VIRY.CZ

Dobrý den.
Myslel jsem si,že PC rozumím,ale když jsem narazil na vaši stránku,tak si s prominutím připadám trošku jako blbec.Zjistil jsem,že je daleko víc rizik než jsem si vůbec myslel a chtěl bych vás požádat o preventivní konrolu LOGU,děkuji moc.


Logfile of random's system information tool 1.06 (written by random/random)
Run by Master at 2010-01-20 16:02:09
WIN_XP Service Pack 2
System drive C: has 3 GB (2%) free of 120 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:02:22, on 20.1.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
D:\Programy\Clone\CloneCD\CloneCDTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe
D:\PLS\PowerISO\PWRISOVM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
D:\Programy\Spyware\SpywareBeGone.exe
D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
D:\Navody\Active Keyboard\HotFiles.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
D:\Hry\SCOLL\UsmWin.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
c:\Documents and Settings\Master\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Master.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60016
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: (no name) - {F156768E-81EF-470C-9057-481BA8380DBA} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CloneCDTray] "D:\Programy\Clone\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [OpwareSE2] "D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe"
O4 - HKLM\..\Run: [OPSE reminder] "D:\Programy\Scan\ScanSoft OmniPage\EregEng\Ereg.exe" -r "D:\Programy\Scan\ScanSoft OmniPage\EregEng\ereg.ini"
O4 - HKLM\..\Run: [gcasServ] "D:\Programy\AntiVIRUS\gcasServ.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [Flashget] "D:\Programy\FlashGet\FlashGet.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "D:\Bionicle SUPER\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\PLS\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\RunOnce: [WinSideBySideSetupCleanup 8219263] rundll32 sxs.dll,SxspRunDllDeleteDirectory C:\WINDOWS\WinSxS\InstallTemp\8219263
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BitComet] "D:\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [Spyware Begone] "D:\Programy\Spyware\SpywareBeGone.exe" -FastScan
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ActiveKeyboard] D:\Navody\Active Keyboard\HotFiles.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [Spyware Begone] "D:\Programy\Spyware\SpywareBeGone.exe" -FastScan (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [SpybotSD TeaTimer] D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [ActiveKeyboard] D:\Navody\Active Keyboard\HotFiles.exe (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [ICQ] "D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe" silent (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-1229272821-1482476501-725345543-1003 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User '?')
O4 - S-1-5-21-1229272821-1482476501-725345543-1003 Startup: Scol.lnk = D:\Hry\SCOLL\UsmWin.exe (User '?')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Scol.lnk = D:\Hry\SCOLL\UsmWin.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programy\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate1ca20a1aca16604) (gupdate1ca20a1aca16604) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Armed Assault Drivers Auto Removal (pr2agmlb) (pr2agmlb) - Bohemia Interactive - C:\WINDOWS\system32\pr2agmlb.exe

--
End of file - 11552 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - D:\BitComet\tools\BitCometBHO_1.2.8.7.dll [2008-08-11 656696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-10 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{A057A204-BACC-4D26-9990-79A187E2698E}
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-03 16876032]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-02-28 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2008-10-15 949376]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-11-04 13529088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-11-04 86016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-01 61440]
"CloneCDTray"=D:\Programy\Clone\CloneCD\CloneCDTray.exe [2006-09-28 57344]
"OpwareSE2"=D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe [2003-05-08 49152]
"OPSE reminder"=D:\Programy\Scan\ScanSoft OmniPage\EregEng\Ereg.exe [2003-07-07 729088]
"gcasServ"=D:\Programy\AntiVIRUS\gcasServ.exe []
"NeroCheck"=C:\WINDOWS\system32\\NeroCheck.exe [2001-07-09 155648]
"Flashget"=D:\Programy\FlashGet\FlashGet.exe /min []
"QuickTime Task"=D:\Bionicle SUPER\QTTask.exe [2009-05-26 413696]
"PWRISOVM.EXE"=D:\PLS\PowerISO\PWRISOVM.EXE [2009-03-15 180224]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WinSideBySideSetupCleanup 8219263"=rundll32 sxs.dll,SxspRunDllDeleteDirectory C:\WINDOWS\WinSxS\InstallTemp\8219263 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]
"BitComet"=D:\BitComet\BitComet.exe [2008-11-12 2511672]
"Spyware Begone"=D:\Programy\Spyware\SpywareBeGone.exe [2006-06-02 3517440]
"SpybotSD TeaTimer"=D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe [2008-07-07 2156368]
"ActiveKeyboard"=D:\Navody\Active Keyboard\HotFiles.exe [2006-01-21 172032]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"ICQ"=D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe [2009-11-16 172792]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Microsoft Office.lnk - D:\Programy\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\Master\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
Scol.lnk - D:\Hry\SCOLL\UsmWin.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-08-21 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{9EF34FF2-3396-4527-9D27-04C8C1C67806}"=D:\Programy\AntiVIRUS\shellextension.dll [2005-02-10 93408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=91000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Ins\winbox.exe"="C:\Ins\winbox.exe:*:Enabled:winbox"
"C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe"="D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"D:\Programy\FlashGet\flashget.exe"="D:\Programy\FlashGet\flashget.exe:*:Enabled:Flashget"
"D:\Hry\Tycoon\zt2demoretail.exe"="D:\Hry\Tycoon\zt2demoretail.exe:*:Enabled:Zoo Tycoon 2 Demo Executable"
"D:\Screen Recorders\Screen Recorder\NEW\ScreenRecorder.exe"="D:\Screen Recorders\Screen Recorder\NEW\ScreenRecorder.exe:*:Enabled:River Past Screen Recorder"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - E:\handset.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{158016fc-f0cf-11de-97b1-00161790f599}]
shell\AutoRun\command - H:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15801701-f0cf-11de-97b1-00161790f599}]
shell\AutoRun\command - G:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{af8a9960-f14f-11de-97b3-00161790f599}]
shell\AutoRun\command - G:\installer.exe
shell\verb\command - G:\installer.exe


======File associations======

.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2010-01-20 16:02:09 ----D---- C:\rsit
2010-01-20 16:02:09 ----D---- C:\Program Files\trend micro
2010-01-20 15:39:24 ----D---- C:\WINDOWS\LastGood
2010-01-15 21:53:25 ----A---- C:\WINDOWS\PanelExe.INI
2010-01-15 21:53:25 ----A---- C:\WINDOWS\EngineExe.INI
2010-01-15 21:48:31 ----A---- C:\WINDOWS\MessageExe.INI
2010-01-15 21:48:26 ----D---- C:\Documents and Settings\Master\Data aplikací\MobileAction
2010-01-15 21:48:24 ----A---- C:\WINDOWS\FileMgrExe.INI
2010-01-15 21:43:17 ----D---- C:\Program Files\Mobile Action
2010-01-15 21:37:36 ----D---- C:\WINDOWS\Application Data
2010-01-15 09:38:47 ----D---- C:\Program Files\CIGLER SOFTWARE
2010-01-14 18:45:13 ----D---- C:\Program Files\Astroburn Toolbar
2010-01-14 18:44:30 ----D---- C:\Documents and Settings\Master\Data aplikací\Astroburn Lite
2010-01-14 18:44:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Astroburn Lite
2010-01-14 18:32:58 ----D---- C:\Documents and Settings\Master\Data aplikací\DAEMON Tools Lite
2010-01-14 18:32:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2009-12-30 17:07:30 ----D---- C:\Program Files\Common Files\Skype
2009-12-30 17:07:26 ----RD---- C:\Program Files\Skype
2009-12-28 21:33:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\POP3Profiles
2009-12-28 21:29:44 ----D---- C:\Program Files\Ubisoft
2009-12-28 12:20:26 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-12-28 12:20:22 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-12-28 12:19:37 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-12-28 12:18:30 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-12-25 11:01:48 ----D---- C:\Program Files\OpenAL
2009-12-25 11:01:47 ----RA---- C:\WINDOWS\system32\tmp67.tmp
2009-12-25 11:01:47 ----RA---- C:\WINDOWS\system32\tmp66.tmp

