Prosím o kontrolu.

[liborek1963]

Mám problémy s inernetem/je toho víc to by bylo na dýl/a tak bych chtěl vyloučit nějakou havěť.Děkuji.


Logfile of random's system information tool 1.08 (written by random/random)
Run by slim at 2011-03-24 21:46:14
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 36 GB (38%) free of 96 GB
Total RAM: 3070 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:46:23, on 24.3.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\slim\Plocha\viry\RSIT.exe
C:\Program Files\trend micro\slim.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [EPSON SX410 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE /FU "C:\DOCUME~1\slim\LOCALS~1\Temp\E_S65.tmp" /EF "HKCU"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [EPSON SX410 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE /FU "C:\DOCUME~1\slim\LOCALS~1\Temp\E_S65.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Stáhnout pomocí Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

--
End of file - 8005 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\Wise Disk Cleaner Schedule Task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-01-07 2731872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-11-25 2463048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-07 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-07 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-11-25 2463048]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
"36X Raid Configurer"=C:\WINDOWS\system32\JMRaidSetup.exe [2007-02-06 1953792]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-02 98304]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-01-07 2747744]
"EPSON SX410 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE [2008-10-02 199680]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-09-03 19573352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON SX410 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFCE.EXE [2008-10-02 199680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^MBCameraMonitor.lnk]
[]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-03 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoResolveSearch"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Disabled:Assassin's Creed Dx10"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Disabled:Assassin's Creed Update"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"F:\Program Files\Unreal Tournament 3\Binaries\UT3.exe"="F:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"F:\Program Files\Ubisoft\Far Cry 2\bin\FarCry2.exe"="F:\Program Files\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"F:\Program Files\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="F:\Program Files\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"F:\Program Files\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="F:\Program Files\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"F:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="F:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"F:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="F:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"F:\Program Files\Activision\Prototype\prototypef.exe"="F:\Program Files\Activision\Prototype\prototypef.exe:*:Enabled:Prototype(TM)"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"F:\Program Files\Empire Interactive\FlatOut Ultimate Carnage\Fouc.exe"="F:\Program Files\Empire Interactive\FlatOut Ultimate Carnage\Fouc.exe:*:Enabled:FlatOut Ultimate Carnage"
"C:\Program Files\Softland\Backup4all Lite 4\Backup4all.exe"="C:\Program Files\Softland\Backup4all Lite 4\Backup4all.exe:*:Enabled:Backup4all Lite 4"
"C:\Program Files\Softland\Backup4all Lite 4\b4aCmd.exe"="C:\Program Files\Softland\Backup4all Lite 4\b4aCmd.exe:*:Enabled:Backup4all Lite 4 command line"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"F:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe"="F:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"F:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe"="F:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction Update"
"C:\Program Files\AVG\AVG10\avgdiagex.exe"="C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostika 2011"
"C:\Program Files\AVG\AVG10\avgnsx.exe"="C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG10\avgemcx.exe"="C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - open - NOTEPAD.EXE %1
.scr - open - C:\WINDOWS\NOTEPAD.EXE "%1"
.scr - install -
.scr - config -
.txt - open - NotePad.exe "%1" %*
.vbs - open - NOTEPAD.EXE %1

======List of files/folders created in the last 1 months======

2011-03-24 21:46:15 ----D---- C:\Program Files\trend micro
2011-03-24 21:46:14 ----D---- C:\rsit
2011-03-15 20:43:29 ----A---- C:\WINDOWS\system32\dpl100.dll
2011-03-15 20:43:29 ----A---- C:\WINDOWS\system32\divx.dll
2011-03-15 20:43:28 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-03-15 20:43:28 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-03-13 23:48:16 ----D---- C:\Program Files\NVIDIA Corporation
2011-02-26 23:46:09 ----A---- C:\WINDOWS\GPInstall.exe

======List of files/folders modified in the last 1 months======

2011-03-24 21:46:22 ----D---- C:\WINDOWS\Prefetch
2011-03-24 21:46:15 ----RD---- C:\Program Files
2011-03-24 21:03:56 ----D---- C:\WINDOWS\temp
2011-03-24 20:54:06 ----SHD---- C:\System Volume Information
2011-03-24 20:54:06 ----D---- C:\WINDOWS\system32\Restore
2011-03-24 20:51:39 ----D---- C:\WINDOWS\system32
2011-03-24 20:51:37 ----D---- C:\WINDOWS\system32\CatRoot2
2011-03-24 19:47:38 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-03-23 22:17:52 ----D---- C:\Program Files\Mozilla Firefox
2011-03-22 22:55:57 ----A---- C:\WINDOWS\NeroDigital.ini
2011-03-22 22:24:20 ----D---- C:\Documents and Settings\slim\Data aplikací\uTorrent
2011-03-22 21:46:49 ----SHD---- C:\WINDOWS\Installer
2011-03-19 22:00:30 ----D---- C:\Documents and Settings\slim\Data aplikací\Media Player Classic
2011-03-18 21:14:50 ----D---- C:\Documents and Settings\slim\Data aplikací\Skype
2011-03-18 21:14:33 ----D---- C:\Documents and Settings\slim\Data aplikací\skypePM
2011-03-18 20:58:59 ----D---- C:\WINDOWS
2011-03-16 23:44:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-03-15 20:42:57 ----D---- C:\Program Files\DivX
2011-03-15 20:42:57 ----D---- C:\Program Files\Common Files\DivX Shared
2011-03-13 23:48:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-03-11 20:05:18 ----D---- C:\Program Files\Wise Disk Cleaner
2011-03-11 20:04:55 ----SD---- C:\WINDOWS\Tasks
2011-03-07 22:10:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-28 19:53:47 ----D---- C:\WINDOWS\system32\drivers
2011-02-28 19:53:47 ----D---- C:\WINDOWS\Downloaded Installations
2011-02-26 17:46:01 ----D---- C:\Documents and Settings\slim\Data aplikací\vlc
2011-02-26 17:03:40 ----D---- C:\Program Files\AIDA32 - Enterprise System Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2010-09-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2010-09-07 26064]
R0 hotcore3;hotcore3; C:\WINDOWS\system32\drivers\hotcore3.sys [2008-07-09 40368]
R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS\system32\DRIVERS\jraid.sys [2007-02-16 44928]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2006-03-02 61056]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-08-18 717296]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2010-12-08 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2010-09-07 34384]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2010-11-12 299984]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2006-07-18 284184]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-03-02 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2006-07-18 91672]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-11-27 279712]
R2 cpuz134;cpuz134; \??\C:\WINDOWS\system32\drivers\cpuz134_x32.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-11-27 25888]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-03 4605952]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2010-08-19 123472]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2010-08-19 30288]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2010-08-19 26192]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-09-03 6139496]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2007-01-04 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtKHDMI.sys [2010-01-27 4078400]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-07-06 234392]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2008-01-24 19336]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2008-01-24 48904]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2004-08-03 48128]
S3 ak4jpz0r;ak4jpz0r; C:\WINDOWS\system32\drivers\ak4jpz0r.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-03-02 60800]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2004-08-03 38912]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\J:\INSTALL\GMSIPCI.SYS []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MOUSEWDFilter;MOUSEWDFilter; \??\C:\WINDOWS\System32\Drivers\MOUSEWD.SYS []
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2004-08-03 51328]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-03-02 61824]
S3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys []
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-11-06 47360]
S3 sermouse;Ovladač sériové myši; C:\WINDOWS\system32\DRIVERS\sermouse.sys [2001-10-24 17664]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2008-01-24 28168]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2008-01-24 29192]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2008-01-24 14728]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-03 602112]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-01-06 6128720]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2010-10-22 265400]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\Documents and Settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-07 152984]
R2 KPF4;Sunbelt Kerio Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2006-07-18 1205784]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2010-03-20 143360]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2006-03-02 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 PCLEPCI;PCLEPCI; C:\WINDOWS\system32\drivers\pclepci.sys [2005-02-09 14165]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2010-11-25 517448]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-29 355584]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Udělejte kompletnhí sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[liborek1963]

No asi nic..

Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org

Verze databáze: 6135

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

24.3.2011 22:54:29
mbam-log-2011-03-24 (22-54-13).txt

Typ kontroly: Úplný test (C:\|D:\|E:\|F:\|G:\|)
Testované objekty: 284361
Uplynulý čas: 36 minut, 50 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 3
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
g:\Programy\programy základ\Naučné\Cady\Cadkey\run ck99viewer\vib.cde (Trojan.Scar) -> No action taken.

[Rudy]

Položky, které MBAM nalezl, smažte.

[liborek1963]

No smazal jsem je.Ovšem ty tři co jsou jako datové položky ty se stejně objevují když vypnu Výstrahy zabezpečení.No uvidím ten jeden soubor...
Tak žádná změna.
Je možný,že je problém u toho providera,ovšem dosti zvláštní.Jen pro představu.Když například jdu na tytostránky,tak se na ně normálně dostanu,ale jakmile kliknu na jakýkoli pořad, na podrobnosti, tak už se mi nezobrazí a objeví se Chyba při načítání stránky a tabulka o Vypršení času spojení a ,že je server dočasně nedostupný bla,bla...
Někde se mi nezobrazují na stránkách některé obrázky,jen rámečky s ikonkou obraz.souboru..Např.na Ulož.to se mi místo captch kódu zobrazí jen nápis v rámečku Captcha ale ten kód už ne.Ovšem je to jen tak na maximálně pěti procentech stránek.Zřejmě to musím nechat vyhnít.
Fakt nevím...
Ale i tak dík za ochotu.

