST03.TXT
c:\ucto2010\{SEST}\SEST04.PDF
c:\ucto2010\{SEST}\SEST04.TXT
c:\ucto2010\{SEST}\SEST05.PDF
c:\ucto2010\{SEST}\SEST05.TXT
c:\ucto2010\{SEST}\SEST06.PDF
c:\ucto2010\{SEST}\SEST06.TXT
c:\ucto2010\{SEST}\SEST07.PDF
c:\ucto2010\{SEST}\SEST07.TXT
c:\ucto2010\{SEST}\SEST08.PDF
c:\ucto2010\{SEST}\SEST08.TXT
c:\ucto2010\{SEST}\SEST09.PDF
c:\ucto2010\{SEST}\SEST09.TXT
c:\ucto2010\{SEST}\SEST10.PDF
c:\ucto2010\{SEST}\SEST10.TXT
c:\ucto2010\{SLOZ}\BALIK_O.HTM
c:\ucto2010\{SLOZ}\BALIK_O.JS
c:\ucto2010\{SLOZ}\BALIK_P.HTM
c:\ucto2010\{SLOZ}\BALIK_P.JS
c:\ucto2010\{SLOZ}\SLOZ_A.HTM
c:\ucto2010\{SLOZ}\SLOZ_A.JS
c:\ucto2010\{SLOZ}\SLOZ_C.HTM
c:\ucto2010\{SLOZ}\SLOZ_C.JS
c:\ucto2010\{STAN}\BKPSTAT.000
c:\ucto2010\{STAN}\DANZAT.004
c:\ucto2010\{STAN}\DPH15.009
c:\ucto2010\{STAN}\HESLA.000
c:\ucto2010\{STAN}\HESLA.T00
c:\ucto2010\{STAN}\HOBAPZ.008
c:\ucto2010\{STAN}\HOBAPZ.T08
c:\ucto2010\{STAN}\KALEXEK.099
c:\ucto2010\{STAN}\KALSZM06.099
c:\ucto2010\{STAN}\KASA.099
c:\ucto2010\{STAN}\LEAS.099
c:\ucto2010\{STAN}\LEAS.T99
c:\ucto2010\{STAN}\PAR01A3.001
c:\ucto2010\{STAN}\PAR03A3.003
c:\ucto2010\{STAN}\PAR03A3.T03
c:\ucto2010\{STAN}\PAR04A3.004
c:\ucto2010\{STAN}\PAR04A3.T04
c:\ucto2010\{STAN}\PAR08A3.008
c:\ucto2010\{STAN}\PAR09A3.009
c:\ucto2010\{STAN}\PARAM3.000
c:\ucto2010\{STAN}\PARAM3.T00
c:\ucto2010\{STAN}\PATHS.000
c:\ucto2010\{STAN}\PATHS.X00
c:\ucto2010\{STAN}\PGM.000
c:\ucto2010\{STAN}\SCITAC.099
c:\ucto2010\{STAN}\STAT.000
c:\ucto2010\{STAN}\SUBDIR.000
c:\ucto2010\{STAN}\TELSEZN.099
c:\ucto2010\{STAN}\VEDKALK.099
c:\ucto2010\{TISK}\ALISFAND.EXE
c:\ucto2010\{TISK}\CALLER.EXE
c:\ucto2010\{TISK}\CMDIALOG.VBX
c:\ucto2010\{TISK}\DISKSIZW.EXE
c:\ucto2010\{TISK}\DISKY.EXE
c:\ucto2010\{TISK}\ELPODPIS.EXE
c:\ucto2010\{TISK}\FAND2PDF.EXE
c:\ucto2010\{TISK}\FANDCLIP.EXE
c:\ucto2010\{TISK}\IEUCTO.EXE
c:\ucto2010\{TISK}\MSINET.OCX
c:\ucto2010\{TISK}\MSMAPI32.OCX
c:\ucto2010\{TISK}\MSVBVM60.DLL
c:\ucto2010\{TISK}\PDFTISK1.EXE
c:\ucto2010\{TISK}\PDFTISK2.EXE
c:\ucto2010\{TISK}\PDFTISK3.EXE
c:\ucto2010\{TISK}\REGISTER.EXE
c:\ucto2010\{TISK}\SETUPCP.EXE
c:\ucto2010\{TISK}\SIFRCSSZ.CER
c:\ucto2010\{TISK}\UCTOFONT.FON
c:\ucto2010\{TISK}\UCTOFT98.EXE
c:\ucto2010\{TISK}\UCTOFTP.EXE
c:\ucto2010\{TISK}\UCTOGRAF.EXE
c:\ucto2010\{TISK}\UCTOGRAF.INI
c:\ucto2010\{TISK}\UCTOLNK.EXE
c:\ucto2010\{TISK}\UCTOLNK.UUU
c:\ucto2010\{TISK}\UCTOLNK.W7
c:\ucto2010\{TISK}\UCTOLNK.WV
c:\ucto2010\{TISK}\UCTOLNK.WXP
c:\ucto2010\{TISK}\UEMAIL.EXE
c:\ucto2010\{TISK}\UEMAIL06.EXE
c:\ucto2010\{TISK}\UTISK01.EXE
c:\ucto2010\{TISK}\UTISK04.EXE
c:\ucto2010\{TISK}\UTISK98.EXE
c:\ucto2010\{TISK}\UTISK98.INI
c:\ucto2010\{TISK}\VBRUN300.DLL
c:\ucto2010\{TISK}\WINVERZE.EXE
c:\ucto2010\{UDOC}\CENIK.TXT
c:\ucto2010\{UDOC}\D2008.PDF
c:\ucto2010\{UDOC}\FAKTURA.TXT
c:\ucto2010\{UDOC}\INFO.TXT
c:\ucto2010\{UDOC}\LICENCE.TXT
c:\ucto2010\{UDOC}\OBJ.TXT
c:\ucto2010\{UDOC}\OBJZPR.TXT
c:\ucto2010\{UDOC}\ONAS.TXT
c:\ucto2010\{UDOC}\POUPG.TXT
c:\ucto2010\{UDOC}\PRIRUCKA.TXT
c:\ucto2010\{UDOC}\PRPRDOK.TXT
c:\ucto2010\{UDOC}\R2010.PDF
c:\ucto2010\{UDOC}\U2010.PDF
c:\ucto2010\{UDOC}\UCTOWIN7.TXT
c:\ucto2010\{UDOC}\ZPROSTRE.TXT
c:\ucto2010\{WWWW}\VERZEWWW.UUU
c:\ucto2010\{ZAL2}\KUCABA.J2B
c:\ucto2010\{ZAL2}\KUCABA.J2T
c:\ucto2010\{ZAL2}\KUCABA.J2Z
c:\ucto2010\{ZAL2}\LISAK.J2B
c:\ucto2010\{ZAL2}\LISAK.J2T
c:\ucto2010\{ZAL2}\LISAK.J2Z
c:\ucto2010\{ZAL2}\PUCZEK.J2B
c:\ucto2010\{ZAL2}\PUCZEK.J2T
c:\ucto2010\{ZAL2}\PUCZEK.J2Z
c:\ucto2010\{ZAL2}\PUPPI.J2B
c:\ucto2010\{ZAL2}\PUPPI.J2T
c:\ucto2010\{ZAL2}\PUPPI.J2Z
c:\ucto2010\{ZAL3}\ABSENCE.004
c:\ucto2010\{ZAL3}\ADRESY.000
c:\ucto2010\{ZAL3}\ADRESY.T00
c:\ucto2010\{ZAL3}\ARCHIVM.004
c:\ucto2010\{ZAL3}\ARCHIVM.T04
c:\ucto2010\{ZAL3}\BANKA1.008
c:\ucto2010\{ZAL3}\BANKA2.008
c:\ucto2010\{ZAL3}\CISABS.004
c:\ucto2010\{ZAL3}\CISDOKL.001
c:\ucto2010\{ZAL3}\CISDRUH.001
c:\ucto2010\{ZAL3}\CISPOH.001
c:\ucto2010\{ZAL3}\CISPOL.006
c:\ucto2010\{ZAL3}\CISPOZN.000
c:\ucto2010\{ZAL3}\CISPOZN.T00
c:\ucto2010\{ZAL3}\CIST.000
c:\ucto2010\{ZAL3}\CISTEXT.001
c:\ucto2010\{ZAL3}\CISTXT.006
c:\ucto2010\{ZAL3}\CISVYKON.001
c:\ucto2010\{ZAL3}\DANDOKL.001
c:\ucto2010\{ZAL3}\DANDOKL.T01
c:\ucto2010\{ZAL3}\DAP15.003
c:\ucto2010\{ZAL3}\DAP15.T03
c:\ucto2010\{ZAL3}\DAP16.003
c:\ucto2010\{ZAL3}\DAP16.T03
c:\ucto2010\{ZAL3}\DENIK.001
c:\ucto2010\{ZAL3}\DENIK.T01
c:\ucto2010\{ZAL3}\DETI15.003
c:\ucto2010\{ZAL3}\DETI16.003
c:\ucto2010\{ZAL3}\DOVROK.004
c:\ucto2010\{ZAL3}\DROBMAJ.009
c:\ucto2010\{ZAL3}\DROBMAJ.T09
c:\ucto2010\{ZAL3}\EDIT.000
c:\ucto2010\{ZAL3}\EDITPAR.000
c:\ucto2010\{ZAL3}\ELDP.097
c:\ucto2010\{ZAL3}\ELDP.T97
c:\ucto2010\{ZAL3}\FAKT_FH.006
c:\ucto2010\{ZAL3}\FAKT_FH.T06
c:\ucto2010\{ZAL3}\FAKT_FP.006
c:\ucto2010\{ZAL3}\FAKT_FS.006
c:\ucto2010\{ZAL3}\FAKT_VH.006
c:\ucto2010\{ZAL3}\FAKT_VH.T06
c:\ucto2010\{ZAL3}\FAKT_VP.006
c:\ucto2010\{ZAL3}\FAKT_VS.006
c:\ucto2010\{ZAL3}\FINANCE.001
c:\ucto2010\{ZAL3}\FINANCE.T01
c:\ucto2010\{ZAL3}\KATEG.004
c:\ucto2010\{ZAL3}\MZDY.004
c:\ucto2010\{ZAL3}\MZDY.T04
c:\ucto2010\{ZAL3}\ODVODYM.004
c:\ucto2010\{ZAL3}\ODVODYMX.004
c:\ucto2010\{ZAL3}\OSOBY15.003
c:\ucto2010\{ZAL3}\OSSZ08.003
c:\ucto2010\{ZAL3}\OSSZ09.003
c:\ucto2010\{ZAL3}\OZNPOJ.004
c:\ucto2010\{ZAL3}\PAR01A2.001
c:\ucto2010\{ZAL3}\PAR01A4.001
c:\ucto2010\{ZAL3}\PAR03A4.003
c:\ucto2010\{ZAL3}\PAR04A2.004
c:\ucto2010\{ZAL3}\PAR04A2X.004
c:\ucto2010\{ZAL3}\PAR06A4.006
c:\ucto2010\{ZAL3}\PAR08A2.008
c:\ucto2010\{ZAL3}\PAR08A4.008
c:\ucto2010\{ZAL3}\PAR09A2.009
c:\ucto2010\{ZAL3}\PAR09A2.T09
c:\ucto2010\{ZAL3}\PAR09A4.009
c:\ucto2010\{ZAL3}\PAR97A2.097
c:\ucto2010\{ZAL3}\PARAM2.000
c:\ucto2010\{ZAL3}\PARAM2.T00
c:\ucto2010\{ZAL3}\PARAM4.000
c:\ucto2010\{ZAL3}\PARAM4.T00
c:\ucto2010\{ZAL3}\PARZAS.001
c:\ucto2010\{ZAL3}\POHLZAV.001
c:\ucto2010\{ZAL3}\POHLZAV.T01
c:\ucto2010\{ZAL3}\POJIST.004
c:\ucto2010\{ZAL3}\PRACOV.004
c:\ucto2010\{ZAL3}\PRACOV.T04
c:\ucto2010\{ZAL3}\PRACSML.004
c:\ucto2010\{ZAL3}\PRACSML.T04
c:\ucto2010\{ZAL3}\PRIHL.097
c:\ucto2010\{ZAL3}\SHIFTF3.000
c:\ucto2010\{ZAL3}\STATY.000
c:\ucto2010\{ZAL3}\STORNA.001
c:\ucto2010\{ZAL3}\STORNA.T01
c:\ucto2010\{ZAL3}\TRIDY.004
c:\ucto2010\{ZAL3}\TYPDOKL.001
c:\ucto2010\{ZAL3}\UKOLY.000
c:\ucto2010\{ZAL3}\UKOLY.T00
c:\ucto2010\{ZAL3}\UPR15.003
c:\ucto2010\{ZAL3}\UZAV.001
c:\ucto2010\{ZAL3}\VRACBON.097
c:\ucto2010\{ZAL3}\VYBERADR.000
c:\ucto2010\{ZAL3}\VZP08.003
c:\ucto2010\{ZAL3}\VZP09.003
c:\ucto2010\{ZAL3}\ZAOKFA.006
c:\ucto2010\{ZAL3}\ZURNALD.001
c:\ucto2010\ÚČTO2010.W9X
