sshnas21.dl

Zpráva

katerina007 · #1 Příspěvek od **katerina007** » 28 bře 2010 08:23

Dobrý den, chtěla bych se zeptat. Po restartu mi počítač hodí tuto hlášku.
C:/Windows/system32/sshnas21.dll došlo k problému
Můžete mi prosím říct, zda je to nebezpečné.

katerina007 · #2 Příspěvek od **katerina007** » 28 bře 2010 08:26

Nasla jsem podobný prispevek tak vkladam OTL

OTL logfile created on: 28.3.2010 9:14:52 - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Users\uzivatel\Documents\Downloads
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 69,00% Memory free
7,00 Gb Paging File | 5,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): d:\pagefile.sys 3000 3000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 99,90 Gb Total Space | 35,58 Gb Free Space | 35,62% Space Free | Partition Type: NTFS
Drive D: | 99,04 Gb Total Space | 37,99 Gb Free Space | 38,36% Space Free | Partition Type: NTFS
Drive E: | 4,37 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 465,75 Gb Total Space | 3,85 Gb Free Space | 0,83% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KATE
Current User Name: uzivatel
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.03.28 09:13:14 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Users\uzivatel\My Documents\Downloads\OTL.exe
PRC - [2010.03.22 19:51:30 | 000,530,928 | ---- | M] (Google Inc.) -- C:\Users\uzivatel\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2010.03.20 21:02:40 | 011,957,424 | ---- | M] (Mozilla Messaging) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
PRC - [2009.11.25 01:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009.06.01 23:20:12 | 000,222,968 | ---- | M] () -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
PRC - [2008.06.11 23:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
PRC - [2006.09.24 18:20:46 | 000,086,016 | ---- | M] (Realtime Soft) -- C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
PRC - [2005.09.14 19:23:18 | 000,368,640 | ---- | M] (RaduKing) -- C:\Program Files Free\RK_Launcher_04_Beta\RKLauncher.exe

========== Modules (SafeList) ==========

MOD - [2010.03.28 09:13:14 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Users\uzivatel\My Documents\Downloads\OTL.exe
MOD - [2009.07.14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009.11.28 01:53:23 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV:64bit: - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV:64bit: - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV:64bit: - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV:64bit: - [2009.07.14 03:41:59 | 000,229,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
SRV:64bit: - [2009.07.14 03:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
SRV:64bit: - [2009.07.14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:64bit: - [2009.07.14 03:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
SRV:64bit: - [2009.07.14 03:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2009.07.14 03:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
SRV:64bit: - [2009.07.14 03:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
SRV:64bit: - [2009.07.14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:64bit: - [2009.07.14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
SRV:64bit: - [2009.07.14 03:41:53 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
SRV:64bit: - [2009.07.14 03:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
SRV:64bit: - [2009.07.14 03:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:41:18 | 000,231,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
SRV:64bit: - [2009.07.14 03:40:54 | 001,127,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:64bit: - [2009.07.14 03:40:28 | 000,314,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2009.07.14 03:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
SRV:64bit: - [2009.07.14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:64bit: - [2009.07.14 03:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
SRV:64bit: - [2009.07.14 03:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
SRV:64bit: - [2009.07.14 03:40:05 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.07.14 03:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
SRV:64bit: - [2009.07.14 03:39:51 | 001,503,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
SRV:64bit: - [2009.07.14 03:39:28 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
SRV:64bit: - [2009.07.14 03:39:11 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
SRV - [2009.11.28 01:50:48 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS)
SRV - [2009.07.14 05:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC)
SRV - [2009.07.14 03:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
SRV - [2009.07.14 03:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV - [2009.07.13 22:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2009.06.10 22:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2009.06.01 23:20:12 | 000,222,968 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2008.10.25 12:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.01.24 18:32:58 | 000,086,584 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:64bit: - [2009.11.25 01:50:25 | 000,089,680 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2009.11.25 01:50:05 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2009.11.25 01:49:56 | 000,065,616 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2009.11.25 01:49:10 | 000,053,840 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2009.11.25 01:49:00 | 000,027,216 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,153,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:48:04 | 000,014,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
DRV:64bit: - [2009.07.14 03:47:49 | 000,055,376 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:56 | 000,022,096 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount)
DRV:64bit: - [2009.07.14 03:45:55 | 000,217,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
DRV:64bit: - [2009.07.14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:64bit: - [2009.07.14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:64bit: - [2009.07.14 03:45:55 | 000,036,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot)
DRV:64bit: - [2009.07.14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 03:45:46 | 000,214,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
DRV:64bit: - [2009.07.14 03:45:45 | 000,050,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw)
DRV:64bit: - [2009.07.14 03:43:14 | 000,460,504 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
DRV:64bit: - [2009.07.14 03:43:13 | 000,223,448 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
DRV:64bit: - [2009.07.14 02:17:46 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus)
DRV:64bit: - [2009.07.14 02:16:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP)
DRV:64bit: - [2009.07.14 02:10:24 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2)
DRV:64bit: - [2009.07.14 02:09:26 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf)
DRV:64bit: - [2009.07.14 02:08:13 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap)
DRV:64bit: - [2009.07.14 02:07:21 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus)
DRV:64bit: - [2009.07.14 02:07:13 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
DRV:64bit: - [2009.07.14 02:07:00 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV:64bit: - [2009.07.14 02:06:52 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass)
DRV:64bit: - [2009.07.14 02:06:24 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf)
DRV:64bit: - [2009.07.14 02:05:37 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
DRV:64bit: - [2009.07.14 02:02:08 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig)
DRV:64bit: - [2009.07.14 02:00:34 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2009.07.14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\beep.sys -- (Beep)
DRV:64bit: - [2009.07.14 01:52:39 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
DRV:64bit: - [2009.07.14 01:50:17 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
DRV:64bit: - [2009.07.14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:64bit: - [2009.07.14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:64bit: - [2009.07.14 01:37:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\discache.sys -- (discache)
DRV:64bit: - [2009.07.14 01:31:06 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt)
DRV:64bit: - [2009.07.14 01:31:03 | 000,017,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt)
DRV:64bit: - [2009.07.14 01:27:17 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
DRV:64bit: - [2009.07.14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:64bit: - [2009.07.14 01:19:25 | 000,060,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM)
DRV:64bit: - [2009.07.13 23:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009.06.10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 15:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008.02.06 04:00:00 | 000,054,480 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV - [2010.01.24 18:32:58 | 000,086,584 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\adfs.sys -- (adfs)
DRV - [2009.11.27 22:28:09 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.14 03:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS)
DRV - [2009.06.10 23:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2009.06.10 23:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.cz/
IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F7 C7 7A D7 A6 6F CA 01 [binary data]
IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... id=afex&q="