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[liborek1963]

Jo provedu,ale momentálně potřebuji net a nemůžu vypnout antispyware jelikož ho mám spolu s AVG FREE a tam lze vypnout pouze komplet AVG a to bych nerad.Jakmile bude možnost hned to spáchám.Dík.

[Rudy]

Pro činnost CF budte muset dočasně odinstalovat.

[liborek1963]

Musím odinstalovat,nestačí tedy vypnout?

[Rudy]

V případě AVG 9. a 10. verze je odinstalace nutná.

[liborek1963]

Tak vkládám log.AVG jsem zase nainstaloval-nevadí?Ten CF mi kompletně smáznul účetnictví Ale vůbec nevadí,měl jsem ho tam jen jako zkušební.Manželka začala pracovat ve firmě u tchýně a tohle měla jen na učení Tím pádem je ten log pěkně nafouklý.

ComboFix 11-03-24.06 - slim 26.03.2011 17:43:37.7.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.3070.2604 [GMT 1:00]
Spuštěný z: c:\documents and settings\slim\Plocha\viry\ComboFix.exe
FW: Sunbelt Kerio Personal Firewall *Disabled* {E659E0EE-10E6-49B7-8696-60F38D0EB174}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\UCTO2010
c:\ucto2010\{GLOB}\ADRWEB.000
c:\ucto2010\{GLOB}\BANKY.000
c:\ucto2010\{GLOB}\BANKYHB.008
c:\ucto2010\{GLOB}\CISOKR.097
c:\ucto2010\{GLOB}\DATA.000
c:\ucto2010\{GLOB}\DATA.X00
c:\ucto2010\{GLOB}\EXPDEKLA.099
c:\ucto2010\{GLOB}\EXPDEKLA.T99
c:\ucto2010\{GLOB}\FAQ.000
c:\ucto2010\{GLOB}\FAQ.X00
c:\ucto2010\{GLOB}\FIRMY.000
c:\ucto2010\{GLOB}\FORMS.099
c:\ucto2010\{GLOB}\FORMS.T99
c:\ucto2010\{GLOB}\KODPOJ.004
c:\ucto2010\{GLOB}\MODULY.000
c:\ucto2010\{GLOB}\NAHRNEM.004
c:\ucto2010\{GLOB}\NEZDAN.000
c:\ucto2010\{GLOB}\NEZDAN.X00
c:\ucto2010\{GLOB}\OKRESY.000
c:\ucto2010\{GLOB}\PARAM1.000
c:\ucto2010\{GLOB}\PLATIDLA.004
c:\ucto2010\{GLOB}\POSTY.000
c:\ucto2010\{GLOB}\REPORT.099
c:\ucto2010\{GLOB}\REPORT.T99
c:\ucto2010\{GLOB}\SAZDPH.000
c:\ucto2010\{GLOB}\SAZDPH.X00
c:\ucto2010\{GLOB}\SAZDZP.000
c:\ucto2010\{GLOB}\SAZDZPM.004
c:\ucto2010\{GLOB}\SAZDZPM.X04
c:\ucto2010\{GLOB}\SAZODP.009
c:\ucto2010\{GLOB}\SLOVNIK.006
c:\ucto2010\{GLOB}\ZALDZP.004
c:\ucto2010\{GLOB}\ZALDZP.X04
c:\ucto2010\{GLOB}\ZDRSOC.004
c:\ucto2010\{GLOB}\ZDRSOC.X04
c:\ucto2010\{GLOB}\ZUJ.097
c:\ucto2010\{INFO}\ADRZPRAV.000
c:\ucto2010\{INFO}\ADRZPRAV.T00
c:\ucto2010\{INFO}\INFOAUTO.000
c:\ucto2010\{INFO}\INFOAUTO.X00
c:\ucto2010\{INFO}\INFOPROB.000
c:\ucto2010\{INFO}\INFOPROB.T00
c:\ucto2010\{INFO}\INFOTEMA.000
c:\ucto2010\{INFO}\KONFEREN.000
c:\ucto2010\{INFO}\KONFEREN.T00
c:\ucto2010\{INFO}\PGMKOD.000
c:\ucto2010\{INFO}\PROGRAMY.000
c:\ucto2010\{INFO}\PROGRAMY.T00
c:\ucto2010\{INFO}\SLUZKOD.000
c:\ucto2010\{NOVA}\ADRESY.000
c:\ucto2010\{NOVA}\ADRESY.T00
c:\ucto2010\{NOVA}\CISABS.004
c:\ucto2010\{NOVA}\CISDOKL.001
c:\ucto2010\{NOVA}\CISDRUH.001
c:\ucto2010\{NOVA}\CISPOH.001
c:\ucto2010\{NOVA}\CISPOZN.000
c:\ucto2010\{NOVA}\CISPOZN.T00
c:\ucto2010\{NOVA}\CIST.000
c:\ucto2010\{NOVA}\CISTXT.006
c:\ucto2010\{NOVA}\CISVYKON.001
c:\ucto2010\{NOVA}\KATEG.004
c:\ucto2010\{NOVA}\PARAM2.000
c:\ucto2010\{NOVA}\PARAM2.T00
c:\ucto2010\{NOVA}\PRACSML.004
c:\ucto2010\{NOVA}\PRACSML.T04
c:\ucto2010\{NOVA}\TRIDY.004
c:\ucto2010\{NOVA}\TYPDOKL.001
c:\ucto2010\{NOVA}\UKOLY.000
c:\ucto2010\{NOVA}\UKOLY.T00
c:\ucto2010\{NOVA}\UZAV.001
c:\ucto2010\{NOVA}\ZAOKFA.006
c:\ucto2010\{OBNV}.BAT
c:\ucto2010\{OBNV}\BANKYHB.008
c:\ucto2010\{OBNV}\KODPOJ.004
c:\ucto2010\{OBNV}\MODULY.000
c:\ucto2010\{OBNV}\NAHRNEM.004
c:\ucto2010\{OBNV}\NEZDAN.000
c:\ucto2010\{OBNV}\PLATIDLA.004
c:\ucto2010\{OBNV}\SAZDPH.000
c:\ucto2010\{OBNV}\SAZDZP.000
c:\ucto2010\{OBNV}\SAZDZPM.004
c:\ucto2010\{OBNV}\SAZODP.009
c:\ucto2010\{OBNV}\SLOVNIK.006
c:\ucto2010\{OBNV}\UCTO2010.CAT
c:\ucto2010\{OBNV}\UCTOOL.EX
c:\ucto2010\{OBNV}\UTISK04.EX
c:\ucto2010\{OBNV}\ZALDZP.004
c:\ucto2010\{OBNV}\ZDRSOC.004
c:\ucto2010\{PDF1}\DAVKYK2.PDF
c:\ucto2010\{PDF1}\DAVKYK3.PDF
c:\ucto2010\{PDF1}\DAVKYP2.PDF
c:\ucto2010\{PDF1}\DAVKYP3.PDF
c:\ucto2010\{PDF1}\DPH15.PDF
c:\ucto2010\{PDF1}\DPH15P.PDF
c:\ucto2010\{PDF1}\DPH16.PDF
c:\ucto2010\{PDF1}\DPH16P.PDF
c:\ucto2010\{PDF1}\DZP.PDF
c:\ucto2010\{PDF1}\DZP_1.PDF
c:\ucto2010\{PDF1}\DZP_2.PDF
c:\ucto2010\{PDF1}\DZP_3.PDF
c:\ucto2010\{PDF1}\DZP_7.PDF
c:\ucto2010\{PDF1}\DZPP.PDF
c:\ucto2010\{PDF1}\ELDP09B.PDF
c:\ucto2010\{PDF1}\ELDP09F.PDF
c:\ucto2010\{PDF1}\ELDP09K.PDF
c:\ucto2010\{PDF1}\ELDP09M.PDF
c:\ucto2010\{PDF1}\ELDP09P.PDF
c:\ucto2010\{PDF1}\ELDPF.PDF
c:\ucto2010\{PDF1}\ELDPK.PDF
c:\ucto2010\{PDF1}\ELDPM.PDF
c:\ucto2010\{PDF1}\ELDPP.PDF
c:\ucto2010\{PDF1}\HROMOZN.PDF
c:\ucto2010\{PDF1}\HROMOZNP.PDF
c:\ucto2010\{PDF1}\CHYBCAST.PDF
c:\ucto2010\{PDF1}\NEMOC.PDF
c:\ucto2010\{PDF1}\NEMOCP.PDF
c:\ucto2010\{PDF1}\ODCITPOL.PDF
c:\ucto2010\{PDF1}\ONZ.PDF
c:\ucto2010\{PDF1}\ONZK.PDF
c:\ucto2010\{PDF1}\ONZP.PDF
c:\ucto2010\{PDF1}\OSSZ.PDF
c:\ucto2010\{PDF1}\OSSZK.PDF
c:\ucto2010\{PDF1}\OSSZP.PDF
c:\ucto2010\{PDF1}\POCZAM.PDF
c:\ucto2010\{PDF1}\POJZAM.PDF
c:\ucto2010\{PDF1}\SILDAN.PDF
c:\ucto2010\{PDF1}\SILDANPO.PDF
c:\ucto2010\{PDF1}\SILDANPR.PDF
c:\ucto2010\{PDF1}\SOUHLAS.PDF
c:\ucto2010\{PDF1}\SOUHLASP.PDF
c:\ucto2010\{PDF1}\VYUCT.PDF
c:\ucto2010\{PDF1}\VYUCTP.PDF
c:\ucto2010\{PDF1}\VYUCTSRP.PDF
c:\ucto2010\{PDF1}\VYUCTSRZ.PDF
c:\ucto2010\{PDF1}\VZP.PDF
c:\ucto2010\{PDF1}\VZPP.PDF
c:\ucto2010\{PDF2}\DLBL.PDF
c:\ucto2010\{PDF2}\DLBL2.PDF
c:\ucto2010\{PDF2}\DLBW.PDF
c:\ucto2010\{PDF2}\DLBW2.PDF
c:\ucto2010\{PDF2}\DLGR.PDF
c:\ucto2010\{PDF2}\DLGR2.PDF