c:\ucto2010\B&W.PAL
c:\ucto2010\BLUE.PAL
c:\ucto2010\BROWN.PAL
c:\ucto2010\CAT.BAT
c:\ucto2010\CISABS.UUU
c:\ucto2010\CISDRUH.UUU
c:\ucto2010\CISPOH.UUU
c:\ucto2010\CISSLOUP.000
c:\ucto2010\CONFIG.TXT
c:\ucto2010\DAVID\ADRESY.000
c:\ucto2010\DAVID\ADRESY.T00
c:\ucto2010\DAVID\ADRESY.X00
c:\ucto2010\DAVID\ARCHIVD.001
c:\ucto2010\DAVID\ARCHIVD.T01
c:\ucto2010\DAVID\BANKA1.008
c:\ucto2010\DAVID\BANKA2.008
c:\ucto2010\DAVID\CE_AUTA.006
c:\ucto2010\DAVID\CE_AUTA.T06
c:\ucto2010\DAVID\CISABS.004
c:\ucto2010\DAVID\CISABS.X04
c:\ucto2010\DAVID\CISDOKL.001
c:\ucto2010\DAVID\CISDRUH.001
c:\ucto2010\DAVID\CISDRUH.X01
c:\ucto2010\DAVID\CISPOH.001
c:\ucto2010\DAVID\CISPOZN.000
c:\ucto2010\DAVID\CISPOZN.T00
c:\ucto2010\DAVID\CIST.000
c:\ucto2010\DAVID\CISTEXT.001
c:\ucto2010\DAVID\CISTXT.006
c:\ucto2010\DAVID\CISVYKON.001
c:\ucto2010\DAVID\DENIK.001
c:\ucto2010\DAVID\DENIK.T01
c:\ucto2010\DAVID\DROBMAJ.009
c:\ucto2010\DAVID\DROBMAJ.T09
c:\ucto2010\DAVID\EDIT.000
c:\ucto2010\DAVID\KATEG.004
c:\ucto2010\DAVID\PAR01A2.001
c:\ucto2010\DAVID\PAR01A4.001
c:\ucto2010\DAVID\PAR03A4.003
c:\ucto2010\DAVID\PAR06A4.006
c:\ucto2010\DAVID\PAR08A2.008
c:\ucto2010\DAVID\PAR08A4.008
c:\ucto2010\DAVID\PAR09A2.009
c:\ucto2010\DAVID\PAR09A2.T09
c:\ucto2010\DAVID\PAR09A4.009
c:\ucto2010\DAVID\PARAM2.000
c:\ucto2010\DAVID\PARAM2.T00
c:\ucto2010\DAVID\PARAM4.000
c:\ucto2010\DAVID\PARAM4.T00
c:\ucto2010\DAVID\PARZAS.001
c:\ucto2010\DAVID\POHLZAV.001
c:\ucto2010\DAVID\POHLZAV.T01
c:\ucto2010\DAVID\POJIST.004
c:\ucto2010\DAVID\PRACSML.004
c:\ucto2010\DAVID\PRACSML.T04
c:\ucto2010\DAVID\SHIFTF3.000
c:\ucto2010\DAVID\TRIDY.004
c:\ucto2010\DAVID\TYPDOKL.001
c:\ucto2010\DAVID\UKOLY.000
c:\ucto2010\DAVID\UKOLY.T00
c:\ucto2010\DAVID\UZAV.001
c:\ucto2010\DAVID\VYRIZUJE.002
c:\ucto2010\DAVID\ZAOKFA.006
c:\ucto2010\DAVID\ZP.009
c:\ucto2010\DAVID\ZP.T09
c:\ucto2010\DAVID\ZURNALD.001
c:\ucto2010\DELFILE.EXE
c:\ucto2010\DISKSIZE.EXE
c:\ucto2010\DNY.000
c:\ucto2010\FAND.CFG
c:\ucto2010\FAND.RES
c:\ucto2010\FANDCFG.09
c:\ucto2010\FANDCFG.10
c:\ucto2010\FANDCFG.BAK
c:\ucto2010\FANDHTML.EXE
c:\ucto2010\FANDINST.EXE
c:\ucto2010\FANDT602.EXE
c:\ucto2010\FILESIZE.EXE
c:\ucto2010\FNDFILES.EXE
c:\ucto2010\HEAD602.UUU
c:\ucto2010\HELP.000
c:\ucto2010\HELP.T00
c:\ucto2010\HELP02.000
c:\ucto2010\HELP02.T00
c:\ucto2010\HELP03.000
c:\ucto2010\HELP03.T00
c:\ucto2010\HELP04.000
c:\ucto2010\HELP04.T00
c:\ucto2010\HELP05.000
c:\ucto2010\HELP05.T00
c:\ucto2010\HELP06.000
c:\ucto2010\HELP06.T00
c:\ucto2010\HELP08.000
c:\ucto2010\HELP08.T00
c:\ucto2010\HELP98.000
c:\ucto2010\HELP98.T00
c:\ucto2010\HELP99.000
c:\ucto2010\HELP99.T00
c:\ucto2010\IMPORT.PRO
c:\ucto2010\IMPORT.TRO
c:\ucto2010\INFOHLP.000
c:\ucto2010\INFOHLP.T00
c:\ucto2010\ISSHARE.EXE
c:\ucto2010\KALENDAR.000
c:\ucto2010\KALKDPH.000
c:\ucto2010\KALKPOJP.000
c:\ucto2010\KALKPOJZ.000
c:\ucto2010\KALKPRUM.000
c:\ucto2010\KALKPV08.000
c:\ucto2010\KALKTABD.000
c:\ucto2010\KATEG.UUU
c:\ucto2010\KUCABA\ADRESY.000
c:\ucto2010\KUCABA\ADRESY.T00
c:\ucto2010\KUCABA\ADRESY.X00
c:\ucto2010\KUCABA\ARCHIVD.001
c:\ucto2010\KUCABA\ARCHIVD.T01
c:\ucto2010\KUCABA\BANKA1.008
c:\ucto2010\KUCABA\CEST_VH.006
c:\ucto2010\KUCABA\CEST_VH.T06
c:\ucto2010\KUCABA\CISABS.004
c:\ucto2010\KUCABA\CISDOKL.001
c:\ucto2010\KUCABA\CISDRUH.001
c:\ucto2010\KUCABA\CISDRUH.X01
c:\ucto2010\KUCABA\CISPOH.001
c:\ucto2010\KUCABA\CISPOH.X01
c:\ucto2010\KUCABA\CISPOZN.000
c:\ucto2010\KUCABA\CISPOZN.T00
c:\ucto2010\KUCABA\CIST.000
c:\ucto2010\KUCABA\CISTEXT.001
c:\ucto2010\KUCABA\CISTXT.006
c:\ucto2010\KUCABA\CISVYKON.001
c:\ucto2010\KUCABA\CISVYKON.X01
c:\ucto2010\KUCABA\DANDOKL.001
c:\ucto2010\KUCABA\DANDOKL.T01
c:\ucto2010\KUCABA\DAP15.003
c:\ucto2010\KUCABA\DAP15.T03
c:\ucto2010\KUCABA\DAP16.003
c:\ucto2010\KUCABA\DAP16.T03
c:\ucto2010\KUCABA\DENIK.001
c:\ucto2010\KUCABA\DENIK.T01
c:\ucto2010\KUCABA\DODL_VH.006
c:\ucto2010\KUCABA\DODL_VH.T06
c:\ucto2010\KUCABA\DOPISY.002
c:\ucto2010\KUCABA\DOPISY.T02
c:\ucto2010\KUCABA\DROBMAJ.009
c:\ucto2010\KUCABA\DROBMAJ.T09
c:\ucto2010\KUCABA\EDIT.000
c:\ucto2010\KUCABA\EDIT.X00
c:\ucto2010\KUCABA\EDITPAR.000
c:\ucto2010\KUCABA\EDITPAR.X00
c:\ucto2010\KUCABA\FAKT_FH.006
c:\ucto2010\KUCABA\FAKT_FH.T06
c:\ucto2010\KUCABA\FAKT_FP.006
c:\ucto2010\KUCABA\FAKT_FS.006
c:\ucto2010\KUCABA\FAKT_VH.006
c:\ucto2010\KUCABA\FAKT_VH.T06
c:\ucto2010\KUCABA\FAKT_VP.006
c:\ucto2010\KUCABA\FAKT_VS.006
c:\ucto2010\KUCABA\FINANCE.001
c:\ucto2010\KUCABA\FINANCE.T01
c:\ucto2010\KUCABA\KATEG.004
c:\ucto2010\KUCABA\OBJE_VH.006
c:\ucto2010\KUCABA\OBJE_VH.T06
c:\ucto2010\KUCABA\ODPISY.009
c:\ucto2010\KUCABA\OSSZ08.003
c:\ucto2010\KUCABA\OSSZ09.003
c:\ucto2010\KUCABA\PAR01A2.001
c:\ucto2010\KUCABA\PAR01A4.001
c:\ucto2010\KUCABA\PAR02A2.002
c:\ucto2010\KUCABA\PAR03A4.003
c:\ucto2010\KUCABA\PAR04A2.004
c:\ucto2010\KUCABA\PAR06A4.006
c:\ucto2010\KUCABA\PAR08A2.008
c:\ucto2010\KUCABA\PAR08A4.008
c:\ucto2010\KUCABA\PAR09A2.009
c:\ucto2010\KUCABA\PAR09A2.T09
c:\ucto2010\KUCABA\PAR09A4.009
c:\ucto2010\KUCABA\PARAM2.000
c:\ucto2010\KUCABA\PARAM2.T00
c:\ucto2010\KUCABA\PARAM4.000
c:\ucto2010\KUCABA\PARAM4.T00
c:\ucto2010\KUCABA\PARZAS.001
c:\ucto2010\KUCABA\POHLZAV.001
c:\ucto2010\KUCABA\POHLZAV.T01
c:\ucto2010\KUCABA\POJIST.004
c:\ucto2010\KUCABA\PRACSML.004
c:\ucto2010\KUCABA\PRACSML.T04
c:\ucto2010\KUCABA\SHIFTF3.000
c:\ucto2010\KUCABA\SHIFTF3.X00
c:\ucto2010\KUCABA\STATY.000
c:\ucto2010\KUCABA\STORNA.001
c:\ucto2010\KUCABA\STORNA.T01
c:\ucto2010\KUCABA\TECHZHOD.009
c:\ucto2010\KUCABA\TRIDY.004
c:\ucto2010\KUCABA\TYPDOKL.001
c:\ucto2010\KUCABA\TYPDOKL.X01
c:\ucto2010\KUCABA\UKOLY.000
c:\ucto2010\KUCABA\UKOLY.T00
c:\ucto2010\KUCABA\UPR15.003
c:\ucto2010\KUCABA\UPR15.X03
c:\ucto2010\KUCABA\UPR16.003
c:\ucto2010\KUCABA\UZAV.001
c:\ucto2010\KUCABA\VYRIZUJE.002
c:\ucto2010\KUCABA\VZP08.003
c:\ucto2010\KUCABA\VZP09.003
c:\ucto2010\KUCABA\ZAOKFA.006
c:\ucto2010\KUCABA\ZP.009
c:\ucto2010\KUCABA\ZP.T09
c:\ucto2010\KUCABA\ZP.X09
c:\ucto2010\KUCABA\ZURNALD.001
c:\ucto2010\LASTAKT.TXT
c:\ucto2010\LCD1.PAL
c:\ucto2010\LCD2.PAL
c:\ucto2010\LISAK\ADRESY.000
c:\ucto2010\LISAK\ADRESY.T00
c:\ucto2010\LISAK\ADRESY.X00
c:\ucto2010\LISAK\BANKA1.008
c:\ucto2010\LISAK\CE_AUTA.006
c:\ucto2010\LISAK\CE_AUTA.T06
c:\ucto2010\LISAK\CISABS.004
c:\ucto2010\LISAK\CISABS.X04
c:\ucto2010\LISAK\CISDOKL.001
c:\ucto2010\LISAK\CISDRUH.001
c:\ucto2010\LISAK\CISDRUH.X01
c:\ucto2010\LISAK\CISPOH.001
c:\ucto2010\LISAK\CISPOH.X01
c:\ucto2010\LISAK\CISPOZN.000
c:\ucto2010\LISAK\CISPOZN.T00