======List of files/folders modified in the last 1 months======

2010-01-20 16:02:09 ----RD---- C:\Program Files
2010-01-20 16:01:54 ----D---- C:\WINDOWS\Prefetch
2010-01-20 15:41:57 ----D---- C:\WINDOWS\Temp
2010-01-20 15:41:57 ----D---- C:\WINDOWS\system32\drivers
2010-01-20 15:39:26 ----HD---- C:\WINDOWS\inf
2010-01-20 15:39:24 ----D---- C:\WINDOWS
2010-01-20 15:39:22 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-20 15:38:22 ----A---- C:\WINDOWS\wincmd.ini
2010-01-20 15:21:49 ----D---- C:\Program Files\Mozilla Firefox
2010-01-20 15:21:40 ----D---- C:\Documents and Settings\Master\Data aplikací\Skype
2010-01-20 15:17:45 ----D---- C:\Documents and Settings\Master\Data aplikací\skypePM
2010-01-20 15:16:47 ----SD---- C:\WINDOWS\Tasks
2010-01-20 07:38:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-19 19:33:21 ----D---- C:\Documents and Settings\Master\Data aplikací\ZoomBrowser EX
2010-01-19 19:33:21 ----D---- C:\Documents and Settings\Master\Data aplikací\CameraWindowDC
2010-01-19 07:57:55 ----SHD---- C:\WINDOWS\Installer
2010-01-18 22:00:49 ----D---- C:\WINDOWS\system32
2010-01-18 21:58:09 ----D---- C:\Documents and Settings\Master\Data aplikací\Scanahand
2010-01-18 17:56:13 ----D---- C:\Program Files\AVG
2010-01-18 17:53:46 ----D---- C:\WINDOWS\WinSxS
2010-01-18 17:53:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-18 17:07:00 ----D---- C:\Downloads
2010-01-18 13:12:07 ----D---- C:\WINDOWS\system32\config
2010-01-18 10:06:59 ----HD---- C:\$AVG8.VAULT$
2010-01-15 22:10:48 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-10 13:50:37 ----D---- C:\Documents and Settings\Master\Data aplikací\gtk-2.0
2010-01-06 21:28:46 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-12-31 13:20:00 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-30 17:07:30 ----D---- C:\Program Files\Common Files
2009-12-30 17:07:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2009-12-28 13:25:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-28 13:25:50 ----D---- C:\WINDOWS\AppPatch
2009-12-28 13:23:42 ----RSD---- C:\WINDOWS\assembly
2009-12-28 13:23:16 ----D---- C:\WINDOWS\system32\DirectX
2009-12-28 12:20:17 ----A---- C:\WINDOWS\imsins.BAK
2009-12-28 12:20:01 ----D---- C:\Program Files\Windows Media Player
2009-12-28 12:18:36 ----D---- C:\WINDOWS\system32\LogFiles
2009-12-26 15:27:11 ----D---- C:\Program Files\Google
2009-12-25 11:01:48 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-12-25 11:01:47 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-12-25 00:12:10 ----D---- C:\WINDOWS\security
2009-12-23 22:48:01 ----A---- C:\WINDOWS\system32\PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 42496]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2008-10-15 15424]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2008-10-15 512096]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 MaVctrl;MaVctrl; C:\WINDOWS\system32\DRIVERS\MaVc2K.sys [2005-08-18 11473]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-21 3299840]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-03 4745216]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-09-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-09-11 19968]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 aeocf85x;aeocf85x; C:\WINDOWS\system32\drivers\aeocf85x.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\D:\Programy\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 MaRdPnp;MaRdPnp; C:\WINDOWS\system32\DRIVERS\MaRdP2K.sys [2005-08-18 49867]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-11-04 6557408]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-08-21 573440]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2007-01-31 96370]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2008-10-15 552064]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-10-19 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-12-23 214520]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-08-20 593920]
S2 gupdate1ca20a1aca16604;Služba Google Update (gupdate1ca20a1aca16604); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-19 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-19 190448]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-11-04 159812]
S2 pr2agmlb;Armed Assault Drivers Auto Removal (pr2agmlb); C:\WINDOWS\system32\pr2agmlb.exe [2007-06-04 407168]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-20 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------





Ještě mi PC nahodilo po dologování nějaké okno s infem...Dám to sem abych pak proces zbytečně nezdržoval