c:\ucto2010\{PDF2}\FABL.PDF
c:\ucto2010\{PDF2}\FABL2.PDF
c:\ucto2010\{PDF2}\FABW.PDF
c:\ucto2010\{PDF2}\FABW2.PDF
c:\ucto2010\{PDF2}\FAGR.PDF
c:\ucto2010\{PDF2}\FAGR2.PDF
c:\ucto2010\{PDF2}\OBBL.PDF
c:\ucto2010\{PDF2}\OBBL2.PDF
c:\ucto2010\{PDF2}\OBBW.PDF
c:\ucto2010\{PDF2}\OBBW2.PDF
c:\ucto2010\{PDF2}\OBGR.PDF
c:\ucto2010\{PDF2}\OBGR2.PDF
c:\ucto2010\{PDF3}\DAVKYK2X.DEF
c:\ucto2010\{PDF3}\DAVKYK2X.PDF
c:\ucto2010\{PDF3}\DAVKYK3X.DEF
c:\ucto2010\{PDF3}\DAVKYK3X.PDF
c:\ucto2010\{PDF3}\DPH15X.DEF
c:\ucto2010\{PDF3}\DPH15X.PDF
c:\ucto2010\{PDF3}\DPH16X.DEF
c:\ucto2010\{PDF3}\DPH16X.PDF
c:\ucto2010\{PDF3}\DZP_1X.DEF
c:\ucto2010\{PDF3}\DZP_1X.PDF
c:\ucto2010\{PDF3}\DZP_2X.DEF
c:\ucto2010\{PDF3}\DZP_2X.PDF
c:\ucto2010\{PDF3}\DZP_3X.DEF
c:\ucto2010\{PDF3}\DZP_3X.PDF
c:\ucto2010\{PDF3}\DZPX.DEF
c:\ucto2010\{PDF3}\DZPX.PDF
c:\ucto2010\{PDF3}\HROMOZNX.DEF
c:\ucto2010\{PDF3}\HROMOZNX.PDF
c:\ucto2010\{PDF3}\CHYBCASX.DEF
c:\ucto2010\{PDF3}\CHYBCASX.PDF
c:\ucto2010\{PDF3}\NEMOCX.DEF
c:\ucto2010\{PDF3}\NEMOCX.PDF
c:\ucto2010\{PDF3}\OSSZKX.DEF
c:\ucto2010\{PDF3}\OSSZKX.PDF
c:\ucto2010\{PDF3}\OSSZX.DEF
c:\ucto2010\{PDF3}\OSSZX.PDF
c:\ucto2010\{PDF3}\POCZAMX.DEF
c:\ucto2010\{PDF3}\POCZAMX.PDF
c:\ucto2010\{PDF3}\POJZAMX.DEF
c:\ucto2010\{PDF3}\POJZAMX.PDF
c:\ucto2010\{PDF3}\SILDANPX.DEF
c:\ucto2010\{PDF3}\SILDANPX.PDF
c:\ucto2010\{PDF3}\SILDANX.DEF
c:\ucto2010\{PDF3}\SILDANX.PDF
c:\ucto2010\{PDF3}\SOUHLASX.DEF
c:\ucto2010\{PDF3}\SOUHLASX.PDF
c:\ucto2010\{PDF3}\VYUCTSRX.DEF
c:\ucto2010\{PDF3}\VYUCTSRX.PDF
c:\ucto2010\{PDF3}\VYUCTX.DEF
c:\ucto2010\{PDF3}\VYUCTX.PDF
c:\ucto2010\{PDF3}\VZPX.DEF
c:\ucto2010\{PDF3}\VZPX.PDF
c:\ucto2010\{PRIK}\ADRESY.000
c:\ucto2010\{PRIK}\ADRESY.T00
c:\ucto2010\{PRIK}\ADRESY.X00
c:\ucto2010\{PRIK}\CISABS.004
c:\ucto2010\{PRIK}\CISDOKL.001
c:\ucto2010\{PRIK}\CISDRUH.001
c:\ucto2010\{PRIK}\CISDRUH.X01
c:\ucto2010\{PRIK}\CISPOH.001
c:\ucto2010\{PRIK}\CISPOH.X01
c:\ucto2010\{PRIK}\CISPOZN.000
c:\ucto2010\{PRIK}\CISPOZN.T00
c:\ucto2010\{PRIK}\CIST.000
c:\ucto2010\{PRIK}\CISTXT.006
c:\ucto2010\{PRIK}\CISVYKON.001
c:\ucto2010\{PRIK}\CISVYKON.X01
c:\ucto2010\{PRIK}\EDIT.000
c:\ucto2010\{PRIK}\EDIT.X00
c:\ucto2010\{PRIK}\FINANCE.001
c:\ucto2010\{PRIK}\FINANCE.T01
c:\ucto2010\{PRIK}\KATEG.004
c:\ucto2010\{PRIK}\PAR01A2.001
c:\ucto2010\{PRIK}\PAR01A4.001
c:\ucto2010\{PRIK}\PARAM2.000
c:\ucto2010\{PRIK}\PARAM2.T00
c:\ucto2010\{PRIK}\PARAM4.000
c:\ucto2010\{PRIK}\PARAM4.T00
c:\ucto2010\{PRIK}\PARZAS.001
c:\ucto2010\{PRIK}\PRACSML.004
c:\ucto2010\{PRIK}\PRACSML.T04
c:\ucto2010\{PRIK}\TRIDY.004
c:\ucto2010\{PRIK}\TYPDOKL.001
c:\ucto2010\{PRIK}\UKOLY.000
c:\ucto2010\{PRIK}\UKOLY.T00
c:\ucto2010\{PRIK}\UZAV.001
c:\ucto2010\{PRIK}\ZAOKFA.006
c:\ucto2010\{SLOZ}\BALIK_O.HTM
c:\ucto2010\{SLOZ}\BALIK_O.JS
c:\ucto2010\{SLOZ}\BALIK_P.HTM
c:\ucto2010\{SLOZ}\BALIK_P.JS
c:\ucto2010\{SLOZ}\SLOZ_A.HTM
c:\ucto2010\{SLOZ}\SLOZ_A.JS
c:\ucto2010\{SLOZ}\SLOZ_C.HTM
c:\ucto2010\{SLOZ}\SLOZ_C.JS
c:\ucto2010\{STAN}\DANZAT.004
c:\ucto2010\{STAN}\HESLA.000
c:\ucto2010\{STAN}\HESLA.T00
c:\ucto2010\{STAN}\HOBAPZ.008
c:\ucto2010\{STAN}\HOBAPZ.T08
c:\ucto2010\{STAN}\KALEXEK.099
c:\ucto2010\{STAN}\KASA.099
c:\ucto2010\{STAN}\LEAS.099
c:\ucto2010\{STAN}\LEAS.T99
c:\ucto2010\{STAN}\PAR01A3.001
c:\ucto2010\{STAN}\PAR04A3.004
c:\ucto2010\{STAN}\PAR04A3.T04
c:\ucto2010\{STAN}\PAR08A3.008
c:\ucto2010\{STAN}\PARAM3.000
c:\ucto2010\{STAN}\PARAM3.T00
c:\ucto2010\{STAN}\PATHS.000
c:\ucto2010\{STAN}\PGM.000
c:\ucto2010\{STAN}\SCITAC.099
c:\ucto2010\{STAN}\STAT.000
c:\ucto2010\{STAN}\TELSEZN.099
c:\ucto2010\{STAN}\VEDKALK.099
c:\ucto2010\{TISK}\CALLER.EXE
c:\ucto2010\{TISK}\CMDIALOG.VBX
c:\ucto2010\{TISK}\DISKSIZW.EXE
c:\ucto2010\{TISK}\DISKY.EXE
c:\ucto2010\{TISK}\ELPODPIS.EXE
c:\ucto2010\{TISK}\FAND2PDF.EXE
c:\ucto2010\{TISK}\FANDCLIP.EXE
c:\ucto2010\{TISK}\IEUCTO.EXE
c:\ucto2010\{TISK}\MSINET.OCX
c:\ucto2010\{TISK}\MSMAPI32.OCX
c:\ucto2010\{TISK}\MSVBVM60.DLL
c:\ucto2010\{TISK}\PDFTISK1.EXE
c:\ucto2010\{TISK}\PDFTISK2.EXE
c:\ucto2010\{TISK}\PDFTISK3.EXE
c:\ucto2010\{TISK}\REGISTER.EXE
c:\ucto2010\{TISK}\SETUPCP.EXE
c:\ucto2010\{TISK}\SIFRCSSZ.CER
c:\ucto2010\{TISK}\UCTOFONT.FON
c:\ucto2010\{TISK}\UCTOFT98.EXE
c:\ucto2010\{TISK}\UCTOFTP.EXE
c:\ucto2010\{TISK}\UCTOGRAF.EXE
c:\ucto2010\{TISK}\UCTOGRAF.INI
c:\ucto2010\{TISK}\UCTOLNK.EXE
c:\ucto2010\{TISK}\UCTOLNK.UUU
c:\ucto2010\{TISK}\UCTOLNK.W7
c:\ucto2010\{TISK}\UCTOLNK.WV
c:\ucto2010\{TISK}\UCTOLNK.WXP
c:\ucto2010\{TISK}\UCTOOL.EXE
c:\ucto2010\{TISK}\UEMAIL.EXE
c:\ucto2010\{TISK}\UEMAIL06.EXE
c:\ucto2010\{TISK}\UTISK01.EXE
c:\ucto2010\{TISK}\UTISK04.EXE
c:\ucto2010\{TISK}\UTISK98.EXE
c:\ucto2010\{TISK}\UTISK98.INI
c:\ucto2010\{TISK}\VBRUN300.DLL
c:\ucto2010\{TISK}\WINVERZE.EXE
c:\ucto2010\{UDOC}\CENIK.TXT
c:\ucto2010\{UDOC}\D2008.PDF
c:\ucto2010\{UDOC}\FAKTURA.TXT
c:\ucto2010\{UDOC}\INFO.TXT
c:\ucto2010\{UDOC}\LICENCE.TXT
c:\ucto2010\{UDOC}\OBJ.TXT
c:\ucto2010\{UDOC}\OBJZPR.TXT
c:\ucto2010\{UDOC}\ONAS.TXT
c:\ucto2010\{UDOC}\POUPG.TXT
c:\ucto2010\{UDOC}\PRIRUCKA.TXT
c:\ucto2010\{UDOC}\PRPRDOK.TXT
c:\ucto2010\{UDOC}\R2010.PDF
c:\ucto2010\{UDOC}\U2010.PDF
c:\ucto2010\{UDOC}\ZPROSTRE.TXT
c:\ucto2010\{WWWW}\VERZEWWW.UUU
c:\ucto2010\ÚČTO2010.W9X
c:\ucto2010\B&W.PAL
c:\ucto2010\BLUE.PAL
c:\ucto2010\BROWN.PAL
c:\ucto2010\BURIANJ\ADRESY.000
c:\ucto2010\BURIANJ\ADRESY.T00
c:\ucto2010\BURIANJ\ADRESY.X00
c:\ucto2010\BURIANJ\BANKA1.008
