jak se zbavit Autorun.inf ?

Problematika virů a antivirů, zabezpečení PC - firewall, spyware, atd.
Odpovědět
Raoul Duke
Mírně pokročilý
Mírně pokročilý
Uživatelský avatar
Registrován: 28. čer 2007

jak se zbavit Autorun.inf ?

Příspěvek od Raoul Duke »

Potřebuju poradit jak se zbavit autorun.inf a spousty podivných *.exe a *.pif souborů který se mi objevují na všech jednotkách :angry2: .

Prolezl jsem spoustu stránek, našel pár návodů jak ho smazat ale ta mrcha autorun.inf se vždy objeví znova a nejspíš začne vytvářet i ty další soubory.
Microsoft security essentials ty autoruny smaže, ale se stejným výsledkem jako já - za chvíli jsou tam znova.

Předem velký díky za každou dobrou radu :) .

A ještě log z HijackThis v2.0.4 (třeba pomůže):

Kód: Vybrat vše

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:19:34, on 3.8.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
D:\Programy\Free Download Manager\fdm.exe
D:\Programy\DAEMON Tools Lite\DTLite.exe
D:\Programy\uTorrent\uTorrent.exe
D:\Programy\Steam\Steam.exe
D:\Programy\Skype\Phone\Skype.exe
D:\Programy\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Programy\SpeedFan\speedfan.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Windows\SysWOW64\conime.exe
D:\Programy\Opera\opera.exe
D:\Programy\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Aleš\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) -  - (no file)
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Aleš\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - d:\Programy\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Free Download Manager] "d:\Programy\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "d:\Programy\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Steam] "D:\Programy\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "D:\Programy\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-21-714342631-3113501502-3883659254-1002\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-714342631-3113501502-3883659254-1002\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'UpdatusUser')
O4 - Startup: SpeedFan.lnk = D:\Programy\SpeedFan\speedfan.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = D:\Programy\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://d:\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://d:\Programy\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video Free Download Managerem - file://d:\Programy\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://d:\Programy\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://d:\Programy\Free Download Manager\dlall.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - d:\Programy\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - d:\Programy\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - d:\Programy\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://software.kuaiche.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15111/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~2\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10290 bytes
Jen další blázen, v bláznivém království.
Exp
Začátečník
Začátečník
Registrován: 24. črc 2004
Bydliště: Tábor
Kontaktovat uživatele:

Re: jak se zbavit Autorun.inf ?

Příspěvek od Exp »

Začal bych klasicky - MWAV a ComboFix. Až pokud by nezabraly, tak bych řešil co dál.
jan.svoboda
Středně pokročilý
Středně pokročilý
Registrován: 25. pro 2009
Bydliště: Chrudim

Re: jak se zbavit Autorun.inf ?

Příspěvek od jan.svoboda »

Ahoj, chtěl bych prvně log z ComboFixu, viz. návod v mém podpise. Před skenem zapoj i flashky apod. A uvidíme dál :)
Zde na foru již nejsem aktivní, vyskytuji se na Google+ (http://gplus.to/JanSvoboda), kde aktivně píšu nejen o IT.
Raoul Duke
Mírně pokročilý
Mírně pokročilý
Uživatelský avatar
Registrován: 28. čer 2007

Re: jak se zbavit Autorun.inf ?

Příspěvek od Raoul Duke »

a teď už z nouzovýho režimu :sad:

