VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Vysoké využití paměti. Prosím o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=114629

Stránka 1 z 1

Vysoké využití paměti. Prosím o kontrolu

Napsal: 19 srp 2011 23:53
od taadioo
Logfile of random's system information tool 1.09 (written by random/random)
Run by Stany at 2011-08-20 00:47:01
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 1 GB (4%) free of 27 GB
Total RAM: 2047 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 00:47, on 2011-08-20
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\AVG\AVG10\avgfws.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
E:\XP\Programy\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
E:\XP\Programy\TuneUP\TuneUpUtilitiesService32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgam.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
E:\XP\Programy\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\AVG\AVG10\avgtray.exe
E:\XP\Programy\MMK2\memokeys.exe
C:\WINDOWS\system32\ASUSTPE.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
E:\XP\Programy\TuneUP\TuneUpUtilitiesApp32.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
E:\XP\Programy\QIP_8081\qip.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
E:\XP\Programy\RMClock\RMClock.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
E:\Stahovane\RSIT.exe
C:\Program Files\trend micro\Stany.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 74.113.152.32 istockphoto.com
O1 - Hosts: 208.94.0.38 yfrog.com
O1 - Hosts: 63.309.5.102 virustotal.com
O1 - Hosts: 123.125.50.22 126.com
O1 - Hosts: 174.36.28.11 SlideShare.com
O1 - Hosts: 213.238.60.190 xing.com
O1 - Hosts: 59.106.98.139 seesaa.net
O1 - Hosts: 184.72.253.170 hootsuite.com
O1 - Hosts: 211.151.146.16 soku.com
O1 - Hosts: 72.32.120.222 metacafe.com
O1 - Hosts: 9.105.6.98 bitdefender.com
O1 - Hosts: 204.11.109.133 tribalfusion.com
O1 - Hosts: 207.154.14.31tripadvisor.com
O1 - Hosts: 216.52.240.133 ustream.tv
O1 - Hosts: 174.36.244.132 linkwithin.com
O1 - Hosts: 121.67.203.61 scan.novirusthanks.org
O1 - Hosts: 209.172.34.139 imagevenue.com
O1 - Hosts: 91.206.232.220 booking.com
O1 - Hosts: 118.69.251.6 vnexpress.net
O1 - Hosts: 103.67.101.13 trendmicro.com
O1 - Hosts: 208.85.40.80 pandora.com
O1 - Hosts: 194.116.241.57 softonic.com
O1 - Hosts: 208.83.243.15 match.com
O1 - Hosts: 202.57.69.84 nwt.com
O1 - Hosts: 65.11.53.80 nttnavi.com
O1 - Hosts: 72.51.41.235 nrk.no
O1 - Hosts: 110.16.19.157 nozonedata.com
O1 - Hosts: 76.106.43.251 nachtagenten.com
O1 - Hosts: 195.82.124.124 musicmatch.com
O1 - Hosts: 70.52.56.163 moscowtimes.com
O1 - Hosts: 124.217.235.76 gsn.com
O1 - Hosts: 61.178.63.198 mgd.com
O1 - Hosts: 174.142.24.205 mediastorm.hu
O1 - Hosts: 38.113.207.59 media-servers.com
O1 - Hosts: 116.66.206.161 m5prod.com
O1 - Hosts: 74.175.65.66 lupa.com
O1 - Hosts: 207.200.66.53 liveintercom.com
O1 - Hosts: 71.96.135.20 keenspace.com
O1 - Hosts: 202.51.107.37 jetsoftware.com
O1 - Hosts: 60.251.54.208 jamba.com
O1 - Hosts: 222.161.3.133 ir.com
O1 - Hosts: 200.24.227.170 investopedia.com
O1 - Hosts: 202.149.24.216 choiceradio.com
O1 - Hosts: 91.206.232.220 booking.com
O1 - Hosts: 118.69.251.6 vnexpress.net
O1 - Hosts: 141.76.45.18 chip.com
O1 - Hosts: 128.006.192.15 redv.net
O1 - Hosts: 194.42.17.124 cgi.com
O1 - Hosts: 199.26.254.66 centcomm.com
O1 - Hosts: 202.149.24.216 digitallook.com
