Tuhnoucí počítač
Napsal: 07 dub 2013 21:22
Dobrý večer,
poté, co se otci povedlo zavirovat počítač z emailu jakýmsi "policejním uzamčením", které odstranil programem Malwarebytes Anti-Malware, se začínají projevovat potíže při startu počítače. Start velmi dloho trvá, někdy se vůbec neobjeví ikony, když se objeví, tak PC po chvíli většinou vytuhne.
To "policejní uzamčení" bylo aktivní pouze v jednom profilu (černopolák), ostatní se už projevuje ve všech profilech.
Nejde udělat scandisk.
Velmi prosím o pomoc.
-------------------------------------------------------------------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Dolní at 2013-04-07 22:13:21
Systém Microsoft Windows XP Professional Service Pack 3
System drive H: has 18 GB (24%) free of 76 GB
Total RAM: 2038 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:29, on 7.4.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17106)
Boot mode: Safe mode with network support
Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Opera\opera.exe
H:\Documents and Settings\Dolní\Plocha\RSIT.exe
H:\Program Files\trend micro\Dolní.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6PQO1FES76&i=26
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - H:\Program Files\IB Updater\Extension32.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] H:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] H:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] H:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LayoutM] KLayMgr.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "H:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [ApnUpdater] "H:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [vProt] "H:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [AVG_UI] "H:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "H:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "H:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [H/PC Connection Agent] "H:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Seznam.chromeUpdatePref] H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe 12454
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [H/PC Connection Agent] "H:\Program Files\Microsoft ActiveSync\wcescomm.exe" (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [Seznam.chromeUpdatePref] H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe 12454 (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [cz.seznam.software.szndesktop] "H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [cz.seznam.software.autoupdate] "H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\szninstall.exe" -c (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [Skype] "H:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'černopolák')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://H:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - H:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll
O20 - AppInit_DLLs: H:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - H:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - H:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Sentinel Local License Manager (hasplms) - SafeNet Inc. - H:\WINDOWS\system32\hasplms.exe
O23 - Service: IB Updater - Unknown owner - H:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - H:\WINDOWS\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments, Inc. - H:\WINDOWS\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments, Inc. - H:\WINDOWS\system32\lktsrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments, Inc. - H:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - H:\WINDOWS\system32\nisvcloc.exe
O23 - Service: NMSAccessU - Unknown owner - H:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - H:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - H:\Program Files\Skype\Updater\Updater.exe
--
End of file - 9154 bytes
======Scheduled tasks folder======
H:\WINDOWS\tasks\DGChrome5522 Watcher.job
H:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - H:\Program Files\IB Updater\Extension32.dll [2013-01-29 170840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll [2013-02-18 1929392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-03-19 4529272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - H:\Program Files\Ask.com\GenericAskToolbar.dll [2012-05-04 1519272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - H:\Program Files\Ask.com\GenericAskToolbar.dll [2012-05-04 1519272]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll [2013-02-18 1929392]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=H:\WINDOWS\system32\igfxtray.exe [2008-07-01 150040]
"HotKeysCmds"=H:\WINDOWS\system32\hkcmd.exe [2008-07-01 170520]
"Persistence"=H:\WINDOWS\system32\igfxpers.exe [2008-07-01 141848]
"LayoutM"=H:\WINDOWS\KLayMgr.exe [2004-08-26 45056]
"COMODO Internet Security"=H:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 6749512]