Kód: Vybrat vše

ComboFix 11-08-03.02 - Aleš 03.08.2011  16:00:13.6.4 - x64 NETWORK
Microsoft® Windows Vista™ Business   6.0.6002.2.1250.420.1029.18.4094.3267 [GMT 2:00]
Spuštěný z: d:\download\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
 * Vytvořen nový Bod Obnovení
.
.
(((((((((((((((((((((((((((((((((((((((   Ostatní výmazy   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\huukj.pif
E:\pybr.pif
J:\fnvp.pif
.
---- Předchozí spuštění -------
.
C:\abft.pif
C:\ajbg.exe
C:\ajfk.pif
C:\ajsu.pif
C:\akpdb.pif
C:\assllm.pif
C:\axck.exe
C:\bavkk.pif
C:\bhms.exe
C:\bhujq.pif
C:\bjskkd.exe
C:\bncdd.exe
C:\bomre.pif
C:\bpgkf.pif
C:\btxm.exe
C:\cafj.exe
C:\caqnav.pif
C:\cdcg.exe
C:\cflmf.exe
C:\cfqh.pif
C:\cjip.pif
C:\ckquxl.pif
C:\cmwh.pif
C:\coat.exe
C:\cpqqy.exe
C:\cpqv.exe
C:\cqmmq.exe
C:\cuiy.pif
C:\cwceko.pif
C:\dbst.pif
C:\dmie.exe
C:\dmtu.pif
C:\dprnp.exe
C:\dqtne.pif
C:\dqxjb.exe
C:\dsgmrq.exe
C:\dsxw.pif
C:\dvkhh.pif
C:\dwehaq.pif
C:\dwun.pif
C:\ecwt.pif
C:\edvpak.pif
C:\egen.exe
C:\eiat.pif
C:\eiuqy.pif
C:\ejduov.pif
C:\emostp.pif
C:\emrs.pif
C:\epil.pif
C:\esrta.pif
C:\etjpw.pif
C:\euou.exe
C:\ewwalp.pif
C:\exlyq.pif
C:\eyif.exe
C:\eyjy.pif
C:\eynf.pif
C:\fcyai.pif
C:\fdkx.pif
C:\fedr.exe
C:\fewho.pif
C:\fhqhy.pif
C:\fjlpw.exe
C:\fkms.exe
C:\flqtk.pif
C:\flrv.exe
C:\fmdg.exe
C:\fsjn.exe
C:\fumcgr.pif
C:\furvw.pif
C:\fvcov.pif
C:\fvhqh.pif
C:\gjgj.exe
C:\gjqv.exe
C:\gjyx.exe
C:\gxkob.pif
C:\haga.exe
C:\huukj.pif
C:\hxbw.exe
C:\chcy.exe
C:\ibtr.exe
C:\iddy.exe
C:\iqjqhd.pif
C:\irkda.pif
C:\irpu.pif
C:\isym.exe
C:\jaqyx.pif
C:\jenb.exe
C:\joyg.exe
C:\jwsxv.pif
C:\jydfk.pif
C:\kaero.pif
C:\kdcjsh.exe
C:\keyq.exe
C:\kfqfjt.exe
C:\kfsa.pif
C:\kghx.pif
C:\kgts.exe
C:\kgyhyh.exe
C:\kkbe.exe
C:\kkxvtw.exe
C:\kqmf.exe
C:\krxp.pif
C:\lgasl.pif
C:\ljhtnq.pif
C:\llky.pif
C:\lqptbh.exe
C:\lsuy.pif
C:\lvpw.pif
C:\mdpyb.pif
C:\mdse.pif
C:\miyrsb.pif
C:\mjifaj.pif
C:\mnker.pif
C:\mrwow.pif
C:\mylq.pif
C:\nbxo.exe
C:\nddxv.exe
C:\ndeb.exe
C:\neeb.exe
C:\nglvh.pif
C:\ngud.pif
C:\nipiq.pif
C:\njrmgo.pif
C:\nmmrqc.pif
C:\nswrqb.pif
C:\ntqp.pif
C:\ocqnn.pif
C:\odre.exe
C:\oerdpk.pif
C:\ofdxhj.pif
C:\ojsqa.pif
C:\olvpmj.pif
C:\oomd.exe
C:\opyi.exe
C:\oqha.exe
C:\oqiod.pif
C:\owjwal.pif
C:\oxoc.exe
C:\pcoiga.pif
C:\pecv.exe
C:\ppqc.pif
C:\pvbmee.pif
C:\pvkin.pif
C:\pytn.exe
C:\qakigq.pif
C:\qeerwn.pif
C:\qekl.exe
C:\qfig.exe
C:\qfky.exe
C:\qkfly.pif
C:\qmawc.pif
C:\qmnur.pif
C:\quoe.exe
C:\radc.pif
C:\rcuc.exe
C:\rcvnb.exe
C:\rerao.pif
C:\rfyry.exe
C:\rgsnp.pif
C:\rkkunt.pif
C:\rors.pif
C:\rosl.exe
C:\rqck.pif
C:\rttj.pif
C:\rvamkv.pif
C:\rxji.pif
C:\sffkq.pif
C:\sfwip.pif
C:\sgsl.exe
C:\shfgw.exe
C:\sidvl.pif
C:\sjhdf.pif
C:\slunxp.pif
C:\spugpn.pif
C:\srgsbh.exe
C:\srrhb.exe
C:\sttdj.pif
C:\swmya.pif
C:\tblqp.pif
C:\tbque.pif
C:\tedkqt.pif
C:\tlct.exe
C:\tmgw.pif
C:\tmtnrw.pif
C:\tqkuh.pif
C:\tqvgjl.exe
C:\tsapoq.pif
C:\tsxy.pif
C:\tvxfdm.pif
C:\txoa.pif
C:\tyfj.exe
C:\udifx.pif
C:\uemy.exe
C:\ufnnna.pif
C:\ugaci.pif
C:\uobori.pif
C:\urclh.pif
c:\users\ALE~1\AppData\Local\Temp\sfamcc00001.dll
c:\users\ALE~1\AppData\Local\Temp\sfareca00001.dll
c:\users\Aleš\AppData\Local\Temp\sfamcc00001.dll
c:\users\Aleš\AppData\Local\Temp\sfareca00001.dll
C:\usthax.pif
C:\vcnk.exe
C:\vhof.pif
C:\viartk.pif
C:\vipw.exe
C:\vmls.pif
C:\vmovf.pif
C:\vowrv.pif
C:\vrqj.pif
C:\vwxmpi.pif
C:\vxgs.exe
C:\vycndd.pif
C:\vyhn.pif
C:\wagg.pif
C:\wbffky.exe
C:\wcfpp.exe
C:\wcvxt.pif
C:\wddo.exe
C:\wfqxcv.pif
C:\wfvjuh.pif
C:\wgoq.pif
c:\windows\iun6002.exe
c:\windows\TEMP\logishrd\LVPrcInj01.dll
C:\wlvwrd.pif
C:\wnfeqa.pif
C:\wurs.exe
C:\wwihf.pif
C:\xdxiyf.pif
C:\xgbn.pif
C:\xgmjx.exe
C:\xjinr.pif
C:\xjtcjh.exe
C:\xogj.exe
C:\xpjj.pif
C:\xqdlc.pif
C:\xtkfmk.pif
C:\xtlbng.exe
C:\xtthgc.exe
C:\ycly.pif
C:\ycmu.pif
C:\ycpsiq.pif
C:\ydnj.pif
C:\yfjn.exe
C:\ykycis.pif
C:\ypybeh.pif
C:\ytdp.exe
C:\yuxbtb.pif
C:\yxmk.pif
D:\abeciw.pif
D:\acvn.exe
D:\adeh.exe
D:\ahligq.pif
D:\akbey.pif
D:\akct.exe
D:\amahj.pif
D:\bavv.exe
D:\bbfe.exe
D:\bcrj.pif
D:\bdihh.pif
D:\bhxo.exe
D:\bhxpc.pif
D:\bkrbe.pif
D:\blylyh.pif
D:\boths.pif
D:\bvms.exe
D:\bxss.pif
D:\cbjq.pif
D:\cduqa.pif
D:\cent.exe
D:\cfwksu.pif
D:\cgdk.exe
D:\cgqra.pif
D:\ckon.exe
D:\clfje.pif
D:\cmdu.exe
D:\cnbsln.pif
D:\cnwpa.pif
D:\cuse.exe
D:\cvll.pif
D:\cwep.pif
D:\cyjw.exe
D:\cymbh.pif
D:\cymr.exe
D:\dbgnt.pif
D:\dbhf.exe
D:\ddoqb.pif
D:\ddxmr.pif
D:\dhpjrn.exe
D:\dhte.exe
D:\digfqh.pif
D:\disp.pif
D:\dkbg.exe
D:\dlla.exe