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.01.06 23:39:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.01.06 23:39:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010.03.20 21:02:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2009.11.28 01:20:03 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Extensions
[2009.11.28 00:00:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.03.23 00:38:35 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\tn2mviyp.default\extensions
[2009.11.28 01:20:58 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\tn2mviyp.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}
[2010.03.23 00:38:36 | 000,000,961 | ---- | M] () -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\tn2mviyp.default\searchplugins\icqplugin-1.xml
[2010.01.06 23:39:32 | 000,000,961 | ---- | M] () -- C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\tn2mviyp.default\searchplugins\icqplugin.xml
[2009.12.02 19:06:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2009.11.29 12:59:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.11.03 03:45:38 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.11.03 03:45:38 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.11.03 03:45:38 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.11.03 03:45:38 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.11.03 03:45:38 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [nvch] C:\Windows\SysWow64\rchnewver.dll ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001..\Run: [Canaveral] C:\Windows\SysWow64\sshnas21.DLL ()
O4 - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001..\Run: [UltraMon] C:\Program Files\UltraMon\UltraMon.exe (Realtime Soft)
O4 - HKU\S-1-5-21-2400562163-1173250730-4007721440-1001..\Run: [YVIBBBHA8C] C:\Users\uzivatel\AppData\Local\Temp\Xd1.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RKLauncher.exe - Shortcut.lnk = C:\Program Files Free\RK_Launcher_04_Beta\RKLauncher.exe (RaduKing)
O4 - Startup: C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\thunderbird.exe - Shortcut.lnk = C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
O4 - Startup: C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk = C:\Users\uzivatel\AppData\Roaming\Microsoft\Installer\{E67FF1A2-23C1-4102-84E9-42115F77AD32}\IcoUltraMon.ico ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.03.26 18:42:32 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (10)
[2010.03.26 18:41:52 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (9)
[2010.03.26 18:38:14 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (8)
[2010.03.26 18:32:39 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (7)
[2010.03.26 18:24:27 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (6)
[2010.03.26 14:24:23 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\GIF2
[2010.03.26 14:09:48 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (5)
[2010.03.26 14:02:29 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (4)
[2010.03.24 22:54:36 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\perform
[2010.03.23 19:05:16 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\FSResizer
[2010.03.23 15:02:48 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\AppData\Roaming\Free Audio Editor
[2010.03.23 14:56:44 | 000,417,792 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTTextToAudio2.dll
[2010.03.23 14:56:44 | 000,348,160 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTWMAFile2.dll
[2010.03.23 14:56:43 | 001,986,560 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTAudioFile2.dll
[2010.03.23 14:56:43 | 001,212,416 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioInformation2.dll
[2010.03.23 14:56:43 | 000,880,640 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioEditor2.dll
[2010.03.23 14:56:43 | 000,835,584 | ---- | C] (NCT) -- C:\Windows\SysWow64\NCTAudioCDGrabber2.dll
[2010.03.23 14:56:43 | 000,602,112 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioTransform2.dll
[2010.03.23 14:56:43 | 000,479,232 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioVisualization2.dll
[2010.03.23 14:56:43 | 000,458,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioRecord2.dll
[2010.03.23 14:56:43 | 000,458,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioPlayer2.dll
[2010.03.23 14:56:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Audio Editor
[2010.03.23 14:37:37 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\Sony_Creative_Software_Sound_Forge_v9_0-Lz0
[2010.03.22 23:01:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ReaSoft
[2010.03.22 17:55:49 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (3)
[2010.03.22 11:55:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010.03.21 19:36:22 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\STARY FOTO
[2010.03.21 19:35:25 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\New folder (2)
[2010.03.21 19:28:30 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\bas
[2010.03.21 19:27:16 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\zzk
[2010.03.21 15:24:37 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\dane_dalsi
[2010.03.21 15:23:25 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\profil
[2010.03.20 01:10:23 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\objet_invisible
[2010.03.16 09:12:14 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\DANE
[2010.03.16 09:00:43 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\design
[2010.03.16 08:57:52 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\rezidence
[2010.03.16 08:57:21 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\inspirace
[2010.03.14 12:44:24 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\nap
[2010.03.14 03:18:20 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\ja
[2010.03.12 11:14:00 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\banka
[2010.03.11 22:03:14 | 000,000,000 | ---D | C] -- C:\UniScan
[2010.03.09 22:44:27 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\Bregenz NM
[2010.03.09 14:14:16 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\byt
[2010.03.02 16:44:44 | 000,000,000 | ---D | C] -- C:\Users\uzivatel\Desktop\kfo