"ApnUpdater"=H:\Program Files\Ask.com\Updater\Updater.exe [2012-05-04 1561768]
"vProt"=H:\Program Files\AVG Secure Search\vprot.exe [2013-02-18 1151152]
"AVG_UI"=H:\Program Files\AVG\AVG2013\avgui.exe [2012-12-11 3147384]
"seznam-listicka-distribuce"=H:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=H:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=H:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"H/PC Connection Agent"=H:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
"cz.seznam.software.autoupdate"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]
"cz.seznam.software.szndesktop"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
"Seznam.chromeUpdatePref"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe [2013-02-13 942080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seznam.chromeUpdatePref]
H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe [2013-02-13 942080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\H:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
H:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-09-25 113664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"vToolbarUpdater14.2.0"=2
"RemoteRegistry"=2
"RDSessMgr"=3
"RasMan"=3
"RasAuto"=3
"mnmsrvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="H:\WINDOWS\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
H:\WINDOWS\system32\igfxdev.dll [2008-06-27 212992]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-19 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\Program Files\Opera\opera.exe"="H:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"H:\Program Files\AVG\AVG2012\avgmfapx.exe"="H:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"H:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="H:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"H:\WINDOWS\system32\dmwu.exe"="H:\WINDOWS\system32\dmwu.exe:*:Enabled:dmwu"
"H:\WINDOWS\system32\ARFC\wrtc.exe"="H:\WINDOWS\system32\ARFC\wrtc.exe:*:Enabled:wrtc"
"H:\Program Files\AVG\AVG2013\avgmfapx.exe"="H:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalátor AVG"
"H:\WINDOWS\system32\hasplms.exe"="H:\WINDOWS\system32\hasplms.exe:*:Enabled:Sentinel License Manager"
"H:\Program Files\Microsoft ActiveSync\rapimgr.exe"="H:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"H:\Program Files\Microsoft ActiveSync\wcescomm.exe"="H:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"H:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="H:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"H:\Program Files\AVG\AVG2013\avgnsx.exe"="H:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Webový štít"
"H:\Program Files\AVG\AVG2013\avgdiagex.exe"="H:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostika 2013"
"H:\Program Files\AVG\AVG2013\avgemcx.exe"="H:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"H:\Program Files\Skype\Phone\Skype.exe"="H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"H:\Program Files\PANDORA.TV\PanService\PanProcess.exe"="H:\Program Files\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess"
"H:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="H:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\Program Files\Microsoft ActiveSync\rapimgr.exe"="H:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"H:\Program Files\Microsoft ActiveSync\wcescomm.exe"="H:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"H:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="H:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=H:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=H:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MIDI1"=myokent.dll
"vidc.VP60"=H:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=H:\WINDOWS\system32\vp6vfw.dll
======List of files/folders created in the last 1 month======
2013-04-07 21:49:51 ----A---- H:\WINDOWS\pro.INI
2013-04-07 14:40:45 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Norton Utilities
2013-04-07 14:37:30 ----A---- H:\WINDOWS\system32\drivers\sptd.sys
2013-04-07 14:20:12 ----SHD---- H:\WINDOWS\CSC
2013-04-07 14:20:03 ----A---- H:\WINDOWS\ntbtlog.txt
2013-04-05 15:46:21 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Malwarebytes
2013-03-29 21:18:41 ----D---- H:\Program Files\FireFly Studios
2013-03-22 15:56:12 ----D---- H:\WINDOWS\pss
2013-03-11 11:00:16 ----D---- H:\Program Files\Common Files\Skype
2013-03-09 19:16:53 ----D---- H:\Program Files\Seznam.cz
2013-03-09 19:16:10 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz
======List of files/folders modified in the last 1 month======
2013-04-07 22:13:29 ----D---- H:\Program Files\trend micro
2013-04-07 21:57:55 ----D---- H:\WINDOWS\system32
2013-04-07 21:51:34 ----AD---- H:\Documents and Settings\All Users\Data aplikací\TEMP
2013-04-07 21:50:15 ----RD---- H:\Program Files
2013-04-07 21:49:51 ----D---- H:\WINDOWS
2013-04-07 21:49:51 ----D---- H:\Program Files\Teleport Pro