D:\dmnl.pif
D:\dnun.exe
D:\dsxumn.pif
D:\dtbms.pif
D:\dydeak.pif
D:\ebhjrw.pif
D:\eicp.pif
D:\eiobr.pif
D:\ejbqn.pif
D:\ekgchm.pif
D:\elxul.pif
D:\epxe.exe
D:\eqjyip.pif
D:\eqpu.exe
D:\evug.exe
D:\fcpwh.exe
D:\ffknx.pif
D:\fklneb.pif
D:\fmdpyw.pif
D:\frrsc.exe
D:\fwxpp.pif
D:\gcis.pif
D:\gdklkd.pif
D:\gjnqv.exe
D:\gkmx.exe
D:\gnxo.exe
D:\govda.pif
D:\gscfb.exe
D:\gugi.pif
D:\gvci.pif
D:\gxcpcc.pif
D:\gxql.exe
D:\hbjpmy.exe
D:\hclrlk.exe
D:\hekkl.pif
D:\hivk.pif
D:\hkpdt.pif
D:\hrhptf.exe
D:\hspx.exe
D:\huit.exe
D:\hwjtm.exe
D:\hxmml.exe
D:\hxtl.pif
D:\chlwq.pif
D:\idbrm.pif
D:\iehiv.pif
D:\ihsu.exe
D:\imnwpo.pif
D:\ipgj.pif
D:\iveg.exe
D:\iwmqfl.pif
D:\jayucv.pif
D:\jdcyfg.exe
D:\jepy.pif
D:\jeyv.exe
D:\jgqwy.pif
D:\jics.exe
D:\jjpmdw.exe
D:\jmwngt.exe
D:\juvlxi.pif
D:\jvvyv.pif
D:\jwbgtj.exe
D:\jyad.pif
D:\jyws.exe
D:\kcncbl.exe
D:\ketdy.pif
D:\kfdb.pif
D:\kfmgkb.exe
D:\kgbj.exe
D:\kiexub.pif
D:\kjhbji.pif
D:\knuk.pif
D:\kobd.pif
D:\kppejs.pif
D:\kqmrm.exe
D:\kqne.exe
D:\krhhh.exe
D:\ksyhd.exe
D:\ktprb.pif
D:\kxxdrx.exe
D:\kymui.pif
D:\lbrvr.exe
D:\lcus.pif
D:\ldyoju.pif
D:\lilf.pif
D:\ljkw.pif
D:\lkpg.pif
D:\lnsv.exe
D:\locebt.pif
D:\lpjw.exe
D:\lppjj.exe
D:\lsbbl.pif
D:\ltbh.exe
D:\lvak.exe
D:\mect.exe
D:\mgrt.pif
D:\mgxwd.pif
D:\mhcry.exe
D:\migf.pif
D:\mtnlhl.exe
D:\muicmq.pif
D:\myhk.exe
D:\ncrk.exe
D:\nffnqx.pif
D:\nfsj.exe
D:\njyy.exe
D:\nmdyat.pif
D:\nmqs.pif
D:\nmyp.exe
D:\npeglu.pif
D:\nqap.pif
D:\nrvqvl.pif
D:\nscymr.pif
D:\ntahn.pif
D:\nvsxjb.pif
D:\nykcp.exe
D:\oftm.exe
D:\ojwi.exe
D:\omij.pif
D:\oslkgh.pif
D:\osmkiu.pif
D:\ovha.pif
D:\ovjp.pif
D:\ovqc.pif
D:\owuf.exe
D:\pdhx.exe
D:\pdtdy.exe
D:\pgsckl.pif
D:\pkwywl.pif
D:\plyaa.pif
D:\pnhvy.pif
D:\pntyf.exe
d:\programy\Steam\Steam.exe
D:\prxgg.exe
D:\psif.pif
D:\pwjbn.pif
D:\pxkh.exe
D:\pxygm.pif
D:\qduw.pif
D:\qgvwfx.exe
D:\qqjfrj.pif
D:\qslrvp.pif
D:\qxoirp.pif
D:\rabba.pif
D:\raey.pif
D:\rcwu.exe
D:\rghmj.pif
D:\rglo.exe
D:\riixp.pif
D:\rlex.pif
D:\rlxrwf.pif
D:\rqllpa.pif
D:\rwhng.pif
D:\scsya.pif
D:\siqy.exe
D:\sjgr.exe
D:\sjhssh.pif
D:\sjix.exe
D:\smvhgb.exe
D:\spgpp.exe
D:\sucvx.pif
D:\svxmem.pif
D:\taje.exe
D:\tbrd.exe
D:\tjantq.pif
D:\tlovfd.pif
D:\tnebho.pif
D:\tryqsp.exe
D:\udpir.pif
D:\ufdbvm.pif
D:\ukrn.exe
D:\unhnqo.pif
D:\unuajb.pif
D:\uoajq.pif
D:\uobiq.pif
D:\uowqo.pif
D:\vcghxu.pif
D:\vhbo.pif
D:\vhywn.pif
D:\vnxtge.pif
D:\vobjfe.pif
D:\vomktt.pif
D:\vsce.exe
D:\vujaiy.pif
D:\vwdtx.pif
D:\vxhws.exe
D:\wbfg.exe
D:\wbpljf.pif
D:\wiixa.pif
D:\wlny.exe
D:\wlvock.pif
D:\wmva.exe
D:\wnkv.exe
D:\wqubpm.pif
D:\wvof.exe
D:\wwgjv.pif
D:\wxpvjx.pif
D:\wxwni.pif
D:\wyxgqw.exe
D:\xdmv.exe
D:\xfwwq.exe
D:\xobd.exe
D:\xsbpsg.exe
D:\xxhnyt.exe
D:\xyms.exe
D:\yanhyx.pif
D:\ybld.pif
D:\yblmf.pif
D:\ybxtqh.exe
D:\yctgq.exe
D:\yhvx.exe
D:\yjwqd.exe
D:\ykshsh.pif
D:\ytosu.pif
D:\yufmkg.pif
D:\ywcyg.pif
D:\ywqvd.pif
D:\yynle.pif
E:\ahsht.pif
E:\alrs.exe
E:\anny.exe
E:\avbnjp.pif
E:\avrrp.pif
E:\aygps.pif
E:\bbju.exe
E:\bcouur.pif
E:\bieu.pif
E:\bkqre.pif
E:\bkvh.exe
E:\blrytj.exe
E:\bmjh.pif
E:\bnsmr.pif
E:\bocb.exe
E:\bpxrv.exe
E:\btxat.pif
E:\bvwxp.pif
E:\cacqqx.pif
E:\cajroe.pif
E:\ccav.pif
E:\cfcb.exe
E:\cmug.exe
E:\ctbg.exe
E:\cumy.exe
E:\dbcrfb.exe
E:\dbip.pif
E:\dbna.pif
E:\debwib.pif
E:\djdbi.pif
E:\dkxv.pif
E:\doff.exe
E:\dvfmt.exe
E:\dwjwpq.exe
E:\dxtm.pif
E:\dymjkd.exe
E:\emap.pif
E:\emhvxj.pif
E:\eniqj.pif
E:\esmm.exe
E:\esvmba.pif
E:\eujx.exe
E:\excl.exe
E:\eysf.pif
E:\fbtw.pif
E:\fdpsq.exe
E:\ffil.pif
E:\ffplj.exe
E:\fksm.pif
E:\fohn.pif
E:\fqrx.pif
E:\ftok.pif
E:\fwhlv.pif
E:\gdhrf.pif
E:\gghekn.pif
E:\gmttm.exe
E:\gtbj.exe
E:\gtttwh.pif
E:\gwaeb.pif
E:\hclof.pif
E:\hehtvx.pif
E:\hrnjyc.exe
E:\hvtxj.pif
E:\hvyh.exe
E:\ibsa.exe
E:\iekv.exe
E:\ifcgn.pif
E:\imuv.exe
E:\iqoe.pif
E:\jcdhl.exe
E:\jdhpv.pif
E:\jfoj.exe
E:\jhbq.exe
E:\jjvkpk.exe
E:\jmgxtb.exe
E:\jolnam.pif
E:\jrjj.pif
E:\kbnji.pif
E:\kcqf.pif
E:\kgoq.exe
E:\khkfnu.pif
E:\kqft.exe
E:\kqspy.exe
E:\ktwld.exe
E:\kvxd.exe
E:\lasd.pif
E:\lmtk.pif
E:\lpne.exe
E:\lqcyy.pif
E:\lqvdg.exe
E:\mdcj.exe
E:\medc.exe
E:\mfaork.pif
E:\mfch.exe
E:\mowux.pif
E:\mrtbc.pif
E:\muxdau.pif
E:\mwrlp.exe
E:\mwvd.exe
E:\nfgtrw.pif
E:\nksn.pif
E:\nlkmc.pif
E:\nohn.exe
E:\nvgy.pif
E:\nvjk.pif
E:\nxod.exe
E:\oayvnn.pif
E:\occs.exe
E:\oceidd.pif
E:\offl.exe
E:\oinr.exe
E:\oowb.exe
E:\opxi.exe
E:\oucx.pif
E:\oxwd.exe
E:\pdpl.exe
E:\pethj.pif
E:\piry.pif
E:\pmdxjn.exe
E:\pxcv.exe
E:\pxhw.pif
E:\pybr.pif
E:\qbmip.pif
E:\qdjjuj.pif