info.txt logfile of random's system information tool 1.06 2010-01-20 16:02:25

======Uninstall list======

TW++-->MsiExec.exe /I{011045BF-6042-49F9-8216-F817FCB36D8B}
"Glest 2.0.0"-->"D:\Programy\Glest\Glest_2.0.0\unins000.exe"
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
4Story 1.5-->"D:\4Story\4Story\Hra\unins000.exe"
AbiWord 2.6.5-->D:\AbiWord\AbiSuite2\UninstallAbiWord2.exe
ACDSee 3.1 SR-1-->MsiExec.exe /I{94CFDD29-1CB2-4D89-A024-5E1E8DEF3072}
Active Keyboard 3.1-->"D:\Navody\Active Keyboard\unins000.exe"
Adobe Acrobat 4.0, 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop 5.0 CZ-->C:\WINDOWS\UNIN0405.EXE -fd:\programy\Photoshop\DeIsL1.isu -cd:\programy\Photoshop\Uninst.dll
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Reader 9.1 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A91000000001}
Adobe Setup-->MsiExec.exe /I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Age of Empires III-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}
ALSee-->D:\Internet\ALSee\unins000.exe
Antivirový systém NOD32-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\Setup.exe" -l0x9
ArmA Uninstall-->D:\Hry\ArmA\UnInstall.exe
Artušovi rytíři-->C:\WINDOWS\IsUn0405.exe -f"d:\hry\Artušovi Rytíři\Uninst.isu"
Astroburn Lite-->D:\Programy\Astroburn Lite\uninst.exe
Astroburn Toolbar-->C:\Program Files\Astroburn Toolbar\uninst.exe
Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x5
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
aTube Catcher 1.0-->MsiExec.exe /I{553B20C6-59CD-4C2F-BE37-16ABF32064BF}
AVS Update Manager 1.0-->"C:\Program Files\AVS4YOU\AVSUpdateManager\unins000.exe"
AVS Video Converter 6-->"D:\Convertor,fakej!\AVSVideoConverter6\unins000.exe"
AVS4YOU Software Navigator 1.3-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
BIONICLE Heroes Demo-->C:\Program Files\InstallShield Installation Information\{56EBA9AE-2850-425E-BD83-595FAD8B76F4}\setup.exe -runfromtemp -l0x0409
BitComet 1.06-->D:\BitComet\uninst.exe
Bulent's Screen Recorder-->d:\Screen Recorders\Uninstall BSR.exe
Call of Duty 2 SK-->D:\Hry\CoD2\Call of Duty\Odinštalovať CoD-2_SK.exe
Call of Duty(R) 2 Patch 1.3-->D:\Hry\CoD2\Call of Duty\Uninst_Call of Duty(R) 2 Patch 1.3.exe /U "D:\Hry\CoD2\Call of Duty\Uninst_Call of Duty(R) 2 Patch 1.3.log"
Call of Duty(R) 2-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057
Canon Camera Access Library-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CAL\Uninst.ini"
Canon CanoScan Toolbox 4.9-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}\setup.exe" -l0x5 anything
Canon MovieEdit Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini"
Canon ScanGear Starter-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}\SETUP.EXE" -l0x9 anything
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini"
Canon Utilities CameraWindow DC-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDC\Uninst.ini"
Canon Utilities CameraWindow-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowLauncher\Uninst.ini"
Canon Utilities MyCamera DC-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\MyCameraDC\Uninst.ini"
Canon Utilities MyCamera-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\MyCamera\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini"
Canon ZoomBrowser EX Memory Card Utility-->"C:\Program Files\Common Files\Canon\UIW\1.5.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX MCU\Uninst.ini"
Capture-A-ScreenShot-->D:\Programy\Cass\Capture-A-ScreenShot\unins000.exe
Castle Strike-->C:\Program Files\Castle Strike\UnInstall.exe
Catalyst Control Center - Branding-->MsiExec.exe /I{FA3A247D-437A-455E-A88F-7EB6E5F9E799}
Celestia 1.5.1-->"D:\Programy\Celestia\Celestia\unins000.exe"
CloneCD-->"D:\Programy\Clone\CloneCD\ccd-uninst.exe" /D="D:\Programy\Clone\CloneCD"
Codec Pack - All In 1 6.0.3.0-->C:\WINDOWS\iun6002.exe "C:\Program Files\Codec Pack - All In 1\irunin.ini"
Codename: Outbreak-->C:\WINDOWS\UnWSetup.exe
Corel Applications-->C:\WINDOWS\Corel\Uninst32.exe
Crawler Toolbar-->C:\PROGRA~1\Crawler\CToolbar.exe uninst
Cryo-Networks - SCOL-->d:\Hry\SCOLL\scolsetup.exe d:\Hry\SCOLL
csWord v.2.2-->"D:\Microsoft Word\csWord\unins000.exe"
DesetiPrsty5 5.2-->D:\Hry\DesetiPrsty\pmqUnInstall.exe
Desktop Toa-->"D:\Programy\LEGO Desktop Toys\unins000.exe"
Diablo-->C:\WINDOWS\DiabUnin.exe C:\WINDOWS\DiabUnin.dat
Dr Jekill-->"D:\Hry\DRKill\DrJekill\unins000.exe"
EA Download Manager-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1033
EA SPORTS online 2004-->D:\Hry\Fifa 2004\EASOUNInstaller.exe
EA.com Matchup-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2F173C40-563E-11D4-89C5-0010ADDAAC33}\setup.exe" -l0x5
EA.com Update-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9AB97F52-512B-43EF-AAEC-4825C17B32ED}\setup.exe" -l0x5
Easy MP3 Sound Recorder version 3.0-->"D:\Blbost\SoundRecorder\unins000.exe"
Easy Video Converter 4.2.8-->"D:\Programy\Konvertor\Easy Video Converter\unins000.exe"
EAX Unified-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\EAX Unified\Uninst.isu"
Ekonomický systém Money S3-->C:\Program Files\CIGLER SOFTWARE\Common Files\Money S3\Setup\Uninst.exe
elektricky-proud version 1.0.2.0-->"D:\Hry\Elektrika\elektricky-proud\unins000.exe"
Eraser XP-->MsiExec.exe /I{666719F9-64BA-4686-B7B4-D78DB41CB26C}
F1 2002-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C64121E9-B741-4177-00BD-7B228D3F6723}\setup.exe" -l0x9 Uninstall
FIFA 09 Demo-->MsiExec.exe /X{69352F8B-66AD-493C-9138-5FE0D300FB17}
FIFA 2004-->D:\Hry\Fifa 2004\EAUninstall.exe
FL Studio 7-->D:\Hudba Tvorba\flstudio\uninstall.exe
Follow Me volume 1-->C:\WINDOWS\ST5UNST.EXE -n "d:\Programy\ST5UNST.LOG"
Ford Racing 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{797E03F8-C8A0-47ED-AA9F-D7076276E491}\setup.exe"
Free MP3 Recorder 1.0-->"D:\Blbiny\MP3Recorder\unins000.exe"
Free Screen Recorder v2.9-->"D:\Screen Recorders\screenrecorder\unins000.exe"
Freedom Force vs. Third Reich-->C:\Program Files\Freedom Force vs. Third Reich\Uninstall.exe "Freedom Force vs. Third Reich"
Game Maker 6.1-->D:\Programy\GMAker\Uninstal.exe
GamePark-->D:\Hry\GamePark\unins000.exe
GameSpy Arcade-->D:\Hry\GAMESP~1\UNWISE.EXE D:\Hry\GAMESP~1\INSTALL.LOG
GIMP 2.6.6-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Updater-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
GTA2-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\GTA2\Uninst.isu"
Guild Wars-->"D:\Hry\Guild Wars-GAme\Guild Wars\Gw.exe" -uninstall
Harry Potter CZ-->C:\Program Files\Harry Potter\Uninstal.exe
Harry Potter-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F50AF3B-8997-4916-0095-99D63DDB785A}\setup.exe" -l0x9 Uninstall
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"D:\Programy\Anti-virus\HJT\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
Cheat Engine 5.4-->"D:\Cheaty Metin\Cheat Engine\unins000.exe"
ICQ Toolbar-->C:\Program Files\ICQ6Toolbar\ICQUnToolbar.exe
ICQ6.5-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
IL Download Manager-->C:\Program Files\Image-Line\Downloader\uninstall.exe
Indeo® Software-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Ligos\Indeo\Uninst.isu"
Indiana Jones and the Emperors Tomb-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DBF3265-57F1-4D8A-87EA-332B2A669BDE}\Setup.exe" -l0x9
Internet Cell Boost 1.0-->"D:\Programy\Internet Cell\Internet Cell Boost\unins000.exe"
InternetTV 7.13-->"D:\Programy\InternetTV\unins000.exe"
IrfanView (remove only)-->D:\Internet\IrfanView\iv_uninstall.exe
jetAudio 6.2.x Czech Language Pack-->C:\Program Files\JetAudio\Uninstall_CSY_LPack.exe