========== Files - Modified Within 30 Days ==========

[2010.03.28 09:18:05 | 004,718,592 | -HS- | M] () -- C:\Users\uzivatel\NTUSER.DAT
[2010.03.28 09:12:19 | 000,014,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.03.28 09:12:19 | 000,014,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.03.28 09:09:47 | 000,713,888 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.03.28 09:09:47 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.03.28 09:09:47 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.03.28 09:05:07 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.03.28 09:05:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.03.28 09:04:53 | 3220,013,056 | -HS- | M] () -- C:\hiberfil.sys
[2010.03.28 02:24:49 | 006,590,707 | -H-- | M] () -- C:\Users\uzivatel\AppData\Local\IconCache.db
[2010.03.28 02:19:02 | 000,000,974 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2400562163-1173250730-4007721440-1001UA.job
[2010.03.28 02:05:31 | 000,013,370 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý den+.docx
[2010.03.28 02:05:30 | 000,012,836 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv4.docx
[2010.03.28 02:04:57 | 000,012,060 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de7.docx
[2010.03.28 02:04:47 | 000,012,271 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv_verze tři-docx.docx
[2010.03.28 02:04:40 | 000,011,937 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv_final.docx
[2010.03.28 02:02:33 | 000,000,063 | ---- | M] () -- C:\Users\uzivatel\Desktop\Artists - Marian Goodman Gallery.url
[2010.03.28 00:55:08 | 000,013,239 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv_verze dva.docx
[2010.03.28 00:54:59 | 000,013,239 | ---- | M] () -- C:\Users\uzivatel\Desktop\muž.docx
[2010.03.28 00:49:15 | 000,013,121 | ---- | M] () -- C:\Users\uzivatel\Desktop\žena.docx
[2010.03.28 00:46:22 | 000,074,514 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv nevim.docx
[2010.03.27 23:46:06 | 000,012,721 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv3.docx
[2010.03.27 22:59:45 | 000,103,809 | ---- | M] () -- C:\Users\uzivatel\Desktop\krop.jpg
[2010.03.27 22:55:01 | 000,012,942 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv2.docx
[2010.03.27 21:55:09 | 000,125,366 | ---- | M] () -- C:\Users\uzivatel\Desktop\baletka2.jpg
[2010.03.27 21:51:33 | 000,167,561 | ---- | M] () -- C:\Users\uzivatel\Desktop\baletka.jpg
[2010.03.27 21:46:53 | 000,198,646 | ---- | M] () -- C:\Users\uzivatel\Desktop\IMG_6954_1.jpg
[2010.03.27 21:42:20 | 000,975,121 | ---- | M] () -- C:\Users\uzivatel\Desktop\ot_s.jpg
[2010.03.27 15:29:29 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2400562163-1173250730-4007721440-1001Core.job
[2010.03.27 14:02:25 | 000,005,868 | ---- | M] () -- C:\Users\uzivatel\Desktop\LD VEĽKÁ FATRA A LD AQUA foto.jpg
[2010.03.27 12:21:08 | 000,046,354 | ---- | M] () -- C:\Users\uzivatel\Desktop\968230850 (2).jpg
[2010.03.27 12:21:04 | 000,046,354 | ---- | M] () -- C:\Users\uzivatel\Desktop\968230850 (1).jpg
[2010.03.27 12:21:00 | 000,046,354 | ---- | M] () -- C:\Users\uzivatel\Desktop\968230850.jpg
[2010.03.27 12:20:44 | 000,045,624 | ---- | M] () -- C:\Users\uzivatel\Desktop\968206710 (1).jpg
[2010.03.27 12:20:38 | 000,045,624 | ---- | M] () -- C:\Users\uzivatel\Desktop\968206710.jpg
[2010.03.26 22:03:14 | 000,206,837 | ---- | M] () -- C:\Users\uzivatel\Desktop\2736390216_1a76b41647.jpg
[2010.03.26 20:08:45 | 000,110,038 | ---- | M] () -- C:\Users\uzivatel\Desktop\orig. foto PANZER I Ausf.jpg
[2010.03.26 19:15:49 | 001,107,847 | ---- | M] () -- C:\Users\uzivatel\Desktop\storyboard_obraz2.pdf
[2010.03.26 19:15:38 | 001,053,596 | ---- | M] () -- C:\Users\uzivatel\Desktop\storyboard_obraz2.ai
[2010.03.26 19:09:43 | 001,100,275 | ---- | M] () -- C:\Users\uzivatel\Desktop\storyboard_obraz.pdf
[2010.03.26 18:48:54 | 001,045,496 | ---- | M] () -- C:\Users\uzivatel\Desktop\storyboard_obraz.ai
[2010.03.26 18:45:22 | 000,528,442 | ---- | M] () -- C:\Users\uzivatel\Desktop\pozvanka.gif
[2010.03.26 18:36:35 | 001,266,869 | ---- | M] () -- C:\Users\uzivatel\Desktop\gif.gif
[2010.03.26 18:16:28 | 000,039,060 | ---- | M] () -- C:\Users\uzivatel\Desktop\obrazek.jpg
[2010.03.26 18:10:08 | 001,045,056 | ---- | M] () -- C:\Users\uzivatel\Desktop\foto.ai
[2010.03.26 15:29:26 | 002,847,975 | ---- | M] () -- C:\Users\uzivatel\Desktop\anigif.gif