E:\qgne.exe
E:\qjhr.pif
E:\qkctq.exe
E:\qlpuh.pif
E:\qogkhx.pif
E:\qpjccw.pif
E:\qyoq.exe
E:\rcol.pif
E:\rimtfp.pif
E:\rngv.exe
E:\rnod.exe
E:\rpgv.pif
E:\rpmn.exe
E:\rqfhr.exe
E:\rspu.pif
E:\scxi.pif
E:\sebe.pif
E:\sfcv.pif
E:\sgtptp.pif
E:\skxqdt.pif
E:\srdq.pif
E:\ssmo.exe
E:\stql.exe
E:\sutqyk.pif
E:\swlcc.pif
E:\talmxe.pif
E:\tdui.exe
E:\tifgc.pif
E:\tjtnn.pif
E:\tsrq.pif
E:\tsxa.pif
E:\twcw.pif
E:\tylmc.pif
E:\ugrt.exe
E:\uidi.exe
E:\unhese.pif
E:\unkm.pif
E:\urmb.pif
E:\uryub.pif
E:\uyql.exe
E:\vbtas.pif
E:\vdshwt.exe
E:\vfqw.exe
E:\vhim.pif
E:\viky.pif
E:\vngqbg.exe
E:\vpatyd.pif
E:\vrkvg.pif
E:\vtkndn.pif
E:\vwxlv.pif
E:\wbof.pif
E:\wcgp.exe
E:\wedv.exe
E:\whfo.exe
E:\wifn.pif
E:\xctyyx.pif
E:\xmdqri.pif
E:\xrph.exe
E:\xwtn.exe
E:\xxis.pif
E:\yccsj.pif
E:\yfassn.pif
E:\yxst.pif
I:\aajrxo.pif
I:\abhc.exe
I:\bhaxoy.pif
I:\bhcqc.pif
I:\bilg.pif
I:\catl.exe
I:\cjcqde.pif
I:\cjvk.pif
I:\claa.exe
I:\cmmc.exe
I:\cpxd.pif
I:\csvhc.pif
I:\cthc.exe
I:\dagy.exe
I:\dbju.pif
I:\diapbb.pif
I:\djyxl.pif
I:\draccs.pif
I:\ebqq.exe
I:\ecjj.pif
I:\ekfa.exe
I:\emav.pif
I:\endtg.pif
I:\esox.exe
I:\fcbrmn.pif
I:\fcio.pif
I:\ffvle.pif
I:\fjdjc.pif
I:\fqfv.exe
I:\fxkgon.pif
I:\gaco.pif
I:\geayr.pif
I:\gepl.exe
I:\gjot.exe
I:\gjxa.exe
I:\gnai.pif
I:\gwcrvk.exe
I:\harai.pif
I:\hcjk.exe
I:\hdknm.exe
I:\hmou.exe
I:\hqxrxe.pif
I:\httg.exe
I:\hyjfeb.pif
I:\ibtqo.pif
I:\ifron.pif
I:\ilqgq.pif
I:\inlhqg.pif
I:\ioigx.pif
I:\jddjn.pif
I:\jhcbav.pif
I:\jpeo.exe
I:\jpxgpx.exe
I:\jwbnce.pif
I:\kaiohf.pif
I:\kdap.pif
I:\kdmp.exe
I:\kftb.pif
I:\koiv.exe
I:\kolh.pif
I:\kpkqsq.pif
I:\krpdsu.pif
I:\lackq.pif
I:\lbwd.pif
I:\lejy.exe
I:\lpuy.pif
I:\ltku.exe
I:\ltys.pif
I:\lxkrkl.exe
I:\mnbwti.pif
I:\mngten.pif
I:\mpvvbx.pif
I:\mrdt.exe
I:\nndny.pif
I:\npjxq.pif
I:\nsvk.exe
I:\ntgm.pif
I:\nxhkw.exe
I:\oioyjc.pif
I:\pavp.exe
I:\pccv.exe
I:\pcquco.pif
I:\pdkj.pif
I:\pdqx.exe
I:\phnc.pif
I:\piamp.pif
I:\pjmhjb.exe
I:\pmkrow.pif
I:\pmyyc.exe
I:\qhlotc.pif
I:\qmvpf.exe
I:\qxmqhm.exe
I:\rffwq.pif
I:\rgnf.pif
I:\rtpl.exe
I:\rtsk.pif
I:\rxxwpb.pif
I:\ryqrjt.pif
I:\scomvl.pif
I:\sjkexx.pif
I:\skyt.exe
I:\sqpp.exe
I:\tbepqw.pif
I:\tbvcql.exe
I:\tcmqff.pif
I:\tfhskd.exe
I:\tfpy.pif
I:\tglul.pif
I:\tiqgh.pif
I:\tpjgp.pif
I:\ucrqjb.pif
I:\ufarbe.pif
I:\ufui.pif
I:\ugka.pif
I:\ugkd.exe
I:\uins.exe
I:\utsja.pif
I:\uwdf.exe
I:\vfqd.pif
I:\vmpwq.exe
I:\vnilbc.pif
I:\vykpry.pif
I:\vywfeg.pif
I:\wbpvqc.exe
I:\wftbq.pif
I:\wnim.pif
I:\wqbo.pif
I:\wrii.exe
I:\wyysrl.pif
I:\xantlj.pif
I:\xdyv.pif
I:\xfkd.pif
I:\xuik.exe
I:\ybig.exe
I:\yebm.pif
I:\ygdkow.pif
I:\ygtj.exe
I:\yhgs.exe
I:\yjhi.pif
I:\ywiv.exe
J:\fnvp.pif
J:\jgyvwt.pif
J:\olfk.pif
J:\pbdpgt.pif
J:\vpntbb.exe
K:\adpp.exe
K:\akppne.pif
K:\amlk.pif
K:\autorun.inf
K:\bcjuo.pif
K:\bncn.pif
K:\bvlv.exe
K:\cjsm.exe
K:\cmymym.pif
K:\cstyd.pif
K:\csyix.pif
K:\cxcuy.pif
K:\dcrsd.exe
K:\dpojb.pif
K:\eqmf.pif
K:\evgj.pif
K:\ewjcn.pif
K:\fftmkb.exe
K:\flqu.pif
K:\fqvj.exe
K:\frph.pif
K:\gbfw.pif
K:\gcili.pif
K:\gfkxr.exe
K:\gfrcnb.exe
K:\ggyuj.pif
K:\gijuvc.pif
K:\gqpkp.exe
K:\gwvcl.pif
K:\hblagr.pif
K:\hieu.pif
K:\ilxaw.pif
K:\ipnqgp.pif
K:\islh.exe
K:\iwwr.pif
K:\jhlvgn.exe
K:\jlulww.pif
K:\jsod.exe
K:\jwdb.pif
K:\kcyo.exe
K:\kdni.pif
K:\kwtft.pif
K:\lgtqyj.exe
K:\lhrdh.pif
K:\lvjyq.exe
K:\mchmwf.exe
K:\mifaf.pif
K:\mtkp.pif
K:\mxpdeq.pif
K:\nkjoph.pif
K:\nkkkb.pif
K:\nvwdl.exe
K:\oald.exe
K:\oikw.exe
K:\olxk.exe
K:\onmw.exe
K:\ouyd.pif
K:\papfg.pif
K:\qatqc.pif
K:\qlbmxk.exe
K:\rhdo.exe
K:\rjhfn.pif
K:\rjqr.exe
K:\rsxl.exe
K:\rtjjpr.exe
K:\rtwgf.pif
K:\rybn.pif
K:\skkpx.pif
K:\sspthj.exe
K:\tasvdw.pif
K:\tfsl.exe
K:\tmvcrh.exe
K:\tvvg.pif
K:\ubagq.pif
K:\ukqnp.pif
K:\vcnq.exe
K:\vcqka.pif
K:\vroes.pif
K:\vthkaj.pif
K:\whpt.pif
K:\wkty.pif
K:\xetu.exe
K:\xgvjxp.pif
K:\xpok.pif
K:\ybgm.exe
K:\yfcx.pif
K:\yfovil.pif
K:\yhdgu.pif
K:\ypsmf.exe
K:\ystb.exe
R:\liiqad.pif
.
----- Souboroví replikátoři -----
.
C:\acltqk.exe
C:\adega.exe
C:\ahhlf.exe
C:\ajbg.exe
C:\akvifv.exe
C:\awcxre.exe
C:\bbolyn.exe
C:\bhms.exe
C:\bitesn.exe
C:\bjskkd.exe
C:\bncdd.exe
C:\bpjeb.exe
C:\btqruy.exe
C:\cafj.exe
C:\cbqapk.exe
C:\cdcg.exe
C:\ckapvu.exe
C:\coat.exe
C:\cokijo.exe
C:\cpqqy.exe
C:\cpqv.exe
C:\cqmmq.exe
C:\cvsuv.exe
C:\dfaja.exe
C:\dmie.exe
C:\dnodlm.exe
C:\dqxjb.exe
C:\dsgmrq.exe
C:\egen.exe
C:\elfyan.exe
C:\eveaxy.exe
C:\eyif.exe
C:\fedr.exe
C:\fjlpw.exe
C:\fkms.exe
C:\flrv.exe
C:\fmdg.exe
C:\fsjn.exe
C:\fvjeu.exe
C:\fwtous.exe
C:\gjgj.exe
C:\gjqv.exe
C:\gjyx.exe