jetAudio Basic-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}\setup.exe" -l0x5 -removeonly
Jing-->MsiExec.exe /I{5AD3DC71-1CCA-4FE9-AC21-10112FE4873D}
JPEG Resampler Vs 5.0-->"D:\Programy\JPEG Recampler\JPEG Resampler\unins000.exe"
Kecal 2.3-->D:\Programy\Kecal\Kecal\unins000.exe
KlikoSafe-->C:\WINDOWS\st6unst.exe -n "D:\Programy\Šifrovač\ST6UNST.LOG"
Kobra 11 Nitro-->"D:\Hry\Kobra 11\Kobra 11 Nitro\unins000.exe"
Konvertor-->D:\Programy\Konvertor\uninst.exe
LEGO Digital Designer-->D:\LEGO Digital Designer\LDD\Uninstall.exe
LEGO Star Wars II-->C:\Program Files\InstallShield Installation Information\{4E074808-1B86-4230-A9EB-0904942EC4AE}\setup.exe -runfromtemp -l0x0409
LucasArts' Star Wars: Episode I Racer-->C:\WINDOWS\uninst.exe -f"C:\Program Files\Starwars-RACER\DeIsL1.isu"
MAGIX music maker 11 demo (US)-->D:\Hudba Tvorba\MAGIX\instslct.exe
Manual CanoScan LiDE 25-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{838BC0FB-4F8F-47B9-847F-06AE4CCE4181}\setup.exe" -l0x5
MediaCoder 0.7.2.4505-->D:\Programy\MediaCoder\uninst.exe
Microsoft .NET Framework 2.0 Language Pack - CSY-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0 Czech Language Pack-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 Czech Language Pack\setup.exe
Microsoft .NET Framework 3.0 Czech Language Pack-->MsiExec.exe /X{FB09515C-8E3E-4E0F-A1F2-032F38DEC185}
Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft Age of Empires II-->"D:\Hry\Age of Empire\UNINSTAL.EXE" /runtemp /uninstall
Microsoft AntiSpyware-->MsiExec.exe /I{536F7C74-844B-4683-B0C5-EA39E19A6FE3}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Media Content-->MsiExec.exe /I{90300405-6000-11D3-8CFE-0050048383C9}
Microsoft Office XP Professional s aplikací FrontPage-->MsiExec.exe /I{90280405-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
MotoGP-->D:\Hry\MotoGP\unins000.exe
Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Tag Editor-->MsiExec.exe /I{112FE9AE-94A1-4E90-B131-429CEA1DF0D3}
Mp3 Tag Express-->MsiExec.exe /I{7C4BBE5A-A460-40BD-905E-A87E85897443}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Multimediální ukázky-->MsiExec.exe /I{A918DE8A-98C8-0920-0001-000000000000}
MyFantasyMaker-->MsiExec.exe /I{88221A5B-269D-487E-914E-E9F819FDBA3F}
Need For Speed Underground-->D:\Hry\NFS\EAUninstall.exe
Nero - Burning Rom-->MsiExec.exe /X{A4D7B764-4140-11D4-88EB-0050DA3579C0}
Nero 8-->MsiExec.exe /X{D6D5CB84-0E6E-4E69-B300-C690B6911029}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NHL 2001-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BBA471C0-5EF2-11D4-0091-A500A0245DC0}\setup.exe" -l0x5 Uninstall
NOD32 FiX v2.1-->"C:\Program Files\Eset\unins000.exe"
Nokia 6234 USB - Handset Manager V9.2-->MsiExec.exe /I{A918DE8A-98C8-0920-0000-000000260058}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
OpenAL-->"C:\Program Files\OpenAL\OpenALwEAX.exe" /U
OpenOffice.org 3.0-->MsiExec.exe /I{BE8BE32F-F595-4693-9F82-1E0A5A047BB6}
Pan Sirka-->D:\HRY\PAN SIRKA\Uninstal.exe
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PhotoFilter 1.0-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0C127331-DAFB-4797-BAAE-1F3D042030CC}\Setup.exe"
Picasa 3-->"D:\Programy\Picasa 3\Picasa3\Uninstall.exe"
Porrasturvat - Stair Dismount (remove only)-->"D:\Hry\Schody\Porrasturvat\uninst.exe"
Postal 2 STP - Free Multiplayer Edition-->C:\WINDOWS\unvise32.exe d:\hry\postal 2 multi\uninstal.log
Postal 2-->C:\WINDOWS\unvise32.exe d:\hry\postal2\uninstal.log
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PowerISO-->"D:\PLS\PowerISO\uninstall.exe"
Prince of Persia T2T-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}\setup.exe" -l0x5 -removeonly
Prince of Persia The Sands of Time-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{F203DBC9-CB0A-4420-BF4B-A3F1AE48C778}
psani beta version 1.0.3.0-->"D:\Programy\Všemi deseti\psani\unins000.exe"
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Rally Trophy-->MsiExec.exe /I{25022D68-3AF9-49D7-8B15-B54BEE0A2ED0}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x5 -removeonly
River Past Screen Recorder-->"C:\WINDOWS\Screen Recorder Uninstaller.exe"
Safari Kids-->C:\Program Files\Safari Kids\Uninstall.exe "Safari Kids"
SAproxy 3.1.1.0 (3 Apr 2006)-->"D:\Programy\Proxy\SAproxy\unins000.exe"
save2pc Light 3.30-->"D:\Programy\Youtube\save2pc\unins000.exe"
Scarface: The World is Yours-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{27D7F575-4AA0-4C12-AA68-128E1C8979F7} /l1033
Scorpions WinCheater-->"D:\Hry\Mr.Bean\Scorpions WinCheater\unins000.exe"
Show Hidden Files 3.0-->"D:\Show Hidden Files\unins000.exe"
Silkolene Honda Motocross GP-->C:\WINDOWS\IsUninst.exe -fd:\hry\honda\Unistshmgp.isu
Ski-Doo X-Team Racing-->D:\Hry\DayDream\Ski-Doo\UnInstall.exe
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SMPlayer 0.5.62-->"D:\Programy\SMM Player\SMPlayer\unins000.exe"
SnakeWorld Game-->MsiExec.exe /I{DEC20534-AA2A-4A64-A645-CAE4A6C2E684}
Space Flight 1.0-->"D:\Programy\Space Flight\unins000.exe"
SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x0005 -removeonly
Spybot - Search & Destroy-->"D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\unins000.exe"
Spyware Begone V8.50-Free-->C:\WINDOWS\iun6002.exe "D:\Programy\Spyware\irunin.ini"
Staničář 2.2.2.2-->MsiExec.exe /X{68A0A7B4-8D4B-45E7-980C-F4AB60368283}
Star Stable 1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D69A5D3F-3837-4409-8AAD-CB5C7D33F13F}\setup.exe" -l0x5 -removeonly
TeamSpeak 2 RC2-->D:\Hry\sdg\Teamspeak2_RC2\unins000.exe
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
The Golden Compass-->"D:\Hry\The Golden Compass\uninstall.exe"
The Settlers IV-->C:\WINDOWS\IsUninst.exe -f"C:\BlueByte\The Settlers IV\uninst.isu" -c"C:\BlueByte\The Settlers IV\BBINST.DLL"
TKexe Kalender-->C:\WINDOWS\Uninstall_tkexe -kalender
ToCA Race Driver-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8E309767-4214-4A04-AB88-FE86155FC151}
Toca2-->C:\WINDOWS\IsUninst.exe -fd:\hry\Toca2\Uninst.isu
Tomb Raider III-->C:\WINDOWS\IsUninst.exe -f"d:\hry\lara croft\Uninst.isu"
Tony Tough-->C:\WINDOWS\IsUn0405.exe -f"C:\Program Files\Tony Tough\Uninst.isu"
Total Commander (Remove or Repair)-->C:\Program Files\totalcmd\tcuninst.exe
Total Immersion Racing-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C2FE0127-0F86-43C7-824E-AA78E6B5F4F3}\setup.exe"
Toy Story 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B431CA9E-4D14-4386-8BCC-2C13F46B8E70}\setup.exe" Toy Story 2
UltraMixer 2.0.10.1-->"D:\Hudba Tvorba\UltraMixer\unins000.exe"
Unity Web Player-->C:\Program Files\Unity\WebPlayer\Uninstall.exe
VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Video Convert Master v6.3-->"D:\Programy\Video Convert Master\unins000.exe"
Windows Audio Recorder Professional 4.08-->"D:\Programy\MP3 recorder\Windows Audio Recorder Professional\unins000.exe"
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (CSY)-->MsiExec.exe /X{AAB6D0F8-02B3-4E89-B24C-0BB153C21445}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation CS Language Pack-->MsiExec.exe /I{6EF72FC6-842E-4FE6-BF88-BFBF03C9DA74}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
WinRAR-->C:\WinRAR\uninstall.exe
World of Warcraft FREE Trial-->MsiExec.exe /X{02EBDBB9-4600-41D3-B566-40CB861511D2}
World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
ZAV 1.3 (32bit)-->D:\Hry\ZAV\ZAV_HRY\unins000.exe
Zeallsoft Super Screen Recorder 4.2-->"D:\Screen Recorders\ssrsetup\Super Screen Recorder\unins000.exe"
Zoo Tycoon 2 Trial Version-->"D:\Hry\Tycoon\UNINSTAL.EXE" /runtemp /uninstall
Zoo Tycoon: Complete Collection-->"D:\Zoo Tycoon\Zoo Tycoon 1\UNINSTAL.EXE" /runtemp /addremove