2013-04-07 21:48:37 ----D---- H:\Program Files\Mozilla Firefox
2013-04-07 21:26:55 ----A---- H:\WINDOWS\SchedLgU.Txt
2013-04-07 21:19:42 ----D---- H:\WINDOWS\temp
2013-04-07 18:34:27 ----D---- H:\WINDOWS\Prefetch
2013-04-07 18:31:46 ----D---- H:\Documents and Settings\All Users\Data aplikací\MFAData
2013-04-07 14:51:38 ----D---- H:\Program Files\NORTON UTILITIES 15
2013-04-07 14:49:34 ----D---- H:\WINDOWS\system32\CatRoot2
2013-04-07 14:40:29 ----D---- H:\WINDOWS\system32\config
2013-04-07 14:37:30 ----D---- H:\WINDOWS\system32\drivers
2013-04-06 19:27:24 ----D---- H:\Program Files\Opera
2013-04-05 16:55:41 ----HDC---- H:\WINDOWS\$NtUninstallKB2479943$
2013-04-05 16:11:10 ----SD---- H:\WINDOWS\Downloaded Program Files
2013-04-05 16:10:39 ----D---- H:\WINDOWS\Debug
2013-04-05 16:01:58 ----HDC---- H:\WINDOWS\$NtUninstallKB954459$
2013-04-05 15:46:13 ----D---- H:\Program Files\Malwarebytes' Anti-Malware
2013-04-05 15:26:11 ----SHD---- H:\WINDOWS\Installer
2013-04-05 09:45:00 ----A---- H:\WINDOWS\OEWABLog.txt
2013-04-05 09:44:28 ----D---- H:\Documents and Settings
2013-04-03 23:28:38 ----RD---- H:\Program Files\Skype
2013-04-03 23:28:38 ----D---- H:\Documents and Settings\All Users\Data aplikací\Skype
2013-03-31 13:46:22 ----A---- H:\WINDOWS\system32\PerfStringBackup.INI
2013-03-29 21:18:40 ----HD---- H:\Program Files\InstallShield Installation Information
2013-03-29 21:18:26 ----D---- H:\Program Files\Common Files\InstallShield
2013-03-28 23:23:20 ----A---- H:\WINDOWS\win.ini
2013-03-28 23:23:20 ----A---- H:\WINDOWS\system.ini
2013-03-22 16:59:32 ----A---- H:\WINDOWS\WTRAN32.INI
2013-03-11 11:00:16 ----D---- H:\Program Files\Common Files
2013-03-10 17:04:24 ----SD---- H:\WINDOWS\Tasks
2013-03-09 19:14:59 ----D---- H:\Program Files\The KMPlayer
2013-03-09 12:01:46 ----RSHDC---- H:\WINDOWS\system32\dllcache
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHX;AVGIDSHX; H:\WINDOWS\system32\DRIVERS\avgidshx.sys [2012-10-15 55776]
R0 Avglogx;AVG Logging Driver; H:\WINDOWS\system32\DRIVERS\avglogx.sys [2012-09-21 177376]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; H:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2012-11-16 94048]
R0 Avgrkx86;AVG Anti-Rootkit Driver; H:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2012-09-14 35552]
R0 Inspect;COMODO Internet Security Firewall Driver; H:\WINDOWS\System32\DRIVERS\inspect.sys [2012-03-11 97760]
R0 sptd;sptd; H:\WINDOWS\System32\Drivers\sptd.sys [2013-04-07 466008]
R1 Avgtdix;AVG TDI Driver; H:\WINDOWS\system32\DRIVERS\avgtdix.sys [2012-09-21 164832]
R1 avgtp;avgtp; \??\H:\WINDOWS\system32\drivers\avgtpx86.sys []
R1 cmdHlp;COMODO Internet Security Helper Driver; H:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-03-11 31704]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; H:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 E100B;Intel(R) PRO Network Connection Driver; H:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; H:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; H:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; H:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 AVGIDSDriver;AVGIDSDriver; H:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2012-10-22 179936]
S1 AVGIDSShim;AVGIDSShim; H:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2012-09-21 19936]
S1 Avgldx86;AVG AVI Loader Driver; H:\WINDOWS\system32\DRIVERS\avgldx86.sys [2012-10-02 159712]
S1 cmdGuard;COMODO Internet Security Sandbox Driver; H:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-03-11 494968]
S1 intelppm;Řadič procesoru Intel; H:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S2 aksfridge;aksfridge; \??\H:\WINDOWS\system32\drivers\aksfridge.sys []
S2 cvintdrv;cvintdrv; H:\WINDOWS\system32\drivers\cvintdrv.sys [2005-06-10 7140]
S2 hardlock;hardlock; \??\H:\WINDOWS\system32\drivers\hardlock.sys []
S3 catchme;catchme; \??\H:\DOCUME~1\DOLN~1\LOCALS~1\Temp\catchme.sys []
S3 Dot4;Ovladač MS IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-14 206976]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 HidUsb;Ovladač třídy standardu HID; H:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPKBCCID;HP Keyboard Smart Card Driver; H:\WINDOWS\system32\DRIVERS\HPKBCCID.sys [2009-08-05 48256]
S3 ialm;ialm; H:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-06-27 6023072]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-21 4399104]
S3 MBAMProtector;MBAMProtector; \??\H:\WINDOWS\system32\drivers\mbam.sys []
S3 mouhid;Ovladač myši standardu HID; H:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); H:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 STCFUx32;STC DFU Driver; H:\WINDOWS\system32\DRIVERS\STCFUx32.SYS [2007-01-24 7680]