C:\glpud.exe
C:\gvhab.exe
C:\haga.exe
C:\hxbw.exe
C:\chcy.exe
C:\ibtr.exe
C:\icmwoq.exe
C:\iddy.exe
C:\illgj.exe
C:\isym.exe
C:\jbqsap.exe
C:\jenb.exe
C:\jfoapn.exe
C:\jgkeis.exe
C:\joyg.exe
C:\jxcnu.exe
C:\kcoha.exe
C:\kdcjsh.exe
C:\keyq.exe
C:\kfqfjt.exe
C:\kgts.exe
C:\kgyhyh.exe
C:\khlfo.exe
C:\kkbe.exe
C:\kkxvtw.exe
C:\kljlca.exe
C:\kpyeu.exe
C:\kqmf.exe
C:\kuseh.exe
C:\lqptbh.exe
C:\lvojcr.exe
C:\mqifg.exe
C:\nahfh.exe
C:\nbxo.exe
C:\nddxv.exe
C:\ndeb.exe
C:\nmfax.exe
C:\nsxdi.exe
C:\odre.exe
C:\ofvbfw.exe
C:\oomd.exe
C:\opyi.exe
C:\oqha.exe
C:\oxoc.exe
C:\pbpur.exe
C:\pecv.exe
C:\pqhaoc.exe
C:\psowjy.exe
C:\pxeffq.exe
C:\pytn.exe
C:\qekhv.exe
C:\qekl.exe
C:\qfig.exe
C:\qfky.exe
C:\qndgaq.exe
C:\qphxai.exe
C:\quoe.exe
C:\qxcvaa.exe
C:\rajxqf.exe
C:\rcuc.exe
C:\rcvnb.exe
C:\rfhai.exe
C:\rfyry.exe
C:\rociuf.exe
C:\rosl.exe
C:\rujtbl.exe
C:\sgsl.exe
C:\shfgw.exe
C:\sjcqu.exe
C:\sqounb.exe
C:\srgsbh.exe
C:\srrhb.exe
C:\tgevw.exe
C:\tlct.exe
C:\tmkkli.exe
C:\tqvgjl.exe
C:\txapfd.exe
C:\tyalnv.exe
C:\tyfj.exe
C:\uaoiu.exe
C:\uemy.exe
C:\ueqlgt.exe
C:\uiried.exe
C:\uktuss.exe
C:\uonblj.exe
C:\upiip.exe
C:\upsjmh.exe
C:\uwfbgx.exe
C:\vcneuo.exe
C:\vcnk.exe
C:\vipw.exe
C:\vucjj.exe
C:\vxgs.exe
C:\watumb.exe
C:\wbffky.exe
C:\wcfpp.exe
C:\wddo.exe
C:\wdiik.exe
C:\wurs.exe
C:\xgmjx.exe
C:\xjtcjh.exe
C:\xjumxr.exe
C:\xkjvcu.exe
C:\xogj.exe
C:\xtlbng.exe
C:\xtthgc.exe
C:\yfjn.exe
C:\yjtxo.exe
C:\ypwdes.exe
C:\yqiso.exe
C:\ytdp.exe
D:\aalbus.exe
D:\acvn.exe
D:\adeh.exe
D:\afpayf.exe
D:\agltg.exe
D:\agmpp.exe
D:\ahrthr.exe
D:\aknvq.exe
D:\akrmm.exe
D:\alvcw.exe
D:\autxh.exe
D:\awnyng.exe
D:\bavv.exe
D:\bbfe.exe
D:\bhxo.exe
D:\bvms.exe
D:\cent.exe
D:\cgdk.exe
D:\ckon.exe
D:\cmdu.exe
D:\cqlyob.exe
D:\cuse.exe
D:\cyjw.exe
D:\cymr.exe
D:\dajish.exe
D:\dbhf.exe
D:\dhpjrn.exe
D:\dhqfe.exe
D:\dhte.exe
D:\dkbg.exe
D:\dlla.exe
D:\dlmba.exe
D:\dmliq.exe
D:\dnun.exe
D:\dpgej.exe
D:\drjuwp.exe
D:\dwoxo.exe
D:\ebwxdd.exe
D:\ehfxw.exe
D:\eibajk.exe
D:\eihnl.exe
D:\epxe.exe
D:\eqpu.exe
D:\etlfur.exe
D:\evug.exe
D:\fcpwh.exe
D:\fioid.exe
D:\flqqu.exe
D:\frlpar.exe
D:\frrsc.exe
D:\gauwbn.exe
D:\gjnqv.exe
D:\gkmx.exe
D:\gnxo.exe
D:\gscfb.exe
D:\gxql.exe
D:\gxseas.exe
D:\hbjpmy.exe
D:\hcmey.exe
D:\hdnrgu.exe
D:\hhilbj.exe
D:\hrhptf.exe
D:\hspx.exe
D:\huit.exe
D:\huprr.exe
D:\hwjtm.exe
D:\hxmml.exe
D:\iekli.exe
D:\ihsu.exe
D:\ikjiu.exe
D:\inpkc.exe
D:\iomjxr.exe
D:\iqxmos.exe
D:\iveg.exe
D:\ixewnp.exe
D:\jdcyfg.exe
D:\jeyv.exe
D:\jics.exe
D:\jjpmdw.exe
D:\jmwngt.exe
D:\jobifw.exe
D:\jwbgtj.exe
D:\jwgafc.exe
D:\jxxji.exe
D:\jyws.exe
D:\karfhe.exe
D:\kcncbl.exe
D:\kfmgkb.exe
D:\kgbj.exe
D:\kodggo.exe
D:\kovric.exe
D:\kqmrm.exe
D:\kqne.exe
D:\krhhh.exe
D:\krsjug.exe
D:\ksyhd.exe
D:\kungs.exe
D:\kxxdrx.exe
D:\lbrvr.exe
D:\ldsqa.exe
D:\liwkt.exe
D:\lnsv.exe
D:\lpjw.exe
D:\lppjj.exe
D:\ltbh.exe
D:\lvak.exe
D:\maghwf.exe
D:\mect.exe
D:\mepcc.exe
D:\mhcry.exe
D:\mrdfan.exe
D:\mtnlhl.exe
D:\mulux.exe
D:\myhk.exe
D:\nciww.exe
D:\ncrk.exe
D:\ndhkvu.exe
D:\nfsj.exe
D:\njyy.exe
D:\nmyp.exe
D:\nptduy.exe
D:\nykcp.exe
D:\oavogs.exe
D:\odwvqr.exe
D:\oftm.exe
D:\ojwi.exe
D:\oufqp.exe
D:\owuf.exe
D:\oymipt.exe
D:\pdhx.exe
D:\pdtdy.exe
D:\pgsto.exe
D:\pjcmfo.exe
D:\pntyf.exe
D:\prxgg.exe
D:\ptyou.exe
D:\pxkh.exe
D:\pyynuq.exe
D:\qboex.exe
D:\qgvwfx.exe
D:\qhepct.exe
D:\rbtal.exe
D:\rcwu.exe
D:\rglo.exe
D:\rsuph.exe
D:\salslt.exe
D:\siqy.exe
D:\sjgr.exe
D:\sjix.exe
D:\smvhgb.exe
D:\spgpp.exe
D:\sqqeak.exe
D:\syuehs.exe
D:\taje.exe
D:\tbrd.exe
D:\tpedq.exe
D:\tryqsp.exe
D:\tsgogo.exe
D:\txhbee.exe
D:\ugdjry.exe
D:\uhfxr.exe
D:\uiksh.exe
D:\ujfgc.exe
D:\ukrn.exe
D:\unouj.exe
D:\untvdx.exe
D:\uqwmsd.exe
D:\uwyab.exe
D:\vghoia.exe
D:\vhmas.exe
D:\vsce.exe
D:\vxhws.exe
D:\vypwpi.exe
D:\wapua.exe
D:\wbfg.exe
D:\weasho.exe
D:\wlny.exe
D:\wmva.exe
D:\wnkv.exe
D:\wusgvg.exe
D:\wvof.exe
D:\wyxgqw.exe
D:\xbpuke.exe
D:\xdmv.exe
D:\xfwwq.exe
D:\xobd.exe
D:\xsbpsg.exe
D:\xxhnyt.exe
D:\xyms.exe
D:\yaxtk.exe
D:\ybxtqh.exe
D:\yctgq.exe
D:\yhvx.exe
D:\yjwqd.exe
D:\ypsod.exe
D:\yrrac.exe
E:\adyuw.exe
E:\ajbpp.exe
E:\alrs.exe
E:\anny.exe
E:\babtb.exe
E:\bbju.exe
E:\beimtl.exe
E:\bhxgo.exe
E:\bimmno.exe
E:\bkvh.exe
E:\blrytj.exe
E:\bocb.exe
E:\bpxrv.exe
E:\bvbtdt.exe
E:\bymli.exe
E:\catdm.exe
E:\cfcb.exe
E:\clbhto.exe
E:\cmug.exe
E:\ctbg.exe
E:\cumy.exe
E:\cyuaef.exe
E:\dbcrfb.exe
E:\dkoejc.exe
E:\dmged.exe
E:\doff.exe
E:\duuaua.exe
E:\dvfmt.exe
E:\dwjwpq.exe
E:\dymjkd.exe
E:\educs.exe
E:\eetjoo.exe