Securitycenter WMI appears to be broken

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;D:\Bionicle SUPER\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 79 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=4f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;D:\Bionicle SUPER\QTSystem\QTJava.zip
"QTJAVA"=D:\Bionicle SUPER\QTSystem\QTJava.zip

-----------------EOF-----------------





A ještě prosím,zacházejte se mnou opravdu jako s nováčkem,na PC trávím přibližně i 2 hodiny denně,ale je mi 13 a určité programy pro mě nejsou známé...


Moc a moc děkuji,obdivuji vaši práci.

Jo,taky jsem četl v ostatních podobných tématech,že se častu ptáte na problémy....Taky nějaké mám...

PC se mi zdá trošku pomalý,vzhledem k celkem průměrné konfiguraci (1,6 MHz Procesor ,2 GB RAM),se mi občas stává,že je PC zaťatý.Věčně mi nějaký soubor jménem TeaTimer.exe "vykope" CPU až na 100(proto tento proces už když se PC zapne vypínám,přes ctrl+alt+delete,odinstalovat jsem to nedokázal,nemůžu to najít,tento proces mi běží i na notebooku,z toho usuzuji,že jde o nějakou součást windows,ale zdaleka mi tak nezpomaluje PC)a občas zlobí i NMIndexStoreSvr.exe , ten jsem taky nenašel,takže jsem taky neodinstaloval....

Pokud je LOG v pořádku,tak asi koupím new PC a bude to

Dobrý večer
Zdravím krajana
Tea timer patří ke Spybotu, používáte ho?
Něco se mi nezdá, tak koukneme na to



Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe


- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, skopírujte celý jeho obsah sem

Dobrý den.
Hned na začátek se vám moc omlouvám za mou nesmírnou prodlevu,co se týče této odpovědi. Pekelně málo časo,znáte to.

Od minula se věci trošku pohnuli.Trošku jsem si zamakal na PC,zataktoval apod.,vyčistil tunu registrů a PC se zrychlil,zároveň mi je trapné toto téma nedokončit,ale protože jsem od minula např. změnil antivir,instaloval programy,dělal různý věci s daty,dávám sem ještě jeden log(z RSIT,uvídíme co na to řeknete).

Logfile of random's system information tool 1.06 (written by random/random)
Run by Master at 2010-02-09 21:24:38
WIN_XP Service Pack 2
System drive C: has 20 GB (17%) free of 120 GB
Total RAM: 2047 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:24:44, on 9.2.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Documents and Settings\Master\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Master.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60016
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: (no name) - {F156768E-81EF-470C-9057-481BA8380DBA} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [OpwareSE2] "D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe"
O4 - HKLM\..\Run: [OPSE reminder] "D:\Programy\Scan\ScanSoft OmniPage\EregEng\Ereg.exe" -r "D:\Programy\Scan\ScanSoft OmniPage\EregEng\ereg.ini"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1229272821-1482476501-725345543-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programy\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate1ca20a1aca16604) (gupdate1ca20a1aca16604) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 9260 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - D:\BitComet\tools\BitCometBHO_1.2.8.7.dll [2008-08-11 656696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-10 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{A057A204-BACC-4D26-9990-79A187E2698E}
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-03 16876032]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2008-10-15 949376]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-11-04 13529088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-11-04 86016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-01 61440]
"OpwareSE2"=D:\Programy\Scan\ScanSoft OmniPage\OpwareSE2.exe [2003-05-08 49152]
"OPSE reminder"=D:\Programy\Scan\ScanSoft OmniPage\EregEng\Ereg.exe [2003-07-07 729088]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-01-28 2757512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ActiveKeyboard]
D:\Navody\Active Keyboard\HotFiles.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
C:\PROGRA~1\AVG\AVG9\avgtray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
D:\BitComet\BitComet.exe [2008-11-12 2511672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
D:\Programy\Clone\CloneCD\CloneCDTray.exe [2006-09-28 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget]
D:\Programy\FlashGet\FlashGet.exe /min []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
D:\Programy\AntiVIRUS\gcasServ.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-02-28 570664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
D:\Programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe [2008-07-07 2156368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
D:\Hry\Steam\Steam.exe [2010-02-02 1217808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2008-10-04 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Registrace NHL™ 09.lnk]
D:\Hry\NHL09~1\Support\EAREGI~1.EXE [2010-02-05 4374792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Registration Assassin.LNK]
D:\Hry\ASSASS~1\Hra\Register\REGIST~1.EXE [2008-02-22 967304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Scol.lnk]
D:\Hry\SCOLL\UsmWin.exe [1999-05-26 36864]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Microsoft Office.lnk - D:\Programy\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-08-21 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{9EF34FF2-3396-4527-9D27-04C8C1C67806}"=D:\Programy\AntiVIRUS\shellextension.dll [2005-02-10 93408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=91000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Ins\winbox.exe"="C:\Ins\winbox.exe:*:Enabled:winbox"
"C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe"="D:\ICQ 6.5\ICQ\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"D:\Programy\FlashGet\flashget.exe"="D:\Programy\FlashGet\flashget.exe:*:Enabled:Flashget"
"D:\Hry\Tycoon\zt2demoretail.exe"="D:\Hry\Tycoon\zt2demoretail.exe:*:Enabled:Zoo Tycoon 2 Demo Executable"
"D:\Screen Recorders\Screen Recorder\NEW\ScreenRecorder.exe"="D:\Screen Recorders\Screen Recorder\NEW\ScreenRecorder.exe:*:Enabled:River Past Screen Recorder"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Hry\Assassins Creed\Hra\AssassinsCreed_Dx9.exe"="D:\Hry\Assassins Creed\Hra\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"D:\Hry\Assassins Creed\Hra\AssassinsCreed_Dx10.exe"="D:\Hry\Assassins Creed\Hra\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"D:\Hry\Assassins Creed\Hra\AssassinsCreed_Launcher.exe"="D:\Hry\Assassins Creed\Hra\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"D:\Programy\uTorrent\utorrent.exe"="D:\Programy\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"D:\Hry\Football Manager 2010\fm.exe"="D:\Hry\Football Manager 2010\fm.exe:*:Enabled:Football Manager 2010"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Hry\Call of Duty 4\iw3mp.exe"="D:\Hry\Call of Duty 4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{158016fc-f0cf-11de-97b1-00161790f599}]
shell\AutoRun\command - H:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15801701-f0cf-11de-97b1-00161790f599}]
shell\AutoRun\command - F:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{25dffd40-9ad9-11dd-adfb-00161790f599}]
shell\AutoRun\command - D:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{af8a9960-f14f-11de-97b3-00161790f599}]
shell\AutoRun\command - F:\installer.exe
shell\verb\command - F:\installer.exe