O1 - Hosts: 60.251.189.134 domainfactory.com
O1 - Hosts: 222.161.3.133 dvdfocomm.nu
O1 - Hosts: 157.95.56.15 e-kolay.com
O1 - Hosts: 85.249.23.115 eurosport.com
O1 - Hosts: 189.104.149.61 f1cd.com
O1 - Hosts: 125.162.92.234 free6.com
O1 - Hosts: 80.81.159.20 cdmworldsoftware.com
O1 - Hosts: 117.102.101.219 grafika.com
O1 - Hosts: 85.249.23.115 adware-delete.com
O1 - Hosts: 69.89.22.135 hbv.com
O1 - Hosts: 92.48.201.39 protectorsuite.com
O1 - Hosts: 128.31.1.16 howstuffworks.com
O1 - Hosts: 132.239.17.2 gns.com
O1 - Hosts: 85.249.23.117 hyena.com
O1 - Hosts: 219.139.158.59 iinfo.com74.113.152.32 istockphoto.com
O1 - Hosts: 208.94.0.38 yfrog.com
O1 - Hosts: 63.309.5.102 virustotal.com
O1 - Hosts: 123.125.50.22 126.com
O1 - Hosts: 174.36.28.11 SlideShare.com
O1 - Hosts: 213.238.60.190 xing.com
O1 - Hosts: 59.106.98.139 seesaa.net
O1 - Hosts: 184.72.253.170 hootsuite.com
O1 - Hosts: 211.151.146.16 soku.com
O1 - Hosts: 72.32.120.222 metacafe.com
O1 - Hosts: 9.105.6.98 bitdefender.com
O1 - Hosts: 204.11.109.133 tribalfusion.com
O1 - Hosts: 207.154.14.31tripadvisor.com
O1 - Hosts: 216.52.240.133 ustream.tv
O1 - Hosts: 174.36.244.132 linkwithin.com
O1 - Hosts: 121.67.203.61 scan.novirusthanks.org
O1 - Hosts: 209.172.34.139 imagevenue.com
O1 - Hosts: 91.206.232.220 booking.com
O1 - Hosts: 118.69.251.6 vnexpress.net
O1 - Hosts: 103.67.101.13 trendmicro.com
O1 - Hosts: 208.85.40.80 pandora.com
O1 - Hosts: 194.116.241.57 softonic.com
O1 - Hosts: 208.83.243.15 match.com
O1 - Hosts: 202.57.69.84 nwt.com
O1 - Hosts: 65.11.53.80 nttnavi.com
O1 - Hosts: 72.51.41.235 nrk.no
O1 - Hosts: 110.16.19.157 nozonedata.com
O1 - Hosts: 76.106.43.251 nachtagenten.com
O1 - Hosts: 195.82.124.124 musicmatch.com
O1 - Hosts: 70.52.56.163 moscowtimes.com
O1 - Hosts: 124.217.235.76 gsn.com
O1 - Hosts: 61.178.63.198 mgd.com
O1 - Hosts: 174.142.24.205 mediastorm.hu
O1 - Hosts: 38.113.207.59 media-servers.com
O1 - Hosts: 116.66.206.161 m5prod.com
O1 - Hosts: 74.175.65.66 lupa.com
O1 - Hosts: 207.200.66.53 liveintercom.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - E:\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [SpywareTerminator] "E:\XP\Programy\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ACMON] "C:\Program Files\ASUS\Splendid\ACMON.exe"
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ASUSTPE] C:\WINDOWS\system32\ASUSTPE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://E:\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://E:\XP\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://E:\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\XP\Programy\ICQ6.5\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\XP\Programy\ICQ6.5\ICQ.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 5912363884
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1266036187
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2249954D-A97B-4AD9-ADE6-F20BCDBE90EC}: NameServer = 10.107.4.100,10.107.129.100
O17 - HKLM\System\CCS\Services\Tcpip\..\{919DE89A-D0A6-40F1-A7C1-58B60AC7A3C3}: NameServer = 10.107.4.100,10.107.4.129
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Konfigurační služba Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ReaConverter scheduler service (rcp_service) - ReaSoft - E:\XP\Programy\ConverterEPS\rcp_scheduler.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - E:\XP\Programy\Spyware Terminator\sp_rsser.exe