E:\eggvp.exe
E:\eiaiv.exe
E:\eiwqfh.exe
E:\esmm.exe
E:\eujx.exe
E:\excl.exe
E:\eyiuv.exe
E:\fdpsq.exe
E:\ffplj.exe
E:\fjikk.exe
E:\fowvgi.exe
E:\fuvqf.exe
E:\gderwe.exe
E:\gmttm.exe
E:\grgkaf.exe
E:\grsmot.exe
E:\gtbj.exe
E:\hbfayb.exe
E:\hctot.exe
E:\hefgyd.exe
E:\hrnjyc.exe
E:\huayn.exe
E:\hylroi.exe
E:\ibsa.exe
E:\iekv.exe
E:\ifdnn.exe
E:\ikfrql.exe
E:\imuv.exe
E:\inllh.exe
E:\iohao.exe
E:\iytfn.exe
E:\jcdhl.exe
E:\jexqnm.exe
E:\jhbq.exe
E:\jjvkpk.exe
E:\jmgxtb.exe
E:\jquncb.exe
E:\kaxife.exe
E:\kevup.exe
E:\kgoq.exe
E:\kqft.exe
E:\kqspy.exe
E:\ktwld.exe
E:\kvxd.exe
E:\kxocch.exe
E:\lopod.exe
E:\lpne.exe
E:\lqvdg.exe
E:\lvnan.exe
E:\mdcj.exe
E:\medc.exe
E:\mfch.exe
E:\mwrlp.exe
E:\mwvd.exe
E:\nohn.exe
E:\nxod.exe
E:\oaeqpc.exe
E:\obobs.exe
E:\occs.exe
E:\offl.exe
E:\oinr.exe
E:\oowb.exe
E:\oxwd.exe
E:\pdpl.exe
E:\pegmk.exe
E:\pexkxn.exe
E:\pmdxjn.exe
E:\pxcv.exe
E:\qgne.exe
E:\qkctq.exe
E:\qyoq.exe
E:\rngv.exe
E:\rnod.exe
E:\rpmn.exe
E:\rqfhr.exe
E:\soypdp.exe
E:\sqtsoy.exe
E:\ssmo.exe
E:\ssujo.exe
E:\stql.exe
E:\svfif.exe
E:\tdgila.exe
E:\tdhqu.exe
E:\tdui.exe
E:\tlujp.exe
E:\uenivd.exe
E:\ugrt.exe
E:\uidi.exe
E:\utoaw.exe
E:\uyql.exe
E:\vdshwt.exe
E:\vfqw.exe
E:\vngqbg.exe
E:\vqhkke.exe
E:\vtahc.exe
E:\wcgp.exe
E:\wedv.exe
E:\whfo.exe
E:\whhphe.exe
E:\winogx.exe
E:\witch.exe
E:\wjcedj.exe
E:\wjdfay.exe
E:\wsvnku.exe
E:\xjijh.exe
E:\xqdvo.exe
E:\xtquy.exe
E:\xuthq.exe
E:\xwtn.exe
E:\xxxamd.exe
E:\ygxes.exe
E:\yjcaa.exe
E:\yusknx.exe
I:\aaikh.exe
I:\abhc.exe
I:\adqda.exe
I:\aogjw.exe
I:\awjwf.exe
I:\axhokt.exe
I:\ayjvra.exe
I:\bqavq.exe
I:\catl.exe
I:\claa.exe
I:\cmmc.exe
I:\cthc.exe
I:\cvudh.exe
I:\dagy.exe
I:\dpywas.exe
I:\ebqq.exe
I:\efbljq.exe
I:\ekfa.exe
I:\ektlo.exe
I:\eqpypc.exe
I:\esox.exe
I:\fqfv.exe
I:\fwiik.exe
I:\gepl.exe
I:\gjot.exe
I:\gjxa.exe
I:\hcjk.exe
I:\hdknm.exe
I:\hkboop.exe
I:\hmou.exe
I:\hohqu.exe
I:\httg.exe
I:\idall.exe
I:\igmiek.exe
I:\ijjxf.exe
I:\ikwsaq.exe
I:\iowufx.exe
I:\iubwp.exe
I:\iyixwt.exe
I:\jivjbi.exe
I:\jpeo.exe
I:\jpxgpx.exe
I:\kdmp.exe
I:\kkemr.exe
I:\koiv.exe
I:\lejy.exe
I:\lmpfyo.exe
I:\ltku.exe
I:\lxkrkl.exe
I:\mdfcin.exe
I:\mnaldp.exe
I:\mrdt.exe
I:\nehrli.exe
I:\nkhow.exe
I:\nkjiuw.exe
I:\nsvk.exe
I:\nxhkw.exe
I:\oitagr.exe
I:\okcnxw.exe
I:\pdqx.exe
I:\pjmhjb.exe
I:\pmyyc.exe
I:\prwoep.exe
I:\pyjag.exe
I:\qigcnp.exe
I:\qmvpf.exe
I:\qnyirh.exe
I:\qxmqhm.exe
I:\rniqr.exe
I:\rtpl.exe
I:\rxipj.exe
I:\seqck.exe
I:\skyt.exe
I:\slgmyo.exe
I:\snxae.exe
I:\sqpp.exe
I:\tbvcql.exe
I:\tfhskd.exe
I:\tnfmdi.exe
I:\ugkd.exe
I:\uins.exe
I:\ukgsdh.exe
I:\ulxku.exe
I:\uwdf.exe
I:\vgewl.exe
I:\vllyxe.exe
I:\vmpwq.exe
I:\wbpvqc.exe
I:\wrii.exe
I:\xfjti.exe
I:\xuguu.exe
I:\xuik.exe
I:\ybig.exe
I:\ygtj.exe
I:\yhgs.exe
I:\yhpcip.exe
I:\ywiv.exe
K:\angmpb.exe
K:\aohvsq.exe
K:\bcgahm.exe
K:\bvlv.exe
K:\cjsm.exe
K:\cvkoal.exe
K:\fftmkb.exe
K:\fhjvgi.exe
K:\fxydo.exe
K:\gfkxr.exe
K:\iiakcp.exe
K:\jsod.exe
K:\jwqdu.exe
K:\kcyo.exe
K:\lgtqyj.exe
K:\lqkwac.exe
K:\lvjyq.exe
K:\mepry.exe
K:\mchmwf.exe
K:\nfsjag.exe
K:\nvwdl.exe
K:\ohnuq.exe
K:\olxk.exe
K:\omrafm.exe
K:\onmw.exe
K:\piaruy.exe
K:\poqva.exe
K:\qlbmxk.exe
K:\roycbi.exe
K:\rsxl.exe
K:\rtjjpr.exe .. failed to delete 
K:\sspthj.exe
K:\tfsl.exe
K:\tlisce.exe
K:\tmvcrh.exe
K:\uqokv.exe
K:\vcnq.exe
K:\vigtr.exe
K:\xetu.exe
K:\ybgm.exe
K:\yhtte.exe
K:\ynixu.exe
K:\yvwovf.exe
.
.
(((((((((((((((((((((((((   Soubory vytvořené od 2011-07-03 do 2011-08-03  )))))))))))))))))))))))))))))))
.
.
2011-08-03 14:04 . 2011-08-03 14:04	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-08-03 13:18 . 2011-08-03 13:18	103140	--sh--r-	C:\uwgsjs.exe
2011-08-03 13:18 . 2011-08-03 13:18	103140	--sh--r-	C:\jctidx.exe
2011-08-03 13:14 . 2011-07-13 04:53	8578896	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AC7AAA84-AC5B-46A1-9B8A-AB95025F4837}\mpengine.dll
2011-08-03 13:04 . 2011-08-03 13:04	--------	d-----w-	c:\program files (x86)\Enigma Software Group
2011-08-03 12:50 . 2011-08-03 12:50	--------	d-----w-	c:\users\Aleš\AppData\Local\ESET
2011-08-03 12:43 . 2011-08-03 12:43	--------	d-----w-	c:\program files (x86)\ESET
2011-08-03 01:50 . 2011-08-03 01:50	103140	--sh--r-	C:\ehiyvc.exe
2011-08-03 01:31 . 2011-05-28 11:33	80256	----a-w-	c:\windows\SysWow64\ezGOSvc.dll
2011-08-03 01:31 . 2011-05-28 11:33	718208	----a-w-	c:\windows\SysWow64\ezGOSvcApp.exe
2011-08-03 01:01 . 2011-08-03 01:01	388096	----a-r-	c:\users\Aleš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-08-03 00:51 . 2010-05-13 16:34	14232	----a-w-	c:\windows\SysWow64\sh4native.exe