[2010.03.26 14:27:00 | 000,083,968 | -H-- | M] () -- C:\Users\uzivatel\Desktop\photothumb.db
[2010.03.26 14:19:19 | 013,541,074 | ---- | M] () -- C:\Users\uzivatel\Desktop\pozvanka5.gif
[2010.03.26 14:01:01 | 002,012,284 | ---- | M] () -- C:\Users\uzivatel\Desktop\Untitled-1.ai
[2010.03.26 10:40:46 | 000,000,280 | ---- | M] () -- C:\Users\uzivatel\Desktop\Galerie Gisela Capitain - Works.url
[2010.03.26 00:56:12 | 001,189,819 | ---- | M] () -- C:\Users\uzivatel\Desktop\prezentace_ctvrtek.pdf
[2010.03.26 00:55:53 | 008,171,466 | ---- | M] () -- C:\Users\uzivatel\Desktop\speach_about_thesi_ceskys.pptx
[2010.03.26 00:35:54 | 001,190,411 | ---- | M] () -- C:\Users\uzivatel\Desktop\prezentace.pdf
[2010.03.25 17:56:51 | 000,052,554 | ---- | M] () -- C:\Users\uzivatel\Desktop\banner_340x350_3_proklik.swf
[2010.03.25 17:38:33 | 000,506,311 | ---- | M] () -- C:\Users\uzivatel\Desktop\invitation-SoundClash-148x148-maketa.pdf
[2010.03.25 11:08:45 | 011,702,099 | ---- | M] () -- C:\Users\uzivatel\Desktop\speach_about_thesis.pptx
[2010.03.25 11:07:59 | 001,507,630 | ---- | M] () -- C:\Users\uzivatel\Desktop\performance.pdf
[2010.03.25 10:59:00 | 002,051,352 | ---- | M] () -- C:\Users\uzivatel\Desktop\speach_about_her_thesis.pdf
[2010.03.25 02:11:55 | 000,010,401 | ---- | M] () -- C:\Users\uzivatel\Desktop\Pomocnik.docx
[2010.03.25 02:11:50 | 000,010,438 | ---- | M] () -- C:\Users\uzivatel\Desktop\Olaf br.docx
[2010.03.25 00:35:46 | 003,942,684 | ---- | M] () -- C:\Users\uzivatel\Desktop\wakobook2_web.pdf
[2010.03.25 00:35:34 | 002,367,796 | ---- | M] () -- C:\Users\uzivatel\Desktop\wakobook3_web.pdf
[2010.03.24 15:57:40 | 000,259,654 | ---- | M] () -- C:\Users\uzivatel\Desktop\maurizio_anzeri_4-1.jpg
[2010.03.24 15:57:11 | 000,000,115 | ---- | M] () -- C:\Users\uzivatel\Desktop\Microcinema DVDs - Seven Easy Pieces by Marina Abramovic.url
[2010.03.24 15:57:05 | 000,000,127 | ---- | M] () -- C:\Users\uzivatel\Desktop\maurizio_anzeri_1.jpg (1204×852).url
[2010.03.24 09:44:03 | 000,055,305 | ---- | M] () -- C:\Users\uzivatel\Desktop\pes a pani.jpg
[2010.03.24 02:14:49 | 000,000,084 | ---- | M] () -- C:\Users\uzivatel\Desktop\http---catdir.loc.gov-catdir-samples-cam033-2002073480.pdf.url
[2010.03.24 02:14:29 | 000,000,069 | ---- | M] () -- C:\Users\uzivatel\Desktop\http---aluze.cz-2008_01-07_studie_eaton.pdf.url
[2010.03.24 02:14:12 | 000,000,055 | ---- | M] () -- C:\Users\uzivatel\Desktop\http---kinot.ic.cz-walton.pdf.url
[2010.03.24 02:13:58 | 000,000,055 | ---- | M] () -- C:\Users\uzivatel\Desktop\http---kinot.ic.cz-goethe.pdf.url
[2010.03.24 02:13:37 | 000,000,116 | ---- | M] () -- C:\Users\uzivatel\Desktop\http---www.creativityandcognition.com-blogs-le ... ud.pdf.url
[2010.03.24 02:11:12 | 000,000,075 | ---- | M] () -- C:\Users\uzivatel\Desktop\DOKOŘÁN - Nakladatelství - Neřešitelná rovnice - Mario Livio.url
[2010.03.24 02:10:31 | 000,000,066 | ---- | M] () -- C:\Users\uzivatel\Desktop\Number form - Wikipedia, the free encyclopedia.url
[2010.03.24 02:00:35 | 000,520,545 | ---- | M] () -- C:\Users\uzivatel\Desktop\275706_e9e782aebf8e6a7871f7.pdf
[2010.03.24 01:58:19 | 000,099,782 | ---- | M] () -- C:\Users\uzivatel\Desktop\08_studie_danto.pdf
[2010.03.24 01:45:25 | 000,733,901 | ---- | M] () -- C:\Users\uzivatel\Desktop\Eco_91.pdf
[2010.03.24 01:45:02 | 000,000,100 | ---- | M] () -- C:\Users\uzivatel\Desktop\Animal Aesthetics.url
[2010.03.24 01:44:55 | 000,000,100 | ---- | M] () -- C:\Users\uzivatel\Desktop\Art and Embodiment- Biological and Phenomenological Contributions to Understanding Beauty and the Aesthetic.url
[2010.03.24 01:15:49 | 001,685,762 | ---- | M] () -- C:\Users\uzivatel\Desktop\pozvanka4.gif
[2010.03.24 01:13:27 | 000,011,432 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de6.docx
[2010.03.24 01:10:59 | 000,011,449 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de5.docx
[2010.03.24 01:10:47 | 000,011,185 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de4.docx
[2010.03.24 01:10:33 | 000,011,198 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de3.docx
[2010.03.24 01:09:35 | 000,011,176 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de2.docx
[2010.03.24 01:09:23 | 000,011,434 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý de1.docx
[2010.03.24 01:08:55 | 015,740,560 | ---- | M] () -- C:\Users\uzivatel\Desktop\photp-scape 3.2.zip