--
End of file - 16219 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\iMeshNAG.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Stany\Data aplikací\Mozilla\Firefox\Profiles\xzt0t44i.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "about:blank"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2, piclens@cooliris.com:1.12.0.36949, DTToolbar@toolbarnet.com:1.0.0.5, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:0.0.0, {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2007.30, personas@christopher.beard:1.5.3, bkmrksync@nokia.com:1.0.0.736, tsview@torrentstream.net:1.0, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, extension@virtusdesigns.com:3.6.6, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1319, {5c8bfb7c-9a54-11dc-8314-0800200c9a66}:3.6.6, {07b2a769-ed19-4483-87ce-c643914c9626}:1.6, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17, {20C3BDFF-DA68-468d-8D9A-F5A6C76B0F9E}:3.13"

"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}"=C:\Program Files\Crawler\firefox\
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=E:\XP\Programy\Nokia\Nokia PC Suite 7\bkmrksync\
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG10\Firefox4\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=E:\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=E:\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

E:\XP\Programy\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

E:\XP\Programy\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt

E:\XP\Programy\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npLegitCheckPlugin.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

E:\XP\Programy\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Stany\Data aplikací\Mozilla\Firefox\Profiles\xzt0t44i.default\extensions\
extension@virtusdesigns.com
one@h3j4.com
piclens@cooliris.com
redshift_V2@shift-themes.com
tsview@torrentstream.net
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
{07b2a769-ed19-4483-87ce-c643914c9626}
{5c8bfb7c-9a54-11dc-8314-0800200c9a66}

C:\Documents and Settings\Stany\Data aplikací\Mozilla\Firefox\Profiles\xzt0t44i.default\searchplugins\
crawlersrch.xml
google-language-en.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2009-10-08 1219584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2008-12-11 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-08-05 2274144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - E:\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - E:\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-08-20 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-08-20 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2009-10-08 1219584]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-10-14 863688]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2008-12-11 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminator"=E:\XP\Programy\Spyware Terminator\SpywareTerminatorShield.exe [2008-10-09 1783808]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2007-07-10 851968]
"ACU"=C:\Program Files\Atheros\ACU.exe [2009-11-16 467051]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-04-18 2334560]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ASUSTPE"=C:\WINDOWS\system32\ASUSTPE.exe [2006-10-14 69632]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\86dd1970]
C:\WINDOWS\system32\ppbovbte.dll,b []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2007-10-23 140568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
E:\XP\Programy\Acronis True Image\TimounterMonitor.exe [2007-10-23 906648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-06-06 35736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
E:\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BootSkin Startup Jobs]
E:\XP\Programy\BootSkin\BootSkin.exe /StartupJobs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CarboniteSetupLite]
C:\Program Files\Carbonite\CarbonitePreinstaller.exe [2009-08-04 318096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
E:\XP\Programy\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Stany\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lachesis]
C:\Program Files\Razer\Lachesis\razerhid.exe [2008-10-14 172032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
E:\XP\Programy\Malwarebytes' Anti-Malware\mbamgui.exe [2011-07-06 449584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MaxMenuMgr]
E:\XP\Programy\Seagate Manager\FreeAgent Status\StxMenuMgr.exe [2009-09-26 185640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmkpro]
E:\XP\Programy\MMK2\memokeys.exe [2003-08-24 472576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OSSelectorReinstall]
C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe [2007-03-15 2225208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power_Gear]
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
E:\XP\Programy\PowerISO\PWRISOVM.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
E:\XP\Programy\Quick Time\QTTask.exe [2010-11-29 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2008-09-24 16859648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\scheduler_monitor]
E:\XP\Programy\ConverterEPS\init_scheduler.exe [2007-06-15 27136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TaskTray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
E:\XP\Programy\Acronis True Image\TrueImageMonitor.exe [2007-10-23 2615624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WEBTRAN]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
E:\XP\Programy\Winamp\winampa.exe [2009-07-01 37888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yodm3D]
K:\NTB\Data\Programs\PROGRAMY\yodm3D\Yodm3D.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth Manager.lnk]
C:\PROGRA~1\Toshiba\BLUETO~1\TOSBTM~1.EXE [2007-06-14 425984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
E:\XP\Programy\GamePark\GAMEPA~1\gpcl.exe [2011-07-29 409088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Stany^Nabídka Start^Programy^Po spuštění^Registration Ghost Recon Advanced Warfighter® 2.LNK]
E:\XP\Hry\GHOSTR~1\GHOSTR~1\Support\Register\REGIST~1.EXE -d 804188 -l english -r 7 -g Ghost Recon Advanced Warfighter® 2 -c us -i 3120 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Stany^Nabídka Start^Programy^Po spuštění^Seagate Product Registration.lnk]
C:\DOCUME~1\Stany\DATAAP~1\LEADER~1\POWERR~1\SEAGAT~1.EXE [2009-01-16 1731736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Stany^Nabídka Start^Programy^Po spuštění^Secunia PSI.lnk]
E:\XP\Programy\PSI\psi.exe [2009-08-21 900816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TryAndDecideService"=2
"LightScribeService"=2
"JavaQuickStarterService"=2
"gupdate1c9dae419ca93f8"=2
"WinVNC4"=2
"WinDefend"=2
"CCALib8"=2
"Bonjour Service"=2
"FreeAgentGoNext Service"=2
"MBAMService"=2
"wscsvc"=3
"WmiApSrv"=3
"TuneUp.UtilitiesSvc"=2
"TuneUp.Defrag"=3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-04-23 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=E:\MICROS~1\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=177