S3 usbscan;Ovladač skeneru USB; H:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 wceusbsh;Windows CE USB Serial Host Driver; H:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; H:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-19 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; H:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-19 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AVGIDSAgent;AVGIDSAgent; H:\Program Files\AVG\AVG2013\avgidsagent.exe [2012-11-16 5814904]
S2 avgwd;AVG WatchDog; H:\Program Files\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 cmdAgent;COMODO Internet Security Helper Service; H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 1983232]
S2 hasplms;Sentinel Local License Manager; H:\WINDOWS\system32\hasplms.exe [2012-08-23 4412872]
S2 IB Updater;IB Updater; H:\Program Files\IB Updater\ExtensionUpdaterService.exe [2013-01-29 188760]
S2 LkCitadelServer;Lookout Citadel Server; H:\WINDOWS\system32\lkcitdl.exe [2005-08-25 688190]
S2 lkClassAds;National Instruments PSP Server Locator; H:\WINDOWS\system32\lkads.exe [2005-10-11 45056]
S2 lkTimeSync;National Instruments Time Synchronization; H:\WINDOWS\system32\lktsrv.exe [2005-10-11 53248]
S2 MBAMService;MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 MBAMScheduler;MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]
S2 NIDomainService;National Instruments Domain Service; H:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [2005-10-11 204800]
S2 niSvcLoc;NI Service Locator; H:\WINDOWS\system32\nisvcloc.exe [2005-10-10 49152]
S2 NMSAccessU;NMSAccessU; H:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S2 Skype C2C Service;Skype C2C Service; H:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-03-19 3289208]
S2 SkypeUpdate;Skype Updater; H:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; h:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; H:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 CCALib8;Canon Camera Access Library 8; H:\Program Files\Canon\CAL\CALMAIN.exe [2009-09-08 96334]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 Freemake Improver;Freemake Improver; H:\Documents and Settings\All Users\Data aplikací\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-06-27 96768]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 vToolbarUpdater14.2.0;vToolbarUpdater14.2.0; H:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [2013-02-18 968880]
-----------------EOF-----------------
poté, co se otci povedlo zavirovat počítač z emailu jakýmsi "policejním uzamčením", které odstranil programem Malwarebytes Anti-Malware, se začínají projevovat potíže při startu počítače. Start velmi dloho trvá, někdy se vůbec neobjeví ikony, když se objeví, tak PC po chvíli většinou vytuhne.
To "policejní uzamčení" bylo aktivní pouze v jednom profilu (černopolák), ostatní se už projevuje ve všech profilech.
Nejde udělat scandisk.
Velmi prosím o pomoc.
-------------------------------------------------------------------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Dolní at 2013-04-07 22:13:21
Systém Microsoft Windows XP Professional Service Pack 3
System drive H: has 18 GB (24%) free of 76 GB
Total RAM: 2038 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:29, on 7.4.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17106)
Boot mode: Safe mode with network support
Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Opera\opera.exe
H:\Documents and Settings\Dolní\Plocha\RSIT.exe
H:\Program Files\trend micro\Dolní.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6PQO1FES76&i=26
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - H:\Program Files\IB Updater\Extension32.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] H:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] H:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] H:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LayoutM] KLayMgr.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "H:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [ApnUpdater] "H:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [vProt] "H:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [AVG_UI] "H:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "H:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "H:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [H/PC Connection Agent] "H:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Seznam.chromeUpdatePref] H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe 12454
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [H/PC Connection Agent] "H:\Program Files\Microsoft ActiveSync\wcescomm.exe" (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [Seznam.chromeUpdatePref] H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe 12454 (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [cz.seznam.software.szndesktop] "H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [cz.seznam.software.autoupdate] "H:\Documents and Settings\černopolák\Data aplikací\Seznam.cz\szninstall.exe" -c (User 'černopolák')