[2010.03.24 00:53:20 | 000,073,079 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv.docx
[2010.03.24 00:45:34 | 014,024,192 | ---- | M] () -- C:\Users\uzivatel\Desktop\pozvanka4.fla
[2010.03.24 00:43:36 | 000,829,835 | ---- | M] () -- C:\Users\uzivatel\Desktop\pokus.gif
[2010.03.24 00:25:46 | 000,069,454 | ---- | M] () -- C:\Users\uzivatel\Desktop\rukáv.pdf
[2010.03.24 00:03:50 | 000,060,580 | ---- | M] () -- C:\Users\uzivatel\Desktop\ruka.jpg
[2010.03.23 23:50:47 | 000,085,021 | ---- | M] () -- C:\Users\uzivatel\Desktop\Oldřichu.pdf
[2010.03.23 23:50:19 | 000,103,338 | ---- | M] () -- C:\Users\uzivatel\Desktop\A každý den.docx
[2010.03.23 22:02:28 | 005,818,487 | ---- | M] () -- C:\Users\uzivatel\Desktop\Ulead GIF Animator 5.zip
[2010.03.23 19:15:28 | 000,090,066 | ---- | M] () -- C:\Users\uzivatel\Desktop\img-001.gif
[2010.03.23 19:03:13 | 001,523,440 | ---- | M] () -- C:\Users\uzivatel\Desktop\FSResizer.zip
[2010.03.23 18:01:56 | 000,188,416 | ---- | M] () -- C:\Windows\SysWow64\sshnas21.dll
[2010.03.23 14:56:48 | 000,001,897 | ---- | M] () -- C:\Users\uzivatel\Desktop\Free Audio Editor.lnk
[2010.03.23 12:25:20 | 002,064,929 | ---- | M] () -- C:\Users\uzivatel\Desktop\prednaska_obrazky.pdf
[2010.03.23 00:54:24 | 000,010,490 | ---- | M] () -- C:\Users\uzivatel\Desktop\Ta pravá jak jehla v.docx
[2010.03.22 23:23:52 | 000,000,166 | ---- | M] () -- C:\Users\uzivatel\AppData\Local\tmp.tiff
[2010.03.22 23:23:16 | 407,413,022 | ---- | M] () -- C:\Users\uzivatel\AppData\Local\giftmp2.tif
[2010.03.22 22:20:24 | 000,000,070 | ---- | M] () -- C:\Users\uzivatel\Desktop\Karin van Pinxteren.url
[2010.03.22 02:47:58 | 000,002,099 | ---- | M] () -- C:\Users\uzivatel\Desktop\Zobrazit obrázek v plné velikosti.jpg
[2010.03.22 02:45:19 | 000,000,074 | ---- | M] () -- C:\Users\uzivatel\Desktop\Facebook - Mihai Nadolu.url
[2010.03.22 00:10:58 | 000,186,312 | ---- | M] () -- C:\Users\uzivatel\Desktop\_MG_1127.JPG
[2010.03.21 23:57:17 | 001,673,481 | ---- | M] () -- C:\Users\uzivatel\cheese1.jpg
[2010.03.21 23:57:16 | 001,678,045 | ---- | M] () -- C:\Users\uzivatel\cheese2.jpg
[2010.03.21 17:53:07 | 000,011,733 | ---- | M] () -- C:\Users\uzivatel\Desktop\Ikony.docx
[2010.03.20 21:19:06 | 000,021,996 | ---- | M] () -- C:\Users\uzivatel\Documents\final9.eps
[2010.03.19 21:00:46 | 000,000,128 | ---- | M] () -- C:\Users\uzivatel\Desktop\FKV_WiD_Canell_Temporary-Encampment.jpg.url
[2010.03.19 19:52:21 | 000,246,509 | ---- | M] () -- C:\Users\uzivatel\Desktop\image.jpg
[2010.03.19 19:52:15 | 000,000,080 | ---- | M] () -- C:\Users\uzivatel\Desktop\Frieze Magazine - Archive - Giuseppe Gabellone.url
[2010.03.19 19:51:31 | 000,393,644 | ---- | M] () -- C:\Users\uzivatel\Desktop\Ujin Lee- Picture 6.png
[2010.03.19 19:50:32 | 000,061,334 | ---- | M] () -- C:\Users\uzivatel\Desktop\michael delucia- redshift_900.jpg
[2010.03.19 19:49:07 | 000,125,609 | ---- | M] () -- C:\Users\uzivatel\Desktop\freeze9.jpg
[2010.03.17 23:28:58 | 000,000,170 | ---- | M] () -- C:\Users\uzivatel\Desktop\Generali Foundation- Details.url
[2010.03.17 14:10:59 | 000,011,609 | ---- | M] () -- C:\Users\uzivatel\Desktop\Joseph Beuys.docx
[2010.03.15 20:40:36 | 000,977,376 | ---- | M] () -- C:\Users\uzivatel\Desktop\stern.doc
[2010.03.15 15:14:59 | 000,018,875 | ---- | M] () -- C:\Users\uzivatel\Desktop\961168084.jpg
[2010.03.15 13:02:38 | 000,042,040 | ---- | M] () -- C:\Users\uzivatel\Desktop\6822_1136664418978_1298371818_30352463_6543543_n.jpg
[2010.03.15 01:27:24 | 000,000,067 | ---- | M] () -- C:\Users\uzivatel\Desktop\Facebook - Andreiana Mihail.url
[2010.03.15 00:09:58 | 000,237,326 | ---- | M] () -- C:\Users\uzivatel\Desktop\parafraze.pdf
[2010.03.14 21:50:42 | 000,058,880 | ---- | M] () -- C:\Users\uzivatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.03.14 20:44:11 | 000,893,952 | ---- | M] () -- C:\Users\uzivatel\Desktop\stern.pdf
[2010.03.14 03:13:03 | 001,278,377 | ---- | M] () -- C:\Users\uzivatel\Desktop\_DISERTACE.pdf
[2010.03.13 20:35:30 | 008,826,130 | ---- | M] () -- C:\Users\uzivatel\Desktop\portfolio.zip
[2010.03.10 08:50:56 | 003,076,680 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.03.09 14:47:01 | 000,110,520 | ---- | M] () -- C:\Users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.03.04 18:02:01 | 000,448,000 | ---- | M] () -- C:\Users\uzivatel\Desktop\ROZCESTNIK.FLA