======File associations======

.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2010-02-09 16:43:55 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-02-09 16:43:50 ----D---- C:\WINDOWS\LastGood
2010-02-06 22:44:10 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-02-06 22:44:01 ----D---- C:\Program Files\Alwil Software
2010-02-06 22:44:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-02-06 19:33:59 ----D---- C:\Documents and Settings\Master\Data aplikací\Leadertech
2010-02-05 20:28:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\WinZip
2010-02-02 19:59:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sports Interactive
2010-02-02 19:54:49 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-02-02 19:54:49 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-02-02 19:54:47 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-02-02 19:54:46 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-02-02 19:54:45 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-02-02 19:54:44 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-02-02 19:54:43 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-02-02 19:48:42 ----D---- C:\Documents and Settings\Master\Data aplikací\Sports Interactive
2010-02-02 19:41:18 ----HD---- C:\Program Files\Zero G Registry
2010-02-02 19:41:18 ----D---- C:\Program Files\Sports Interactive
2010-01-29 22:42:51 ----RA---- C:\WINDOWS\system32\MafiaSetup.exe
2010-01-25 16:28:57 ----D---- C:\WINDOWS\pss
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\RBShell400.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\rbqt450.DLL
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\rbap450.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSWinPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSUsernamePlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSResStreamPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSResPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSRegistryPlugin1636.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSRegistrationPlugin1636.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSRectPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSQuickTimePlugin1636.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSQTImporterPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSProcessPlugin1636.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSPluginVersionPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSPicturePlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSPictureMacPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSMemoryPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSMainPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSMacOSXPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSIconPlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSFolderitemsCreatePlugin1635.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\MBSEncryptPlugin1636.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\EHZComp.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\EHMD5.dll
2010-01-24 17:31:03 ----AH---- C:\Documents and Settings\Master\Data aplikací\EHEncrypt.dll
2010-01-23 11:41:32 ----D---- C:\Documents and Settings\Master\Data aplikací\Ubisoft
2010-01-23 11:36:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-01-23 11:27:51 ----D---- C:\Documents and Settings\Master\Data aplikací\InstallShield
2010-01-20 16:02:09 ----D---- C:\rsit
2010-01-20 16:02:09 ----D---- C:\Program Files\trend micro
2010-01-15 21:53:25 ----A---- C:\WINDOWS\PanelExe.INI
2010-01-15 21:53:25 ----A---- C:\WINDOWS\EngineExe.INI
2010-01-15 21:48:31 ----A---- C:\WINDOWS\MessageExe.INI
2010-01-15 21:48:26 ----D---- C:\Documents and Settings\Master\Data aplikací\MobileAction
2010-01-15 21:48:24 ----A---- C:\WINDOWS\FileMgrExe.INI
2010-01-15 21:43:17 ----D---- C:\Program Files\Mobile Action
2010-01-15 21:37:36 ----D---- C:\WINDOWS\Application Data
2010-01-15 09:38:47 ----D---- C:\Program Files\CIGLER SOFTWARE
2010-01-14 18:45:13 ----D---- C:\Program Files\Astroburn Toolbar
2010-01-14 18:44:30 ----D---- C:\Documents and Settings\Master\Data aplikací\Astroburn Lite
2010-01-14 18:44:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Astroburn Lite
2010-01-14 18:32:58 ----D---- C:\Documents and Settings\Master\Data aplikací\DAEMON Tools Lite
2010-01-14 18:32:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite

======List of files/folders modified in the last 1 months======

2010-02-09 21:24:42 ----D---- C:\WINDOWS\Prefetch
2010-02-09 21:24:40 ----D---- C:\WINDOWS\Temp
2010-02-09 21:23:58 ----A---- C:\WINDOWS\wincmd.ini
2010-02-09 19:58:09 ----D---- C:\Program Files\Mozilla Firefox
2010-02-09 17:30:16 ----D---- C:\Documents and Settings\Master\Data aplikací\Skype
2010-02-09 17:25:22 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-02-09 16:44:20 ----D---- C:\WINDOWS\SoftwareDistribution
2010-02-09 16:44:17 ----D---- C:\WINDOWS\system32
2010-02-09 16:44:17 ----D---- C:\WINDOWS\Help
2010-02-09 16:44:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-09 16:43:58 ----HD---- C:\WINDOWS\inf
2010-02-09 16:43:55 ----D---- C:\WINDOWS
2010-02-09 16:09:41 ----D---- C:\Documents and Settings\Master\Data aplikací\skypePM
2010-02-09 14:49:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-09 11:34:46 ----SD---- C:\WINDOWS\Tasks
2010-02-09 11:34:00 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-02-08 23:11:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-08 17:49:49 ----RD---- C:\Program Files
2010-02-08 17:48:00 ----D---- C:\WINDOWS\system32\drivers
2010-02-08 15:44:22 ----D---- C:\Documents and Settings\Master\Data aplikací\ICQ
2010-02-07 22:07:30 ----D---- C:\Downloads
2010-02-07 16:17:27 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-02-07 00:02:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\SysMon
2010-02-06 22:44:28 ----SHD---- C:\WINDOWS\Installer
2010-02-06 22:44:27 ----D---- C:\WINDOWS\WinSxS
2010-02-06 19:29:44 ----D---- C:\WINDOWS\system32\DirectX
2010-02-06 19:29:24 ----RSD---- C:\WINDOWS\assembly
2010-02-06 19:08:54 ----A---- C:\WINDOWS\NeroDigital.ini
2010-02-05 22:39:07 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-05 22:27:53 ----A---- C:\WINDOWS\game.ini
2010-02-04 19:34:51 ----D---- C:\Program Files\Google
2010-01-31 11:56:09 ----D---- C:\Documents and Settings\Master\Data aplikací\ZoomBrowser EX
2010-01-31 11:55:47 ----D---- C:\Documents and Settings\Master\Data aplikací\CameraWindowDC
2010-01-27 09:37:18 ----D---- C:\Program Files\Starwars-RACER
2010-01-24 20:02:30 ----D---- C:\WINDOWS\Minidump
2010-01-24 20:02:30 ----D---- C:\WINDOWS\Debug
2010-01-21 11:18:58 ----D---- C:\WINDOWS\system32\Restore
2010-01-18 21:58:09 ----D---- C:\Documents and Settings\Master\Data aplikací\Scanahand
2010-01-18 17:56:13 ----D---- C:\Program Files\AVG
2010-01-18 17:53:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-18 13:12:07 ----D---- C:\WINDOWS\system32\config
2010-01-18 10:06:59 ----HD---- C:\$AVG8.VAULT$
2010-01-10 13:50:37 ----D---- C:\Documents and Settings\Master\Data aplikací\gtk-2.0

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-01-28 28240]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 42496]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-01-28 163280]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-01-28 46672]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2008-10-15 15424]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2008-10-15 512096]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-01-28 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-01-28 100432]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 MaVctrl;MaVctrl; C:\WINDOWS\system32\DRIVERS\MaVc2K.sys [2005-08-18 11473]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-01-28 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-21 3299840]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-03 4745216]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-09-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-09-11 19968]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 arsx0qn6;arsx0qn6; C:\WINDOWS\system32\drivers\arsx0qn6.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\D:\Programy\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 MaRdPnp;MaRdPnp; C:\WINDOWS\system32\DRIVERS\MaRdP2K.sys [2005-08-18 49867]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-11-04 6557408]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-08-21 573440]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2007-01-31 96370]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2008-10-15 552064]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-02-07 75064]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-08-20 593920]
S2 gupdate1ca20a1aca16604;Služba Google Update (gupdate1ca20a1aca16604); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-19 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-19 190448]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-11-04 159812]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-20 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------







Tak,ještě jsem si vzpoměl na věc,která se mi stala dneska.Dostal jsem se konečně,k jedné hře od kamaráda ( kdo chce konkrétně tak Call of Duty 4 ) a rozjel to na plný detaily,komplet všechno na max ,jak už to u nás gemblerů bývá.Najednou prostě se to seklo,zčernala obrazovka a naskočila tato chyba(není to přesně ta chyba co se stala mě,já blbec zapomněl pořídit screen,ale našel jsem si na googlu,nějakého kolegu,kterému se stala ta samá chyba,tak sem dávám jeho screen).

Stalo se mi to poprvé a grafárna je celkem nová,teploty jsou naprosto OK,všechno jsem si kontroloval.Asi po 7-10 sekundách hra opět bez sekání naskočila(podle textu chyby soudím,že se jen restartovala grafická karta).Ještě se mi to opravdu nikdy nestalo,takže jsem zrudnul ,zaklel a podíval se do bendy . Grafárna je celkem nová a ovladače jsem také nedávno aktualizoval... Snad to byl jen detail a nic důležitého,zatím se nic neděje a všechno vypadalo v pohodě....

No uvidíme...

S přáním hezkého večera,
Radagabi.

tak co používáte - Avast nebo Nod?
Jeden odinstalujte, jestli nemáte Nod legálně, tak ten .

Stahněte SAS http://portable.superantispyware.com/sassaferun.php
-proveďte aktualizaci a dejte uplný sken.
-Co najde, smažte,a napište co našel.
(tato verze se neinstaluje, je v angličtině. Pokud potřebujete uplný návod, klikněte mi v podpisu na SAS)

Tak v grafice a s herními problémy se nevyznám, ale dělá Vám to i na nižší rozlišení?