c:\ucto2010\LISAK\CIST.000
c:\ucto2010\LISAK\CISTEXT.001
c:\ucto2010\LISAK\CISTXT.006
c:\ucto2010\LISAK\CISVYKON.001
c:\ucto2010\LISAK\CISVYKON.X01
c:\ucto2010\LISAK\DAP15.003
c:\ucto2010\LISAK\DAP15.T03
c:\ucto2010\LISAK\DAP16.003
c:\ucto2010\LISAK\DAP16.T03
c:\ucto2010\LISAK\DAP16.X03
c:\ucto2010\LISAK\DENIK.001
c:\ucto2010\LISAK\DENIK.T01
c:\ucto2010\LISAK\DETI16.003
c:\ucto2010\LISAK\DETI16.X03
c:\ucto2010\LISAK\DROBMAJ.009
c:\ucto2010\LISAK\DROBMAJ.T09
c:\ucto2010\LISAK\EDIT.000
c:\ucto2010\LISAK\EDIT.X00
c:\ucto2010\LISAK\EDITPAR.000
c:\ucto2010\LISAK\EDITPAR.X00
c:\ucto2010\LISAK\FINANCE.001
c:\ucto2010\LISAK\FINANCE.T01
c:\ucto2010\LISAK\KATEG.004
c:\ucto2010\LISAK\OSSZ09.003
c:\ucto2010\LISAK\PAR01A2.001
c:\ucto2010\LISAK\PAR01A4.001
c:\ucto2010\LISAK\PAR03A4.003
c:\ucto2010\LISAK\PAR04A2.004
c:\ucto2010\LISAK\PAR06A4.006
c:\ucto2010\LISAK\PAR09A2.009
c:\ucto2010\LISAK\PAR09A2.T09
c:\ucto2010\LISAK\PARAM2.000
c:\ucto2010\LISAK\PARAM2.T00
c:\ucto2010\LISAK\PARAM4.000
c:\ucto2010\LISAK\PARAM4.T00
c:\ucto2010\LISAK\PARZAS.001
c:\ucto2010\LISAK\PRACSML.004
c:\ucto2010\LISAK\PRACSML.T04
c:\ucto2010\LISAK\SHIFTF3.000
c:\ucto2010\LISAK\SHIFTF3.X00
c:\ucto2010\LISAK\SIL.005
c:\ucto2010\LISAK\SIL.T05
c:\ucto2010\LISAK\TRIDY.004
c:\ucto2010\LISAK\TYPDOKL.001
c:\ucto2010\LISAK\TYPDOKL.X01
c:\ucto2010\LISAK\UKOLY.000
c:\ucto2010\LISAK\UKOLY.T00
c:\ucto2010\LISAK\UZAV.001
c:\ucto2010\LISAK\VZP09.003
c:\ucto2010\LISAK\ZAOKFA.006
c:\ucto2010\LISAK\ZURNALD.001
c:\ucto2010\MAKEDIR.BAT
c:\ucto2010\MF5460-1.UUU
c:\ucto2010\MODUL01.PRO
c:\ucto2010\MODUL01.TRO
c:\ucto2010\MODUL02.PRO
c:\ucto2010\MODUL02.TRO
c:\ucto2010\MODUL03.PRO
c:\ucto2010\MODUL03.TRO
c:\ucto2010\MODUL04.PRO
c:\ucto2010\MODUL04.TRO
c:\ucto2010\MODUL05.PRO
c:\ucto2010\MODUL05.TRO
c:\ucto2010\MODUL06.PRO
c:\ucto2010\MODUL06.TRO
c:\ucto2010\MODUL07.PRO
c:\ucto2010\MODUL07.TRO
c:\ucto2010\MODUL08.PRO
c:\ucto2010\MODUL08.TRO
c:\ucto2010\MODUL09.PRO
c:\ucto2010\MODUL09.TRO
c:\ucto2010\MODUL97.PRO
c:\ucto2010\MODUL97.TRO
c:\ucto2010\MODUL98.PRO
c:\ucto2010\MODUL98.TRO
c:\ucto2010\MODUL99.PRO
c:\ucto2010\MODUL99.TRO
c:\ucto2010\MZDYPU.000
c:\ucto2010\NUMKB.EXE
c:\ucto2010\NUMKB3.EXE
c:\ucto2010\ONDRA\ADRESY.000
c:\ucto2010\ONDRA\ADRESY.T00
c:\ucto2010\ONDRA\ADRESY.X00
c:\ucto2010\ONDRA\ARCHIVD.001
c:\ucto2010\ONDRA\ARCHIVD.T01
c:\ucto2010\ONDRA\BANKA1.008
c:\ucto2010\ONDRA\CEST_VH.006
c:\ucto2010\ONDRA\CEST_VH.T06
c:\ucto2010\ONDRA\CEST_VH.X06
c:\ucto2010\ONDRA\CISABS.004
c:\ucto2010\ONDRA\CISABS.X04
c:\ucto2010\ONDRA\CISDOKL.001
c:\ucto2010\ONDRA\CISDRUH.001
c:\ucto2010\ONDRA\CISDRUH.X01
c:\ucto2010\ONDRA\CISPOH.001
c:\ucto2010\ONDRA\CISPOZN.000
c:\ucto2010\ONDRA\CISPOZN.T00
c:\ucto2010\ONDRA\CIST.000
c:\ucto2010\ONDRA\CISTEXT.001
c:\ucto2010\ONDRA\CISTXT.006
c:\ucto2010\ONDRA\CISVYKON.001
c:\ucto2010\ONDRA\DENIK.001
c:\ucto2010\ONDRA\DENIK.T01
c:\ucto2010\ONDRA\DODL_VH.006
c:\ucto2010\ONDRA\DODL_VH.T06
c:\ucto2010\ONDRA\DODL_VH.X06
c:\ucto2010\ONDRA\DROBMAJ.009
c:\ucto2010\ONDRA\DROBMAJ.T09
c:\ucto2010\ONDRA\EDIT.000
c:\ucto2010\ONDRA\FAKT_VH.006
c:\ucto2010\ONDRA\FAKT_VH.T06
c:\ucto2010\ONDRA\FAKT_VH.X06
c:\ucto2010\ONDRA\KATEG.004
c:\ucto2010\ONDRA\OBJE_VH.006
c:\ucto2010\ONDRA\OBJE_VH.T06
c:\ucto2010\ONDRA\OBJE_VH.X06
c:\ucto2010\ONDRA\ODPISY.009
c:\ucto2010\ONDRA\ODPISY.X09
c:\ucto2010\ONDRA\PAR01A2.001
c:\ucto2010\ONDRA\PAR01A4.001
c:\ucto2010\ONDRA\PAR02A2.002
c:\ucto2010\ONDRA\PAR03A4.003
c:\ucto2010\ONDRA\PAR05A4.005
c:\ucto2010\ONDRA\PAR06A4.006
c:\ucto2010\ONDRA\PAR08A2.008
c:\ucto2010\ONDRA\PAR08A4.008
c:\ucto2010\ONDRA\PAR09A2.009
c:\ucto2010\ONDRA\PAR09A2.T09
c:\ucto2010\ONDRA\PAR09A4.009
c:\ucto2010\ONDRA\PARAM2.000
c:\ucto2010\ONDRA\PARAM2.T00
c:\ucto2010\ONDRA\PARAM4.000
c:\ucto2010\ONDRA\PARAM4.T00
c:\ucto2010\ONDRA\PARZAS.001
c:\ucto2010\ONDRA\POHLZAV.001
c:\ucto2010\ONDRA\POHLZAV.T01
c:\ucto2010\ONDRA\POJIST.004
c:\ucto2010\ONDRA\PRACSML.004
c:\ucto2010\ONDRA\PRACSML.T04
c:\ucto2010\ONDRA\SHIFTF3.000
c:\ucto2010\ONDRA\TRIDY.004
c:\ucto2010\ONDRA\TYPDOKL.001
c:\ucto2010\ONDRA\UKOLY.000
c:\ucto2010\ONDRA\UKOLY.T00
c:\ucto2010\ONDRA\UZAV.001
c:\ucto2010\ONDRA\ZAOKFA.006
c:\ucto2010\ONDRA\ZP.009
c:\ucto2010\ONDRA\ZP.T09
c:\ucto2010\ONDRA\ZURNALD.001
c:\ucto2010\OPRAVY.UUU
c:\ucto2010\PGM.CAT
c:\ucto2010\PGM.RDB
c:\ucto2010\PGM.TTT
c:\ucto2010\PUCZEK\ABSENCE.004
c:\ucto2010\PUCZEK\ADRESY.000
c:\ucto2010\PUCZEK\ADRESY.T00
c:\ucto2010\PUCZEK\ADRESY.X00
c:\ucto2010\PUCZEK\ARCHIVM.004
c:\ucto2010\PUCZEK\ARCHIVM.T04
c:\ucto2010\PUCZEK\BANKA1.008
c:\ucto2010\PUCZEK\BANKA2.008
c:\ucto2010\PUCZEK\CISABS.004
c:\ucto2010\PUCZEK\CISDOKL.001
c:\ucto2010\PUCZEK\CISDRUH.001
c:\ucto2010\PUCZEK\CISDRUH.X01
c:\ucto2010\PUCZEK\CISPOH.001
c:\ucto2010\PUCZEK\CISPOH.X01
c:\ucto2010\PUCZEK\CISPOL.006
c:\ucto2010\PUCZEK\CISPOZN.000
c:\ucto2010\PUCZEK\CISPOZN.T00
c:\ucto2010\PUCZEK\CIST.000
c:\ucto2010\PUCZEK\CISTEXT.001
c:\ucto2010\PUCZEK\CISTXT.006
c:\ucto2010\PUCZEK\CISVYKON.001
c:\ucto2010\PUCZEK\CISVYKON.X01
c:\ucto2010\PUCZEK\DANDOKL.001
c:\ucto2010\PUCZEK\DANDOKL.T01
c:\ucto2010\PUCZEK\DAP15.003
c:\ucto2010\PUCZEK\DAP15.T03
c:\ucto2010\PUCZEK\DAP16.003
c:\ucto2010\PUCZEK\DAP16.T03
c:\ucto2010\PUCZEK\DENIK.001
c:\ucto2010\PUCZEK\DENIK.T01
c:\ucto2010\PUCZEK\DETI15.003
c:\ucto2010\PUCZEK\DETI15.X03
c:\ucto2010\PUCZEK\DETI16.003
c:\ucto2010\PUCZEK\DOVROK.004
c:\ucto2010\PUCZEK\DROBMAJ.009
c:\ucto2010\PUCZEK\DROBMAJ.T09
c:\ucto2010\PUCZEK\EDIT.000
c:\ucto2010\PUCZEK\EDIT.X00
c:\ucto2010\PUCZEK\EDITPAR.000
c:\ucto2010\PUCZEK\ELDP.097
c:\ucto2010\PUCZEK\ELDP.T97
c:\ucto2010\PUCZEK\FAKT_FH.006
c:\ucto2010\PUCZEK\FAKT_FH.T06
c:\ucto2010\PUCZEK\FAKT_FP.006
c:\ucto2010\PUCZEK\FAKT_FS.006
c:\ucto2010\PUCZEK\FAKT_VH.006
c:\ucto2010\PUCZEK\FAKT_VH.T06
c:\ucto2010\PUCZEK\FAKT_VP.006
c:\ucto2010\PUCZEK\FAKT_VS.006
c:\ucto2010\PUCZEK\FINANCE.001
c:\ucto2010\PUCZEK\FINANCE.T01
c:\ucto2010\PUCZEK\KATEG.004
c:\ucto2010\PUCZEK\MZDY.004
c:\ucto2010\PUCZEK\MZDY.T04
c:\ucto2010\PUCZEK\ODVODYM.004
c:\ucto2010\PUCZEK\ODVODYMX.004
c:\ucto2010\PUCZEK\OSOBY15.003
c:\ucto2010\PUCZEK\OSOBY15.X03
c:\ucto2010\PUCZEK\OSSZ08.003
c:\ucto2010\PUCZEK\OSSZ09.003
c:\ucto2010\PUCZEK\OZNPOJ.004
c:\ucto2010\PUCZEK\PAR01A2.001
c:\ucto2010\PUCZEK\PAR01A4.001
c:\ucto2010\PUCZEK\PAR03A4.003
c:\ucto2010\PUCZEK\PAR04A2.004
c:\ucto2010\PUCZEK\PAR04A2X.004
c:\ucto2010\PUCZEK\PAR06A4.006
c:\ucto2010\PUCZEK\PAR08A2.008
c:\ucto2010\PUCZEK\PAR08A4.008
c:\ucto2010\PUCZEK\PAR09A2.009