c:\ucto2010\BURIANJ\CE_AUTA.006
c:\ucto2010\BURIANJ\CE_AUTA.T06
c:\ucto2010\BURIANJ\CISABS.004
c:\ucto2010\BURIANJ\CISABS.X04
c:\ucto2010\BURIANJ\CISDOKL.001
c:\ucto2010\BURIANJ\CISDRUH.001
c:\ucto2010\BURIANJ\CISDRUH.X01
c:\ucto2010\BURIANJ\CISPOH.001
c:\ucto2010\BURIANJ\CISPOH.X01
c:\ucto2010\BURIANJ\CISPOZN.000
c:\ucto2010\BURIANJ\CISPOZN.T00
c:\ucto2010\BURIANJ\CIST.000
c:\ucto2010\BURIANJ\CIST.X00
c:\ucto2010\BURIANJ\CISTEXT.001
c:\ucto2010\BURIANJ\CISTXT.006
c:\ucto2010\BURIANJ\CISTXT.X06
c:\ucto2010\BURIANJ\CISVYKON.001
c:\ucto2010\BURIANJ\CISVYKON.X01
c:\ucto2010\BURIANJ\DENIK.001
c:\ucto2010\BURIANJ\DENIK.T01
c:\ucto2010\BURIANJ\DROBMAJ.009
c:\ucto2010\BURIANJ\DROBMAJ.T09
c:\ucto2010\BURIANJ\EDIT.000
c:\ucto2010\BURIANJ\EDIT.X00
c:\ucto2010\BURIANJ\FINANCE.001
c:\ucto2010\BURIANJ\FINANCE.T01
c:\ucto2010\BURIANJ\KATEG.004
c:\ucto2010\BURIANJ\KATEG.X04
c:\ucto2010\BURIANJ\PAR01A2.001
c:\ucto2010\BURIANJ\PAR01A4.001
c:\ucto2010\BURIANJ\PAR09A4.009
c:\ucto2010\BURIANJ\PARAM2.000
c:\ucto2010\BURIANJ\PARAM2.T00
c:\ucto2010\BURIANJ\PARAM4.000
c:\ucto2010\BURIANJ\PARAM4.T00
c:\ucto2010\BURIANJ\PARZAS.001
c:\ucto2010\BURIANJ\POJIST.004
c:\ucto2010\BURIANJ\POJIST.X04
c:\ucto2010\BURIANJ\PRACSML.004
c:\ucto2010\BURIANJ\PRACSML.T04
c:\ucto2010\BURIANJ\SHIFTF3.000
c:\ucto2010\BURIANJ\SHIFTF3.X00
c:\ucto2010\BURIANJ\TRIDY.004
c:\ucto2010\BURIANJ\TRIDY.X04
c:\ucto2010\BURIANJ\TYPDOKL.001
c:\ucto2010\BURIANJ\TYPDOKL.X01
c:\ucto2010\BURIANJ\UKOLY.000
c:\ucto2010\BURIANJ\UKOLY.T00
c:\ucto2010\BURIANJ\UZAV.001
c:\ucto2010\BURIANJ\ZAOKFA.006
c:\ucto2010\BURIANJ\ZAOKFA.X06
c:\ucto2010\BURIANJ\ZURNALD.001
c:\ucto2010\CAT.BAT
c:\ucto2010\CISABS.UUU
c:\ucto2010\CISDRUH.UUU
c:\ucto2010\CISPOH.UUU
c:\ucto2010\CISSLOUP.000
c:\ucto2010\CONFIG.TXT
c:\ucto2010\DELFILE.EXE
c:\ucto2010\DISKSIZE.EXE
c:\ucto2010\DNY.000
c:\ucto2010\FAND.CFG
c:\ucto2010\FAND.RES
c:\ucto2010\FANDCFG.09
c:\ucto2010\FANDCFG.10
c:\ucto2010\FANDHTML.EXE
c:\ucto2010\FANDINST.EXE
c:\ucto2010\FANDT602.EXE
c:\ucto2010\FILESIZE.EXE
c:\ucto2010\FNDFILES.EXE
c:\ucto2010\HEAD602.UUU
c:\ucto2010\HELP.000
c:\ucto2010\HELP.T00
c:\ucto2010\HELP02.000
c:\ucto2010\HELP02.T00
c:\ucto2010\HELP03.000
c:\ucto2010\HELP03.T00
c:\ucto2010\HELP04.000
c:\ucto2010\HELP04.T00
c:\ucto2010\HELP05.000
c:\ucto2010\HELP05.T00
c:\ucto2010\HELP06.000
c:\ucto2010\HELP06.T00
c:\ucto2010\HELP08.000
c:\ucto2010\HELP08.T00
c:\ucto2010\HELP98.000
c:\ucto2010\HELP98.T00
c:\ucto2010\HELP99.000
c:\ucto2010\HELP99.T00
c:\ucto2010\IMPORT.PRO
c:\ucto2010\IMPORT.TRO
c:\ucto2010\INFOHLP.000
c:\ucto2010\INFOHLP.T00
c:\ucto2010\ISSHARE.EXE
c:\ucto2010\KALENDAR.000
c:\ucto2010\KALKDPH.000
c:\ucto2010\KALKPOJP.000
c:\ucto2010\KALKPOJZ.000
c:\ucto2010\KALKPRUM.000
c:\ucto2010\KALKPV08.000
c:\ucto2010\KALKTABD.000
c:\ucto2010\KATEG.UUU
c:\ucto2010\LASTAKT.TXT
c:\ucto2010\LCD1.PAL
c:\ucto2010\LCD2.PAL
c:\ucto2010\libor\ADRESY.000
c:\ucto2010\libor\ADRESY.T00
c:\ucto2010\libor\ADRESY.X00
c:\ucto2010\libor\CISABS.004
c:\ucto2010\libor\CISDOKL.001
c:\ucto2010\libor\CISDRUH.001
c:\ucto2010\libor\CISDRUH.X01
c:\ucto2010\libor\CISPOH.001
c:\ucto2010\libor\CISPOH.X01
c:\ucto2010\libor\CISPOZN.000
c:\ucto2010\libor\CISPOZN.T00
c:\ucto2010\libor\CIST.000
c:\ucto2010\libor\CISTXT.006
c:\ucto2010\libor\CISVYKON.001
c:\ucto2010\libor\CISVYKON.X01
c:\ucto2010\libor\EDIT.000
c:\ucto2010\libor\EDIT.X00
c:\ucto2010\libor\EDITPAR.000
c:\ucto2010\libor\EDITPAR.X00
c:\ucto2010\libor\FINANCE.001
c:\ucto2010\libor\FINANCE.T01
c:\ucto2010\libor\KATEG.004
c:\ucto2010\libor\PAR01A2.001
c:\ucto2010\libor\PAR01A4.001
c:\ucto2010\libor\PARAM2.000
c:\ucto2010\libor\PARAM2.T00
c:\ucto2010\libor\PARAM4.000
c:\ucto2010\libor\PARAM4.T00
c:\ucto2010\libor\PARZAS.001
c:\ucto2010\libor\PRACSML.004
c:\ucto2010\libor\PRACSML.T04
c:\ucto2010\libor\TRIDY.004
c:\ucto2010\libor\TYPDOKL.001
c:\ucto2010\libor\UKOLY.000
c:\ucto2010\libor\UKOLY.T00
c:\ucto2010\libor\UZAV.001
c:\ucto2010\libor\ZAOKFA.006
c:\ucto2010\MAKEDIR.BAT
c:\ucto2010\MF5460-1.UUU
c:\ucto2010\MODUL01.PRO
c:\ucto2010\MODUL01.TRO
c:\ucto2010\MODUL02.PRO
c:\ucto2010\MODUL02.TRO
c:\ucto2010\MODUL03.PRO
c:\ucto2010\MODUL03.TRO
c:\ucto2010\MODUL04.PRO
c:\ucto2010\MODUL04.TRO
c:\ucto2010\MODUL05.PRO
c:\ucto2010\MODUL05.TRO
c:\ucto2010\MODUL06.PRO
c:\ucto2010\MODUL06.TRO
c:\ucto2010\MODUL07.PRO
c:\ucto2010\MODUL07.TRO
c:\ucto2010\MODUL08.PRO
c:\ucto2010\MODUL08.TRO
c:\ucto2010\MODUL09.PRO
c:\ucto2010\MODUL09.TRO
c:\ucto2010\MODUL97.PRO
c:\ucto2010\MODUL97.TRO
c:\ucto2010\MODUL98.PRO
c:\ucto2010\MODUL98.TRO
c:\ucto2010\MODUL99.PRO
c:\ucto2010\MODUL99.TRO
c:\ucto2010\MZDYPU.000
c:\ucto2010\NUMKB.EXE
c:\ucto2010\NUMKB3.EXE
c:\ucto2010\OPRAVY.UUU
c:\ucto2010\PGM.CAT
c:\ucto2010\PGM.RDB
c:\ucto2010\PGM.TTT
c:\ucto2010\RADKY.TXT
c:\ucto2010\RENFILES.BAT
c:\ucto2010\RO.EXE
c:\ucto2010\SEARCHX.EXE
c:\ucto2010\SEST01.PRO
c:\ucto2010\SEST01.TRO
c:\ucto2010\SEST02.PRO
c:\ucto2010\SEST02.TRO
c:\ucto2010\SEST03.PRO
c:\ucto2010\SEST03.TRO
c:\ucto2010\SEST04.PRO
c:\ucto2010\SEST04.TRO
c:\ucto2010\SEST05.PRO
c:\ucto2010\SEST05.TRO
c:\ucto2010\SEST06.PRO
c:\ucto2010\SEST06.TRO
c:\ucto2010\SEST07.PRO
c:\ucto2010\SEST07.TRO
c:\ucto2010\SEST08.PRO
c:\ucto2010\SEST08.TRO
c:\ucto2010\SEST09.PRO
c:\ucto2010\SEST09.TRO
c:\ucto2010\SESTAVY.CAT
c:\ucto2010\SESTAVY.RDB
c:\ucto2010\SESTAVY.TTT
c:\ucto2010\SETDATE.EXE