katerina007 · #3 Příspěvek od **katerina007** » 28 bře 2010 08:26

========== Files Created - No Company Name ==========

[2010.03.28 02:04:56 | 000,012,060 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de7.docx
[2010.03.28 02:04:40 | 000,011,937 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv_final.docx
[2010.03.28 02:02:33 | 000,000,063 | ---- | C] () -- C:\Users\uzivatel\Desktop\Artists - Marian Goodman Gallery.url
[2010.03.28 01:29:42 | 000,012,271 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv_verze tři-docx.docx
[2010.03.28 00:55:08 | 000,013,239 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv_verze dva.docx
[2010.03.28 00:49:24 | 000,013,239 | ---- | C] () -- C:\Users\uzivatel\Desktop\muž.docx
[2010.03.28 00:46:22 | 000,074,514 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv nevim.docx
[2010.03.28 00:27:51 | 000,013,121 | ---- | C] () -- C:\Users\uzivatel\Desktop\žena.docx
[2010.03.27 23:46:13 | 000,012,836 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv4.docx
[2010.03.27 23:46:06 | 000,012,721 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv3.docx
[2010.03.27 21:54:11 | 000,125,366 | ---- | C] () -- C:\Users\uzivatel\Desktop\baletka2.jpg
[2010.03.27 21:50:49 | 000,167,561 | ---- | C] () -- C:\Users\uzivatel\Desktop\baletka.jpg
[2010.03.27 21:46:37 | 000,198,646 | ---- | C] () -- C:\Users\uzivatel\Desktop\IMG_6954_1.jpg
[2010.03.27 21:41:37 | 000,975,121 | ---- | C] () -- C:\Users\uzivatel\Desktop\ot_s.jpg
[2010.03.27 19:29:48 | 000,103,809 | ---- | C] () -- C:\Users\uzivatel\Desktop\krop.jpg
[2010.03.27 18:56:54 | 000,012,942 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv2.docx
[2010.03.27 14:02:25 | 000,005,868 | ---- | C] () -- C:\Users\uzivatel\Desktop\LD VEĽKÁ FATRA A LD AQUA foto.jpg
[2010.03.27 12:21:07 | 000,046,354 | ---- | C] () -- C:\Users\uzivatel\Desktop\968230850 (2).jpg
[2010.03.27 12:21:04 | 000,046,354 | ---- | C] () -- C:\Users\uzivatel\Desktop\968230850 (1).jpg
[2010.03.27 12:21:00 | 000,046,354 | ---- | C] () -- C:\Users\uzivatel\Desktop\968230850.jpg
[2010.03.27 12:20:44 | 000,045,624 | ---- | C] () -- C:\Users\uzivatel\Desktop\968206710 (1).jpg
[2010.03.27 12:20:38 | 000,045,624 | ---- | C] () -- C:\Users\uzivatel\Desktop\968206710.jpg
[2010.03.27 01:42:53 | 000,013,370 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý den+.docx
[2010.03.26 22:03:13 | 000,206,837 | ---- | C] () -- C:\Users\uzivatel\Desktop\2736390216_1a76b41647.jpg
[2010.03.26 20:08:45 | 000,110,038 | ---- | C] () -- C:\Users\uzivatel\Desktop\orig. foto PANZER I Ausf.jpg
[2010.03.26 19:15:44 | 001,107,847 | ---- | C] () -- C:\Users\uzivatel\Desktop\storyboard_obraz2.pdf
[2010.03.26 19:15:35 | 001,053,596 | ---- | C] () -- C:\Users\uzivatel\Desktop\storyboard_obraz2.ai
[2010.03.26 19:05:05 | 001,100,275 | ---- | C] () -- C:\Users\uzivatel\Desktop\storyboard_obraz.pdf
[2010.03.26 18:48:51 | 001,045,496 | ---- | C] () -- C:\Users\uzivatel\Desktop\storyboard_obraz.ai
[2010.03.26 18:36:30 | 001,266,869 | ---- | C] () -- C:\Users\uzivatel\Desktop\gif.gif
[2010.03.26 18:16:21 | 000,039,060 | ---- | C] () -- C:\Users\uzivatel\Desktop\obrazek.jpg
[2010.03.26 18:10:05 | 001,045,056 | ---- | C] () -- C:\Users\uzivatel\Desktop\foto.ai
[2010.03.26 14:19:15 | 013,541,074 | ---- | C] () -- C:\Users\uzivatel\Desktop\pozvanka5.gif
[2010.03.26 14:10:24 | 000,528,442 | ---- | C] () -- C:\Users\uzivatel\Desktop\pozvanka.gif
[2010.03.26 14:00:58 | 002,012,284 | ---- | C] () -- C:\Users\uzivatel\Desktop\Untitled-1.ai
[2010.03.26 10:40:46 | 000,000,280 | ---- | C] () -- C:\Users\uzivatel\Desktop\Galerie Gisela Capitain - Works.url
[2010.03.26 00:56:09 | 001,189,819 | ---- | C] () -- C:\Users\uzivatel\Desktop\prezentace_ctvrtek.pdf
[2010.03.26 00:35:46 | 001,190,411 | ---- | C] () -- C:\Users\uzivatel\Desktop\prezentace.pdf
[2010.03.25 18:26:10 | 000,052,554 | ---- | C] () -- C:\Users\uzivatel\Desktop\banner_340x350_3_proklik.swf
[2010.03.25 18:21:29 | 008,171,466 | ---- | C] () -- C:\Users\uzivatel\Desktop\speach_about_thesi_ceskys.pptx
[2010.03.25 17:38:31 | 000,506,311 | ---- | C] () -- C:\Users\uzivatel\Desktop\invitation-SoundClash-148x148-maketa.pdf
[2010.03.25 11:08:44 | 011,702,099 | ---- | C] () -- C:\Users\uzivatel\Desktop\speach_about_thesis.pptx
[2010.03.25 11:07:56 | 001,507,630 | ---- | C] () -- C:\Users\uzivatel\Desktop\performance.pdf
[2010.03.25 10:58:46 | 002,051,352 | ---- | C] () -- C:\Users\uzivatel\Desktop\speach_about_her_thesis.pdf
[2010.03.25 02:11:55 | 000,010,401 | ---- | C] () -- C:\Users\uzivatel\Desktop\Pomocnik.docx
[2010.03.25 02:11:48 | 000,010,438 | ---- | C] () -- C:\Users\uzivatel\Desktop\Olaf br.docx
[2010.03.25 00:35:46 | 003,942,684 | ---- | C] () -- C:\Users\uzivatel\Desktop\wakobook2_web.pdf
[2010.03.25 00:35:34 | 002,367,796 | ---- | C] () -- C:\Users\uzivatel\Desktop\wakobook3_web.pdf
[2010.03.24 15:57:40 | 000,259,654 | ---- | C] () -- C:\Users\uzivatel\Desktop\maurizio_anzeri_4-1.jpg
[2010.03.24 15:57:11 | 000,000,115 | ---- | C] () -- C:\Users\uzivatel\Desktop\Microcinema DVDs - Seven Easy Pieces by Marina Abramovic.url
[2010.03.24 15:57:05 | 000,000,127 | ---- | C] () -- C:\Users\uzivatel\Desktop\maurizio_anzeri_1.jpg (1204×852).url
[2010.03.24 09:43:59 | 000,055,305 | ---- | C] () -- C:\Users\uzivatel\Desktop\pes a pani.jpg
[2010.03.24 09:43:08 | 002,821,984 | ---- | C] () -- C:\Users\uzivatel\Desktop\pes-light.tif
[2010.03.24 02:14:49 | 000,000,084 | ---- | C] () -- C:\Users\uzivatel\Desktop\http---catdir.loc.gov-catdir-samples-cam033-2002073480.pdf.url
[2010.03.24 02:14:29 | 000,000,069 | ---- | C] () -- C:\Users\uzivatel\Desktop\http---aluze.cz-2008_01-07_studie_eaton.pdf.url
[2010.03.24 02:14:12 | 000,000,055 | ---- | C] () -- C:\Users\uzivatel\Desktop\http---kinot.ic.cz-walton.pdf.url
[2010.03.24 02:13:58 | 000,000,055 | ---- | C] () -- C:\Users\uzivatel\Desktop\http---kinot.ic.cz-goethe.pdf.url
[2010.03.24 02:13:37 | 000,000,116 | ---- | C] () -- C:\Users\uzivatel\Desktop\http---www.creativityandcognition.com-blogs-le ... ud.pdf.url
[2010.03.24 02:11:12 | 000,000,075 | ---- | C] () -- C:\Users\uzivatel\Desktop\DOKOŘÁN - Nakladatelství - Neřešitelná rovnice - Mario Livio.url