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=227
"NoDrives"=0
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Hry\Cod2\CoD2MP_s.exe"="D:\Hry\Cod2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\Hry\Cod2_1.0\CoD2MP_s.exe"="D:\Hry\Cod2_1.0\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"E:\XP\Programy\uTorrent\uTorrent.exe"="E:\XP\Programy\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"E:\XP\Programy\QIP\qip.exe"="E:\XP\Programy\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"E:\XP\Hry\Call of Duty 2\CoD2MP_s.exe"="E:\XP\Hry\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\WINDOWS\system32\winver.exe"="C:\WINDOWS\system32\winver.exe:*:Enabled:winver"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"E:\XP\Hry\Cod5\CoDWaWmp.exe"="E:\XP\Hry\Cod5\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"E:\XP\Hry\Cod5\CoDWaW.exe"="E:\XP\Hry\Cod5\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"E:\XP\Programy\ICQ6.5\ICQ.exe"="E:\XP\Programy\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\XP\Programy\QIP_8081\qip.exe"="E:\XP\Programy\QIP_8081\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"E:\XP\Programy\Skype\Plugin Manager\skypePM.exe"="E:\XP\Programy\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"E:\XP\Hry\NFS Hot pursuit\Launcher.exe"="E:\XP\Hry\NFS Hot pursuit\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"E:\Microsoft Office\Office14\GROOVE.EXE"="E:\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"E:\Microsoft Office\Office14\ONENOTE.EXE"="E:\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"E:\Microsoft Office\Office14\OUTLOOK.EXE"="E:\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"E:\XP\Programy\AVG\avgmfapx.exe"="E:\XP\Programy\AVG\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG10\avgdiagex.exe"="C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostika 2011"
"C:\Program Files\AVG\AVG10\avgnsx.exe"="C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG10\avgam.exe"="C:\Program Files\AVG\AVG10\avgam.exe:*:Enabled:Správce událostí AVG"
"C:\Program Files\AVG\AVG10\avgemcx.exe"="C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"E:\XP\Programy\Skype\Phone\Skype.exe"="E:\XP\Programy\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.lhacm"=lhacm.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"VIDC.FPS1"=frapsvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"msacm.divxa32"=msaud32_divx.acm
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"msacm.siren"=sirenacm.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2011-08-20 00:47:02 ----D---- C:\Program Files\trend micro
2011-08-20 00:47:01 ----D---- C:\rsit
2011-08-20 00:37:58 ----D---- C:\Program Files\Common Files\Java
2011-08-20 00:37:35 ----A---- C:\WINDOWS\system32\javaws.exe
2011-08-20 00:37:34 ----A---- C:\WINDOWS\system32\javaw.exe
2011-08-20 00:37:34 ----A---- C:\WINDOWS\system32\java.exe
2011-08-20 00:24:37 ----D---- C:\WINDOWS\LastGood
2011-08-19 22:40:52 ----A---- C:\WINDOWS\IE4 Error Log.txt
2011-08-19 22:33:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Premium
2011-08-19 22:32:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallMate
2011-08-19 15:41:43 ----A---- C:\WINDOWS\WININIT.INI
2011-08-18 20:56:37 ----D---- C:\Program Files\DirectX
2011-08-18 16:46:10 ----A---- C:\WINDOWS\system32\drivers\Lachesis.sys
2011-08-18 16:46:10 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2011-08-18 16:46:09 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2011-08-18 16:46:06 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2011-08-18 16:45:42 ----D---- C:\Program Files\Razer
2011-08-18 16:33:35 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2011-08-18 16:33:33 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-08-18 16:33:32 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2011-08-18 16:33:30 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-08-18 16:33:29 ----A---- C:\WINDOWS\system32\atikvmag.dll
2011-08-18 16:33:28 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2011-08-18 16:33:28 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2011-08-18 16:33:27 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2011-08-18 16:33:25 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2011-08-18 16:33:24 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2011-08-18 16:33:24 ----A---- C:\WINDOWS\system32\atitvo32.dll
2011-08-18 16:33:24 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2011-08-18 16:33:24 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2011-08-18 16:33:23 ----A---- C:\WINDOWS\system32\ativva6x.dat
2011-08-18 16:33:23 ----A---- C:\WINDOWS\system32\ativva5x.dat
2011-08-18 16:33:23 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2011-08-18 16:33:23 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-08-18 16:33:23 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-08-18 16:33:22 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-08-18 16:33:19 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-08-18 16:33:19 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2011-08-18 16:33:17 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-08-18 16:33:14 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-08-18 16:33:14 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-08-18 16:33:13 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-08-18 16:33:05 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2011-08-18 16:33:05 ----A---- C:\WINDOWS\system32\atimpc32.dll
2011-08-18 16:33:05 ----A---- C:\WINDOWS\system32\aticalrt.dll
2011-08-18 16:33:05 ----A---- C:\WINDOWS\system32\aticaldd.dll