c:\ucto2010\PUCZEK\PAR09A2.T09
c:\ucto2010\PUCZEK\PAR09A4.009
c:\ucto2010\PUCZEK\PAR97A2.097
c:\ucto2010\PUCZEK\PARAM2.000
c:\ucto2010\PUCZEK\PARAM2.T00
c:\ucto2010\PUCZEK\PARAM4.000
c:\ucto2010\PUCZEK\PARAM4.T00
c:\ucto2010\PUCZEK\PARZAS.001
c:\ucto2010\PUCZEK\POHLZAV.001
c:\ucto2010\PUCZEK\POHLZAV.T01
c:\ucto2010\PUCZEK\POJIST.004
c:\ucto2010\PUCZEK\PRACOV.004
c:\ucto2010\PUCZEK\PRACOV.T04
c:\ucto2010\PUCZEK\PRACSML.004
c:\ucto2010\PUCZEK\PRACSML.T04
c:\ucto2010\PUCZEK\PRIHL.097
c:\ucto2010\PUCZEK\SHIFTF3.000
c:\ucto2010\PUCZEK\SHIFTF3.X00
c:\ucto2010\PUCZEK\STATY.000
c:\ucto2010\PUCZEK\STORNA.001
c:\ucto2010\PUCZEK\STORNA.T01
c:\ucto2010\PUCZEK\TRIDY.004
c:\ucto2010\PUCZEK\TYPDOKL.001
c:\ucto2010\PUCZEK\TYPDOKL.X01
c:\ucto2010\PUCZEK\UKOLY.000
c:\ucto2010\PUCZEK\UKOLY.T00
c:\ucto2010\PUCZEK\UPR15.003
c:\ucto2010\PUCZEK\UPR15.X03
c:\ucto2010\PUCZEK\UZAV.001
c:\ucto2010\PUCZEK\VRACBON.097
c:\ucto2010\PUCZEK\VYBERADR.000
c:\ucto2010\PUCZEK\VYBERADR.X00
c:\ucto2010\PUCZEK\VZP08.003
c:\ucto2010\PUCZEK\VZP09.003
c:\ucto2010\PUCZEK\ZAOKFA.006
c:\ucto2010\PUCZEK\ZURNALD.001
c:\ucto2010\PUPPI\ABSENCE.004
c:\ucto2010\PUPPI\ADRESY.000
c:\ucto2010\PUPPI\ADRESY.T00
c:\ucto2010\PUPPI\ADRESY.X00
c:\ucto2010\PUPPI\ARCHIVD.001
c:\ucto2010\PUPPI\ARCHIVD.T01
c:\ucto2010\PUPPI\ARCHIVM.004
c:\ucto2010\PUPPI\ARCHIVM.T04
c:\ucto2010\PUPPI\BANKA1.008
c:\ucto2010\PUPPI\BANKA2.008
c:\ucto2010\PUPPI\CISABS.004
c:\ucto2010\PUPPI\CISDOKL.001
c:\ucto2010\PUPPI\CISDRUH.001
c:\ucto2010\PUPPI\CISDRUH.X01
c:\ucto2010\PUPPI\CISPOH.001
c:\ucto2010\PUPPI\CISPOH.X01
c:\ucto2010\PUPPI\CISPOZN.000
c:\ucto2010\PUPPI\CISPOZN.T00
c:\ucto2010\PUPPI\CIST.000
c:\ucto2010\PUPPI\CISTEXT.001
c:\ucto2010\PUPPI\CISTXT.006
c:\ucto2010\PUPPI\CISVYKON.001
c:\ucto2010\PUPPI\CISVYKON.X01
c:\ucto2010\PUPPI\DAP15.003
c:\ucto2010\PUPPI\DAP15.T03
c:\ucto2010\PUPPI\DAP16.003
c:\ucto2010\PUPPI\DAP16.T03
c:\ucto2010\PUPPI\DENIK.001
c:\ucto2010\PUPPI\DENIK.T01
c:\ucto2010\PUPPI\DETI.004
c:\ucto2010\PUPPI\DETI.X04
c:\ucto2010\PUPPI\DOVROK.004
c:\ucto2010\PUPPI\DROBMAJ.009
c:\ucto2010\PUPPI\DROBMAJ.T09
c:\ucto2010\PUPPI\EDIT.000
c:\ucto2010\PUPPI\EDIT.X00
c:\ucto2010\PUPPI\EDITPAR.000
c:\ucto2010\PUPPI\EDITPAR.X00
c:\ucto2010\PUPPI\ELDP.097
c:\ucto2010\PUPPI\ELDP.T97
c:\ucto2010\PUPPI\FINANCE.001
c:\ucto2010\PUPPI\FINANCE.T01
c:\ucto2010\PUPPI\KATEG.004
c:\ucto2010\PUPPI\KATEG.X04
c:\ucto2010\PUPPI\ODVODYM.004
c:\ucto2010\PUPPI\ODVODYMX.004
c:\ucto2010\PUPPI\OSOBY15.003
c:\ucto2010\PUPPI\OSOBY15.X03
c:\ucto2010\PUPPI\OSSZ08.003
c:\ucto2010\PUPPI\OSSZ09.003
c:\ucto2010\PUPPI\OZNPOJ.004
c:\ucto2010\PUPPI\PAR01A2.001
c:\ucto2010\PUPPI\PAR01A4.001
c:\ucto2010\PUPPI\PAR03A4.003
c:\ucto2010\PUPPI\PAR04A2.004
c:\ucto2010\PUPPI\PAR04A2X.004
c:\ucto2010\PUPPI\PAR06A4.006
c:\ucto2010\PUPPI\PAR08A4.008
c:\ucto2010\PUPPI\PAR09A2.009
c:\ucto2010\PUPPI\PAR09A2.T09
c:\ucto2010\PUPPI\PAR09A4.009
c:\ucto2010\PUPPI\PAR97A2.097
c:\ucto2010\PUPPI\PARAM2.000
c:\ucto2010\PUPPI\PARAM2.T00
c:\ucto2010\PUPPI\PARAM4.000
c:\ucto2010\PUPPI\PARAM4.T00
c:\ucto2010\PUPPI\PARZAS.001
c:\ucto2010\PUPPI\POCZAM.097
c:\ucto2010\PUPPI\POHLZAV.001
c:\ucto2010\PUPPI\POHLZAV.T01
c:\ucto2010\PUPPI\POJIST.004
c:\ucto2010\PUPPI\POJIST.X04
c:\ucto2010\PUPPI\PRACOV.004
c:\ucto2010\PUPPI\PRACOV.T04
c:\ucto2010\PUPPI\PRACOV.X04
c:\ucto2010\PUPPI\PRACSML.004
c:\ucto2010\PUPPI\PRACSML.T04
c:\ucto2010\PUPPI\PRIHL.097
c:\ucto2010\PUPPI\SHIFTF3.000
c:\ucto2010\PUPPI\STORNA.001
c:\ucto2010\PUPPI\STORNA.T01
c:\ucto2010\PUPPI\TRIDY.004
c:\ucto2010\PUPPI\TRIDY.X04
c:\ucto2010\PUPPI\TYPDOKL.001
c:\ucto2010\PUPPI\UKOLY.000
c:\ucto2010\PUPPI\UKOLY.T00
c:\ucto2010\PUPPI\UZAV.001
c:\ucto2010\PUPPI\VRACBON.097
c:\ucto2010\PUPPI\VYUCZAL.097
c:\ucto2010\PUPPI\VZP08.003
c:\ucto2010\PUPPI\VZP09.003
c:\ucto2010\PUPPI\ZAOKFA.006
c:\ucto2010\PUPPI\ZURNALD.001
c:\ucto2010\RADKY.TXT
c:\ucto2010\RENFILES.BAT
c:\ucto2010\RO.EXE
c:\ucto2010\SEARCHX.EXE
c:\ucto2010\SEST01.PRO
c:\ucto2010\SEST01.TRO
c:\ucto2010\SEST02.PRO
c:\ucto2010\SEST02.TRO
c:\ucto2010\SEST03.PRO
c:\ucto2010\SEST03.TRO
c:\ucto2010\SEST04.PRO
c:\ucto2010\SEST04.TRO
c:\ucto2010\SEST05.PRO
c:\ucto2010\SEST05.TRO
c:\ucto2010\SEST06.PRO
c:\ucto2010\SEST06.TRO
c:\ucto2010\SEST07.PRO
c:\ucto2010\SEST07.TRO
c:\ucto2010\SEST08.PRO
c:\ucto2010\SEST08.TRO
c:\ucto2010\SEST09.PRO
c:\ucto2010\SEST09.TRO
c:\ucto2010\SESTAVY.CAT
c:\ucto2010\SESTAVY.RDB
c:\ucto2010\SESTAVY.TTT
c:\ucto2010\SETDATE.EXE
c:\ucto2010\SETFILES.EXE
c:\ucto2010\SEZNTISK.000
c:\ucto2010\SEZNTISK.T00
c:\ucto2010\SLOVY.000
c:\ucto2010\SLOVY.X00
c:\ucto2010\SPEC01.PRO
c:\ucto2010\SPEC01.TRO
c:\ucto2010\SPEC02.PRO
c:\ucto2010\SPEC02.TRO
c:\ucto2010\SPEC03.PRO
c:\ucto2010\SPEC03.TRO
c:\ucto2010\SPEC04.PRO
c:\ucto2010\SPEC04.TRO
c:\ucto2010\SPEC05.PRO
c:\ucto2010\SPEC05.TRO
c:\ucto2010\SPEC06.PRO
c:\ucto2010\SPEC06.TRO
c:\ucto2010\SPEC07.PRO
c:\ucto2010\SPEC07.TRO
c:\ucto2010\SUBDIR.EXE
c:\ucto2010\SUDLICH.EXE
c:\ucto2010\TIPY.000
c:\ucto2010\TIPY.T00
c:\ucto2010\TIPY.X00
c:\ucto2010\TTT.CAT
c:\ucto2010\TTT.RDB
c:\ucto2010\TTT.TTT
c:\ucto2010\TTTNEW.UUU
c:\ucto2010\TXTNARTF.EXE
c:\ucto2010\U.BAT
c:\ucto2010\UCTO.000
c:\ucto2010\UCTO.PAL
c:\ucto2010\UCTO2010.CAT
c:\ucto2010\UCTO2010.ICO
c:\ucto2010\UCTO2010.RDB
c:\ucto2010\UCTO2010.TTT
c:\ucto2010\UCTOINFO.PRO
c:\ucto2010\UCTOINFO.TRO
c:\ucto2010\UCTOTXT.UUU
c:\ucto2010\UCTOTXT2.UUU
c:\ucto2010\UCTOTXT3.UUU
c:\ucto2010\UFAND.EXE
c:\ucto2010\UFAND.OVR
c:\ucto2010\UFANDHLP.000
c:\ucto2010\UFANDHLP.T00
c:\ucto2010\UK.BAT
c:\ucto2010\UPG.PRO
c:\ucto2010\UPG.TRO
c:\ucto2010\UPG01.PRO
c:\ucto2010\UPG01.TRO
c:\ucto2010\UPG02.PRO
c:\ucto2010\UPG02.TRO
c:\ucto2010\UPG03.PRO
c:\ucto2010\UPG03.TRO
c:\ucto2010\UPG04.PRO
c:\ucto2010\UPG04.TRO
c:\ucto2010\UPG05.PRO
c:\ucto2010\UPG05.TRO
c:\ucto2010\UPG06.PRO
c:\ucto2010\UPG06.TRO
c:\ucto2010\UPG07.PRO
c:\ucto2010\UPG07.TRO
c:\ucto2010\UPG08.PRO
c:\ucto2010\UPG08.TRO
c:\ucto2010\UPG09.PRO
c:\ucto2010\UPG09.TRO
c:\ucto2010\UPG97.PRO
c:\ucto2010\UPG97.TRO
c:\ucto2010\UPG99.PRO
c:\ucto2010\UPG99.TRO
c:\ucto2010\UPGPAR.000
c:\ucto2010\VEDLCIN.UUU
c:\ucto2010\VERZE.UUU
c:\ucto2010\VYBERTXT.EXE
c:\ucto2010\VZORTISK.000
c:\ucto2010\ZASTUPCE.CAT
c:\ucto2010\ZASTUPCE.INI
c:\ucto2010\ZASTUPCE.RDB
c:\ucto2010\ZASTUPCE.TTT
c:\ucto2010\ZETROZET.PAL
c:\ucto2010\ZZZ.BAT
c:\windows\system32\AVSredirect.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2011-01-11 do 2011-02-11 )))))))))))))))))))))))))))))))
.