[2010.03.24 02:10:31 | 000,000,066 | ---- | C] () -- C:\Users\uzivatel\Desktop\Number form - Wikipedia, the free encyclopedia.url
[2010.03.24 02:00:35 | 000,520,545 | ---- | C] () -- C:\Users\uzivatel\Desktop\275706_e9e782aebf8e6a7871f7.pdf
[2010.03.24 01:58:19 | 000,099,782 | ---- | C] () -- C:\Users\uzivatel\Desktop\08_studie_danto.pdf
[2010.03.24 01:45:25 | 000,733,901 | ---- | C] () -- C:\Users\uzivatel\Desktop\Eco_91.pdf
[2010.03.24 01:45:02 | 000,000,100 | ---- | C] () -- C:\Users\uzivatel\Desktop\Animal Aesthetics.url
[2010.03.24 01:44:55 | 000,000,100 | ---- | C] () -- C:\Users\uzivatel\Desktop\Art and Embodiment- Biological and Phenomenological Contributions to Understanding Beauty and the Aesthetic.url
[2010.03.24 01:21:23 | 002,847,975 | ---- | C] () -- C:\Users\uzivatel\Desktop\anigif.gif
[2010.03.24 01:16:15 | 000,083,968 | -H-- | C] () -- C:\Users\uzivatel\Desktop\photothumb.db
[2010.03.24 01:13:27 | 000,011,432 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de6.docx
[2010.03.24 01:10:58 | 000,011,449 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de5.docx
[2010.03.24 01:10:47 | 000,011,185 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de4.docx
[2010.03.24 01:10:32 | 000,011,198 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de3.docx
[2010.03.24 01:09:34 | 000,011,176 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de2.docx
[2010.03.24 01:09:23 | 000,011,434 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý de1.docx
[2010.03.24 00:53:14 | 015,740,560 | ---- | C] () -- C:\Users\uzivatel\Desktop\photp-scape 3.2.zip
[2010.03.24 00:45:52 | 001,685,762 | ---- | C] () -- C:\Users\uzivatel\Desktop\pozvanka4.gif
[2010.03.24 00:45:27 | 014,024,192 | ---- | C] () -- C:\Users\uzivatel\Desktop\pozvanka4.fla
[2010.03.24 00:41:26 | 000,829,835 | ---- | C] () -- C:\Users\uzivatel\Desktop\pokus.gif
[2010.03.24 00:03:47 | 000,060,580 | ---- | C] () -- C:\Users\uzivatel\Desktop\ruka.jpg
[2010.03.24 00:02:02 | 000,069,454 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv.pdf
[2010.03.24 00:01:47 | 000,073,079 | ---- | C] () -- C:\Users\uzivatel\Desktop\rukáv.docx
[2010.03.23 23:50:36 | 000,085,021 | ---- | C] () -- C:\Users\uzivatel\Desktop\Oldřichu.pdf
[2010.03.23 23:48:26 | 000,103,338 | ---- | C] () -- C:\Users\uzivatel\Desktop\A každý den.docx
[2010.03.23 21:56:05 | 005,818,487 | ---- | C] () -- C:\Users\uzivatel\Desktop\Ulead GIF Animator 5.zip
[2010.03.23 19:15:27 | 000,090,066 | ---- | C] () -- C:\Users\uzivatel\Desktop\img-001.gif
[2010.03.23 19:01:42 | 001,523,440 | ---- | C] () -- C:\Users\uzivatel\Desktop\FSResizer.zip
[2010.03.23 18:01:56 | 000,188,416 | ---- | C] () -- C:\Windows\SysWow64\sshnas21.dll
[2010.03.23 14:56:48 | 000,001,897 | ---- | C] () -- C:\Users\uzivatel\Desktop\Free Audio Editor.lnk
[2010.03.23 14:56:44 | 000,113,486 | ---- | C] () -- C:\Windows\SysWow64\NCTWMAProfiles.prx
[2010.03.23 12:25:20 | 002,064,929 | ---- | C] () -- C:\Users\uzivatel\Desktop\prednaska_obrazky.pdf
[2010.03.23 00:54:23 | 000,010,490 | ---- | C] () -- C:\Users\uzivatel\Desktop\Ta pravá jak jehla v.docx
[2010.03.22 23:23:52 | 000,000,166 | ---- | C] () -- C:\Users\uzivatel\AppData\Local\tmp.tiff
[2010.03.22 23:21:11 | 407,413,022 | ---- | C] () -- C:\Users\uzivatel\AppData\Local\giftmp2.tif
[2010.03.22 22:20:24 | 000,000,070 | ---- | C] () -- C:\Users\uzivatel\Desktop\Karin van Pinxteren.url
[2010.03.22 02:47:58 | 000,002,099 | ---- | C] () -- C:\Users\uzivatel\Desktop\Zobrazit obrázek v plné velikosti.jpg
[2010.03.22 02:45:19 | 000,000,074 | ---- | C] () -- C:\Users\uzivatel\Desktop\Facebook - Mihai Nadolu.url
[2010.03.21 23:51:56 | 001,678,045 | ---- | C] () -- C:\Users\uzivatel\cheese2.jpg
[2010.03.21 23:51:56 | 001,673,481 | ---- | C] () -- C:\Users\uzivatel\cheese1.jpg
[2010.03.21 17:53:06 | 000,011,733 | ---- | C] () -- C:\Users\uzivatel\Desktop\Ikony.docx
[2010.03.20 21:19:04 | 000,021,996 | ---- | C] () -- C:\Users\uzivatel\Documents\final9.eps
[2010.03.20 01:31:39 | 000,186,312 | ---- | C] () -- C:\Users\uzivatel\Desktop\_MG_1127.JPG
[2010.03.19 21:00:46 | 000,000,128 | ---- | C] () -- C:\Users\uzivatel\Desktop\FKV_WiD_Canell_Temporary-Encampment.jpg.url
[2010.03.19 19:52:21 | 000,246,509 | ---- | C] () -- C:\Users\uzivatel\Desktop\image.jpg
[2010.03.19 19:52:15 | 000,000,080 | ---- | C] () -- C:\Users\uzivatel\Desktop\Frieze Magazine - Archive - Giuseppe Gabellone.url
[2010.03.19 19:51:31 | 000,393,644 | ---- | C] () -- C:\Users\uzivatel\Desktop\Ujin Lee- Picture 6.png
[2010.03.19 19:50:32 | 000,061,334 | ---- | C] () -- C:\Users\uzivatel\Desktop\michael delucia- redshift_900.jpg
[2010.03.19 19:49:07 | 000,125,609 | ---- | C] () -- C:\Users\uzivatel\Desktop\freeze9.jpg
[2010.03.17 23:28:58 | 000,000,170 | ---- | C] () -- C:\Users\uzivatel\Desktop\Generali Foundation- Details.url
[2010.03.17 14:10:58 | 000,011,609 | ---- | C] () -- C:\Users\uzivatel\Desktop\Joseph Beuys.docx
[2010.03.15 20:37:54 | 000,977,376 | ---- | C] () -- C:\Users\uzivatel\Desktop\stern.doc
[2010.03.15 15:14:59 | 000,018,875 | ---- | C] () -- C:\Users\uzivatel\Desktop\961168084.jpg
[2010.03.15 13:02:38 | 000,042,040 | ---- | C] () -- C:\Users\uzivatel\Desktop\6822_1136664418978_1298371818_30352463_6543543_n.jpg
[2010.03.15 01:27:24 | 000,000,067 | ---- | C] () -- C:\Users\uzivatel\Desktop\Facebook - Andreiana Mihail.url
[2010.03.15 00:08:29 | 000,237,326 | ---- | C] () -- C:\Users\uzivatel\Desktop\parafraze.pdf
[2010.03.14 20:44:11 | 000,893,952 | ---- | C] () -- C:\Users\uzivatel\Desktop\stern.pdf
[2010.03.14 03:13:03 | 001,278,377 | ---- | C] () -- C:\Users\uzivatel\Desktop\_DISERTACE.pdf
[2010.03.13 20:32:13 | 008,826,130 | ---- | C] () -- C:\Users\uzivatel\Desktop\portfolio.zip
[2010.03.04 18:01:57 | 000,448,000 | ---- | C] () -- C:\Users\uzivatel\Desktop\ROZCESTNIK.FLA
[2010.01.21 21:53:25 | 000,000,239 | ---- | C] () -- C:\Windows\WINCMD.INI
[2009.12.07 14:42:22 | 000,058,880 | ---- | C] () -- C:\Users\uzivatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.04 15:29:56 | 000,351,337 | ---- | C] () -- C:\Windows\SysWow64\rchnewver.dll
[2009.11.29 12:46:13 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009.11.29 12:05:32 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== LOP Check ==========