2011-08-18 16:33:05 ----A---- C:\WINDOWS\system32\atibtmon.exe
2011-08-18 16:33:04 ----A---- C:\WINDOWS\system32\ATIODE.exe
2011-08-18 16:33:04 ----A---- C:\WINDOWS\system32\aticalcl.dll
2011-08-18 16:29:58 ----D---- C:\Program Files\ATI
2011-08-18 14:16:18 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2011-08-18 14:16:11 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2011-08-18 14:15:50 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\wstdecod.dll
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\msyuv.dll
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\msvidctl.dll
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-18 14:15:48 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-18 14:15:47 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-18 14:15:36 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-08-18 14:15:36 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2011-08-18 14:15:36 ----A---- C:\WINDOWS\system32\d3d9.dll
2011-08-18 14:15:29 ----A---- C:\WINDOWS\system32\drivers\swenum.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\drivers\stream.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\dmusic.dll
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\dmsynth.dll
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\dmstyle.dll
2011-08-18 14:15:28 ----A---- C:\WINDOWS\system32\dmloader.dll
2011-08-18 14:15:27 ----A---- C:\WINDOWS\system32\dmime.dll
2011-08-18 14:15:27 ----A---- C:\WINDOWS\system32\dmcompos.dll
2011-08-18 14:15:27 ----A---- C:\WINDOWS\system32\dmband.dll
2011-08-18 14:15:26 ----A---- C:\WINDOWS\system32\dswave.dll
2011-08-18 14:15:26 ----A---- C:\WINDOWS\system32\dmscript.dll
2011-08-18 14:15:26 ----A---- C:\WINDOWS\system32\dinput8.dll
2011-08-18 14:15:25 ----A---- C:\WINDOWS\system32\d3d8.dll
2011-08-18 14:15:24 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2011-08-18 14:15:24 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys
2011-08-18 14:15:23 ----A---- C:\WINDOWS\system32\pid.dll
2011-08-18 14:15:22 ----A---- C:\WINDOWS\system32\qedwipes.dll
2011-08-18 14:15:22 ----A---- C:\WINDOWS\system32\qedit.dll
2011-08-18 14:15:21 ----A---- C:\WINDOWS\system32\quartz.dll
2011-08-18 14:15:21 ----A---- C:\WINDOWS\system32\qdvd.dll
2011-08-18 14:15:21 ----A---- C:\WINDOWS\system32\qasf.dll
2011-08-18 14:15:21 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2011-08-18 14:15:21 ----A---- C:\WINDOWS\system32\msdmo.dll
2011-08-18 14:15:20 ----A---- C:\WINDOWS\system32\qdv.dll
2011-08-18 14:15:20 ----A---- C:\WINDOWS\system32\qcap.dll
2011-08-18 14:15:20 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2011-08-18 14:15:20 ----A---- C:\WINDOWS\system32\encapi.dll
2011-08-18 14:15:20 ----A---- C:\WINDOWS\system32\devenum.dll
2011-08-18 14:15:19 ----A---- C:\WINDOWS\system32\dxdiag.exe
2011-08-18 14:15:19 ----A---- C:\WINDOWS\system32\d3dxof.dll
2011-08-18 14:15:19 ----A---- C:\WINDOWS\system32\d3drm.dll
2011-08-18 14:15:19 ----A---- C:\WINDOWS\system32\amstream.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dsdmoprp.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dsdmo.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dpvvox.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dpvsetup.exe
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dpvoice.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\dpvacm.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\diactfrm.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\d3dramp.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\d3dpmesh.dll
2011-08-18 14:15:18 ----A---- C:\WINDOWS\system32\d3dim.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dx8vb.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnet.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2011-08-18 14:15:17 ----A---- C:\WINDOWS\system32\dimap.dll
2011-08-18 14:15:16 ----A---- C:\WINDOWS\system32\gcdef.dll
2011-08-18 14:15:16 ----A---- C:\WINDOWS\system32\dx7vb.dll
2011-08-18 14:15:16 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2011-08-18 14:15:15 ----A---- C:\WINDOWS\system32\dsound3d.dll
2011-08-18 14:15:15 ----A---- C:\WINDOWS\system32\dsound.dll
2011-08-18 14:15:14 ----A---- C:\WINDOWS\system32\dpwsockx.dll
2011-08-18 14:15:13 ----A---- C:\WINDOWS\system32\dpmodemx.dll
2011-08-18 14:15:12 ----A---- C:\WINDOWS\system32\dplayx.dll
2011-08-18 14:15:12 ----A---- C:\WINDOWS\system32\dplaysvr.exe
2011-08-18 14:15:12 ----A---- C:\WINDOWS\system32\dinput.dll
2011-08-18 14:15:11 ----A---- C:\WINDOWS\system32\ddrawex.dll
2011-08-18 14:15:11 ----A---- C:\WINDOWS\system32\ddraw.dll
2011-08-18 14:15:09 ----A---- C:\WINDOWS\system32\d3dim700.dll
2011-08-16 20:32:26 ----D---- C:\Documents and Settings\Stany\Data aplikací\Hamachi
2011-08-04 16:36:28 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2011-08-03 19:49:40 ----A---- C:\WINDOWS\PowerReg.dat
2011-07-21 14:33:06 ----D---- C:\Documents and Settings\Stany\Data aplikací\ImgBurn
2011-07-21 13:49:03 ----A---- C:\WINDOWS\system32\drivers\xmasscsi.sys
2011-07-21 13:49:03 ----A---- C:\WINDOWS\system32\drivers\xmasbus.sys
2011-07-21 11:03:43 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-07-21 11:03:25 ----D---- C:\Program Files\PC Connectivity Solution
2011-07-21 11:02:51 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsu.sys
2011-07-21 11:02:49 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-07-21 11:02:48 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-07-21 11:02:46 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-07-21 11:02:45 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys

======List of files/folders modified in the last 1 month======

2011-08-20 00:47:02 ----RD---- C:\Program Files
2011-08-20 00:45:42 ----RSH---- C:\boot.ini
2011-08-20 00:45:42 ----A---- C:\WINDOWS\win.ini
2011-08-20 00:45:42 ----A---- C:\WINDOWS\system.ini
2011-08-20 00:45:41 ----D---- C:\WINDOWS\pss
2011-08-20 00:38:03 ----SHD---- C:\WINDOWS\Installer
2011-08-20 00:37:59 ----SHD---- C:\Config.Msi
2011-08-20 00:37:58 ----D---- C:\Program Files\Common Files
2011-08-20 00:37:35 ----D---- C:\WINDOWS\system32
2011-08-20 00:37:14 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-08-20 00:36:53 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-20 00:34:33 ----D---- C:\WINDOWS\temp
2011-08-20 00:24:43 ----D---- C:\WINDOWS\system32\drivers
2011-08-20 00:24:38 ----HD---- C:\WINDOWS\inf
2011-08-20 00:24:37 ----D---- C:\WINDOWS
2011-08-19 23:49:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2011-08-19 23:48:52 ----D---- C:\Documents and Settings\Stany\Data aplikací\Spyware Terminator
2011-08-19 23:40:28 ----D---- C:\WINDOWS\Prefetch
2011-08-19 23:35:46 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-19 23:32:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-19 23:32:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-19 23:32:06 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-19 22:40:41 ----A---- C:\WINDOWS\wincmd.ini
2011-08-19 22:32:36 ----SD---- C:\WINDOWS\Tasks
2011-08-19 21:58:24 ----D---- C:\Documents and Settings\Stany\Data aplikací\Winamp
2011-08-19 20:34:26 ----D---- C:\Documents and Settings\Stany\Data aplikací\DAEMON Tools Lite
2011-08-19 16:44:05 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-19 16:11:56 ----D---- C:\Documents and Settings\Stany\Data aplikací\Skype
2011-08-19 16:10:13 ----D---- C:\Documents and Settings\Stany\Data aplikací\skypePM
2011-08-19 15:38:12 ----D---- C:\Program Files\ASUS
2011-08-19 15:37:50 ----RSD---- C:\WINDOWS\assembly
2011-08-19 15:32:32 ----D---- C:\Documents and Settings\Stany\Data aplikací\uTorrent
2011-08-18 20:43:02 ----D---- C:\WINDOWS\system32\DirectX
2011-08-18 16:58:40 ----D---- C:\WINDOWS\Help
2011-08-18 16:37:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-18 16:32:40 ----D---- C:\Program Files\ATI Technologies
2011-08-17 12:41:59 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-08-17 10:10:15 ----D---- C:\WINDOWS\Debug
2011-08-16 23:29:38 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-14 11:48:25 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-11 22:43:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-11 22:42:31 ----D---- C:\WINDOWS\WinSxS
2011-08-11 22:40:18 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-11 22:31:14 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-11 22:30:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-11 22:21:55 ----D---- C:\Program Files\Internet Explorer
2011-08-11 22:21:39 ----D---- C:\WINDOWS\ie8updates
2011-08-05 21:41:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2011-08-01 19:10:14 ----D---- C:\Program Files\Common Files\Adobe
2011-08-01 19:10:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-08-01 19:09:58 ----D---- C:\Program Files\Adobe
2011-08-01 12:20:03 ----D---- C:\WINDOWS\system32\Restore
2011-07-25 17:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-21 23:19:01 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-21 11:04:33 ----D---- C:\Program Files\Common Files\Nokia
2011-07-21 11:02:42 ----D---- C:\Program Files\Nokia
2011-07-21 10:54:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaAccount

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 d347prt;d347prt; C:\WINDOWS\System32\Drivers\d347prt.sys [2004-08-22 5248]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2009-11-15 129248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-08-10 721904]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\WINDOWS\system32\DRIVERS\tdrpman.sys [2009-11-15 368736]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2009-11-15 441760]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R0 xmasbus;xmasbus; C:\WINDOWS\system32\DRIVERS\xmasbus.sys [2003-12-21 140800]
R0 xmasscsi;xmasscsi; C:\WINDOWS\System32\Drivers\xmasscsi.sys [2003-12-23 5248]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-02-12 279712]
R2 CAMTHWDM;WebcamMax, WDM Video Capture; C:\WINDOWS\system32\DRIVERS\CAMTHWDM.sys [2008-03-11 941784]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-02-12 25888]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2009-11-15 44384]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-11-06 1590528]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-04-23 3006976]
R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-09-24 4818432]
R3 LachesisFltr;Lachesis Mouse Driver; C:\WINDOWS\system32\drivers\Lachesis.sys [2007-08-08 12032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 RTCore32;RTCore32; \??\E:\XP\Programy\RMClock\RTCore32.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-08-07 111360]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\E:\XP\Programy\TuneUP\TuneUpUtilitiesDriver32.sys []
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2009-03-17 58208]
S0 d347bus;d347bus; C:\WINDOWS\system32\DRIVERS\d347bus.sys []
S3 aby5bg0e;aby5bg0e; C:\WINDOWS\system32\drivers\aby5bg0e.sys []
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2011-08-17 17480]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 Tosrfbd;Bluetooth RFBUS; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2007-04-24 113920]
S3 Tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
S3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2007-01-22 53376]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2007-06-11 41856]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ACS;Konfigurační služba Atheros; C:\WINDOWS\system32\acs.exe [2009-11-09 499797]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-04-23 540672]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG10\avgfws.exe [2011-03-09 2708024]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-04-18 7398752]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; E:\XP\Programy\Spyware Terminator\sp_rsser.exe [2008-10-09 570880]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
R4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-08-20 153376]
R4 TuneUp.UtilitiesSvc;TuneUp Utilities Service; E:\XP\Programy\TuneUP\TuneUpUtilitiesService32.exe [2010-09-30 1051968]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-21 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2007-10-23 427288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-11-30 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-22 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; E:\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-08-16 214520]
S3 rcp_service;ReaConverter scheduler service; E:\XP\Programy\ConverterEPS\rcp_scheduler.exe [2007-11-30 558592]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2006-12-03 94504]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S4 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2007-01-31 96370]
S4 FreeAgentGoNext Service;Seagate Service; E:\XP\Programy\Seagate Manager\Sync\FreeAgentService.exe [2009-09-26 189736]
S4 gupdate1c9dae419ca93f8;Google Update Service (gupdate1c9dae419ca93f8); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-22 133104]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-06-28 79136]
S4 MBAMService;MBAMService; E:\XP\Programy\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 TryAndDecideService;Acronis Try And Decide Service; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [2007-10-23 495832]
S4 TuneUp.Defrag;TuneUp Drive Defrag Service; E:\XP\Programy\TuneUP\TuneUpDefragService.exe [2011-06-23 435008]
S4 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S4 WinVNC4;VNC Server Version 4; E:\XP\Programy\VNC4\winvnc4.exe [2008-10-15 439632]