2011-08-03 00:45 . 2011-08-03 12:55	--------	d-----w-	c:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2011-08-03 00:37 . 2011-08-03 12:55	--------	d-----w-	C:\sh4ldr
2011-08-03 00:37 . 2011-08-03 00:37	--------	d-----w-	c:\program files\Enigma Software Group
2011-08-03 00:37 . 2011-08-03 00:45	--------	d-----w-	c:\windows\8AE3EC14EAF84064958AC340C66EDD44.TMP
2011-08-02 22:53 . 2011-08-02 22:53	--------	d-----w-	C:\GvTemp
2011-08-02 22:28 . 2011-08-02 22:28	106224	----a-w-	c:\windows\system32\drivers\GRD.sys
2011-08-02 22:27 . 2011-08-02 22:27	40392	----a-w-	c:\windows\system32\drivers\GDBehave.sys
2011-08-02 22:27 . 2011-08-02 22:25	15880	----a-w-	c:\windows\SysWow64\lsdelete.exe
2011-08-02 22:27 . 2011-08-02 22:27	85960	----a-w-	c:\windows\system32\drivers\MiniIcpt.sys
2011-08-02 22:27 . 2011-08-02 22:27	48584	----a-w-	c:\windows\system32\drivers\gdwfpcd64.sys
2011-08-02 22:26 . 2011-08-02 22:48	--------	d-----w-	c:\programdata\G DATA
2011-08-02 22:26 . 2011-08-02 22:39	--------	d-----w-	c:\program files (x86)\Common Files\G Data
2011-08-02 22:12 . 2011-08-02 22:12	--------	d-----w-	c:\programdata\SUPERAntiSpyware.com
2011-08-02 17:56 . 2011-08-02 17:56	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{4049BC41-9F4B-424B-8419-55DEDAF9FCEB}-P10 Movie Player.exe
2011-08-02 17:56 . 2011-08-02 17:56	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{B22D3084-7EFD-443D-8D90-D4A81470DF77}-GAME_START.EXE
2011-08-02 17:56 . 2011-08-02 17:56	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{C24267EB-ED5D-4386-AE79-3C502CCF0523}-_uninst.exe
2011-08-02 17:56 . 2011-08-02 17:56	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{78FA7D6F-E114-4425-951A-06EB2C8B8DBD}-P10 MOVIE PLAYER.EXE
2011-08-02 17:55 . 2011-08-02 17:55	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{9FB55E9E-0D65-4B33-9A5B-3C7F88FAF5F8}-GAME_START.EXE
2011-08-02 17:55 . 2011-08-02 17:55	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{F9779F9D-7277-4C82-AC5C-B3990B459F81}-_uninst.exe
2011-08-02 17:55 . 2011-08-02 17:55	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{3416C796-EC0D-4F7A-970E-A9CDFE94D65D}-P10 MOVIE PLAYER.EXE
2011-08-02 17:55 . 2011-08-02 17:55	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{BD829782-E3B1-4221-8965-186114F9FFB3}-GAME_START.EXE
2011-08-02 17:55 . 2011-08-02 17:55	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{4391593B-8133-4919-AB47-98307EEABBFC}-_UNINST.EXE
2011-08-02 17:55 . 2011-08-02 17:55	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{FFE126D4-996F-45B9-946A-54C5D6F037DE}-P10 Movie Player.exe
2011-08-02 17:55 . 2011-08-02 17:55	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{261A30D7-D8FE-46AA-82C0-185067D8FF36}-P10 MOVIE PLAYER.EXE
2011-08-02 17:55 . 2011-08-02 17:55	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{2B2C64A0-F4CB-423F-9788-F8BC56EADEC1}-_UNINST.EXE
2011-08-02 17:55 . 2011-08-02 17:55	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{8133B3B4-9211-4F0F-8C18-A6870F4B5FC1}-P10 MOVIE PLAYER.EXE
2011-08-02 17:55 . 2011-08-02 17:55	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{97AEB2FF-8C82-4F1A-BCE7-62D7C5955BAA}-game_start.exe
2011-08-02 17:55 . 2011-08-02 17:55	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{A9FEA6DD-A7B0-4DDC-8C0F-1B46D142E7FF}-GAME_START.EXE
2011-08-02 17:54 . 2011-08-02 17:54	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{52DC0077-497A-43D1-AC86-4E64F8FD27C0}-game_start.exe
2011-08-02 17:54 . 2011-08-02 17:54	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{6C30A0D4-9B90-4821-9DD0-343C96B47B2B}-GAME_START.EXE
2011-08-02 17:54 . 2011-08-02 17:54	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{FC7BB1D6-D004-43B8-BFE9-92F66E87016C}-P10 Movie Player.exe
2011-08-02 17:54 . 2011-08-02 17:54	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{D295B376-F8FC-4A77-9BEF-5F70A897F91A}-game_start.exe
2011-08-02 17:54 . 2011-08-02 17:54	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{B87FD297-D6F0-4D55-9714-977AA660CF6D}-_UNINST.EXE
2011-08-02 17:53 . 2011-08-02 17:53	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{1B8FA52D-4EBB-4A24-9731-1B8001D7E746}-GAME_START.EXE
2011-08-02 17:53 . 2011-08-02 17:53	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{A2322F55-A836-4A63-9BBD-59EB87CA5DC4}-_uninst.exe