[2009.11.28 04:43:19 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Acapela Group
[2009.11.28 23:13:44 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\ACD Systems
[2009.11.27 23:28:47 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Auslogics
[2009.11.28 04:35:47 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Balabolka
[2009.11.27 23:25:17 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\com.focusboosterapp.focusbooster.8E5F79C899747AD22E21DB62AA496926DA6BBC64.1
[2009.11.27 23:25:28 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\com.huskycoding.Hourly.A2DB9EE802395BD9E923438CFA49F1E594B5120C.1
[2010.03.23 16:22:24 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Free Audio Editor
[2010.03.21 11:12:34 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\ICQ
[2009.11.28 00:00:26 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\org Thunderbird
[2010.03.23 14:49:45 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Sony
[2010.01.24 11:31:06 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Stardock
[2009.11.28 00:07:56 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Thunderbird
[2010.01.15 22:22:26 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\VitySoft
[2009.12.08 11:18:06 | 000,000,000 | ---D | M] -- C:\Users\uzivatel\AppData\Roaming\Workrave
[2010.01.22 20:49:38 | 000,032,582 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >

katerina007 · #4 Příspěvek od **katerina007** » 28 bře 2010 09:53

A tohle je log z Malwarebytes. Prosím o pomoc!

Malwarebytes' Anti-Malware 1.44
Database version: 3922
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

28.3.2010 10:51:39
mbam-log-2010-03-28 (10-51-28).txt

Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 515917
Time elapsed: 1 hour(s), 20 minute(s), 36 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 6

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\Software\YVIBBBHA8C (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\WEK9EMDHI9 (Trojan.Agent) -> No action taken.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yvibbbha8c (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\canaveral (Trojan.Downloader) -> No action taken.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\uzivatel\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00e06d (Trojan.Fraudpack) -> No action taken.
C:\Users\uzivatel\AppData\Local\Temp\Xd2.exe (Trojan.Fraudpack) -> No action taken.
C:\Users\uzivatel\AppData\Local\Temp\Xd5.exe (Trojan.Fraudpack) -> No action taken.
C:\Users\uzivatel\AppData\Local\Temp\Xdz.exe (Trojan.Fraudpack) -> No action taken.
C:\Windows\System32\sshnas21.dll (Trojan.Downloader) -> No action taken.
C:\Users\uzivatel\AppData\Local\Temp\sshnas21.dll (Trojan.Downloader) -> No action taken.

#5 Příspěvek od **motji** » 29 bře 2010 21:28

Dobrý večer

Co našel mbam, smažte

Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázek

záložka čistič
-nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
-po analýze klikněte na Spustit Ccleaner

Obrázek

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy

ok

zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.

Poprosim o novy log z OTL

VIRY.CZ

sshnas21.dl

sshnas21.dl

Re: sshnas21.dl

Re: sshnas21.dl

Re: sshnas21.dl

Re: sshnas21.dl