O4 - HKUS\S-1-5-21-861567501-2052111302-1177238915-1004\..\Run: [Skype] "H:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun (User 'černopolák')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://H:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - H:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll
O20 - AppInit_DLLs: H:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - H:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - H:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Sentinel Local License Manager (hasplms) - SafeNet Inc. - H:\WINDOWS\system32\hasplms.exe
O23 - Service: IB Updater - Unknown owner - H:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - H:\WINDOWS\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments, Inc. - H:\WINDOWS\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments, Inc. - H:\WINDOWS\system32\lktsrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments, Inc. - H:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - H:\WINDOWS\system32\nisvcloc.exe
O23 - Service: NMSAccessU - Unknown owner - H:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - H:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - H:\Program Files\Skype\Updater\Updater.exe
--
End of file - 9154 bytes
======Scheduled tasks folder======
H:\WINDOWS\tasks\DGChrome5522 Watcher.job
H:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
IB Updater - H:\Program Files\IB Updater\Extension32.dll [2013-01-29 170840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll [2013-02-18 1929392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-03-19 4529272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - H:\Program Files\Ask.com\GenericAskToolbar.dll [2012-05-04 1519272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - H:\Program Files\Ask.com\GenericAskToolbar.dll [2012-05-04 1519272]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - H:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll [2013-02-18 1929392]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=H:\WINDOWS\system32\igfxtray.exe [2008-07-01 150040]
"HotKeysCmds"=H:\WINDOWS\system32\hkcmd.exe [2008-07-01 170520]
"Persistence"=H:\WINDOWS\system32\igfxpers.exe [2008-07-01 141848]
"LayoutM"=H:\WINDOWS\KLayMgr.exe [2004-08-26 45056]
"COMODO Internet Security"=H:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 6749512]
"ApnUpdater"=H:\Program Files\Ask.com\Updater\Updater.exe [2012-05-04 1561768]
"vProt"=H:\Program Files\AVG Secure Search\vprot.exe [2013-02-18 1151152]
"AVG_UI"=H:\Program Files\AVG\AVG2013\avgui.exe [2012-12-11 3147384]
"seznam-listicka-distribuce"=H:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=H:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=H:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"H/PC Connection Agent"=H:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
"cz.seznam.software.autoupdate"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\szninstall.exe [2012-09-13 1009288]
"cz.seznam.software.szndesktop"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
"Seznam.chromeUpdatePref"=H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe [2013-02-13 942080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seznam.chromeUpdatePref]
H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz\bin\chromeUpdatePref.exe [2013-02-13 942080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\H:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
H:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-09-25 113664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"vToolbarUpdater14.2.0"=2
"RemoteRegistry"=2
"RDSessMgr"=3
"RasMan"=3
"RasAuto"=3
"mnmsrvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="H:\WINDOWS\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
H:\WINDOWS\system32\igfxdev.dll [2008-06-27 212992]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-19 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\Program Files\Opera\opera.exe"="H:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"H:\Program Files\AVG\AVG2012\avgmfapx.exe"="H:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"H:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="H:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"H:\WINDOWS\system32\dmwu.exe"="H:\WINDOWS\system32\dmwu.exe:*:Enabled:dmwu"
"H:\WINDOWS\system32\ARFC\wrtc.exe"="H:\WINDOWS\system32\ARFC\wrtc.exe:*:Enabled:wrtc"
"H:\Program Files\AVG\AVG2013\avgmfapx.exe"="H:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:Instalátor AVG"
"H:\WINDOWS\system32\hasplms.exe"="H:\WINDOWS\system32\hasplms.exe:*:Enabled:Sentinel License Manager"
"H:\Program Files\Microsoft ActiveSync\rapimgr.exe"="H:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"H:\Program Files\Microsoft ActiveSync\wcescomm.exe"="H:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"H:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="H:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"H:\Program Files\AVG\AVG2013\avgnsx.exe"="H:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Webový štít"