c:\ucto2010\SETFILES.EXE
c:\ucto2010\SEVCIK\ADRESY.000
c:\ucto2010\SEVCIK\ADRESY.T00
c:\ucto2010\SEVCIK\ADRESY.X00
c:\ucto2010\SEVCIK\CISABS.004
c:\ucto2010\SEVCIK\CISDOKL.001
c:\ucto2010\SEVCIK\CISDRUH.001
c:\ucto2010\SEVCIK\CISDRUH.X01
c:\ucto2010\SEVCIK\CISPOH.001
c:\ucto2010\SEVCIK\CISPOH.X01
c:\ucto2010\SEVCIK\CISPOZN.000
c:\ucto2010\SEVCIK\CISPOZN.T00
c:\ucto2010\SEVCIK\CIST.000
c:\ucto2010\SEVCIK\CISTEXT.001
c:\ucto2010\SEVCIK\CISTXT.006
c:\ucto2010\SEVCIK\CISVYKON.001
c:\ucto2010\SEVCIK\CISVYKON.X01
c:\ucto2010\SEVCIK\DENIK.001
c:\ucto2010\SEVCIK\DENIK.T01
c:\ucto2010\SEVCIK\EDIT.000
c:\ucto2010\SEVCIK\EDIT.X00
c:\ucto2010\SEVCIK\EDITPAR.000
c:\ucto2010\SEVCIK\EDITPAR.X00
c:\ucto2010\SEVCIK\FINANCE.001
c:\ucto2010\SEVCIK\FINANCE.T01
c:\ucto2010\SEVCIK\KATEG.004
c:\ucto2010\SEVCIK\PAR01A2.001
c:\ucto2010\SEVCIK\PAR01A4.001
c:\ucto2010\SEVCIK\PARAM2.000
c:\ucto2010\SEVCIK\PARAM2.T00
c:\ucto2010\SEVCIK\PARAM4.000
c:\ucto2010\SEVCIK\PARAM4.T00
c:\ucto2010\SEVCIK\PARZAS.001
c:\ucto2010\SEVCIK\PRACSML.004
c:\ucto2010\SEVCIK\PRACSML.T04
c:\ucto2010\SEVCIK\TRIDY.004
c:\ucto2010\SEVCIK\TYPDOKL.001
c:\ucto2010\SEVCIK\TYPDOKL.X01
c:\ucto2010\SEVCIK\UKOLY.000
c:\ucto2010\SEVCIK\UKOLY.T00
c:\ucto2010\SEVCIK\UZAV.001
c:\ucto2010\SEVCIK\ZAOKFA.006
c:\ucto2010\SEZNTISK.000
c:\ucto2010\SEZNTISK.T00
c:\ucto2010\SLOVY.000
c:\ucto2010\SPEC01.PRO
c:\ucto2010\SPEC01.TRO
c:\ucto2010\SPEC02.PRO
c:\ucto2010\SPEC02.TRO
c:\ucto2010\SPEC03.PRO
c:\ucto2010\SPEC03.TRO
c:\ucto2010\SPEC04.PRO
c:\ucto2010\SPEC04.TRO
c:\ucto2010\SPEC05.PRO
c:\ucto2010\SPEC05.TRO
c:\ucto2010\SPEC06.PRO
c:\ucto2010\SPEC06.TRO
c:\ucto2010\SPEC07.PRO
c:\ucto2010\SPEC07.TRO
c:\ucto2010\STELCLM\ADRESY.000
c:\ucto2010\STELCLM\ADRESY.T00
c:\ucto2010\STELCLM\ADRESY.X00
c:\ucto2010\STELCLM\ARCHIVD.001
c:\ucto2010\STELCLM\ARCHIVD.T01
c:\ucto2010\STELCLM\AUTA.005
c:\ucto2010\STELCLM\AUTA.T05
c:\ucto2010\STELCLM\BANKA1.008
c:\ucto2010\STELCLM\BANKA2.008
c:\ucto2010\STELCLM\CE_AUTA.006
c:\ucto2010\STELCLM\CE_AUTA.T06
c:\ucto2010\STELCLM\CE_TRASY.006
c:\ucto2010\STELCLM\CEST_AH.006
c:\ucto2010\STELCLM\CEST_AH.T06
c:\ucto2010\STELCLM\CEST_AP.006
c:\ucto2010\STELCLM\CEST_AS.006
c:\ucto2010\STELCLM\CEST_FH.006
c:\ucto2010\STELCLM\CEST_FH.T06
c:\ucto2010\STELCLM\CEST_FP.006
c:\ucto2010\STELCLM\CEST_FS.006
c:\ucto2010\STELCLM\CEST_VH.006
c:\ucto2010\STELCLM\CEST_VH.T06
c:\ucto2010\STELCLM\CEST_VP.006
c:\ucto2010\STELCLM\CEST_VS.006
c:\ucto2010\STELCLM\CISABS.004
c:\ucto2010\STELCLM\CISABS.X04
c:\ucto2010\STELCLM\CISCEST.005
c:\ucto2010\STELCLM\CISCEST.X05
c:\ucto2010\STELCLM\CISDOKL.001
c:\ucto2010\STELCLM\CISDRUH.001
c:\ucto2010\STELCLM\CISDRUH.X01
c:\ucto2010\STELCLM\CISPOH.001
c:\ucto2010\STELCLM\CISPOH.X01
c:\ucto2010\STELCLM\CISPOZN.000
c:\ucto2010\STELCLM\CISPOZN.T00
c:\ucto2010\STELCLM\CIST.000
c:\ucto2010\STELCLM\CIST.X00
c:\ucto2010\STELCLM\CISTEXT.001
c:\ucto2010\STELCLM\CISTXT.006
c:\ucto2010\STELCLM\CISTXT.X06
c:\ucto2010\STELCLM\CISUCEL.005
c:\ucto2010\STELCLM\CISVYKON.001
c:\ucto2010\STELCLM\CISVYKON.X01
c:\ucto2010\STELCLM\DENIK.001
c:\ucto2010\STELCLM\DENIK.T01
c:\ucto2010\STELCLM\DROBMAJ.009
c:\ucto2010\STELCLM\DROBMAJ.T09
c:\ucto2010\STELCLM\EDIT.000
c:\ucto2010\STELCLM\EDIT.X00
c:\ucto2010\STELCLM\EDITTAB.000
c:\ucto2010\STELCLM\EDITTAB.T00
c:\ucto2010\STELCLM\EDITTAB.X00
c:\ucto2010\STELCLM\FINANCE.001
c:\ucto2010\STELCLM\FINANCE.T01
c:\ucto2010\STELCLM\JIZDY.005
c:\ucto2010\STELCLM\JIZDY.T05
c:\ucto2010\STELCLM\KATEG.004
c:\ucto2010\STELCLM\KATEG.X04
c:\ucto2010\STELCLM\ODPISY.009
c:\ucto2010\STELCLM\ODPISY.X09
c:\ucto2010\STELCLM\PAR01A2.001
c:\ucto2010\STELCLM\PAR01A4.001
c:\ucto2010\STELCLM\PAR03A4.003
c:\ucto2010\STELCLM\PAR04A2.004
c:\ucto2010\STELCLM\PAR05A4.005
c:\ucto2010\STELCLM\PAR06A4.006
c:\ucto2010\STELCLM\PAR08A4.008
c:\ucto2010\STELCLM\PAR09A2.009
c:\ucto2010\STELCLM\PAR09A2.T09
c:\ucto2010\STELCLM\PAR09A4.009
c:\ucto2010\STELCLM\PARAM2.000
c:\ucto2010\STELCLM\PARAM2.T00
c:\ucto2010\STELCLM\PARAM4.000
c:\ucto2010\STELCLM\PARAM4.T00
c:\ucto2010\STELCLM\PARZAS.001
c:\ucto2010\STELCLM\POJIST.004
c:\ucto2010\STELCLM\POJIST.X04
c:\ucto2010\STELCLM\PRACSML.004
c:\ucto2010\STELCLM\PRACSML.T04
c:\ucto2010\STELCLM\PRAVJIZD.005
c:\ucto2010\STELCLM\PRAVJIZD.T05
c:\ucto2010\STELCLM\SHIFTF3.000
c:\ucto2010\STELCLM\SHIFTF3.X00
c:\ucto2010\STELCLM\TRIDY.004
c:\ucto2010\STELCLM\TRIDY.X04
c:\ucto2010\STELCLM\TYPDOKL.001
c:\ucto2010\STELCLM\TYPDOKL.X01
c:\ucto2010\STELCLM\UKOLY.000
c:\ucto2010\STELCLM\UKOLY.T00
c:\ucto2010\STELCLM\UZAV.001
c:\ucto2010\STELCLM\VYKMAZA.UUU
c:\ucto2010\STELCLM\VYRIZUJE.002
c:\ucto2010\STELCLM\VYRIZUJE.X02
c:\ucto2010\STELCLM\ZAOKFA.006
c:\ucto2010\STELCLM\ZAOKFA.X06
c:\ucto2010\STELCLM\ZP.009
c:\ucto2010\STELCLM\ZP.T09
c:\ucto2010\STELCLM\ZURNALD.001
c:\ucto2010\SUBDIR.EXE
c:\ucto2010\SUDLICH.EXE
c:\ucto2010\TIPY.000
c:\ucto2010\TIPY.T00
c:\ucto2010\TIPY.X00
c:\ucto2010\TTT.CAT
c:\ucto2010\TTT.RDB
c:\ucto2010\TTT.TTT
c:\ucto2010\TTTNEW.UUU
c:\ucto2010\TXTNARTF.EXE
c:\ucto2010\U.BAT
c:\ucto2010\UCTO.000
c:\ucto2010\UCTO.PAL
c:\ucto2010\UCTO2010.CAT
c:\ucto2010\UCTO2010.ICO
c:\ucto2010\UCTO2010.RDB
c:\ucto2010\UCTO2010.TTT
c:\ucto2010\UCTOINFO.PRO
c:\ucto2010\UCTOINFO.TRO
c:\ucto2010\UCTOL.000
c:\ucto2010\UCTOTXT.UUU
c:\ucto2010\UFAND.EXE
c:\ucto2010\UFAND.OVR
c:\ucto2010\UFANDHLP.000
c:\ucto2010\UFANDHLP.T00
c:\ucto2010\UK.BAT