-----------------EOF-----------------

Re: Vysoké využití paměti. Prosím o kontrolu

Napsal: 21 srp 2011 11:41
od vyosek
Zdravim a pekny den preji :)

:arrow: Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
  • Ukoncete vsechny programy
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Zvolte moznost 2 a potvrte enterem
  • Utilita provede svou cinnost a da log - ten sem vlozte
  • Nyni znovu, ale zvolte moznost 3 a pote jeste 4 - logy opet vlozte

Re: Vysoké využití paměti. Prosím o kontrolu

Napsal: 21 srp 2011 12:06
od taadioo
RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Stany [Admin rights]
Mode: Remove -- Date : 08/21/2011 12:58:31

Bad processes: 1
[SUSP PATH] WebIE.dll -- C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll -> UNLOADED

Registry Entries: 3
[BLACKLIST] HKLM\[...]\Root : LEGACY_USNJSVC () -> DELETED
[SUSP PATH] iMeshNAG.job : c:\docume~1\stany\locals~1\temp\imesh_setup.exe -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Particular Files / Folders:

HOSTS File:
127.0.0.1 localhost
74.113.152.32 istockphoto.com
208.94.0.38 yfrog.com
63.309.5.102 virustotal.com
123.125.50.22 126.com
174.36.28.11 SlideShare.com
213.238.60.190 xing.com
59.106.98.139 seesaa.net
184.72.253.170 hootsuite.com
211.151.146.16 soku.com
72.32.120.222 metacafe.com
9.105.6.98 bitdefender.com
204.11.109.133 tribalfusion.com
207.154.14.31tripadvisor.com
216.52.240.133 ustream.tv
174.36.244.132 linkwithin.com
121.67.203.61 scan.novirusthanks.org
209.172.34.139 imagevenue.com
91.206.232.220 booking.com
118.69.251.6 vnexpress.net
[...]


Finished : << RKreport[1].txt >>
RKreport[1].txt
-----------------------------------------------------------------------------------------
RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Stany [Admin rights]
Mode: HOSTSFix -- Date : 08/21/2011 12:59:58

Bad processes: 0

HOSTS File:
127.0.0.1 localhost
74.113.152.32 istockphoto.com
208.94.0.38 yfrog.com
63.309.5.102 virustotal.com
123.125.50.22 126.com
174.36.28.11 SlideShare.com
213.238.60.190 xing.com
59.106.98.139 seesaa.net
184.72.253.170 hootsuite.com
211.151.146.16 soku.com
72.32.120.222 metacafe.com
9.105.6.98 bitdefender.com
204.11.109.133 tribalfusion.com
207.154.14.31tripadvisor.com
216.52.240.133 ustream.tv
174.36.244.132 linkwithin.com
121.67.203.61 scan.novirusthanks.org
209.172.34.139 imagevenue.com
91.206.232.220 booking.com
118.69.251.6 vnexpress.net
[...]


Resetted HOSTS:
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

---------------------------------------------------------------------

RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Stany [Admin rights]
Mode: ProxyFix -- Date : 08/21/2011 13:00:59

Bad processes: 0

Registry Entries: 0

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt



---------------------------------------------------------

Jinak, po tom prvním logu, což byla tedy ta možnost 2, mi přestali fungovat složky. Nemůžu otevřít Tento počítač, či jen normální složky. Vždy to hodí chybu Omezení spuštění dat, a následně chybu v explorer.exe.... ehm? :?:

Tak oprava: Musel jsem vypnout explorer.exe přes Správce úloh, a znovu ho pustit, takže už to jde.

Re: Vysoké využití paměti. Prosím o kontrolu

Napsal: 21 srp 2011 17:40
od vyosek
PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz