VIRY.CZ

Dobrý den,
setkali jste se někdo s následujícím problémem?

1. Zapínání pc -> klávesnice nereaguje na volbu pohotovostního režimu (nelze tuto možnost vybrat, neboť nefungují šipky, přitom ctrl+alt+del funguje)
2. Logování do systému (windows vista 64bit - premium)
- při psaní hesla se náhodně spouští stiknutí klávesy enter
- při logu bez hesla se nic divného neděje (vypadá to tedy na závislost s tisknutými klávesy)
3. Po přihlášení do systému se dochází k samovolnému spouštění nabídky "start" případně náhodných aplikací (excel, multimediální centrum, nastavení obrazovky - prostě všechno možné), někdy dokonce dochází k aktivací aplikací nebo otevření složek dle aktuálního umístění kurzoru myši

4. K tomu všemu dochází ve zcela náhodných intervalech. Při použití myši a kontextové nabídky jsem nespozoroval žádné pozoruhodné jevy.

Specifika pc:
os windows vista 64bit premium - sp2
nod32 - zkušební verze (vypršela) / nyní symantec norton antivirus 2010

Budu vděčný za každou radu či postup pro vyřešení problému.

Děkuji

Dobrý den přeji.

Podle popisu to vypadá, že by to mohlo být vadnou klávesnicí. Žádná klávesa stlačena být nemusí, ale může být poškozena uvnitř.
Zkuste tedy nejprve vyměnit klávesnici (popřípadě si ji jen na zkoušku od někoho půjčte)

dobrý den,
klávesnicí to není - nahradil jsem ji za svoji osvědčenou ps2.
Problém přetrvává.

Antivir - Norton nic nenašel.

Další příznaky: - samo řádkuje, zapíná capslock na pozadí (čili v pc, nikoli na klavesnici), samovolně označí text, při jednom stisku ,,backspace" smaže celé pole, píše jiným jazYkem...samovolně tyto Reakce mění...

Klikněte na RSIT v mém podpisu, a pošlete sem log. Uvidíme, zda tam něco je

dobry den,
níže zasílám log jak jste doporučoval.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jirka at 2010-01-21 23:06:27
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 77 GB (51%) free of 153 GB
Total RAM: 4031 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:06:54, on 21.1.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Users\Jirka\AppData\Local\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jirka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jirka\Documents\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\IPSBHO.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [gemstrmw] C:\Windows\system32\gemstrmw.exe /r
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EZEHM] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Aloaha Engine.lnk = C:\Program Files (x86)\Wrocklage\AloahaCore.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Přidat do stávajícího PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PCNetSoftware RAC Server - Miloslav Novotny N+P - C:\Program Files (x86)\PCNetSoftware\RAC Server\RACs.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12212 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001UA.job
C:\Windows\tasks\User_Feed_Synchronization-{E5CFA789-2411-4BC6-A3BB-EFDBE9383398}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\IPSBHO.DLL [2009-08-30 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-01 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-23 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-01 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-23 321120]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-01 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"gemstrmw"=C:\Windows\system32\gemstrmw.exe [2003-08-29 24576]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2006-10-23 620152]
"Adobe_ID0EZEHM"=C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-04-27 1884160]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2009-01-05 413696]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2009-04-02 342312]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]
"SunJavaUpdateSched"=C:\Program Files (x86)\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-14 39408]
"WMPNSCFG"=C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 138240]
"Google Update"=C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-19 135664]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Acrobat Speed Launcher.lnk - C:\Windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe
Adobe Acrobat Synchronizer.lnk - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
Aloaha Engine.lnk - C:\Program Files (x86)\Wrocklage\AloahaCore.exe
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe"="C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter"
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe"="C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe"="C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller"
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe"="C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter"

======File associations======

.js - edit - C:\Windows\SysWOW64\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2010-01-21 23:06:28 ----D---- C:\Program Files (x86)\trend micro
2010-01-21 23:06:27 ----D---- C:\rsit
2010-01-21 13:49:26 ----A---- C:\Windows\system32\jscript.dll
2010-01-19 16:31:22 ----D---- C:\ProgramData\NVIDIA
2010-01-19 16:25:40 ----A---- C:\Windows\system32\occache.dll
2010-01-19 16:25:39 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-19 16:25:38 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-19 16:25:38 ----A---- C:\Windows\system32\iepeers.dll
2010-01-19 16:25:37 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-01-19 16:25:37 ----A---- C:\Windows\system32\ieui.dll
2010-01-19 16:25:36 ----A---- C:\Windows\system32\wininet.dll
2010-01-19 16:25:36 ----A---- C:\Windows\system32\iernonce.dll
2010-01-19 16:25:35 ----A---- C:\Windows\system32\iesetup.dll
2010-01-19 16:25:34 ----A---- C:\Windows\system32\urlmon.dll
2010-01-19 16:25:34 ----A---- C:\Windows\system32\msfeedssync.exe
2010-01-19 16:25:34 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-19 16:25:34 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-19 16:25:33 ----A---- C:\Windows\system32\iertutil.dll
2010-01-19 16:25:31 ----A---- C:\Windows\system32\ieframe.dll
2010-01-19 16:25:28 ----A---- C:\Windows\system32\mshtml.dll
2010-01-19 16:25:26 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-19 16:25:26 ----A---- C:\Windows\system32\iesysprep.dll
2010-01-19 16:21:33 ----A---- C:\Windows\system32\admparse.dll
2010-01-19 16:21:32 ----A---- C:\Windows\system32\icardie.dll
2010-01-19 16:21:32 ----A---- C:\Windows\system32\advpack.dll
2010-01-19 16:21:31 ----A---- C:\Windows\system32\ieakeng.dll
2010-01-19 16:21:31 ----A---- C:\Windows\system32\corpol.dll
2010-01-19 16:21:29 ----A---- C:\Windows\system32\wextract.exe
2010-01-19 16:21:29 ----A---- C:\Windows\system32\msls31.dll
2010-01-19 16:21:28 ----A---- C:\Windows\system32\pngfilt.dll
2010-01-19 16:21:28 ----A---- C:\Windows\system32\ieapfltr.dll
2010-01-19 16:21:26 ----A---- C:\Windows\system32\imgutil.dll
2010-01-19 16:21:26 ----A---- C:\Windows\system32\dxtrans.dll
2010-01-19 16:21:26 ----A---- C:\Windows\system32\dxtmsft.dll
2010-01-19 16:21:25 ----A---- C:\Windows\system32\mstime.dll
2010-01-19 16:21:24 ----A---- C:\Windows\system32\webcheck.dll
2010-01-19 16:21:24 ----A---- C:\Windows\system32\mshtmled.dll
2010-01-19 16:21:24 ----A---- C:\Windows\system32\licmgr10.dll
2010-01-19 16:21:24 ----A---- C:\Windows\system32\inseng.dll
2010-01-19 16:21:23 ----A---- C:\Windows\system32\msrating.dll
2010-01-19 16:21:23 ----A---- C:\Windows\system32\ieakui.dll
2010-01-19 16:21:23 ----A---- C:\Windows\system32\ieaksie.dll
2010-01-19 16:21:22 ----A---- C:\Windows\system32\WinFXDocObj.exe
2010-01-19 16:21:22 ----A---- C:\Windows\system32\vbscript.dll
2010-01-19 16:21:21 ----A---- C:\Windows\system32\url.dll
2010-01-19 16:21:21 ----A---- C:\Windows\system32\mshtmler.dll
2010-01-19 16:21:19 ----A---- C:\Windows\system32\mshta.exe
2010-01-19 16:21:19 ----A---- C:\Windows\system32\iexpress.exe
2010-01-19 16:21:18 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-01-19 16:21:18 ----A---- C:\Windows\system32\SetDepNx.exe
2010-01-19 16:21:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-01-19 16:21:18 ----A---- C:\Windows\system32\PDMSetup.exe
2010-01-19 15:53:17 ----D---- C:\Users\Jirka\AppData\Roaming\Tific
2010-01-19 15:52:29 ----D---- C:\Program Files (x86)\Norton AntiVirus
2010-01-19 15:52:28 ----D---- C:\ProgramData\Norton
2010-01-19 15:52:22 ----D---- C:\ProgramData\NortonInstaller
2010-01-19 15:52:22 ----D---- C:\Program Files (x86)\NortonInstaller
2010-01-18 16:48:18 ----D---- C:\Windows\Minidump
2010-01-18 16:31:14 ----A---- C:\Windows\ntbtlog.txt
2010-01-13 10:04:45 ----A---- C:\Windows\system32\t2embed.dll
2010-01-13 10:04:44 ----A---- C:\Windows\system32\fontsub.dll
2010-01-10 13:05:09 ----D---- C:\ProgramData\HP Product Assistant
2010-01-07 19:36:52 ----A---- C:\Windows\system32\javaws.exe
2010-01-07 19:36:52 ----A---- C:\Windows\system32\javaw.exe
2010-01-07 19:36:52 ----A---- C:\Windows\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-01-21 23:06:42 ----D---- C:\Windows\Prefetch
2010-01-21 23:06:28 ----RD---- C:\Program Files (x86)
2010-01-21 23:05:47 ----D---- C:\Windows\Temp
2010-01-21 19:45:41 ----D---- C:\Windows\System32
2010-01-21 19:45:41 ----D---- C:\Windows\inf
2010-01-21 19:38:52 ----SHD---- C:\System Volume Information
2010-01-21 19:37:16 ----D---- C:\Windows\SysWOW64
2010-01-21 19:36:55 ----D---- C:\Windows\winsxs
2010-01-21 16:09:04 ----D---- C:\Users\Jirka\AppData\Roaming\Image Zone Express
2010-01-21 12:40:47 ----D---- C:\Windows\rescache
2010-01-20 09:15:12 ----HD---- C:\ProgramData
2010-01-19 19:14:03 ----D---- C:\Windows\system32\migration
2010-01-19 19:14:03 ----D---- C:\Program Files (x86)\Internet Explorer
2010-01-19 19:13:59 ----D---- C:\Windows\system32\cs-CZ
2010-01-19 19:13:53 ----D---- C:\Windows\system32\en-US
2010-01-19 19:13:50 ----D---- C:\Windows\PolicyDefinitions
2010-01-19 19:13:46 ----D---- C:\Windows
2010-01-19 18:05:22 ----D---- C:\Program Files (x86)\TeamViewer
2010-01-19 16:33:04 ----SHD---- C:\Windows\Installer
2010-01-19 16:33:03 ----HD---- C:\Config.Msi
2010-01-19 16:31:07 ----D---- C:\Windows\Help
2010-01-19 16:12:55 ----D---- C:\Windows\Tasks
2010-01-19 16:00:13 ----RD---- C:\Program Files
2010-01-19 15:57:50 ----D---- C:\Program Files (x86)\Common Files\Symantec Shared
2010-01-18 17:09:30 ----D---- C:\Program Files (x86)\Hamachi
2010-01-18 17:07:46 ----SD---- C:\Windows\Downloaded Program Files
2010-01-18 16:34:31 ----SD---- C:\Users\Jirka\AppData\Roaming\Microsoft
2010-01-18 16:34:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-01-18 09:58:09 ----D---- C:\Users\Jirka\AppData\Roaming\HpUpdate
2010-01-14 03:02:07 ----D---- C:\Program Files (x86)\Windows Mail
2010-01-12 15:19:00 ----D---- C:\Users\Jirka\AppData\Roaming\Adobe
2010-01-08 15:27:41 ----D---- C:\Users\Jirka\AppData\Roaming\Hamachi
2010-01-08 14:22:19 ----D---- C:\Programy
2010-01-07 19:36:50 ----D---- C:\Program Files (x86)\Java
2010-01-06 13:39:07 ----SD---- C:\MyNEXT-TFC
2009-12-22 09:50:26 ----A---- C:\Windows\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\BASHDefs\20091205.001\BHDrvx64.sys [2009-12-05 668720]
R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\NAVx64\1100000.088\ccHPx64.sys []
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2010-01-19 475696]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20100119.001\IDSvia64.sys [2009-10-28 466992]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NAVx64\1100000.088\SRTSPX64.SYS []
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NAVx64\1100000.088\Ironx64.SYS []
R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\system32\drivers\NAVx64\1100000.088\SYMTDIV.SYS []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-01-19 132656]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100121.005\ENG64.SYS [2010-01-19 116272]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100121.005\EX64.SYS [2010-01-19 1742896]
R3 netr7364;RT73 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr7364.sys []
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx64.sys []
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []
R3 racmirror;racmirror; C:\Windows\system32\DRIVERS\racmirror.sys []
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NAVx64\1100000.088\SRTSP64.SYS []
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys []
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys []
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys []
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys []
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys []
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 USBCCID;Čtecí zařízení čipových karet USB; C:\Windows\system32\DRIVERS\usbccid.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-26 132424]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 NAV;Norton AntiVirus; C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe [2009-08-24 126392]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 PCNetSoftware RAC Server;PCNetSoftware RAC Server; C:\Program Files (x86)\PCNetSoftware\RAC Server\RACs.exe [2008-12-18 3601680]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 TeamViewer4;TeamViewer 4; C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe [2009-08-11 185640]
R2 TeamViewer5;TeamViewer 5; C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-01-12 185640]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-05 654848]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 iPod Service;iPod Service; C:\Program Files (x86)\iPod\bin\iPodService.exe [2009-04-02 656168]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S3 Adobe Version Cue CS3;Adobe Version Cue CS3; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-04-27 153792]
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-03-30 89920]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-14 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-19 19968]

-----------------EOF-----------------

OK, ještě sem pošlete log z ComboFix.

Stáhněte ComboFix na plochu.
▪ Před použitím ComboFixu je doporučeno vypnout všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary. Mohou zasahovat do činnosti ComboFixu, což může způsobit, že nebude fungovat korektně.
▪ Po spuštění potvrďte podmínky užití.
▪ Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujících se oken.
▪ Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem.
▪ ComboFix je třeba spustit pod účtem s právy administrátora.

ComboFix nejede, protože tam jsou 64bitový Visty. Existuje nějaká alternativa?

Moje chyba

▪ Stáhněte si OTL ▪ Program spusťte, klikněte na Run Scan
▪ Po skončení skenu sem vložte obsah logů z OTL.Txt a Extras.txt

díky. níže zasílám logy:

OTL.txt:
OTL logfile created on: 22.1.2010 10:59:20 - Run 1
OTL by OldTimer - Version 3.1.25.4 Folder = C:\Users\Jirka\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18865)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 48,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 149,05 Gb Total Space | 75,50 Gb Free Space | 50,65% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JIRKA-PC
Current User Name: Jirka
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.01.22 10:58:00 | 00,547,840 | ---- | M] (OldTimer Tools) -- C:\Users\Jirka\Downloads\OTL.exe
PRC - [2010.01.19 16:12:41 | 00,136,176 | ---- | M] (Google Inc.) -- C:\Users\Jirka\AppData\Local\Google\Update\1.2.183.13\GoogleCrashHandler.exe
PRC - [2010.01.12 16:21:50 | 04,994,856 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
PRC - [2010.01.12 15:57:44 | 00,185,640 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
PRC - [2010.01.11 10:58:32 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009.12.02 19:28:44 | 15,464,960 | ---- | M] (D-SOFT, s.r.o.) -- \\Jirka-PC\MyNEXT-TFC\CzrSkl.exe
PRC - [2009.11.24 10:38:18 | 15,464,448 | ---- | M] (D-SOFT, s.r.o.) -- \\Jirka-PC\MyNEXT-SANIWA\CzrSkl.exe
PRC - [2009.10.11 04:17:36 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe
PRC - [2009.08.24 23:49:41 | 00,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe
PRC - [2009.08.11 15:01:16 | 00,185,640 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe
PRC - [2009.05.14 14:56:39 | 00,039,408 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009.04.11 07:27:28 | 00,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\conime.exe
PRC - [2009.04.02 15:11:02 | 00,342,312 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
PRC - [2009.04.02 15:10:56 | 00,656,168 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\iPod\bin\iPodService.exe
PRC - [2009.03.26 14:31:20 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009.01.05 18:11:23 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2008.12.18 12:02:01 | 03,601,680 | ---- | M] (Miloslav Novotny N+P) -- C:\Program Files (x86)\PCNetSoftware\RAC Server\RACs.exe
PRC - [2008.12.12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
PRC - [2008.04.04 12:23:32 | 38,193,398 | ---- | M] (WinShop software s.r.o.) -- C:\Programy\Saniwa\sklad.exe
PRC - [2007.01.02 21:40:10 | 00,210,520 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
PRC - [2006.12.10 21:52:38 | 00,049,152 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
PRC - [2006.10.26 20:24:54 | 00,098,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
PRC - [2006.10.23 00:24:00 | 00,620,152 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe


========== Modules (SafeList) ==========

MOD - [2010.01.22 10:58:00 | 00,547,840 | ---- | M] (OldTimer Tools) -- C:\Users\Jirka\Downloads\OTL.exe
MOD - [2009.04.11 07:28:23 | 02,226,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\networkexplorer.dll
MOD - [2009.04.11 07:28:18 | 00,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009.04.11 07:28:18 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\davclnt.dll
MOD - [2009.04.11 07:28:18 | 00,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll
MOD - [2008.01.19 08:35:58 | 00,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntlanman.dll
MOD - [2006.11.02 10:46:04 | 00,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\drprov.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009.09.25 02:26:26 | 01,142,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:64bit: - [2008.01.19 09:06:50 | 00,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2010.01.12 15:57:44 | 00,185,640 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2009.08.24 23:49:41 | 00,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe -- (NAV)
SRV - [2009.08.24 12:36:45 | 00,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2009.08.11 15:01:16 | 00,185,640 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe -- (TeamViewer4)
SRV - [2009.05.14 14:56:38 | 00,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009.04.02 15:10:56 | 00,656,168 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files (x86)\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009.03.30 05:39:54 | 00,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2009.03.26 14:31:20 | 00,132,424 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009.01.05 18:11:23 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.12.18 12:02:01 | 03,601,680 | ---- | M] (Miloslav Novotny N+P) [Auto | Running] -- C:\Program Files (x86)\PCNetSoftware\RAC Server\RACs.exe -- (PCNetSoftware RAC Server)
SRV - [2008.12.12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2008.01.19 09:03:51 | 00,211,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007.04.27 14:32:16 | 00,153,792 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe -- (Adobe Version Cue CS3)
SRV - [2007.03.13 02:23:18 | 00,225,280 | ---- | M] (Hewlett-Packard Co.) [On_Demand | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08)
SRV - [2007.03.13 02:23:18 | 00,131,072 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc)
SRV - [2006.12.10 22:41:14 | 00,843,264 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2006.11.02 14:34:14 | 00,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC)
SRV - [2006.11.02 12:19:10 | 00,428,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2006.11.02 07:35:15 | 00,060,994 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2006.11.02 07:35:15 | 00,055,846 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vss.mof -- (VSS)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.01.19 15:52:46 | 00,173,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2010.01.08 14:26:41 | 00,033,344 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\hamachi.sys -- (hamachi)
DRV:64bit: - [2009.10.01 01:51:42 | 00,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009.08.30 01:17:21 | 00,450,608 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SYMTDIV.SYS -- (SYMTDIv)
DRV:64bit: - [2009.08.30 01:17:20 | 00,217,136 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SYMEFA64.SYS -- (SymEFA)
DRV:64bit: - [2009.08.30 01:17:18 | 00,433,200 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SYMDS64.SYS -- (SymDS)
DRV:64bit: - [2009.08.30 01:16:50 | 00,146,992 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\Ironx64.SYS -- (SymIRON)
DRV:64bit: - [2009.08.30 01:16:41 | 00,504,880 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SRTSP64.SYS -- (SRTSP)
DRV:64bit: - [2009.08.30 01:16:41 | 00,032,304 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SRTSPX64.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2009.08.24 23:50:33 | 00,615,040 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\ccHPx64.sys -- (ccHP)
DRV:64bit: - [2009.04.11 06:43:06 | 00,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2009.04.11 06:34:05 | 00,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usbccid.sys -- (USBCCID)
DRV:64bit: - [2009.03.26 14:23:46 | 00,044,544 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2009.03.19 15:34:18 | 00,029,544 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008.07.08 11:01:21 | 00,035,088 | ---- | M] (Miloslav Novotny N+P) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\racmirror.sys -- (racmirror)
DRV:64bit: - [2008.04.04 08:02:16 | 00,116,096 | ---- | M] (Gemalto) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\GemCCID.sys -- (GemCCID)
DRV:64bit: - [2008.01.19 08:09:56 | 00,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\serscan.sys -- (StillCam)
DRV:64bit: - [2007.05.11 15:40:58 | 00,412,672 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\netr7364.sys -- (netr7364)
DRV:64bit: - [2006.11.02 06:28:10 | 00,273,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV - [2010.01.19 15:56:21 | 01,742,896 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100121.039\EX64.SYS -- (NAVEX15)
DRV - [2010.01.19 15:56:21 | 00,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2010.01.19 15:56:21 | 00,132,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010.01.19 15:56:21 | 00,116,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20100121.039\ENG64.SYS -- (NAVENG)
DRV - [2009.12.05 05:54:04 | 00,668,720 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\BASHDefs\20091205.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009.10.28 23:37:21 | 00,466,992 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20100119.001\IDSviA64.sys -- (IDSVia64)
DRV - [2008.12.18 12:02:02 | 00,008,208 | ---- | M] (Miloslav Novotný N+P) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\PCNetSoftware\RAC Server\RACDriver.sys -- (RACDriver)
DRV - [2008.05.09 14:53:14 | 00,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2006.09.18 22:36:40 | 00,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {8b86149f-01fb-4842-9dd8-4d7eb02fd055}:0.20.0
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\IPSFFPlgn\ [2010.01.19 15:53:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.01.11 10:58:34 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.01.11 10:58:34 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009.12.13 19:22:49 | 00,000,000 | ---D | M] -- C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions
[2010.01.21 14:30:23 | 00,000,000 | ---D | M] -- C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\k1mqig02.default\extensions
[2009.12.13 19:23:49 | 00,000,000 | ---D | M] (All-in-One Gestures) -- C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\k1mqig02.default\extensions\{8b86149f-01fb-4842-9dd8-4d7eb02fd055}
[2010.01.18 10:08:10 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2009.11.03 02:45:38 | 00,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.11.03 02:45:38 | 00,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.11.03 02:45:38 | 00,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.11.03 02:45:38 | 00,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.11.03 02:45:38 | 00,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2006.09.18 22:37:24 | 00,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg64.dll (Google Inc.)
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\17.0.0.136\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0EZEHM] C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [gemstrmw] C:\Windows\SysWow64\gemstrmw.exe (Gemplus)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [Google Update] C:\Users\Jirka\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - Startup: C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést cíl vazby do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést výběr do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést výběr do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést vybrané vazby do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Převést vybrané vazby do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Přidat do stávajícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: WikiKomentáře Google... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Přidat do stávajícího PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: WikiKomentáře Google... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: csob.cz ([ib24] https in Trusted sites)
O15 - HKCU\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/f ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Jirka\Pictures\Abaja-Assen.jpg
O24 - Desktop BackupWallPaper: C:\Users\Jirka\Pictures\Abaja-Assen.jpg
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
64bit: O35 - comfile [open] -- "%1" %* File not found
64bit: O35 - exefile [open] -- "%1" %* File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.01.22 10:34:24 | 00,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010.01.21 23:06:28 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2010.01.21 23:06:27 | 00,000,000 | ---D | C] -- C:\rsit
[2010.01.21 22:24:17 | 00,504,880 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtsp64.sys
[2010.01.21 22:24:17 | 00,451,120 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symtdiv.sys
[2010.01.21 22:24:17 | 00,433,200 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symds64.sys
[2010.01.21 22:24:17 | 00,221,232 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symefa64.sys
[2010.01.21 22:24:17 | 00,032,304 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtspx64.sys
[2010.01.21 22:24:16 | 00,615,040 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\cchpx64.sys
[2010.01.21 22:24:16 | 00,148,528 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\ironx64.sys
[2010.01.21 22:24:07 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F
[2010.01.21 13:49:26 | 00,818,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2010.01.21 13:49:26 | 00,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2010.01.19 16:32:43 | 00,000,000 | ---D | C] -- C:\Users\Jirka\Documents\Downloads
[2010.01.19 16:31:22 | 00,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010.01.19 16:30:09 | 00,541,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvuninst.exe
[2010.01.19 16:25:40 | 00,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2010.01.19 16:25:40 | 00,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2010.01.19 16:25:39 | 00,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll
[2010.01.19 16:25:39 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsproxy.dll
[2010.01.19 16:25:39 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsproxy.dll
[2010.01.19 16:25:38 | 00,700,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.01.19 16:25:38 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.01.19 16:25:38 | 00,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.01.19 16:25:38 | 00,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.01.19 16:25:37 | 00,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.01.19 16:25:37 | 00,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010.01.19 16:25:37 | 00,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2010.01.19 16:25:37 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll
[2010.01.19 16:25:36 | 01,147,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll
[2010.01.19 16:25:36 | 00,916,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll
[2010.01.19 16:25:36 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2010.01.19 16:25:36 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2010.01.19 16:25:36 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.01.19 16:25:35 | 00,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll
[2010.01.19 16:25:35 | 00,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2010.01.19 16:25:35 | 00,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2010.01.19 16:25:34 | 00,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll
[2010.01.19 16:25:34 | 00,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2010.01.19 16:25:34 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.01.19 16:25:33 | 02,334,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iertutil.dll
[2010.01.19 16:25:32 | 01,538,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2010.01.19 16:25:32 | 01,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2010.01.19 16:25:26 | 00,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2010.01.19 16:25:26 | 00,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2010.01.19 16:25:26 | 00,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2010.01.19 16:25:26 | 00,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2010.01.19 16:21:33 | 00,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advpack.dll
[2010.01.19 16:21:33 | 00,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2010.01.19 16:21:33 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2010.01.19 16:21:33 | 00,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\corpol.dll
[2010.01.19 16:21:32 | 00,157,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2010.01.19 16:21:32 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\advpack.dll
[2010.01.19 16:21:32 | 00,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2010.01.19 16:21:32 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2010.01.19 16:21:31 | 00,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2010.01.19 16:21:31 | 00,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2010.01.19 16:21:31 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2010.01.19 16:21:31 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\corpol.dll
[2010.01.19 16:21:30 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2010.01.19 16:21:30 | 00,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2010.01.19 16:21:29 | 00,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msls31.dll
[2010.01.19 16:21:29 | 00,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2010.01.19 16:21:29 | 00,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2010.01.19 16:21:29 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2010.01.19 16:21:29 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.01.19 16:21:28 | 00,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2010.01.19 16:21:28 | 00,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2010.01.19 16:21:28 | 00,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2010.01.19 16:21:28 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2010.01.19 16:21:26 | 00,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2010.01.19 16:21:26 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtmsft.dll
[2010.01.19 16:21:26 | 00,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2010.01.19 16:21:26 | 00,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxtrans.dll
[2010.01.19 16:21:26 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2010.01.19 16:21:25 | 01,062,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstime.dll
[2010.01.19 16:21:25 | 00,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstime.dll
[2010.01.19 16:21:25 | 00,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.01.19 16:21:24 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2010.01.19 16:21:24 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.01.19 16:21:24 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.01.19 16:21:23 | 00,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2010.01.19 16:21:23 | 00,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2010.01.19 16:21:23 | 00,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2010.01.19 16:21:23 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2010.01.19 16:21:23 | 00,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2010.01.19 16:21:23 | 00,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2010.01.19 16:21:23 | 00,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PDMSetup.exe
[2010.01.19 16:21:23 | 00,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2010.01.19 16:21:23 | 00,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2010.01.19 16:21:22 | 00,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbscript.dll
[2010.01.19 16:21:22 | 00,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinFXDocObj.exe
[2010.01.19 16:21:22 | 00,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinFXDocObj.exe
[2010.01.19 16:21:22 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2010.01.19 16:21:22 | 00,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetDepNx.exe
[2010.01.19 16:21:21 | 00,612,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2010.01.19 16:21:21 | 00,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2010.01.19 16:21:21 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2010.01.19 16:21:21 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2010.01.19 16:21:21 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2010.01.19 16:21:20 | 00,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010.01.19 16:21:19 | 00,479,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.01.19 16:21:19 | 00,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2010.01.19 16:21:18 | 03,698,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2010.01.19 16:21:18 | 03,698,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2010.01.19 16:21:18 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2010.01.19 16:21:18 | 00,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PDMSetup.exe
[2010.01.19 16:21:18 | 00,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2010.01.19 16:21:18 | 00,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2010.01.19 16:21:18 | 00,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetDepNx.exe
[2010.01.19 15:53:24 | 00,000,000 | ---D | C] -- C:\Users\Jirka\AppData\Local\Tific
[2010.01.19 15:53:17 | 00,000,000 | ---D | C] -- C:\Users\Jirka\AppData\Roaming\Tific
[2010.01.19 15:53:16 | 00,000,000 | ---D | C] -- C:\Users\Jirka\AppData\Local\Symantec
[2010.01.19 15:52:46 | 00,173,104 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010.01.19 15:52:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2010.01.19 15:52:46 | 00,000,000 | ---D | C] -- C:\Program Files\Symantec
[2010.01.19 15:52:38 | 00,450,608 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\symtdiv.sys
[2010.01.19 15:52:38 | 00,433,200 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymDS64.sys
[2010.01.19 15:52:38 | 00,217,136 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymEFA64.sys
[2010.01.19 15:52:37 | 00,615,040 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\ccHPx64.sys
[2010.01.19 15:52:37 | 00,504,880 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtsp64.sys
[2010.01.19 15:52:37 | 00,146,992 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\Ironx64.sys
[2010.01.19 15:52:37 | 00,032,304 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtspx64.sys
[2010.01.19 15:52:30 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NAVx64
[2010.01.19 15:52:30 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NAVx64\1100000.088
[2010.01.19 15:52:29 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Norton AntiVirus
[2010.01.19 15:52:28 | 00,000,000 | ---D | C] -- C:\ProgramData\Norton
[2010.01.19 15:52:22 | 00,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2010.01.19 15:52:22 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2010.01.18 16:48:18 | 00,000,000 | ---D | C] -- C:\Windows\Minidump
[2010.01.14 18:45:51 | 00,000,000 | ---D | C] -- C:\Users\Jirka\Desktop\x
[2010.01.13 10:04:46 | 00,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010.01.13 10:04:45 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010.01.13 10:04:44 | 00,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2010.01.13 10:04:44 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2010.01.10 13:05:09 | 00,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2010.01.08 14:26:41 | 00,033,344 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
[2010.01.07 19:36:52 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010.01.07 19:36:52 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010.01.07 19:36:52 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.01.22 10:58:40 | 03,145,728 | -HS- | M] () -- C:\Users\Jirka\NTUSER.DAT
[2010.01.22 10:17:02 | 00,000,962 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001UA.job
[2010.01.22 09:38:07 | 00,034,895 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010.01.22 09:38:07 | 00,034,895 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010.01.22 09:31:58 | 01,402,454 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.01.22 09:31:58 | 00,601,854 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.01.22 09:31:58 | 00,589,884 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.01.22 09:31:58 | 00,115,998 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.01.22 09:31:58 | 00,101,896 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.01.22 09:30:05 | 02,473,396 | ---- | M] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\Cat.DB
[2010.01.22 09:25:25 | 00,003,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.01.22 09:25:25 | 00,003,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.01.22 09:24:56 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.01.22 09:24:51 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.01.21 23:20:08 | 00,524,288 | -HS- | M] () -- C:\Users\Jirka\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms
[2010.01.21 23:20:08 | 00,065,536 | -HS- | M] () -- C:\Users\Jirka\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf
[2010.01.21 23:19:30 | 02,731,694 | -H-- | M] () -- C:\Users\Jirka\AppData\Local\IconCache.db
[2010.01.21 16:17:00 | 00,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001Core.job
[2010.01.21 14:29:01 | 00,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{E5CFA789-2411-4BC6-A3BB-EFDBE9383398}.job
[2010.01.20 09:15:12 | 00,000,270 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010.01.19 18:05:31 | 00,000,997 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk
[2010.01.19 16:18:18 | 00,002,042 | ---- | M] () -- C:\Users\Jirka\Desktop\Google Chrome.lnk
[2010.01.19 15:52:46 | 00,173,104 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010.01.19 15:52:46 | 00,007,440 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010.01.19 15:52:46 | 00,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010.01.19 15:52:41 | 00,002,202 | ---- | M] () -- C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2010.01.18 16:58:20 | 00,002,497 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
[2010.01.18 16:48:10 | 29,985,9462 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010.01.18 16:34:21 | 00,000,732 | ---- | M] () -- C:\Users\Jirka\AppData\Local\d3d9caps64.dat
[2010.01.15 20:03:35 | 02,042,880 | ---- | M] () -- C:\Users\Jirka\Desktop\PO petrosovi stav_sklad_15.01.2010.xls
[2010.01.15 19:08:48 | 00,052,224 | ---- | M] () -- C:\Users\Jirka\Desktop\statistika_fakturace.xls
[2010.01.15 16:35:58 | 02,011,648 | ---- | M] () -- C:\Users\Jirka\Desktop\stav_sklad_15.01.2010.xls
[2010.01.12 15:28:50 | 00,012,740 | ---- | M] () -- C:\Users\Jirka\Documents\úhrady PF.xlsx
[2010.01.08 17:41:28 | 00,169,984 | ---- | M] () -- C:\Users\Jirka\Documents\Seznam_dobirkovych_baliku - saniwa.xls
[2010.01.08 16:10:13 | 00,000,650 | ---- | M] () -- C:\Users\Jirka\Desktop\Saniwa.lnk
[2010.01.08 15:41:35 | 00,169,984 | ---- | M] () -- C:\Users\Jirka\Documents\Seznam_dobirkovych_baliku.xls
[2010.01.08 14:26:41 | 00,033,344 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.01.21 22:24:17 | 00,007,787 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symnetv64.cat
[2010.01.21 22:24:17 | 00,007,414 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtspx64.cat
[2010.01.21 22:24:17 | 00,007,412 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symefa64.cat
[2010.01.21 22:24:17 | 00,007,410 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtsp64.cat
[2010.01.21 22:24:17 | 00,007,406 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symds64.cat
[2010.01.21 22:24:17 | 00,007,368 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symnet64.cat
[2010.01.21 22:24:17 | 00,003,374 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symefa.inf
[2010.01.21 22:24:17 | 00,002,793 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symds.inf
[2010.01.21 22:24:17 | 00,001,473 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symnetv.inf
[2010.01.21 22:24:17 | 00,001,445 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\symnet.inf
[2010.01.21 22:24:17 | 00,001,437 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtsp64.inf
[2010.01.21 22:24:17 | 00,001,421 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\srtspx64.inf
[2010.01.21 22:24:16 | 00,007,402 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\iron.cat
[2010.01.21 22:24:16 | 00,007,345 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\cchpx64.cat
[2010.01.21 22:24:16 | 00,001,840 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\cchpx64.inf
[2010.01.21 22:24:16 | 00,000,772 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\iron.inf
[2010.01.21 22:24:07 | 00,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1105000.07F\isolate.ini
[2010.01.19 18:05:31 | 00,000,997 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk
[2010.01.19 16:31:55 | 00,034,895 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010.01.19 16:31:32 | 00,034,895 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010.01.19 16:25:35 | 00,057,667 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2010.01.19 16:25:35 | 00,057,667 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2010.01.19 16:19:15 | 00,003,636 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin
[2010.01.19 16:18:18 | 00,002,042 | ---- | C] () -- C:\Users\Jirka\Desktop\Google Chrome.lnk
[2010.01.19 16:12:55 | 00,000,962 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001UA.job
[2010.01.19 16:12:49 | 00,000,910 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-590053697-3592207504-1356368495-1001Core.job
[2010.01.19 15:52:49 | 02,473,396 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\Cat.DB
[2010.01.19 15:52:46 | 00,007,440 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010.01.19 15:52:46 | 00,000,854 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010.01.19 15:52:41 | 00,002,202 | ---- | C] () -- C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2010.01.19 15:52:30 | 00,007,774 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\symnetv64.cat
[2010.01.19 15:52:30 | 00,007,410 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtsp64.cat
[2010.01.19 15:52:30 | 00,007,406 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymDS64.cat
[2010.01.19 15:52:30 | 00,007,401 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtspx64.cat
[2010.01.19 15:52:30 | 00,007,399 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymEFA64.cat
[2010.01.19 15:52:30 | 00,007,388 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\iron.cat
[2010.01.19 15:52:30 | 00,007,368 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\symnet64.cat
[2010.01.19 15:52:30 | 00,007,345 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\cchpx64.cat
[2010.01.19 15:52:30 | 00,003,375 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymEFA.inf
[2010.01.19 15:52:30 | 00,002,793 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymDS.inf
[2010.01.19 15:52:30 | 00,001,840 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\ccHPx64.inf
[2010.01.19 15:52:30 | 00,001,475 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymNetV.inf
[2010.01.19 15:52:30 | 00,001,447 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\SymNet.inf
[2010.01.19 15:52:30 | 00,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtsp64.inf
[2010.01.19 15:52:30 | 00,001,422 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\srtspx64.inf
[2010.01.19 15:52:30 | 00,000,773 | R--- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\Iron.inf
[2010.01.19 15:52:30 | 00,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NAVx64\1100000.088\isolate.ini
[2010.01.18 16:48:10 | 29,985,9462 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010.01.18 16:34:21 | 00,000,732 | ---- | C] () -- C:\Users\Jirka\AppData\Local\d3d9caps64.dat
[2010.01.15 19:08:48 | 00,052,224 | ---- | C] () -- C:\Users\Jirka\Desktop\statistika_fakturace.xls
[2010.01.15 16:48:03 | 02,042,880 | ---- | C] () -- C:\Users\Jirka\Desktop\PO petrosovi stav_sklad_15.01.2010.xls
[2010.01.15 16:35:58 | 02,011,648 | ---- | C] () -- C:\Users\Jirka\Desktop\stav_sklad_15.01.2010.xls
[2010.01.08 16:10:13 | 00,000,650 | ---- | C] () -- C:\Users\Jirka\Desktop\Saniwa.lnk
[2010.01.04 17:06:14 | 00,012,740 | ---- | C] () -- C:\Users\Jirka\Documents\úhrady PF.xlsx
[2009.12.23 12:41:25 | 00,169,984 | ---- | C] () -- C:\Users\Jirka\Documents\Seznam_dobirkovych_baliku.xls
[2009.12.23 12:41:25 | 00,169,984 | ---- | C] () -- C:\Users\Jirka\Documents\Seznam_dobirkovych_baliku - saniwa.xls
[2009.09.17 09:12:48 | 00,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009.09.17 09:11:46 | 00,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.08.18 10:25:35 | 00,010,577 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2009.02.05 09:13:46 | 00,000,270 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.01.05 18:18:47 | 02,463,976 | ---- | C] () -- C:\Windows\SysWow64\NPSWF32.dll
[2008.10.23 07:51:06 | 01,420,976 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2008.08.20 15:36:34 | 00,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
[2008.08.12 11:33:11 | 00,006,656 | ---- | C] () -- C:\Users\Jirka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.08.04 11:54:22 | 00,059,504 | ---- | C] () -- C:\Windows\SysWow64\zlib.dll
[2008.06.18 09:02:13 | 00,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2008.05.23 17:06:07 | 00,000,540 | ---- | C] () -- C:\Windows\hpntwksetup.ini
[2008.05.16 16:14:07 | 00,000,093 | ---- | C] () -- C:\Windows\winin.ini
[2007.03.26 09:45:18 | 00,071,208 | ---- | C] () -- C:\Windows\SysWow64\PhysXLoader.dll
[2007.03.20 13:20:16 | 00,000,021 | ---- | C] () -- C:\Windows\mgmsystem.dll
[2007.02.20 13:59:08 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2007.02.20 13:59:06 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2007.02.20 13:59:04 | 00,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.05.23 09:47:04 | 00,131,960 | ---- | C] () -- C:\Windows\SysWow64\ICAEnroll.dll
[2006.04.24 05:21:26 | 00,749,568 | ---- | C] () -- C:\Windows\SysWow64\cmfrtcsp.dll
[2004.06.24 09:49:36 | 00,573,440 | ---- | C] () -- C:\Windows\SysWow64\comfp11.dll
< End of report >

Extras.txt:

OTL Extras logfile created on: 22.1.2010 10:59:20 - Run 1
OTL by OldTimer - Version 3.1.25.4 Folder = C:\Users\Jirka\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18865)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 48,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 149,05 Gb Total Space | 75,50 Gb Free Space | 50,65% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JIRKA-PC
Current User Name: Jirka
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 6D D7 75 51 ED DC C8 01 [binary data]
"VistaSp2" = FF 49 74 FA 70 7E CA 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-590053697-3592207504-1356368495-1001]
"EnableNotifications" = 0
"EnableNotificationsRef" = 2

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe" = C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller -- (Aloaha Limited)
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe" = C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter -- (Wrocklage Intermedia GmbH)
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe" = C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller -- (Aloaha Limited)
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe" = C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter -- (Wrocklage Intermedia GmbH)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe" = C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter -- (Wrocklage Intermedia GmbH)
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe" = C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller -- (Aloaha Limited)
"C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe" = C:\Program Files (x86)\Wrocklage\AloahaFileCrypter.exe:*:Enabled:Aloaha File Crypter -- (Wrocklage Intermedia GmbH)
"C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe" = C:\Program Files (x86)\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller -- (Aloaha Limited)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1C129FE4-1D89-4FED-9BE6-BBCC4EE96A5A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{3C0CEE03-C6B7-4C4C-A711-2E31B2F43BDB}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{471C05F6-2F04-4368-AAC1-DB6F06390D5B}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{5CBE16FA-FDA9-4BBE-B961-A7E205A372F3}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6C9BD9BD-2512-4BB1-8C1A-BA6BE912B4F6}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6D037178-F915-4E1B-A34B-AA600E17F1CD}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{6D859E7F-C8FB-4C33-9CF2-8C6BF1459876}" = lport=50900 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{8F9136A3-590B-4083-8A1F-52B73726F1A3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9657C597-81F9-47DB-BA9B-56DDA31F9348}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{981C916A-3B24-4915-9FC3-5295009BBF53}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9C7B636A-A8AE-42B4-84DD-E6E41E300961}" = lport=50901 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{DC3FEB03-E748-4123-B1A6-0067303DC8A2}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{DC71EAB0-1EA2-4070-AA52-6421C44BE579}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{DD17F418-AE2D-465F-9E8C-EEBDF7168F7A}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E0CDDAFB-5793-41A8-B978-43813AF320F9}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00472EBF-4C8F-427E-A026-EB008B882998}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0088B387-3796-420E-9992-BC12B22ABD79}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{01CBD72E-8BEE-4F90-A7BA-FB5AE7E82916}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{046F4D14-A1A2-40B8-824E-68049ACCDE05}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{091CC0B8-14ED-4DAC-9B9C-013E52D85206}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{13E40312-4AAA-4FFF-8DA6-C0DE43FB9BE5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1525787D-2E32-43AA-8CD4-A5B033D8EAC2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{163A92FF-F702-47C7-9802-CBE355DD11A1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1AFC3AD4-3EDE-4A95-9389-3B4A656518FA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1E9F3FEF-BE02-41B0-80E2-CAB481E1BAEE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1F687620-ED44-4C8C-A289-742D51F13D86}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1FE8895F-316B-49F9-A6F5-A9FE970A2362}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe |
"{20E8660D-F2BA-46EF-A3E3-FF9A7D8C2A18}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{214096CA-8A8D-4A12-A871-AE3A5FDB850B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2A29A429-6CD0-415D-B653-FF83A8E77B6F}" = protocol=6 | dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe |
"{2A84C1DF-17E8-47FB-8C27-34F7B4647822}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{369DAC85-1F46-49F9-AFED-13B3E20415A9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3AFE4554-ABC5-427C-A8EC-FE0CEF46DEE9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3D323785-240C-47DC-B18F-FBE4DD00C690}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{40AADF09-E5FA-4591-BADF-A6C8125B290B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{432D0F43-07C5-483A-9441-D41564EB66A2}" = protocol=17 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{437EF9DA-8FDD-49C5-BA81-72480D83DA9E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{444C1775-0328-42D2-A9E7-AA4984124789}" = protocol=17 | dir=in | app=c:\program files (x86)\pcnetsoftware\rac server\racs.exe |
"{44E80BE9-33E1-4FE5-9FA5-D4F5451F9121}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{47975BB0-EA04-4859-9325-B8AD804D9BED}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{49078166-93F5-4197-8987-EBD4613060CF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4A3163BB-3003-4953-83C2-9A1456341CB9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4B08C25B-972F-45CC-BF70-B1E88AB95833}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4BE02DB8-04A5-4101-A76F-9653BB5D66E5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4D63BDC5-6F2F-48EB-8110-94781B15EDAA}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version4\teamviewer.exe |
"{4E06808B-FA49-4F93-8B9E-56FC5C4BA3B9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{55D56021-4B43-45A6-BA34-69480E6F7543}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{55EEF02B-1828-4A62-A1FE-85977BA48AD2}" = protocol=17 | dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe |
"{567955E5-6579-4B92-BF14-4F7B4B6916A2}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{56D1AF8E-6B68-4B12-B607-6CCB0C8D1E9F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{56F3FDCA-A980-4776-82BE-9CE87B6004F9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5AD9A91A-E11D-4387-8696-08BE31B0E25C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5B024C9D-5DEA-4A97-8218-92D55E222265}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{5E285EC6-4493-4FA1-802B-E3FAA5ECC0A5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5F30C93D-B4AA-4EAD-A062-D712EEF71555}" = protocol=6 | dir=in | app=c:\program files (x86)\sierra entertainment\empire earth iii\ee3.exe |
"{623696B1-54B1-42C3-9008-8B172980522B}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{625B04C3-CBA2-4320-818F-528275FED7BA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{654081FF-AB0B-4786-98A1-2970247B0E83}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6A9CC814-11C5-48E4-ADE1-1F6477589557}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{6B7AD4A6-7D5C-4884-895F-258F572CCD52}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{706BB765-C9D8-499D-B66B-DF30DD7550D1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{739EBAD0-75EB-40EE-B297-2F49BC6B57CC}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{79111733-BCB6-479C-8C65-80A819F916C7}" = protocol=17 | dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe |
"{7930EFC5-C330-439F-AE53-5AF7555E5377}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7D8AA822-1DF3-445B-85D0-3ED923FC95B9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7EC20544-A287-4A16-8E21-4852ADDDDF38}" = protocol=17 | dir=in | app=c:\program files (x86)\sierra entertainment\empire earth iii\ee3.exe |
"{805E4BC6-0158-43D1-B60F-B31B9C50A8E7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{808386D5-DE13-40BF-BB3B-090419F81258}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8100766B-2DEF-49CA-ACB8-71202D368F33}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{84CF9406-3E60-421E-9C05-0AF178AF415F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{84FF06CF-ECE1-420B-865F-B513C3D02F59}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{874AE4C4-2A22-4FB6-9727-0F884F428A2C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8AF6616C-EC15-4628-A6EC-1B345EB49F00}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8EF8C3EF-FA01-4C30-BC56-F6FF709589B9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8EFC362F-1734-44F1-9921-3731B7BCD72D}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version4\teamviewer.exe |
"{8F0DBA99-2A1C-4EBC-89A3-945CAA12B95B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9090D7E2-C0DA-493A-B2D8-20AAA3B3BA71}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{92590F02-3B7A-46CF-ADE8-5ED5DC2E6AD0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{926AADA8-0B4C-46EE-A146-E215B27419B7}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{94037093-1064-4BCA-AC23-08C3CE73B24F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{943E381B-FB4E-4E8F-9B2A-B1193DFE0EE4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{968904FC-6E7C-4F1F-A9C3-9AD444E9265F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9887C942-E33B-4510-B173-710FD8207947}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9C0EF1BA-2B40-45A1-AEB5-87C87152CF00}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9FC94F54-E75D-49B7-B17E-EDCAA5C6ED48}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A05EC234-BDA9-4593-8066-F0D4ABFE7693}" = protocol=6 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{A09F7BF3-F563-47FA-B458-EEB5F1AC973E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A1A30B47-0C70-4F65-BADE-3500CF8048D6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A89D9DD6-A5B0-46AA-B02F-53B434D23428}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AAFDF708-82C0-4954-ACEE-E3E24E6D217C}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{ABAF5864-1268-4FEA-B16F-9CB81D48A4A4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{ABE42131-E4C2-42F8-A0BF-1EE532988DE1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{ADA01EF0-6DA9-494D-A968-7F2B412ABC0F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AF337E42-1286-489D-A109-C54928BCB4B6}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B4382C40-7D0F-4A74-8ECA-D97E64DA4B73}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B7002BFC-217E-4819-AE46-F5D4AA8CDA63}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B7B40C7F-77C1-420C-B942-43AE5B69897E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BD41E473-DBE3-46E0-85CD-D1F67A1FAC5D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BDBA3DA0-3EED-42C4-BEC4-8461D438B401}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BF1BA6E1-DAFC-4774-AA8F-3E16106B5739}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C08DFBDA-70BF-491A-AD8B-52CE8A1B4E37}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C79070A6-013F-46F5-9EAC-86649CD02635}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe |
"{CF23B148-C06F-4BDC-8B20-3714E0005986}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D0B60264-6D9D-49E8-8897-7581BD56C8EA}" = protocol=6 | dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe |
"{D535F6D6-07AC-46A4-9B02-B7967D354E59}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{D6A2CBAC-2316-40FC-90EF-61D4691199F4}" = protocol=6 | dir=in | app=c:\program files (x86)\pcnetsoftware\rac server\racs.exe |
"{D7DB28E7-6A67-477D-8756-4271420ACFE1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DC54C792-F631-4083-A27C-09859D50F8B5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E2E21FE9-401C-48ED-BDBB-3D0D38CE3CAE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E2E6EC83-AFCB-417D-8BA0-B4C6F098291A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E4F8BDD0-08E0-4C80-84C0-472C03932404}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E63FD93C-ECEE-47D7-AF4A-CCC5C812586D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{ECA43481-93E8-49F0-B38E-59BB42A21ABA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F77C0CD9-EEB2-4592-B9F0-E305EEA926FD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F9B45366-237C-4E74-AAA9-9ED3FB2EED5E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FDEBFEFC-994C-4815-A5AD-FFA2CF7FCC16}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FE01222B-394F-4B27-B7A9-884B453620DF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{315601B8-5726-4FBF-B77F-3D3F868258E2}C:\program files (x86)\formoffice\formoffice.exe" = protocol=6 | dir=in | app=c:\program files (x86)\formoffice\formoffice.exe |
"TCP Query User{75ED436B-DB4F-436B-BEE8-819DF88017DB}C:\program files (x86)\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\program files (x86)\totalcmd\totalcmd.exe |
"TCP Query User{81EFA89B-F019-49A2-8EA2-5C4AD7F5487E}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"TCP Query User{8FF5B5A5-4FEE-408D-B734-3607FD984FD5}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"TCP Query User{B9ABC35C-0803-4828-A794-AB48FBBD2072}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"TCP Query User{E40A9D73-A25C-4F39-B49C-5E7325FAC4E6}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{F690F7E8-BDAE-42DC-BE8E-60464C0305A0}C:\program files (x86)\hamachi\hamachi.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hamachi\hamachi.exe |
"UDP Query User{343C048A-524A-43FB-9414-3430A5AEB30C}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"UDP Query User{64D29305-16B2-46B1-B800-A5D5F93EA3CF}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"UDP Query User{770428BE-08B7-4915-A35D-E4BC4F661852}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{7882B859-290B-4512-AF65-CC7401BBB0B7}C:\program files\wrocklage\aloahafilecrypter.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wrocklage\aloahafilecrypter.exe |
"UDP Query User{8AEC183E-8538-4FE7-817D-5773DF5A894E}C:\program files (x86)\hamachi\hamachi.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hamachi\hamachi.exe |
"UDP Query User{BA37254C-6672-415F-A30F-1E7C98F6D0B5}C:\program files (x86)\formoffice\formoffice.exe" = protocol=17 | dir=in | app=c:\program files (x86)\formoffice\formoffice.exe |
"UDP Query User{FF3AB08F-BC86-4D2D-9082-F26AAD77C42D}C:\program files (x86)\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\program files (x86)\totalcmd\totalcmd.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{17E02F38-FF2D-4c3d-83DF-ECE2A1D20A5E}" = AIO_CDB_ToolboxIni64
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{9B1EF559-C401-4DC2-A456-F0C464F1C7E7}" = NetDeviceManager64
"{9F560BEB-021F-43AC-825F-AA60442D8DE4}" = 64 Bit HP CIO Components Installer
"{AE303591-1BFC-48B3-881B-655298C4EDE0}" = iTunes
"{BA1035C7-14DE-4857-8285-4ACFC74172EC}" = Apple Mobile Device Support
"{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}" = Bonjour
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NVIDIA Drivers" = NVIDIA Drivers

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{06660B41-97D4-4ECE-92F3-11D0E58BD9A5}" = STORMWARE POHODA CZ Start
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}" = Adobe ExtendScript Toolkit 2
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 17
"{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}" = PDF Settings
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{39B00E05-32F6-4BC3-943E-EDEFD4CA3ACB}" = Adobe Version Cue CS3 Server
"{3F5F87DF-F0B7-4605-BB64-586B788C5CF2}" = Aloaha PDF Crypter
"{493D452C-D36F-4E29-BC5D-98F60CEA9454}" = STORMWARE POHODA CZ Start
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{5178C1BB-1EB1-4468-894B-7DE964DDCAA2}" = Adobe Photoshop CS3
"{53A23DF5-6027-4F93-96EB-460671F58CE8}_is1" = HomeEKO2
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{5F00DF7E-418B-4CD9-8EC5-781156BCC49E}" = Microsoft Money Shared Libraries
"{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}" = Adobe Color NA Extra Settings
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D25F86-239B-459E-91BE-340F88CECCBD}" = MZ Manager 2
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
"{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash
"{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3
"{6F215D53-6560-4E65-B268-3358508C6D6D}" = 2600Trb
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{739CE62B-2893-4D89-8BF8-9B4034633DB6}" = Adobe Setup
"{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax
"{7EDFCB74-81C0-4FB6-9FDF-1BC7CD098638}" = Adobe InDesign CS3
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{8305AF50-41E1-40C0-9ED4-A2BA469832CB}" = Mz Assistant by isvicare
"{85EBB283-65AF-4C53-9EBE-7C0A232762F7}" = AGEIA PhysX v7.03.21
"{87AE7C09-B0B4-4BAC-AADB-50A1EAD03768}" = Adobe Flash Video Encoder
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8A4B0C5D-035C-4643-B80F-AFF81534D117}" = 2600_Help
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91B323B5-A79C-4D23-BD6D-046C565F9BCF}" = MadOnion.com/3DMark2001 SE
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{AA959050-9500-4508-98E5-74E6A18BF062}" = 2700
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-1029-0000-7760-000000000003}" = Adobe Acrobat 8 Professional - Czech, Greek, Hungarian, Polish, Slovak
"{AC76BA86-7AD7-1029-7B44-A81200000003}" = Adobe Reader 8 - Czech
"{AE6BE2FE-5D3D-4FA0-98BC-57B7B78493F4}" = Adobe Flash CS3
"{B17E235C-7A3B-4482-B650-21FFDE1D452E}" = Empire Earth III
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}" = Adobe Setup
"{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3
"{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}" = Adobe Color EU Recommended Settings
"{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{C319C195-5B9B-4A60-884A-0D29DA25F0AC}" = APLS WinShop
"{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D6CD1A90-1421-4F19-AFD8-BE4E28A1D6D5}" = Adobe Illustrator CS3
"{D92B72E2-C854-4738-8ED6-4C3661CC17AE}" = Adobe Color JA Extra Settings
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{ED95B55C-4759-4242-85DE-EAD1DA7AB090}" = Adobe Dreamweaver CS3
"{F0703991-E476-4997-98C6-239E67FC9944}" = Adobe Creative Suite 3 Design Premium
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp
"602XMLFiller_CAB" = 602XML Filler rozšíření pro Internet Explorer
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Acrobat 8 Professional - Czech, Greek, Hungarian, Polish, Slovak" = Adobe Acrobat 8 Professional - Czech, Greek, Hungarian, Polish, Slovak
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_1e533f03b8b42b2b6a1aba5a0b9d358" = Přidat nebo odebrat Adobe Creative Suite 3 Design Premium
"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2
"ComfortChip_is1" = ComfortChip
"Envelope Studio CZ_is1" = Envelope Studio 1.0 CZ
"FLVPlayer" = FLV Player 1.3.3
"FormOffice NET - Client_is1" = FormOffice - zpráva a tisk databází
"Gemplus Smart Card Reader Tools" = Gemplus Smart Card Reader Tools
"HijackThis" = HijackThis 2.0.2
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Money2007b" = Microsoft Money Essentials
"Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7)
"MyNext_is1" = MyNext 2.2.2.4
"NAV" = Norton AntiVirus
"PC Štítky_is1" = PC Štítky
"PROHYBRIDR" = 2007 Microsoft Office system
"Remote Administrator Control Client_is1" = Remote Administrator Control Client 3.5.0
"Remote Administrator Control Server_is1" = Remote Administrator Control Server 3.3.1
"TeamViewer 4" = TeamViewer 4
"TeamViewer 5" = TeamViewer 5
"TicketCreator_is1" = TicketCreator 5.0.14
"Totalcmd" = Total Commander (Remove or Repair)
"Ucet5_is1" = Účetnictví verze 5
"WinRAR archiver" = WinRAR

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 15.1.2010 6:14:39 | Computer Name = Jirka-PC | Source = System Restore | ID = 8193
Description =

Error - 15.1.2010 13:54:58 | Computer Name = Jirka-PC | Source = Application Hang | ID = 1002
Description = Program sklad.exe verze 8.2008.113.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Oznámení a řešení problémů.
ID
procesu: 960 Čas zahájení: 01ca960ab7043caa Čas ukončení: 94

Error - 15.1.2010 13:59:57 | Computer Name = Jirka-PC | Source = Application Hang | ID = 1002
Description = Program sklad.exe verze 8.2008.113.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Oznámení a řešení problémů.
ID
procesu: 588 Čas zahájení: 01ca960be4b5a5a9 Čas ukončení: 15

Error - 15.1.2010 14:11:34 | Computer Name = Jirka-PC | Source = Application Hang | ID = 1002
Description = Program sklad.exe verze 8.2008.113.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Oznámení a řešení problémů.
ID
procesu: c04 Čas zahájení: 01ca960cecc4486c Čas ukončení: 78

Error - 17.1.2010 5:22:47 | Computer Name = Jirka-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 18.1.2010 5:00:08 | Computer Name = Jirka-PC | Source = Application Error | ID = 1000
Description = Chybující aplikace HPWUCli.exe, verze 5.0.8.1, časové razítko 0x4abd3c99,
chybující modul unknown, verze 0.0.0.0, časové razítko 0x00000000, kód výjimky
0xc0000005, posun chyby 0x02544cb3, ID procesu 0xf00, čas spuštění aplikace 0x01ca981c53e197c1.

Error - 18.1.2010 11:32:02 | Computer Name = Jirka-PC | Source = EventSystem | ID = 4609
Description =

Error - 18.1.2010 11:33:12 | Computer Name = Jirka-PC | Source = Microsoft Office 12 | ID = 2001
Description = Rejected Safe Mode action : Microsoft Office Outlook.

Error - 18.1.2010 11:44:12 | Computer Name = Jirka-PC | Source = EventSystem | ID = 4609
Description =

Error - 18.1.2010 11:55:04 | Computer Name = Jirka-PC | Source = SecurityCenter | ID = 3
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI za účelem monitorování antivirových a antispywarových
programů a bran firewall jiných výrobců.

[ Media Center Events ]
Error - 18.1.2010 11:34:28 | Computer Name = Jirka-PC | Source = Media Center Guide | ID = 0
Description = Informace o události: COMException trying to call ehepgdat. Proces:
DefaultDomain Název objektu: Microsoft.Ehome.Epg.Helper.EhepgdatHelper

Error - 18.1.2010 11:34:29 | Computer Name = Jirka-PC | Source = Media Center Guide | ID = 0
Description = Informace o události: COMException trying to call ehepgdat. Proces:
DefaultDomain Název objektu: Microsoft.Ehome.Epg.Helper.EhepgdatHelper

Error - 18.1.2010 11:34:29 | Computer Name = Jirka-PC | Source = Media Center Guide | ID = 0
Description = Informace o události: COMException trying to call ehepgdat. Proces:
DefaultDomain Název objektu: Microsoft.Ehome.Epg.Helper.EhepgdatHelper

Error - 18.1.2010 11:34:29 | Computer Name = Jirka-PC | Source = Media Center Guide | ID = 0
Description = Informace o události: COMException trying to call ehepgdat. Proces:
DefaultDomain Název objektu: Microsoft.Ehome.Epg.Helper.EhepgdatHelper

Error - 18.1.2010 11:34:29 | Computer Name = Jirka-PC | Source = Media Center Guide | ID = 0
Description = Informace o události: Error reprocessing guide: System.Runtime.InteropServices.COMException
(0x8007043C): Načítání závodu třídy modelu COM pro komponentu s identifikátorem
CLSID {4B635ECB-0887-4015-8CA6-D621362F98D1} se nezdařilo kvůli následující chybě
: 8007043c. v Microsoft.Ehome.Epg.Helper.EhepgdatHelper.GetEhepgdat() v Microsoft.Ehome.Epg.Helper.EhepgdatBase.Retry(EhepgdatCall
action) v Microsoft.Ehome.Epg.Helper.EhepgdatBase.Retry[T](EhepgdatCaller`1 x)

v Microsoft.Ehome.Epg.Guide.ReprocessGuideImp() Proces: DefaultDomain Název objektu:
Media Center Guide

[ System Events ]
Error - 21.1.2010 7:24:36 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 21.1.2010 7:31:06 | Computer Name = Jirka-PC | Source = Print | ID = 6161
Description = Tisk dokumentu prijate_zbozi_sumarne_zjednodusene.frx (vlastník: Jirka)
na tiskárně HP Photosmart 2700 series se nezdařil. Zkuste vytisknout dokument znovu
nebo restartujte službu zařazování tisku. Datový typ: NT EMF 1.008. Velikost zařazeného
souboru (bajty): 131072. Počet vytištěných bajtů: 0. Celkový počet stran v dokumentu:
3. Počet vytištěných stran: 0. Klientský počítač: \\JIRKA-PC. Kód chyby Win32,
vrácený tiskovým procesorem: 1241. Pro požadovanou operaci nelze použít tuto síťovou
adresu.

Error - 21.1.2010 11:04:37 | Computer Name = Jirka-PC | Source = Print | ID = 6161
Description = Tisk dokumentu fakturace_statistika.frx (vlastník: Jirka) na tiskárně
HP Photosmart 2700 series se nezdařil. Zkuste vytisknout dokument znovu nebo restartujte
službu zařazování tisku. Datový typ: NT EMF 1.008. Velikost zařazeného souboru
(bajty): 273316. Počet vytištěných bajtů: 0. Celkový počet stran v dokumentu: 5.
Počet vytištěných stran: 0. Klientský počítač: \\JIRKA-PC. Kód chyby Win32, vrácený
tiskovým procesorem: 1241. Pro požadovanou operaci nelze použít tuto síťovou adresu.


Error - 21.1.2010 12:15:40 | Computer Name = Jirka-PC | Source = Print | ID = 6161
Description = Tisk dokumentu fakturace_statistika.frx (vlastník: Jirka) na tiskárně
HP Photosmart 2700 series se nezdařil. Zkuste vytisknout dokument znovu nebo restartujte
službu zařazování tisku. Datový typ: NT EMF 1.008. Velikost zařazeného souboru
(bajty): 273316. Počet vytištěných bajtů: 0. Celkový počet stran v dokumentu: 5.
Počet vytištěných stran: 0. Klientský počítač: \\JIRKA-PC. Kód chyby Win32, vrácený
tiskovým procesorem: 1241. Pro požadovanou operaci nelze použít tuto síťovou adresu.


Error - 21.1.2010 14:38:45 | Computer Name = Jirka-PC | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\Program Files (x86)\PCNetSoftware\RAC Server\RACDriver.s
bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o
kompatibilní verzi ovladače.

Error - 21.1.2010 14:39:54 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 22.1.2010 4:25:06 | Computer Name = Jirka-PC | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\Program Files (x86)\PCNetSoftware\RAC Server\RACDriver.s
bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o
kompatibilní verzi ovladače.

Error - 22.1.2010 4:25:19 | Computer Name = Jirka-PC | Source = Server | ID = 2505
Description = Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{3B61D4CF-8F9C-49F6-8209-A3489209EE26},
protože jiný počítač v síti má stejný název. Server nelze spustit.

Error - 22.1.2010 4:26:19 | Computer Name = Jirka-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 22.1.2010 5:28:00 | Computer Name = Jirka-PC | Source = Print | ID = 6161
Description = Tisk dokumentu mhtml:{DFE32F5A-5900-431E-8809-72E4B2967D71}mid://00000938/
(vlastník: Jirka) na tiskárně HP Photosmart 2700 series se nezdařil. Zkuste vytisknout
dokument znovu nebo restartujte službu zařazování tisku. Datový typ: NT EMF 1.008.
Velikost zařazeného souboru (bajty): 44708. Počet vytištěných bajtů: 0. Celkový
počet stran v dokumentu: 1. Počet vytištěných stran: 0. Klientský počítač: \\JIRKA-PC.
Kód chyby Win32, vrácený tiskovým procesorem: 1241. Pro požadovanou operaci nelze
použít tuto síťovou adresu.


< End of report >

Otevřete poznámkový blok, tam vložte tohle: Soubor uložte jako Script.bat (nutno přepsat příponu z .txt na .bat), a soubor otevřete (2x klik levým tl. myši na soubor), chvilku počkejte, vyskočí find.txt, jehož obsah pošlete sem.

Dobrý den,
níže zasílám výpis ze souboru find.txt. MyNext je obchodní informační systém, saniwa a tfc jsou názvy firem.

FIND.TXT:

"CzrSkl.exe":
C:\MyNEXT-SANIWA\CzrSkl.exe
C:\MyNEXT-TFC\CzrSkl.exe

Dobrá, děkuji. Zrovna jsem se chtěl zeptat, zdali soubory znáte

Tyto soubory:
C:\Windows\mgmsystem.dll
C:\Windows\SysWow64\gemstrmw.exe
otestujte na virustotal.com a vložte sem pouze odkazy (linky) k výsledkům.
Pokud se u nějakého souboru zobrazí, že už dříve byl testován, klikněte na tlačítko Otestovat soubor znovu.

(Poznámka: pokud by nějaké soubory nebyly k nalezení, přesvědčte se, zda máte zapnuté zobrazování skrytých souborů a složek, pokud ne, tak Nabídka Start -> Ovládací panely -> Možnosti složky -> Zobrazení -> Zobrazovat skryté soubory a složky -> OK)

první soubor (mgmsystem.dll):
https://www.virustotal.com/cs/analisis/ ... 1264261436
druhý soubor (gemstrmw.exe):
https://www.virustotal.com/cs/analisis/ ... 1264261791

Omlouvám se pokud je tenhle příspěvek OT, ale příznaky,které jsou popisovány na začátku mi trochu připomínají jednu windowsí utilitu - konkrétně funkci jedním prstem(tipicky se spustí pokud pětkrát za sebou zmáčknu klávesu SHIFT). Doporučuju vzít myš a podívat sev ovládacích panelech u nastavení klávesnice,jestli to není zapnuté. Nečetl jsem celé dlouhé logy a rady, ale tohle mě vyloženě trklo protože něco podobného patří ve škole k oblíbeným vtípkům.

Další věc mě napadá jestli to je na PC či na notebooku, protože notebooky mívají růné speciální funkce pro svoje klávesnice a setkal jsem se u jednoho modelu HP i s tím, že tam bylo tlačítko,které po stisku rozházelo rozložení půlky klávesnice a různé klávesy krom klasické fiunkce spouštěly různé programy(podotýkám bez klávesové zkratky), model byl ovšem celkem starý a myslím že dnes by tenhle problém být už neměl.

Pokud je to tenhle problém, budu se smát ještě hodně dlouho.

//EDIT: Takže abch nezapoměl. Ještě jedna podobná utilita krom téhle: Při logon screenu windows je od visty taky takové modré tlačítko,které otevře nabídku s programy pro usnadnění přístupu na PC,podíval bych se taky tam, jestli se tam neválí nějaké zaškrtnuté zatržítko, protože jestli se PC/notebbok nachází v práci,popřípadě máte doma nějakého vtipálka,tohle je stoprocentní cesta jak někoho naštvat a pořádně se tomu zasmát.(mezi těmi programy je třeba lupa,něco jako funkce jedním prstem,klávesnice na obrazovce atp.)