c:\ucto2010\ULEHLOVA\ADRESY.000
c:\ucto2010\ULEHLOVA\ADRESY.T00
c:\ucto2010\ULEHLOVA\ADRESY.X00
c:\ucto2010\ULEHLOVA\ARCHIVD.001
c:\ucto2010\ULEHLOVA\ARCHIVD.T01
c:\ucto2010\ULEHLOVA\BANKA1.008
c:\ucto2010\ULEHLOVA\CE_AUTA.006
c:\ucto2010\ULEHLOVA\CE_AUTA.T06
c:\ucto2010\ULEHLOVA\CISABS.004
c:\ucto2010\ULEHLOVA\CISABS.X04
c:\ucto2010\ULEHLOVA\CISDOKL.001
c:\ucto2010\ULEHLOVA\CISDRUH.001
c:\ucto2010\ULEHLOVA\CISDRUH.X01
c:\ucto2010\ULEHLOVA\CISPOH.001
c:\ucto2010\ULEHLOVA\CISPOH.X01
c:\ucto2010\ULEHLOVA\CISPOZN.000
c:\ucto2010\ULEHLOVA\CISPOZN.T00
c:\ucto2010\ULEHLOVA\CIST.000
c:\ucto2010\ULEHLOVA\CIST.X00
c:\ucto2010\ULEHLOVA\CISTEXT.001
c:\ucto2010\ULEHLOVA\CISTXT.006
c:\ucto2010\ULEHLOVA\CISTXT.X06
c:\ucto2010\ULEHLOVA\CISVYKON.001
c:\ucto2010\ULEHLOVA\CISVYKON.X01
c:\ucto2010\ULEHLOVA\DENIK.001
c:\ucto2010\ULEHLOVA\DENIK.T01
c:\ucto2010\ULEHLOVA\DROBMAJ.009
c:\ucto2010\ULEHLOVA\DROBMAJ.T09
c:\ucto2010\ULEHLOVA\EDIT.000
c:\ucto2010\ULEHLOVA\EDIT.X00
c:\ucto2010\ULEHLOVA\EDITPAR.000
c:\ucto2010\ULEHLOVA\EDITPAR.X00
c:\ucto2010\ULEHLOVA\FINANCE.001
c:\ucto2010\ULEHLOVA\FINANCE.T01
c:\ucto2010\ULEHLOVA\KATEG.004
c:\ucto2010\ULEHLOVA\KATEG.X04
c:\ucto2010\ULEHLOVA\MAT_HP.007
c:\ucto2010\ULEHLOVA\MATERIAL.001
c:\ucto2010\ULEHLOVA\MATERIAL.T01
c:\ucto2010\ULEHLOVA\PAR01A2.001
c:\ucto2010\ULEHLOVA\PAR01A4.001
c:\ucto2010\ULEHLOVA\PAR03A4.003
c:\ucto2010\ULEHLOVA\PAR07A4.007
c:\ucto2010\ULEHLOVA\PAR09A2.009
c:\ucto2010\ULEHLOVA\PAR09A2.T09
c:\ucto2010\ULEHLOVA\PAR09A4.009
c:\ucto2010\ULEHLOVA\PARAM2.000
c:\ucto2010\ULEHLOVA\PARAM2.T00
c:\ucto2010\ULEHLOVA\PARAM4.000
c:\ucto2010\ULEHLOVA\PARAM4.T00
c:\ucto2010\ULEHLOVA\PARZAS.001
c:\ucto2010\ULEHLOVA\POHYBM.001
c:\ucto2010\ULEHLOVA\POHYBM.X01
c:\ucto2010\ULEHLOVA\POJIST.004
c:\ucto2010\ULEHLOVA\POJIST.X04
c:\ucto2010\ULEHLOVA\PRACSML.004
c:\ucto2010\ULEHLOVA\PRACSML.T04
c:\ucto2010\ULEHLOVA\SHIFTF3.000
c:\ucto2010\ULEHLOVA\SHIFTF3.X00
c:\ucto2010\ULEHLOVA\TRIDY.004
c:\ucto2010\ULEHLOVA\TRIDY.X04
c:\ucto2010\ULEHLOVA\TYPDOKL.001
c:\ucto2010\ULEHLOVA\TYPDOKL.X01
c:\ucto2010\ULEHLOVA\UKOLY.000
c:\ucto2010\ULEHLOVA\UKOLY.T00
c:\ucto2010\ULEHLOVA\UZAV.001
c:\ucto2010\ULEHLOVA\VYKMAZA.UUU
c:\ucto2010\ULEHLOVA\VYRIZUJE.002
c:\ucto2010\ULEHLOVA\VYRIZUJE.X02
c:\ucto2010\ULEHLOVA\ZAOKFA.006
c:\ucto2010\ULEHLOVA\ZAOKFA.X06
c:\ucto2010\ULEHLOVA\ZURNALD.001
c:\ucto2010\UPG.PRO
c:\ucto2010\UPG.TRO
c:\ucto2010\UPG01.PRO
c:\ucto2010\UPG01.TRO
c:\ucto2010\UPG02.PRO
c:\ucto2010\UPG02.TRO
c:\ucto2010\UPG03.PRO
c:\ucto2010\UPG03.TRO
c:\ucto2010\UPG04.PRO
c:\ucto2010\UPG04.TRO
c:\ucto2010\UPG05.PRO
c:\ucto2010\UPG05.TRO
c:\ucto2010\UPG06.PRO
c:\ucto2010\UPG06.TRO
c:\ucto2010\UPG07.PRO
c:\ucto2010\UPG07.TRO
c:\ucto2010\UPG08.PRO
c:\ucto2010\UPG08.TRO
c:\ucto2010\UPG09.PRO
c:\ucto2010\UPG09.TRO
c:\ucto2010\UPG97.PRO
c:\ucto2010\UPG97.TRO
c:\ucto2010\UPG99.PRO
c:\ucto2010\UPG99.TRO
c:\ucto2010\UPGPAR.000
c:\ucto2010\VEDLCIN.UUU
c:\ucto2010\VERZE.UUU
c:\ucto2010\VYBERTXT.EXE
c:\ucto2010\VZORTISK.000
c:\ucto2010\ZASTUPCE.CAT
c:\ucto2010\ZASTUPCE.INI
c:\ucto2010\ZASTUPCE.RDB
c:\ucto2010\ZASTUPCE.TTT
c:\ucto2010\ZETROZET.PAL
c:\ucto2010\ZZZ.BAT
c:\windows\system32\SysInfo.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-26 do 2011-03-26 )))))))))))))))))))))))))))))))
.
.
2011-03-25 19:42 . 2011-03-25 19:42 135032 ----a-w- c:\windows\system32\drivers\dwprot.sys
2011-03-24 20:56 . 2011-03-24 20:56 -------- d-----w- c:\program files\Common Files\Java
2011-03-24 20:56 . 2011-03-24 20:56 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-03-24 20:56 . 2011-03-24 20:56 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-03-24 20:56 . 2011-03-24 20:56 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-24 20:46 . 2011-03-24 20:46 -------- d-----w- c:\program files\trend micro
2011-03-24 20:46 . 2011-03-24 20:46 -------- d-----w- C:\rsit
2011-03-15 19:43 . 2008-12-11 00:33 86016 ----a-w- c:\windows\system32\dpl100.dll
2011-03-15 19:43 . 2008-11-06 16:33 684032 ----a-w- c:\windows\system32\divx.dll
2011-03-15 19:43 . 2009-04-02 13:21 84480 ----a-w- c:\windows\system32\ff_vfw.dll
2011-03-13 22:48 . 2011-03-13 22:48 -------- d-----w- c:\program files\NVIDIA Corporation
2011-03-13 22:17 . 2011-03-13 22:17 -------- d-----w- c:\documents and settings\slim\Local Settings\Data aplikací\4A Games
2011-03-13 22:09 . 2011-03-13 22:09 -------- d-----w- c:\documents and settings\slim\Local Settings\Data aplikací\SKIDROW
2011-02-26 22:46 . 2011-02-26 22:46 796672 ----a-w- c:\windows\GPInstall.exe
2011-02-24 19:47 . 2011-02-26 16:03 -------- d-----w- c:\program files\AIDA32 - Enterprise System Information
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 11:30 . 2011-01-21 11:30 311296 ----a-w- c:\windows\system32\EMRegSys.dll
2011-01-13 20:05 . 2008-08-18 16:03 15600 ----a-w- c:\windows\gdrv.sys
2009-07-14 00:16 . 2009-07-14 00:16 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-07-14 00:16 . 2009-07-14 00:16 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"36X Raid Configurer"="c:\windows\system32\JMRaidSetup.exe" [2007-02-06 1953792]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-02 98304]
"RTHDCPL"="RTHDCPL.EXE" [2010-09-03 19573352]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-02 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0smrgdf c:\program files\iolo\System Mechanic 6"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^MBCameraMonitor.lnk]