Zdravím.
NOD jsem měl už při první rozjíždění PC,je seskládané a daný prodejce po mě nechtěl,žádný příplatek co se týče NODu,tím pádem je asi Freeware,či něco podobného.Co nejdřív ho odinstaluji,udělám to hned jak budu mít čas.

Ještě před tím než udělám scan,mám si zálohovat data?Je jich celkem dost,takže se ptám.Nedávno jsem na(myslím dokonce vaši stránce či webu nějakých konkurentů),že si mám před použítí SAS(alespoň myslím,že to byl on) zálohovat data,že může např. poškodit některé složky.....

Normálně bych to zálohoval rovnou,ale momentálně nemám moc DVD-íček.


EDIT:
Co se týče té grafiky,problém už nyní nepřetrvává,rozjel jsem Crysis Warhead(což je poprávu považováno za nenáročnější hru na PC) na plné efekty,sice to mělo jeden obrázek za 2 sekundy,ale PC se pěkně zapotil a problém nenaskočil,takže to vypadá ok.

Jen ještě,bych chtěl říct něco na co jsem zapoměl.Windows mi pořád hlásí na liště chybu...Takový ten červený štítek s křížem v levé části plochy,kde mám spuštěné aplikace(jako ATI,Skype,Avast apod...),píše to,že nemám antivir,ale mám(jak jste si už všimla) NOD a Avast,ovšem pořád to píše,nevím proč.....Není to nic,co by mi nějak extra vadilo,jen jsem si na to vzpoměl.Chtěl bych se zeptat,jestli nemám jen nějaké špatné nastavení v ovládacích panelech apod....
Pak jsem ještě zakládal tento topic.Zatím se nikdo neobtěžoval odpovědět,ale je to další informace,která vám možná usnadní práce.

S přáním hezkého dne.
Radagabi.

U SASu bych zálohu asi nedělala, zatím jsem se nesetkala s tím, že by něco poškodil , nespletl jste si to z combofixem?
Ale zálohu by jste měl mít vždy, alespon těch opravdu důležitých souborů - nikdy nevíte, kdy počítač "spadne".

K tomu Vašemu druhému topicu - nepíšete tam, jaký máte firewall - předpokládám, že ten ve windows. Ten je naprosto nedostačující

Aha,dobrá,doinstaluji jiný,z vašeho seznamu.

Fotky a osobní data zálohována radši mám,dobrá,brzy dodám log z testu,možná jsem se spletl.

Omlouvám se, musela jsem od počítače a nedopsala jsem to .
Firewall - projděte si v sekci firewally, zde doporučujeme Zone alarm, comodo, Kerio, Pc tools, uvidíte, který Vám nejlépe "sedne"
Zkuste Avast přeinstalovat, zda se už centru zabezpečení zalíbí . Pokud ne, zkusíme se podívat po rootkitech.

Nod se Vám aktualizuje? Nebyla to jen trial verze? Licenci jste k němu asi nedostal. Nod je placený produkt. Takže pokud ho nemáte legálně zakoupený, odistalujte.

Takže NOD32 se stahuje s oficiálních stránek,takže nevím jestli je nelegální,poradím se s mým prodejcem PC.

Problém s bublinkou,která hlásí chybu-nebyl nalezen antivir,ani po přeinstalu nepřešel.

Stáhl jsem si nakonec Comodo,doporučil mi ho kamarád.

A teď SAS:
Našel u mě jeden Trojskej kůň v jednom hackovacým programu pro Metin2 .
Jinak při procházení SYstem Volume information sice SAS nereagoval,avšak rezidentní štít Avastu mi nahlásil asi 5 malware,ty jsem eliminoval.

Co se týče Rootkitů,nevede se mi je pomocí avastu najít.

Tak toď krátké shrnutí situace,čekám na vaše pokyny .

Radagabi.

Jdeme to proklepnout

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

Omlouvám se za vstup.

Radagabi:Probůh co to máte za podpis? Nic proti tomu nemám, ale nešlo by, aby zabíral trochu míň místa. Ono je pak těžký poznat, co píšete a co je vlastně podpis. Zkuste to trochu osekat.
Děkuju. Pěkný večer.

Za můj podpis se omlouvám,orientoval jsem se tím,že nesmí být delší než 2500 znaků .

LOG z Combofixu:

ComboFix 10-02-11.04 - Master 12.02.2010 18:14:29.1.1 - x86
Spuštěný z: c:\documents and settings\Master\Plocha\ComboFix.exe
* Rezidentní štít AV je zapnutý


VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\ieuinit.inf
c:\windows\system32\Ijl11.dll
c:\windows\system32\tmp66.tmp
c:\windows\system32\tmp67.tmp
c:\windows\system32\twain_32.dll
c:\windows\system32\vbpng1.dll
D:\Autorun.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-12 do 2010-02-12 )))))))))))))))))))))))))))))))
.

2010-02-11 13:56 . 2010-02-11 13:55 87104 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-02-11 13:56 . 2010-02-11 13:55 171552 ----a-w- c:\windows\system32\guard32.dll
2010-02-11 13:56 . 2010-02-11 13:55 25160 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-02-11 13:56 . 2010-02-11 13:55 134344 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2010-02-10 20:35 . 2010-02-10 20:35 -------- d-----w- c:\program files\Zone Labs
2010-02-09 19:00 . 2010-02-09 19:00 -------- d-----w- c:\documents and settings\Master\dwhelper
2010-02-06 21:44 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-02-06 21:44 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-02-06 21:44 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-02-06 21:44 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-02-06 21:44 . 2010-02-11 18:38 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-02-06 21:44 . 2010-02-11 18:38 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-02-06 21:44 . 2010-02-11 18:38 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-02-06 21:44 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-06 21:44 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-02-06 21:44 . 2010-02-06 21:44 -------- d-----w- c:\program files\Alwil Software
2010-02-02 18:54 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-02-02 18:54 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-02-02 18:54 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2010-02-02 18:54 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2010-02-02 18:54 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2010-02-02 18:54 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2010-02-02 18:54 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2010-02-02 18:41 . 2010-02-02 18:41 -------- d--h--w- c:\program files\Zero G Registry
2010-02-02 18:41 . 2010-02-02 18:41 -------- d-----w- c:\program files\Sports Interactive
2010-02-02 18:40 . 2010-02-02 18:40 -------- d--h--w- c:\documents and settings\Master\InstallAnywhere
2010-01-29 21:42 . 2002-08-29 17:33 319488 ----a-r- c:\windows\system32\MafiaSetup.exe
2010-01-20 15:02 . 2010-02-09 20:24 -------- d-----w- c:\program files\trend micro
2010-01-20 15:02 . 2010-01-20 15:02 -------- d-----w- C:\rsit
2010-01-15 20:43 . 2010-01-15 20:43 -------- d-----w- c:\program files\Mobile Action
2010-01-15 20:39 . 2006-06-14 11:02 45696 ----a-r- c:\windows\system32\drivers\ma8630u.sys
2010-01-15 20:39 . 2005-01-25 07:31 25428 ----a-r- c:\windows\system32\drivers\ma8630m.sys
2010-01-15 20:39 . 2004-09-14 10:12 23248 ----a-r- c:\windows\system32\drivers\ma8630c.sys
2010-01-15 20:38 . 2005-08-18 03:44 49867 ----a-r- c:\windows\system32\drivers\mardp2k.sys
2010-01-15 20:38 . 2005-08-18 03:44 49484 ----a-r- c:\windows\system32\drivers\mardpnp.sys
2010-01-15 20:38 . 2005-08-18 03:44 24789 ----a-r- c:\windows\system32\drivers\MaVctrl.sys
2010-01-15 20:38 . 2005-08-18 03:44 11473 ----a-r- c:\windows\system32\drivers\MaVc2K.sys
2010-01-15 20:37 . 2010-01-15 20:37 -------- d-----w- c:\windows\Application Data
2010-01-15 08:38 . 2010-01-15 08:38 -------- d-----w- c:\program files\CIGLER SOFTWARE
2010-01-14 17:45 . 2010-01-14 17:45 -------- d-----w- c:\program files\Astroburn Toolbar
2010-01-14 17:34 . 2010-01-14 17:34 691696 ----a-w- c:\windows\system32\drivers\sptd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-12 16:10 . 2009-10-19 18:40 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-02-12 16:10 . 2009-10-19 18:40 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-02-09 10:34 . 2009-11-16 14:34 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-02-07 15:17 . 2009-10-19 18:39 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-02-05 21:39 . 2008-10-14 18:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-04 18:34 . 2008-12-19 20:23 -------- d-----w- c:\program files\Google
2010-01-27 08:37 . 2008-11-14 16:17 -------- d-----w- c:\program files\Starwars-RACER
2010-01-18 16:56 . 2008-11-29 19:16 -------- d-----w- c:\program files\AVG
2009-12-30 16:07 . 2009-12-30 16:07 -------- d-----w- c:\program files\Common Files\Skype
2009-12-30 16:07 . 2009-12-30 16:07 -------- d-----r- c:\program files\Skype
2009-12-28 20:29 . 2009-12-28 20:29 -------- d-----w- c:\program files\Ubisoft
2009-12-25 10:01 . 2009-12-25 10:01 -------- d-----w- c:\program files\OpenAL
2009-12-25 10:01 . 2008-11-04 14:46 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-25 10:01 . 2008-11-04 14:46 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2008-12-18 18:26 . 2008-12-18 18:26 61440 ----a-w- c:\program files\mozilla firefox\components\gemgecko.dll
2009-01-03 10:49 . 2009-01-03 10:48 24 --sh--w- c:\windows\S9EFF4D37.tmp
.