2011-02-11 00:00 . 2011-02-11 00:01 -------- d-----w- c:\users\MaJ\AppData\Local\temp
2011-02-11 00:00 . 2011-02-11 00:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-10 22:25 . 2011-02-10 22:25 -------- d-----w- C:\rsit
2011-02-10 22:25 . 2011-02-10 22:25 -------- d-----w- c:\program files\trend micro
2011-02-10 22:02 . 2011-02-10 22:02 -------- d-----w- c:\program files\ESET
2011-02-10 21:53 . 2011-02-10 21:53 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1650A159-C20D-4684-9F4F-A1F7AE4917DB}\MpKslc0ef9924.sys
2011-02-10 07:38 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1650A159-C20D-4684-9F4F-A1F7AE4917DB}\mpengine.dll
2011-02-09 21:34 . 2011-02-09 21:59 -------- d-----w- c:\program files\Trojan Remover
2011-02-09 21:34 . 2011-02-09 21:34 -------- d-----w- c:\programdata\Simply Super Software
2011-02-09 20:26 . 2011-02-09 20:30 -------- d-----w- c:\programdata\SecTaskMan
2011-02-09 20:06 . 2011-02-10 18:54 -------- d-----w- C:\UCTO2011
2011-02-09 13:01 . 2011-02-09 13:01 -------- d-----w- C:\9eb84de53fe975ad73fa6eeb104b16
2011-02-09 12:03 . 2011-01-05 03:37 2329088 ----a-w- c:\windows\system32\win32k.sys
2011-02-09 12:03 . 2010-12-18 05:29 541184 ----a-w- c:\windows\system32\kerberos.dll
2011-02-09 12:03 . 2011-01-05 05:37 428032 ----a-w- c:\windows\system32\vbscript.dll
2011-02-07 22:50 . 2011-02-07 22:50 -------- d-----w- c:\users\MaJ\AppData\Local\CrashRpt
2011-02-07 22:50 . 2011-02-09 22:07 -------- d--h--w- c:\windows\msdownld.tmp
2011-02-07 22:13 . 2011-02-07 22:13 -------- d-----w- c:\program files\Atari
2011-02-07 22:11 . 2011-02-07 22:11 -------- d-----w- c:\users\MaJ\AppData\Local\GHISLER
2011-02-07 17:52 . 2011-02-07 17:52 -------- d-----w- c:\programdata\ATI
2011-02-07 17:52 . 2011-02-07 17:52 -------- d-----w- c:\program files\ATI Stream
2011-02-07 17:50 . 2011-02-07 17:50 -------- d-----w- C:\ATI
2011-02-07 17:48 . 2009-07-14 01:15 315904 ----a-w- c:\windows\system32\Difxf037.rra
2011-02-07 17:48 . 2011-02-07 17:48 -------- d-----w- C:\RaidTool
2011-02-07 17:48 . 2010-09-07 16:40 1976920 ----a-w- c:\windows\system32\xRaidSetup.exe
2011-02-07 17:48 . 2010-09-07 16:40 162392 ----a-w- c:\windows\system32\xRaidAPI.dll
2011-02-07 17:48 . 2011-02-07 17:48 -------- d-----w- c:\windows\RaidTool
2011-02-07 17:48 . 2005-04-03 22:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2011-02-07 17:48 . 2005-04-03 22:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2011-02-07 17:48 . 2005-04-03 22:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2011-02-07 17:48 . 2005-04-03 21:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2011-02-07 17:48 . 2005-04-03 22:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2011-02-07 17:48 . 2011-02-07 17:48 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2011-02-07 17:48 . 2011-02-07 17:48 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2011-02-07 17:45 . 2010-12-29 09:45 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2011-02-07 17:45 . 2010-12-29 09:45 327784 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2011-02-07 17:45 . 2010-12-29 09:45 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2011-02-07 17:44 . 2011-02-07 17:44 -------- d-----w- c:\program files\Renesas Electronics
2011-02-07 17:44 . 2011-02-07 17:44 -------- d-----w- c:\programdata\Downloaded Installations
2011-02-07 17:43 . 2011-02-07 17:43 53248 ----a-r- c:\users\MaJ\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-02-07 17:43 . 2011-02-07 17:43 -------- d-----w- c:\users\MaJ\AppData\Local\Logishrd
2011-02-07 17:43 . 2011-02-07 17:43 -------- d-----w- c:\program files\Logitech
2011-02-07 17:41 . 2010-12-14 22:34 519792 ----a-w- c:\windows\system32\VIASysFx.dll
2011-02-07 17:41 . 2010-12-14 22:34 893552 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2011-02-07 17:41 . 2010-12-14 22:34 78448 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2011-02-07 17:41 . 2010-12-14 22:34 191600 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2011-02-07 17:41 . 2010-12-14 22:33 27760 ----a-w- c:\windows\system32\ViakaraokeSrv.exe
2011-02-07 17:41 . 2010-12-14 22:33 112752 ----a-w- c:\windows\system32\ViaKaraokeApo.dll
2011-02-07 17:41 . 2010-12-14 22:33 106608 ----a-w- c:\windows\system32\ViaKaraokePropPageExt.dll
2011-02-07 17:41 . 2010-12-14 22:33 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2011-02-07 17:41 . 2010-12-14 22:33 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2011-02-07 17:33 . 2010-11-23 17:33 263464 ----a-w- c:\windows\system32\drivers\RtHDMIV.sys
2011-02-07 17:33 . 2010-11-18 14:01 3789416 ----a-w- c:\windows\system32\RtkHDMI.dll
2011-02-07 17:33 . 2010-11-18 14:01 1974888 ----a-w- c:\windows\system32\RHDMIExt.dll
2011-02-07 17:33 . 2010-11-11 12:27 69224 ----a-w- c:\windows\system32\RHCoInst.dll
2011-02-07 17:33 . 2010-11-08 06:31 76120 ----a-w- c:\windows\system32\RTEEL32H.dll
2011-02-07 17:33 . 2010-11-08 06:31 64856 ----a-w- c:\windows\system32\RTEEG32H.dll
2011-02-07 17:33 . 2010-11-08 06:31 357720 ----a-w- c:\windows\system32\RTEEP32H.dll
2011-02-07 17:33 . 2010-11-08 06:31 295768 ----a-w- c:\windows\system32\RH3DHT32.dll
2011-02-07 17:33 . 2010-11-08 06:31 170840 ----a-w- c:\windows\system32\RTEED32H.dll
2011-02-07 17:33 . 2010-11-08 06:31 295768 ----a-w- c:\windows\system32\RH3DAA32.dll
2011-02-07 17:33 . 2011-02-07 17:34 -------- d--h--w- c:\program files\Temp
2011-02-06 19:04 . 2011-02-06 19:04 -------- d-----w- c:\program files\Driver-Soft
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\UC.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\RAR.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\PKZIP.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\PKUNZIP.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\LHA.PIF
2011-02-06 18:23 . 2010-06-17 06:55 545 ----a-w- c:\windows\ARJ.PIF
2011-02-06 18:23 . 2011-02-07 21:59 -------- d-----w- c:\program files\totalcmd
2011-02-06 18:23 . 2011-02-06 18:23 -------- d-----w- c:\users\MaJ\AppData\Roaming\GHISLER
2011-01-19 17:49 . 2011-01-19 17:49 -------- d-----w- c:\program files\Xilisoft
2011-01-19 17:03 . 2011-01-19 17:11 312593 ----a-w- c:\program files\RMPly00.exe
2011-01-19 16:55 . 2009-09-27 08:39 369152 ----a-w- c:\windows\system32\avisynth.dll
2011-01-19 16:55 . 2004-02-22 09:11 719872 ----a-w- c:\windows\system32\devil.dll
2011-01-19 16:55 . 2004-01-24 23:00 70656 ----a-w- c:\windows\system32\yv12vfw.dll
2011-01-19 16:55 . 2004-01-24 23:00 70656 ----a-w- c:\windows\system32\i420vfw.dll
2011-01-19 16:55 . 2011-01-19 16:55 -------- d-----w- c:\program files\AviSynth 2.5
2011-01-12 11:45 . 2010-10-16 04:34 573440 ----a-w- c:\windows\system32\odbc32.dll
2011-01-12 11:45 . 2010-10-16 04:33 372736 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-12 11:45 . 2010-10-16 04:33 352256 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-12 11:45 . 2010-10-16 04:33 987136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-12 11:45 . 2010-10-16 04:33 208896 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 09:41 . 2010-12-06 06:44 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-05 03:36 . 2011-01-05 03:36 6789120 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-01-05 03:03 . 2011-01-05 03:03 17043968 ----a-w- c:\windows\system32\atioglxx.dll
2011-01-05 03:02 . 2011-01-05 03:02 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-01-05 03:02 . 2010-09-29 01:55 596480 ----a-w- c:\windows\system32\aticfx32.dll
2011-01-05 02:58 . 2011-01-05 02:58 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-01-05 02:58 . 2011-01-05 02:58 397312 ----a-w- c:\windows\system32\atieclxx.exe
2011-01-05 02:57 . 2011-01-05 02:57 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-01-05 02:56 . 2011-01-05 02:56 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-01-05 02:56 . 2011-01-05 02:56 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-01-05 02:55 . 2011-01-05 02:55 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-01-05 02:55 . 2011-01-05 02:55 15872 ----a-w- c:\windows\system32\atimuixx.dll
2011-01-05 02:55 . 2011-01-05 02:55 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-01-05 02:52 . 2010-09-29 01:46 4101632 ----a-w- c:\windows\system32\atidxx32.dll
2011-01-05 02:33 . 2011-01-05 02:33 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-01-05 02:33 . 2011-01-05 02:33 4162048 ----a-w- c:\windows\system32\atiumdag.dll
2011-01-05 02:33 . 2011-01-05 02:33 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-01-05 02:32 . 2011-01-05 02:32 1912832 ----a-w- c:\windows\system32\atiumdmv.dll
2011-01-05 02:31 . 2011-01-05 02:31 5441024 ----a-w- c:\windows\system32\aticaldd.dll
2011-01-05 02:28 . 2010-09-29 01:22 52736 ----a-w- c:\windows\system32\coinst.dll
2011-01-05 02:25 . 2011-01-05 02:25 3461120 ----a-w- c:\windows\system32\atiumdva.dll
2011-01-05 02:20 . 2010-09-29 01:15 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2011-01-05 02:19 . 2011-01-05 02:19 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-01-05 02:19 . 2011-01-05 02:19 27648 ----a-w- c:\windows\system32\atigktxx.dll
2011-01-05 02:19 . 2011-01-05 02:19 235520 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-01-05 02:18 . 2010-09-29 01:14 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2011-01-05 02:18 . 2011-01-05 02:18 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2011-01-05 02:17 . 2011-01-05 02:17 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-01-05 02:11 . 2011-01-05 02:11 52736 ----a-w- c:\windows\system32\atimpc32.dll
2011-01-05 02:11 . 2011-01-05 02:11 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2010-12-25 22:02 . 2010-12-25 22:03 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5E278469-5894-43D7-8BB3-9F142F06C6CA}\gapaengine.dll
2010-12-23 10:09 . 2010-12-04 08:07 53248 ----a-w- c:\windows\system32\CSVer.dll
2010-12-14 22:33 . 2010-12-04 08:12 1153648 ----a-w- c:\windows\system32\drivers\viahduaa.sys
2010-12-10 12:50 . 2010-12-10 12:50 62336 ----a-w- c:\windows\system32\drivers\nusb3hub.sys
2010-12-10 12:50 . 2010-01-22 11:21 141440 ----a-w- c:\windows\system32\drivers\nusb3xhc.sys
2010-12-07 22:50 . 2010-12-07 22:51 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-12-07 22:39 . 2010-12-07 22:38 24 --sh--w- c:\windows\S2E7E60D4.tmp
2010-12-07 11:16 . 2010-12-07 11:16 51200 ----a-w- c:\windows\system32\OpenCL.dll
2010-12-04 09:01 . 2010-12-04 09:01 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2010-11-29 16:38 . 2010-11-29 16:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 16:38 . 2010-11-29 16:38 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-17 12:04 . 2010-11-17 12:04 101392 ----a-w- c:\windows\system32\drivers\AtihdW73.sys
2010-11-16 11:01 . 2010-12-04 07:53 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{93F34EEE-D597-4275-BDC8-37457FC966D5}\mpengine.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2010-12-22 2047088]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-10-28 1352272]
"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-04 336384]