backup=c:\windows\pss\MBCameraMonitor.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-04-01 09:39 486856 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SW24"=c:\windows\system32\sw24.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"f:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"f:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"f:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"f:\\Program Files\\Activision\\Prototype\\prototypef.exe"=
"f:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe"=
"c:\\Program Files\\Softland\\Backup4all Lite 4\\Backup4all.exe"=
"c:\\Program Files\\Softland\\Backup4all Lite 4\\b4aCmd.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"f:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"f:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 DwProt;DrWeb Protection;c:\windows\system32\drivers\dwprot.sys [25.3.2011 20:42 135032]
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [28.10.2008 15:47 40368]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.8.2008 19:07 717296]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [18.7.2006 11:02 284184]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [18.7.2006 11:02 91672]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [18.9.2010 19:57 20328]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 12:16 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [22.11.2009 19:59 1691480]
S3 MOUSEWDFilter;MOUSEWDFilter;c:\windows\system32\drivers\MOUSEWD.SYS [5.10.2009 18:44 6528]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 12:16 753504]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-26 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 07:09]
.
2011-03-26 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2010-01-14 11:09]
.
2011-03-11 c:\windows\Tasks\Wise Disk Cleaner Schedule Task.job
- c:\program files\Wise Disk Cleaner\WiseDiskCleaner.exe [2011-01-09 16:27]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: Stáhnout pomocí Download &Express - c:\program files\Download Express\Add_Url.htm
Name-Space Handler: ftp\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
Name-Space Handler: http\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
Name-Space Handler: https\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
FF - ProfilePath - c:\documents and settings\slim\Data aplikací\Mozilla\Firefox\Profiles\s1fk0q14.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/intl/cs/
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF - Ext: Tab Popup: tabpopup@adarsh.tp - %profile%\extensions\tabpopup@adarsh.tp
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Capture Fox: capturefoxmovie@advancity.net - %profile%\extensions\capturefoxmovie@advancity.net
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
.
.
------- Asociace souborů -------
.
JSEFile=NOTEPAD.EXE %1
txtfile=NotePad.exe "%1" %*
.scr=AutoCADScript
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
AddRemove-HijackThis - c:\documents and settings\slim\Plocha\Kontrola
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-26 18:00
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9B07AF07-CEA1-D6CF-0FFC-79BCC57526C2}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"iaihjmhccjcfononaa"=hex:6b,61,6e,6b,67,70,6e,67,6c,67,6a,6c,68,6e,64,67,65,6b,
6c,6d,67,6f,00,00
"hacgdmfalgpicopp"=hex:69,61,6e,6b,6b,61,66,6b,66,66,64,69,64,67,6c,68,6e,69,
00,00
"famioeokeadh"=hex:6b,61,6a,66,63,63,6f,6d,62,6c,64,62,61,66,61,68,6c,6f,65,6e,
67,6c,00,00
"famideapfdkk"=hex:6f,62,70,64,61,62,67,64,65,69,70,6a,69,6b,61,64,63,6c,65,6e,
6e,6e,67,6b,67,61,6c,67,64,68,61,65,6b,67,62,66,66,70,68,64,6f,6a,68,68,6b,\
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:e9,b4,9c,02,3e,c9,b2,b5,f3,67,4b,3c,3f,6c,04,75,ae,c3,b1,88,16,17,f9,
34,95,19,df,cd,0c,b5,e5,be,17,c4,0f,49,ae,2d,c5,ac,f2,fc,fe,a3,16,5a,b4,42,\
"??"=hex:a9,ae,d0,c9,f6,95,f8,00,85,8d,5f,19,89,cf,ee,ac
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:9d,91,38,23,51,0c,f5,34,73,f8,27,6c,a2,70,ae,db,e0,71,ca,0d,90,
33,81,db,cf,d8,e5,ed,56,dd,27,7f,6b,1f,59,3c,44,84,c0,31,f9,f8,0e,18,5e,c8,\
"rkeysecu"=hex:e8,11,78,cd,9f,69,3d,5b,a0,a7,00,dd,fd,25,03,99
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(604)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(3276)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\documents and settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40ST7.EXE
c:\documents and settings\All Users\Data aplikací\EPSON\EPW!3 SSRP\E_S40RP7.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Sunbelt Software\Personal Firewall\kpf4ss.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\UAService7.exe
c:\program files\Sunbelt Software\Personal Firewall\kpf4gui.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\program files\Sunbelt Software\Personal Firewall\kpf4gui.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\RTHDCPL.EXE
.
**************************************************************************
.
Celkový čas: 2011-03-26 18:04:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-03-26 17:04
.
Před spuštěním: Volných bajtů: 36 760 207 360
Po spuštění: Volných bajtů: 36 660 948 992
.
- - End Of File - - F0EA6CC6B70B32EE72B8D73EFBCB6A17