------- Sigcheck -------

[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2004-08-03 . 6A603809F598332DBEDD535BDBCE313E . 359040 . . [5.1.2600.2180] . . c:\windows\system32\drivers\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"BitComet"="d:\bitcomet\BitComet.exe" [2008-11-12 2511672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-03 16876032]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2008-10-15 949376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-11-04 13529088]
"nwiz"="nwiz.exe" [2008-11-04 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-11-04 86016]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"OpwareSE2"="d:\programy\Scan\ScanSoft OmniPage\OpwareSE2.exe" [2003-05-08 49152]
"OPSE reminder"="d:\programy\Scan\ScanSoft OmniPage\EregEng\Ereg.exe" [2003-07-07 729088]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488]
"COMODO Internet Security"="d:\programy\Comodo\COMODO Internet Security\cfp.exe" [2010-02-11 1800464]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.exe.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-1-18 108544]
Microsoft Office.lnk - d:\programy\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Master\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Registrace NHL™ 09.lnk]
path=c:\documents and settings\Master\Nabídka Start\Programy\Po spuštění\Registrace NHL™ 09.lnk
backup=c:\windows\pss\Registrace NHL™ 09.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Registration Assassin.LNK]
path=c:\documents and settings\Master\Nabídka Start\Programy\Po spuštění\Registration Assassin.LNK
backup=c:\windows\pss\Registration Assassin.LNKStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Master^Nabídka Start^Programy^Po spuštění^Scol.lnk]
path=c:\documents and settings\Master\Nabídka Start\Programy\Po spuštění\Scol.lnk
backup=c:\windows\pss\Scol.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
2008-11-12 09:30 2511672 ----a-w- d:\bitcomet\BitComet.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
2006-09-28 19:21 57344 ----a-w- d:\programy\Clone\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-02-28 15:07 1828136 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 10:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-02-28 07:59 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2008-07-07 08:42 2156368 --sha-r- d:\programy\Anti-virus\Spibot\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-02-02 18:42 1217808 ----a-w- d:\hry\Steam\steam.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Hry\\Tycoon\\zt2demoretail.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Hry\\Assassins Creed\\Hra\\AssassinsCreed_Dx9.exe"=
"d:\\Hry\\Assassins Creed\\Hra\\AssassinsCreed_Dx10.exe"=
"d:\\Hry\\Assassins Creed\\Hra\\AssassinsCreed_Launcher.exe"=
"d:\\Programy\\uTorrent\\utorrent.exe"=
"d:\\Hry\\Football Manager 2010\\fm.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Hry\\Call of Duty 4\\iw3mp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"13874:TCP"= 13874:TCP:BitComet 13874 TCP
"13874:UDP"= 13874:UDP:BitComet 13874 UDP

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-14 691696]
R1 SASDIFSV;SASDIFSV;c:\docume~1\Master\LOCALS~1\Temp\SAS_SelfExtract\SASDIFSV.SYS [x]
R1 SASKUTIL;SASKUTIL;c:\docume~1\Master\LOCALS~1\Temp\SAS_SelfExtract\SASKUTIL.sys [x]
R2 gupdate1ca20a1aca16604;Služba Google Update (gupdate1ca20a1aca16604);c:\program files\Google\Update\GoogleUpdate.exe [2009-08-19 133104]
R3 SASENUM;SASENUM;c:\docume~1\Master\LOCALS~1\Temp\SAS_SelfExtract\SASENUM.SYS [x]
S1 aswSP;aswSP; [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-02-11 134344]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-02-11 25160]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2008-10-15 15424]
S2 aswFsBlk;aswFsBlk; [x]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]

.
Obsah adresáře 'Naplánované úlohy'

2010-02-12 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-19 07:48]

2010-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-19 07:49]

2010-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-19 07:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://google.cz/
uInternet Settings,ProxyOverride = *.local
IE: &Stáhnout &vše FlashGetem
IE: &Stáhnout FlashGetem
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - d:\programy\MICROS~1\Office10\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - d:\bitcomet\BitComet.exe/AddLink.htm
IE: Stáhnout všechna videa s použitím BitCometu - d:\bitcomet\BitComet.exe/AddVideo.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - d:\bitcomet\BitComet.exe/AddAllLink.htm
LSP: c:\windows\system32\imon.dll
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\ctbr.dll
FF - ProfilePath - c:\documents and settings\Master\Data aplikací\Mozilla\Firefox\Profiles\ihrdgjv2.default\
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://puvodni.centrum.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=42&tp=ab&q=
FF - component: c:\program files\Mozilla Firefox\components\gemgecko.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Unity\WebPlayer\loader\npUnity3D32.dll
FF - plugin: d:\programy\Acrobat Reader\Reader\browser\nppdf32.dll
FF - plugin: d:\programy\Picasa 3\Picasa3\npPicasa3.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
MSConfigStartUp-ActiveKeyboard - d:\navody\Active Keyboard\HotFiles.exe
MSConfigStartUp-AVG9_TRAY - c:\progra~1\AVG\AVG9\avgtray.exe
MSConfigStartUp-Flashget - d:\programy\FlashGet\FlashGet.exe
MSConfigStartUp-gcasServ - d:\programy\AntiVIRUS\gcasServ.exe
MSConfigStartUp-ICQ - d:\icq 6.5\ICQ\ICQ6.5\ICQ.exe
AddRemove-Kalender - c:\windows\Uninstall_tkexe -kalender
AddRemove-S4Uninst - c:\bluebyte\The Settlers IV\uninst.isu
AddRemove-Silkolene Honda Motocross GP - d:\hry\honda\Unistshmgp.isu



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-12 18:19
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

Dejte soubor otestovat na http://www.virustotal.com

c:\windows\system32\drivers\tcpip.sys
c:\windows\system32\drivers\ma8630m.sys
c:\windows\system32\drivers\ma8630c.sys


-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky

c:\windows\system32\drivers\tcpip.sys

c:\windows\system32\drivers\ma8630m.sys

c:\windows\system32\drivers\ma8630c.sys