"H:\Program Files\AVG\AVG2013\avgdiagex.exe"="H:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostika 2013"
"H:\Program Files\AVG\AVG2013\avgemcx.exe"="H:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"H:\Program Files\Skype\Phone\Skype.exe"="H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"H:\Program Files\PANDORA.TV\PanService\PanProcess.exe"="H:\Program Files\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess"
"H:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="H:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\Program Files\Microsoft ActiveSync\rapimgr.exe"="H:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"H:\Program Files\Microsoft ActiveSync\wcescomm.exe"="H:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"H:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="H:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=H:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=H:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MIDI1"=myokent.dll
"vidc.VP60"=H:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=H:\WINDOWS\system32\vp6vfw.dll
======List of files/folders created in the last 1 month======
2013-04-07 21:49:51 ----A---- H:\WINDOWS\pro.INI
2013-04-07 14:40:45 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Norton Utilities
2013-04-07 14:37:30 ----A---- H:\WINDOWS\system32\drivers\sptd.sys
2013-04-07 14:20:12 ----SHD---- H:\WINDOWS\CSC
2013-04-07 14:20:03 ----A---- H:\WINDOWS\ntbtlog.txt
2013-04-05 15:46:21 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Malwarebytes
2013-03-29 21:18:41 ----D---- H:\Program Files\FireFly Studios
2013-03-22 15:56:12 ----D---- H:\WINDOWS\pss
2013-03-11 11:00:16 ----D---- H:\Program Files\Common Files\Skype
2013-03-09 19:16:53 ----D---- H:\Program Files\Seznam.cz
2013-03-09 19:16:10 ----D---- H:\Documents and Settings\Dolní\Data aplikací\Seznam.cz
======List of files/folders modified in the last 1 month======
2013-04-07 22:13:29 ----D---- H:\Program Files\trend micro
2013-04-07 21:57:55 ----D---- H:\WINDOWS\system32
2013-04-07 21:51:34 ----AD---- H:\Documents and Settings\All Users\Data aplikací\TEMP
2013-04-07 21:50:15 ----RD---- H:\Program Files
2013-04-07 21:49:51 ----D---- H:\WINDOWS
2013-04-07 21:49:51 ----D---- H:\Program Files\Teleport Pro
2013-04-07 21:48:37 ----D---- H:\Program Files\Mozilla Firefox
2013-04-07 21:26:55 ----A---- H:\WINDOWS\SchedLgU.Txt
2013-04-07 21:19:42 ----D---- H:\WINDOWS\temp
2013-04-07 18:34:27 ----D---- H:\WINDOWS\Prefetch
2013-04-07 18:31:46 ----D---- H:\Documents and Settings\All Users\Data aplikací\MFAData
2013-04-07 14:51:38 ----D---- H:\Program Files\NORTON UTILITIES 15
2013-04-07 14:49:34 ----D---- H:\WINDOWS\system32\CatRoot2
2013-04-07 14:40:29 ----D---- H:\WINDOWS\system32\config
2013-04-07 14:37:30 ----D---- H:\WINDOWS\system32\drivers
2013-04-06 19:27:24 ----D---- H:\Program Files\Opera
2013-04-05 16:55:41 ----HDC---- H:\WINDOWS\$NtUninstallKB2479943$
2013-04-05 16:11:10 ----SD---- H:\WINDOWS\Downloaded Program Files
2013-04-05 16:10:39 ----D---- H:\WINDOWS\Debug
2013-04-05 16:01:58 ----HDC---- H:\WINDOWS\$NtUninstallKB954459$
2013-04-05 15:46:13 ----D---- H:\Program Files\Malwarebytes' Anti-Malware
2013-04-05 15:26:11 ----SHD---- H:\WINDOWS\Installer
2013-04-05 09:45:00 ----A---- H:\WINDOWS\OEWABLog.txt
2013-04-05 09:44:28 ----D---- H:\Documents and Settings
2013-04-03 23:28:38 ----RD---- H:\Program Files\Skype
2013-04-03 23:28:38 ----D---- H:\Documents and Settings\All Users\Data aplikací\Skype
2013-03-31 13:46:22 ----A---- H:\WINDOWS\system32\PerfStringBackup.INI
2013-03-29 21:18:40 ----HD---- H:\Program Files\InstallShield Installation Information
2013-03-29 21:18:26 ----D---- H:\Program Files\Common Files\InstallShield
2013-03-28 23:23:20 ----A---- H:\WINDOWS\win.ini
2013-03-28 23:23:20 ----A---- H:\WINDOWS\system.ini
2013-03-22 16:59:32 ----A---- H:\WINDOWS\WTRAN32.INI
2013-03-11 11:00:16 ----D---- H:\Program Files\Common Files
2013-03-10 17:04:24 ----SD---- H:\WINDOWS\Tasks
2013-03-09 19:14:59 ----D---- H:\Program Files\The KMPlayer
2013-03-09 12:01:46 ----RSHDC---- H:\WINDOWS\system32\dllcache
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHX;AVGIDSHX; H:\WINDOWS\system32\DRIVERS\avgidshx.sys [2012-10-15 55776]
R0 Avglogx;AVG Logging Driver; H:\WINDOWS\system32\DRIVERS\avglogx.sys [2012-09-21 177376]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; H:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2012-11-16 94048]
R0 Avgrkx86;AVG Anti-Rootkit Driver; H:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2012-09-14 35552]
R0 Inspect;COMODO Internet Security Firewall Driver; H:\WINDOWS\System32\DRIVERS\inspect.sys [2012-03-11 97760]