[Rudy]

Kdybych věděl, že máte v PC Účto, doporučil bych vám zálohovat. CF jej, bohužel, maže z nám neznámého důvodu. Jinak ho lze obnovit ručně z adresáře C:\Quoobox. Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Regnull::
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9B07AF07-CEA1-D6CF-0FFC-79BCC57526C2}*]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[liborek1963]

Jdu na to.Mimochodem už mi jdou ty stránky tv.SMS/tedy prozatím/

[liborek1963]

Nevím proč,ale nedaří se mi znovu odinstalovat to AVG co jsem,blbec,tam vrátil.Bude stačit smáznot ho natvrdo?Pak už si s tím pohraju!

[liborek1963]

Tak dokončeno a zde je log.

ComboFix 11-03-24.06 - slim 26.03.2011 19:29:17.8.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.3070.2510 [GMT 1:00]
Spuštěný z: c:\documents and settings\slim\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\slim\Plocha\CFScript.txt
AV: AVG Anti-Virus Free *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Sunbelt Kerio Personal Firewall *Enabled* {E659E0EE-10E6-49B7-8696-60F38D0EB174}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-26 do 2011-03-26 )))))))))))))))))))))))))))))))
.
.
2011-03-26 17:16 . 2011-03-26 17:25 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2011-03-26 17:16 . 2011-03-26 17:25 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2011-03-26 17:16 . 2011-03-26 17:24 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2011-03-26 17:16 . 2011-03-26 18:23 -------- d-----w- c:\windows\system32\drivers\Avg
2011-03-26 17:16 . 2011-03-26 17:25 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2011-03-25 19:42 . 2011-03-25 19:42 135032 ----a-w- c:\windows\system32\drivers\dwprot.sys
2011-03-24 20:56 . 2011-03-24 20:56 -------- d-----w- c:\program files\Common Files\Java
2011-03-24 20:56 . 2011-03-24 20:56 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-03-24 20:56 . 2011-03-24 20:56 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-03-24 20:56 . 2011-03-24 20:56 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-24 20:46 . 2011-03-24 20:46 -------- d-----w- c:\program files\trend micro
2011-03-24 20:46 . 2011-03-24 20:46 -------- d-----w- C:\rsit
2011-03-15 19:43 . 2008-12-11 00:33 86016 ----a-w- c:\windows\system32\dpl100.dll
2011-03-15 19:43 . 2008-11-06 16:33 684032 ----a-w- c:\windows\system32\divx.dll
2011-03-15 19:43 . 2009-04-02 13:21 84480 ----a-w- c:\windows\system32\ff_vfw.dll
2011-03-13 22:48 . 2011-03-13 22:48 -------- d-----w- c:\program files\NVIDIA Corporation
2011-03-13 22:17 . 2011-03-13 22:17 -------- d-----w- c:\documents and settings\slim\Local Settings\Data aplikací\4A Games
2011-03-13 22:09 . 2011-03-13 22:09 -------- d-----w- c:\documents and settings\slim\Local Settings\Data aplikací\SKIDROW
2011-02-26 22:46 . 2011-02-26 22:46 796672 ----a-w- c:\windows\GPInstall.exe
2011-02-24 19:47 . 2011-02-26 16:03 -------- d-----w- c:\program files\AIDA32 - Enterprise System Information
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 11:30 . 2011-01-21 11:30 311296 ----a-w- c:\windows\system32\EMRegSys.dll
2011-01-13 20:05 . 2008-08-18 16:03 15600 ----a-w- c:\windows\gdrv.sys
2009-07-14 00:16 . 2009-07-14 00:16 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-07-14 00:16 . 2009-07-14 00:16 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-03-26_17.01.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-03-26 18:25 . 2011-03-26 18:25 16384 c:\windows\temp\Perflib_Perfdata_314.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"36X Raid Configurer"="c:\windows\system32\JMRaidSetup.exe" [2007-02-06 1953792]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-02 98304]
"RTHDCPL"="RTHDCPL.EXE" [2010-09-03 19573352]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-02 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2011-03-26 17:25 12536 ----a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0smrgdf c:\program files\iolo\System Mechanic 6
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^MBCameraMonitor.lnk]
backup=c:\windows\pss\MBCameraMonitor.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-04-01 09:39 486856 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SW24"=c:\windows\system32\sw24.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"f:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"f:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"f:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"f:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"f:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"f:\\Program Files\\Activision\\Prototype\\prototypef.exe"=
"f:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe"=
"c:\\Program Files\\Softland\\Backup4all Lite 4\\Backup4all.exe"=
"c:\\Program Files\\Softland\\Backup4all Lite 4\\b4aCmd.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"f:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"f:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 DwProt;DrWeb Protection;c:\windows\system32\drivers\dwprot.sys [25.3.2011 20:42 135032]
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [28.10.2008 15:47 40368]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.8.2008 19:07 717296]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [26.3.2011 18:16 216400]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [18.7.2006 11:02 284184]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [18.7.2006 11:02 91672]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [18.9.2010 19:57 20328]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 12:16 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [22.11.2009 19:59 1691480]
S3 MOUSEWDFilter;MOUSEWDFilter;c:\windows\system32\drivers\MOUSEWD.SYS [5.10.2009 18:44 6528]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 12:16 753504]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-26 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 07:09]
.
2011-03-26 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2010-01-14 11:09]
.
2011-03-11 c:\windows\Tasks\Wise Disk Cleaner Schedule Task.job
- c:\program files\Wise Disk Cleaner\WiseDiskCleaner.exe [2011-01-09 16:27]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: Stáhnout pomocí Download &Express - c:\program files\Download Express\Add_Url.htm
Name-Space Handler: ftp\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
Name-Space Handler: http\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
Name-Space Handler: https\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\Download Express\mdpph.dll
FF - ProfilePath - c:\documents and settings\slim\Data aplikací\Mozilla\Firefox\Profiles\s1fk0q14.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/intl/cs/
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF - Ext: Tab Popup: tabpopup@adarsh.tp - %profile%\extensions\tabpopup@adarsh.tp
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Capture Fox: capturefoxmovie@advancity.net - %profile%\extensions\capturefoxmovie@advancity.net
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-26 19:34
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9B07AF07-CEA1-D6CF-0FFC-79BCC57526C2}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"iaihjmhccjcfononaa"=hex:6b,61,6e,6b,67,70,6e,67,6c,67,6a,6c,68,6e,64,67,65,6b,
6c,6d,67,6f,00,00
"hacgdmfalgpicopp"=hex:69,61,6e,6b,6b,61,66,6b,66,66,64,69,64,67,6c,68,6e,69,
00,00
"famioeokeadh"=hex:6b,61,6a,66,63,63,6f,6d,62,6c,64,62,61,66,61,68,6c,6f,65,6e,
67,6c,00,00
"famideapfdkk"=hex:6f,62,70,64,61,62,67,64,65,69,70,6a,69,6b,61,64,63,6c,65,6e,
6e,6e,67,6b,67,61,6c,67,64,68,61,65,6b,67,62,66,66,70,68,64,6f,6a,68,68,6b,\
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:e9,b4,9c,02,3e,c9,b2,b5,f3,67,4b,3c,3f,6c,04,75,ae,c3,b1,88,16,17,f9,
34,95,19,df,cd,0c,b5,e5,be,17,c4,0f,49,ae,2d,c5,ac,f2,fc,fe,a3,16,5a,b4,42,\
"??"=hex:a9,ae,d0,c9,f6,95,f8,00,85,8d,5f,19,89,cf,ee,ac
.
[HKEY_USERS\S-1-5-21-343818398-1979792683-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:9d,91,38,23,51,0c,f5,34,73,f8,27,6c,a2,70,ae,db,e0,71,ca,0d,90,
33,81,db,cf,d8,e5,ed,56,dd,27,7f,6b,1f,59,3c,44,84,c0,31,f9,f8,0e,18,5e,c8,\
"rkeysecu"=hex:e8,11,78,cd,9f,69,3d,5b,a0,a7,00,dd,fd,25,03,99
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(840)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(1916)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-03-26 19:37:58
ComboFix-quarantined-files.txt 2011-03-26 18:37
ComboFix2.txt 2011-03-26 17:04
.
Před spuštěním: Volných bajtů: 36 558 716 928
Po spuštění: Volných bajtů: 36 600 954 880
.
- - End Of File - - F6D22F6BAC2D6590E90313335F04AE2B