c:\users\MaJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-10-28 10:13 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKLM\~\startupfolder\C:^Users^MaJ^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
path=c:\users\MaJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk
backup=c:\windows\pss\Logitech . Registrace produktu.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 03:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
2010-05-04 15:05 311296 ----a-r- c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2009-11-09 03:17 180224 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-04 1343400]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys [2010-08-06 257064]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2009-07-06 11448]
S1 MpKslc0ef9924;MpKslc0ef9924;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1650A159-C20D-4684-9F4F-A1F7AE4917DB}\MpKslc0ef9924.sys [2011-02-10 28752]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-01-05 176128]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [2010-12-14 27760]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-01-05 6789120]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-01-05 235520]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 62336]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 141440]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-12-29 327784]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010-12-14 1153648]


--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - MPKSLC0EF9924
.
.

------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\MaJ\AppData\Roaming\Mozilla\Firefox\Profiles\j097u1vp.default\
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.032"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.abr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.amr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ani"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.apd"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.arw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bay"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bmp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bwf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cel"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cr2"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.crw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cs1"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cur"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dcr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dcx"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dib"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djv"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djvu"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dng"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.emf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.eps"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.erf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fff"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.flc"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fli"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fpx"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.gif"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.hdr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icl"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icn"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ico"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.iff"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ilbm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.int"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.inta"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.iw4"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2c"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2k"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jbr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jfif"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jif"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jp2"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpc"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpe"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpeg"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpg"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpk"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpx"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.kar"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.kdc"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.lbm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.m15"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.m1a"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.m2a"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.m75"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mef"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mos"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mpv"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mrw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.nef"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.nrw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.orf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbr"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcd"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pct"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcx"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pef"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pgm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pic"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pics"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pict"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pix"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.png"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ppm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psd"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspbrush"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspimage"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.qcp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.qtpf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.raf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ras"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.raw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgb"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgba"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rle"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rsb"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rw2"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rwl"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sdv"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sfil"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sgi"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.smf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.smi"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.smil"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sml"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sr2"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.srf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.swa"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tga"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.thm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tif"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tiff"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttc"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ulw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30po"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30pp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30ppf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.vfw"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbmp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wmf"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xbm"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xif"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xmp"

[HKEY_USERS\S-1-5-21-2508001287-3060424068-1754949327-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xpm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-02-11 01:02:57
ComboFix-quarantined-files.txt 2011-02-11 00:02

Před spuštěním: Volných bajtů: 825 610 518 528
Po spuštění: Volných bajtů: 825 567 334 400

- - End Of File - - C7B3E67D5B0745A11D593744F7C69E11

Tak bohužel mi dnes PC provedl obnovu ze zálohy, takže jsem asi tam co jsem byl. Předpokládám, že optimální postup by měl být znovu spustit Combofix.exe, a poté sem vložit aktuální log. Můžete mi to prosím potvrdit? Nerad bych provedl nějakou blbost...

Tak jen na doplnění, projel jsem PC Online scannerem od ESETu a našlo mi to 11 voškliváků (jako např. Win32/Obfuscated; Win32/HackTool; apod.). Ve finále mi Online scanner tyto nakažené soubory a odkazy a vůbec všechno smazal. Nejsem si však jistý, zda je to už v pohodě.. takže předpokládám, že pustit ten Combofix bych ještě měl, že ano?

Nejdříve mi sem dej aktuální log z Rsit a už nespouštěj žádné čističe.

jj... chápu, tady je log:

Logfile of random's system information tool 1.08 (written by random/random)
Run by MaJ at 2011-02-11 18:38:11
Microsoft Windows 7 Ultimate
System drive C: has 788 GB (83%) free of 954 GB
Total RAM: 3582 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:38:26, on 11.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\MaJ\Downloads\RSIT.exe
C:\Program Files\trend micro\MaJ.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\Windows\system32\viakaraokesrv.exe

--
End of file - 4186 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-07 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2010-12-22 2047088]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-10-29 1352272]
"NUSB3MON"=C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-04 336384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2009-11-09 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^MaJ^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
C:\PROGRA~1\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

C:\Users\MaJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-10-28 64592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-11 18:38:11 ----D---- C:\rsit
2011-02-11 01:02:59 ----D---- C:\Windows\temp
2011-02-11 00:52:24 ----D---- C:\Windows\ERDNT
2011-02-11 00:48:00 ----D---- C:\Qoobox
2011-02-10 23:25:06 ----D---- C:\Program Files\trend micro
2011-02-09 22:41:12 ----D---- C:\ProgramData\TEMP
2011-02-09 22:34:31 ----D---- C:\ProgramData\Simply Super Software
2011-02-09 22:34:31 ----D---- C:\Program Files\Trojan Remover
2011-02-09 21:26:21 ----D---- C:\ProgramData\SecTaskMan
2011-02-09 21:06:38 ----D---- C:\UCTO2011
2011-02-09 14:01:23 ----D---- C:\9eb84de53fe975ad73fa6eeb104b16
2011-02-09 13:03:04 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 13:03:02 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 13:03:01 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 13:03:01 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 13:03:00 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 13:02:56 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\ieui.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 13:02:54 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 13:02:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\jsproxy.dll
2011-02-09 13:02:53 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 13:02:50 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 13:02:50 ----A---- C:\Windows\system32\atmfd.dll
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-09 13:02:48 ----A---- C:\Windows\system32\ntdll.dll
2011-02-07 23:50:09 ----HD---- C:\Windows\msdownld.tmp
2011-02-07 23:50:09 ----D---- C:\Windows\system32\directx
2011-02-07 23:13:43 ----D---- C:\Program Files\Atari
2011-02-07 18:52:50 ----D---- C:\ProgramData\ATI
2011-02-07 18:52:42 ----D---- C:\Program Files\ATI Stream
2011-02-07 18:50:05 ----D---- C:\ATI
2011-02-07 18:48:23 ----D---- C:\RaidTool
2011-02-07 18:48:23 ----A---- C:\Windows\system32\xRaidSetup.exe
2011-02-07 18:48:23 ----A---- C:\Windows\system32\xRaidAPI.dll
2011-02-07 18:48:16 ----D---- C:\Windows\RaidTool
2011-02-07 18:45:59 ----A---- C:\Windows\system32\RTNUninst32.dll
2011-02-07 18:45:59 ----A---- C:\Windows\system32\RtNicProp32.dll
2011-02-07 18:45:59 ----A---- C:\Windows\system32\drivers\Rt86win7.sys
2011-02-07 18:44:52 ----D---- C:\Program Files\Renesas Electronics
2011-02-07 18:44:05 ----D---- C:\ProgramData\Downloaded Installations
2011-02-07 18:43:03 ----D---- C:\Program Files\Logitech
2011-02-07 18:41:11 ----A---- C:\Windows\system32\VIASysFx.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\VIAPropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaMicArrayPropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaMicArrayAPO.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViakaraokeSrv.exe
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaKaraokePropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\ViaKaraokeApo.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\Dts2PropPageExt.dll
2011-02-07 18:41:11 ----A---- C:\Windows\system32\Dts2APO.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RtkHDMI.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEP32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEL32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEEG32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RTEED32H.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RHDMIExt.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RHCoInst.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\RH3DHT32.dll
2011-02-07 18:33:39 ----A---- C:\Windows\system32\drivers\RtHDMIV.sys
2011-02-07 18:33:38 ----A---- C:\Windows\system32\RH3DAA32.dll
2011-02-07 18:33:29 ----HD---- C:\Program Files\Temp
2011-02-06 20:04:03 ----D---- C:\Program Files\Driver-Soft
2011-02-06 19:23:51 ----A---- C:\Windows\UC.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\RAR.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\PKZIP.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\PKUNZIP.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\NOCLOSE.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\LHA.PIF
2011-02-06 19:23:51 ----A---- C:\Windows\ARJ.PIF
2011-02-06 19:23:50 ----D---- C:\Users\MaJ\AppData\Roaming\GHISLER
2011-02-06 19:23:50 ----D---- C:\Program Files\totalcmd
2011-01-19 18:49:34 ----D---- C:\Program Files\Xilisoft
2011-01-19 18:13:48 ----D---- C:\Users\MaJ\AppData\Roaming\Real
2011-01-19 18:03:21 ----A---- C:\Program Files\RMPly00.exe
2011-01-19 17:55:26 ----A---- C:\Windows\system32\devil.dll
2011-01-19 17:55:26 ----A---- C:\Windows\system32\avisynth.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\yv12vfw.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\i420vfw.dll
2011-01-19 17:55:25 ----A---- C:\Windows\system32\AVSredirect.dll
2011-01-19 17:55:24 ----D---- C:\Program Files\AviSynth 2.5
2011-01-12 12:45:46 ----A---- C:\Windows\system32\odbc32.dll

======List of files/folders modified in the last 1 months======

2011-02-11 18:29:31 ----D---- C:\Windows\System32
2011-02-11 18:29:31 ----D---- C:\Windows\inf
2011-02-11 18:29:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-11 14:19:28 ----D---- C:\Windows\system32\config
2011-02-11 13:08:11 ----D---- C:\Program Files
2011-02-11 08:07:09 ----SHD---- C:\System Volume Information
2011-02-11 07:24:41 ----D---- C:\Windows\Tasks
2011-02-11 07:24:41 ----D---- C:\Windows\system32\wfp
2011-02-11 07:24:41 ----D---- C:\Windows\system32\wbem
2011-02-11 07:24:41 ----D---- C:\Windows\system32\DriverStore
2011-02-11 07:24:41 ----D---- C:\Windows\system32\drivers\etc
2011-02-11 07:24:41 ----D---- C:\Windows\system32\drivers
2011-02-11 07:24:41 ----D---- C:\Windows\system32\cs-CZ
2011-02-11 07:24:41 ----D---- C:\Windows\system32\catroot2
2011-02-11 07:24:41 ----D---- C:\Windows
2011-02-11 07:24:41 ----D---- C:\Program Files\Internet Explorer
2011-02-11 07:24:40 ----D---- C:\Windows\AppCompat
2011-02-11 07:24:39 ----D---- C:\UCTO2010
2011-02-11 07:24:39 ----D---- C:\Program Files\Mozilla Firefox
2011-02-11 07:24:36 ----D---- C:\AMD
2011-02-11 07:24:35 ----SHD---- C:\$RECYCLE.BIN
2011-02-11 07:24:33 ----D---- C:\Windows\registration
2011-02-11 07:24:30 ----RD---- C:\Users
2011-02-11 07:24:25 ----D---- C:\ProgramData
2011-02-11 07:24:25 ----D---- C:\Program Files\Reality Pump
2011-02-11 07:23:10 ----D---- C:\Windows\system32\LogFiles
2011-02-11 00:52:25 ----D---- C:\Windows\Prefetch
2011-02-09 23:06:03 ----SHD---- C:\Windows\Installer
2011-02-09 22:38:36 ----A---- C:\Windows\ntbtlog.txt
2011-02-09 21:20:37 ----D---- C:\Windows\winsxs
2011-02-09 21:19:21 ----D---- C:\Windows\system32\migration
2011-02-09 20:23:18 ----RSD---- C:\Windows\Fonts
2011-02-09 14:01:23 ----A---- C:\Windows\system32\MRT.exe
2011-02-09 13:02:44 ----D---- C:\Windows\system32\catroot
2011-02-07 23:48:24 ----RSD---- C:\Windows\assembly
2011-02-07 18:52:30 ----D---- C:\Program Files\ATI Technologies
2011-02-07 18:48:24 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-07 18:45:59 ----D---- C:\Program Files\Realtek
2011-02-07 18:43:42 ----SD---- C:\Users\MaJ\AppData\Roaming\Microsoft
2011-02-07 18:43:30 ----D---- C:\Program Files\Common Files\LogiShrd
2011-02-07 18:43:13 ----D---- C:\ProgramData\Logishrd
2011-02-06 19:24:29 ----D---- C:\Program Files\totalcmd 7.56
2011-02-06 19:22:49 ----D---- C:\Users\MaJ\AppData\Roaming\uTorrent
2011-02-04 14:12:35 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-10-29 104536]
R0 mv91xx;mv91xx; C:\Windows\system32\DRIVERS\mv91xx.sys [2010-08-06 257064]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2009-08-04 11296]
R1 AsUpIO;AsUpIO; C:\Windows\system32\drivers\AsUpIO.sys [2009-07-06 11448]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKsl8b8dbf7f;MpKsl8b8dbf7f; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A238F339-4ACB-496D-A40A-E628B042A5B2}\MpKsl8b8dbf7f.sys [2011-02-11 28752]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-05 6789120]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-05 235520]
R3 ElbyDelay;ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [2007-02-16 11984]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-08-24 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-08-24 37328]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 62336]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 141440]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2010-11-23 263464]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-12-29 327784]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-12-14 1153648]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-05 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2010-12-14 27760]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-10-28 293456]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-04 1343400]

-----------------EOF-----------------

Ručně smaž složku C:\Qoobox pak spusť skener Cure It podle TOHOTO návodu

po skončení skenu chci sem výsledky.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)

Bohužel mi to C:\Qoobox nedovolí smazat... chce to povolení Administrators, které samozřejmě mám...

Tak jinak, stáhni a spusť OTMoveIt

do levého okna aplikace pod Paste Instructions for Items to be Moved zkopíruj tento text:
klikni na MoveIt! a v pravém zeleném okně aplikace se Ti objeví info o provedene akci, obsah okna zkopíruj sem,

pokud aplikace bude požadovat restart, klikni na YES

v tom případě sem chci zkopírovat obsah logu uloženého na C:\_OTMoveIt\MovedFiles\

OK, tady to je:

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\*.tmp not found.
File/Folder C:\WINDOWS\System32\*.tmp not found.
C:\WINDOWS\msdownld.tmp folder moved successfully.
File move failed. C:\WINDOWS\S2E7E60D4.tmp scheduled to be moved on reboot.
C:\Qoobox\Quarantine\C\Windows\System32 folder moved successfully.
C:\Qoobox\Quarantine\C\Windows folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{ZAL3} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{ZAL2} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{WWWW} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{UDOC} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{TISK} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{STAN} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{SLOZ} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{SEST} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{PRIK} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{PDF3} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{PDF2} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{PDF1} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{OBNV} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{NOVA} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{INFO} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\{GLOB} folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\PUPPI folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\PUCZEK folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\ONDRA folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\LISAK folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\KUCABA folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010\DAVID folder moved successfully.
C:\Qoobox\Quarantine\C\UCTO2010 folder moved successfully.
C:\Qoobox\Quarantine\C folder moved successfully.
C:\Qoobox\Quarantine folder moved successfully.
Folder move failed. C:\Qoobox\BackEnv scheduled to be moved on reboot.
C:\Qoobox folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: MaJ
->Temp folder emptied: 7113852 bytes
->Temporary Internet Files folder emptied: 11923032 bytes
->Java cache emptied: 6652 bytes
->FireFox cache emptied: 103395597 bytes
->Flash cache emptied: 28180 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 24 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 24680 bytes
RecycleBin emptied: 233125582 bytes

Total Files Cleaned = 339,00 mb


OTM by OldTimer - Version 3.1.17.2 log created on 02112011_192154

Files moved on Reboot...
File move failed. C:\WINDOWS\S2E7E60D4.tmp scheduled to be moved on reboot.
File C:\Qoobox\BackEnv not found!

Registry entries deleted on Reboot...

To byl fofr

Znovu spusť OTMoveIt a nahoře v aplikaci klini na CleanUP!

tímto po sobě uklidí.


No a pak ten Cure It, ale to už taková rychlovka nebude

Tak včera bohužel vypadl proud, tak jsem v léčení podle tvého návodu pokračoval až dnes. Cure It se mi stáhla verze 6.00 a ta mi dovolila pouze Express scan a ne Complete scan. Každopádně tento scan provedený programem CureIt nenašel absolutně žádný infikovaný soubor. Jak teď mám prosím tě pokračovat dál?
POZN. Jen pro info, MSIE už mi přestalo vyhazovat hlášky ohledně nákazy, ale já fakt nedokážu posoudit, zda už je PC čisté
Díky za pomoc...

jen rpo info... ak jsem to Microsoft Security Essentials ještě přeskenoval a nehlásí to žádný problém...