R0 sptd;sptd; H:\WINDOWS\System32\Drivers\sptd.sys [2013-04-07 466008]
R1 Avgtdix;AVG TDI Driver; H:\WINDOWS\system32\DRIVERS\avgtdix.sys [2012-09-21 164832]
R1 avgtp;avgtp; \??\H:\WINDOWS\system32\drivers\avgtpx86.sys []
R1 cmdHlp;COMODO Internet Security Helper Driver; H:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-03-11 31704]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; H:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 E100B;Intel(R) PRO Network Connection Driver; H:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; H:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; H:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; H:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 AVGIDSDriver;AVGIDSDriver; H:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2012-10-22 179936]
S1 AVGIDSShim;AVGIDSShim; H:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2012-09-21 19936]
S1 Avgldx86;AVG AVI Loader Driver; H:\WINDOWS\system32\DRIVERS\avgldx86.sys [2012-10-02 159712]
S1 cmdGuard;COMODO Internet Security Sandbox Driver; H:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-03-11 494968]
S1 intelppm;Řadič procesoru Intel; H:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S2 aksfridge;aksfridge; \??\H:\WINDOWS\system32\drivers\aksfridge.sys []
S2 cvintdrv;cvintdrv; H:\WINDOWS\system32\drivers\cvintdrv.sys [2005-06-10 7140]
S2 hardlock;hardlock; \??\H:\WINDOWS\system32\drivers\hardlock.sys []
S3 catchme;catchme; \??\H:\DOCUME~1\DOLN~1\LOCALS~1\Temp\catchme.sys []
S3 Dot4;Ovladač MS IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-14 206976]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 HidUsb;Ovladač třídy standardu HID; H:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPKBCCID;HP Keyboard Smart Card Driver; H:\WINDOWS\system32\DRIVERS\HPKBCCID.sys [2009-08-05 48256]
S3 ialm;ialm; H:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-06-27 6023072]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-21 4399104]
S3 MBAMProtector;MBAMProtector; \??\H:\WINDOWS\system32\drivers\mbam.sys []
S3 mouhid;Ovladač myši standardu HID; H:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); H:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 STCFUx32;STC DFU Driver; H:\WINDOWS\system32\DRIVERS\STCFUx32.SYS [2007-01-24 7680]
S3 usbscan;Ovladač skeneru USB; H:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 wceusbsh;Windows CE USB Serial Host Driver; H:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; H:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-19 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; H:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-19 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AVGIDSAgent;AVGIDSAgent; H:\Program Files\AVG\AVG2013\avgidsagent.exe [2012-11-16 5814904]
S2 avgwd;AVG WatchDog; H:\Program Files\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 cmdAgent;COMODO Internet Security Helper Service; H:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 1983232]
S2 hasplms;Sentinel Local License Manager; H:\WINDOWS\system32\hasplms.exe [2012-08-23 4412872]
S2 IB Updater;IB Updater; H:\Program Files\IB Updater\ExtensionUpdaterService.exe [2013-01-29 188760]
S2 LkCitadelServer;Lookout Citadel Server; H:\WINDOWS\system32\lkcitdl.exe [2005-08-25 688190]
S2 lkClassAds;National Instruments PSP Server Locator; H:\WINDOWS\system32\lkads.exe [2005-10-11 45056]
S2 lkTimeSync;National Instruments Time Synchronization; H:\WINDOWS\system32\lktsrv.exe [2005-10-11 53248]
S2 MBAMService;MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 MBAMScheduler;MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]
S2 NIDomainService;National Instruments Domain Service; H:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [2005-10-11 204800]
S2 niSvcLoc;NI Service Locator; H:\WINDOWS\system32\nisvcloc.exe [2005-10-10 49152]
S2 NMSAccessU;NMSAccessU; H:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S2 Skype C2C Service;Skype C2C Service; H:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-03-19 3289208]
S2 SkypeUpdate;Skype Updater; H:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 aspnet_state;ASP.NET State Service; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; h:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; H:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 CCALib8;Canon Camera Access Library 8; H:\Program Files\Canon\CAL\CALMAIN.exe [2009-09-08 96334]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 Freemake Improver;Freemake Improver; H:\Documents and Settings\All Users\Data aplikací\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-06-27 96768]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 vToolbarUpdater14.2.0;vToolbarUpdater14.2.0; H:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [2013-02-18 968880]
-----------------EOF-----------------