2011-08-02 17:53 . 2011-08-02 17:53	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{FB944B1F-35FF-4EC2-9373-C1A1AF867089}-P10 Movie Player.exe
2011-08-02 17:52 . 2011-08-02 17:52	1246812	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{50F028C0-E02F-405A-B970-DF28DDFD2445}-GAME_START.EXE
2011-08-02 17:52 . 2011-08-02 17:52	107520	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{F6AD2CE1-AEB0-47E6-807C-80FB78DAAE83}-_UNINST.EXE
2011-08-02 17:52 . 2011-08-02 17:52	1073297	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{87249E58-0012-4391-B4AD-8C94A4B5C616}-P10 Movie Player.exe
2011-07-26 19:53 . 2011-07-26 19:53	--------	d-----w-	c:\users\Aleš\AppData\Local\EA Games
2011-07-26 00:22 . 2011-07-26 00:22	--------	d-----w-	c:\users\Aleš\AppData\Local\Futuremark_Corporation
2011-07-23 08:45 . 2011-08-02 23:19	--------	d-----w-	c:\users\UpdatusUser
2011-07-23 08:44 . 2011-05-25 06:09	739432	----a-w-	c:\windows\system32\easyupdatusapiu64.dll
2011-07-19 18:28 . 2011-07-19 18:28	--------	d-----w-	c:\users\Aleš\AppData\Local\DOSBox
2011-07-13 09:38 . 2011-06-02 13:50	2764288	----a-w-	c:\windows\system32\win32k.sys
2011-07-13 09:38 . 2011-04-21 14:17	695296	----a-w-	c:\windows\system32\drivers\bthport.sys
2011-07-13 09:38 . 2009-06-17 10:37	35328	----a-w-	c:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 09:38 . 2011-04-20 16:03	451072	----a-w-	c:\windows\system32\winsrv.dll
2011-07-13 09:38 . 2011-04-20 15:58	85504	----a-w-	c:\windows\system32\csrsrv.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M výpis   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-03 01:01 . 2011-08-03 01:01	388096	----a-r-	c:\users\Aleš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-08-03 01:01 . 2011-08-03 01:01	388096	----a-r-	c:\users\Aleš\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-07-13 04:53 . 2010-04-13 10:35	8578896	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-06-28 09:56 . 2011-05-19 08:52	404640	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-05-25 06:09 . 2010-10-16 12:13	1016936	----a-w-	c:\windows\system32\nvvsvc.exe
2011-05-25 06:09 . 2010-10-16 12:13	61544	----a-w-	c:\windows\system32\nvshext.dll
2011-05-25 06:09 . 2010-10-16 12:13	3040872	----a-w-	c:\windows\system32\nvsvc64.dll
2011-05-25 06:09 . 2010-10-16 12:13	117864	----a-w-	c:\windows\system32\nvmctray.dll
2011-05-25 06:09 . 2010-10-16 12:13	6300776	----a-w-	c:\windows\system32\nvcpl.dll
2011-05-25 06:09 . 2010-12-13 15:58	15223912	----a-w-	c:\windows\system32\nvd3dumx.dll
2011-05-25 06:09 . 2010-12-13 15:58	11992680	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2011-05-25 06:09 . 2010-12-13 15:57	2335848	----a-w-	c:\windows\SysWow64\nvapi.dll
2011-05-25 06:09 . 2010-12-13 15:53	2644584	----a-w-	c:\windows\system32\nvapi64.dll
2011-05-20 20:35 . 2011-05-20 20:35	304744	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2011-05-14 12:34 . 2011-05-14 12:34	189248	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2011-05-14 12:34 . 2011-05-14 12:34	75136	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
.
.
((((((((((((((((((((((((((((((((((   Spouštěcí body v registru   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Free Download Manager"="d:\programy\Free Download Manager\fdm.exe" [2008-01-22 2449455]
"DAEMON Tools Lite"="d:\programy\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"uTorrent"="d:\programy\uTorrent\uTorrent.exe" [2011-03-24 399736]
"Skype"="d:\programy\Skype\Phone\Skype.exe" [2011-01-26 15106952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-01-12 49208]
"CTxfiHlp"="CTXFIHLP.EXE" [2010-05-05 99328]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
c:\users\Aleç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
SpeedFan.lnk - d:\programy\SpeedFan\speedfan.exe [2009-11-25 4009592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GIGABYTE OC_GURU.lnk - d:\programy\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe [2011-6-27 9883648]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0sh4native Sh4Removal
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};d:\programy\CyberLink\PowerDVD8\PowerDVD8\000.fcl [2008-10-07 32240]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ezGOSvc;Easybits GO Services for Windows;c:\windows\system32\svchost.exe [2008-01-19 27648]
R2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-06 191000]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-20 378472]
R3 cpuz130;cpuz130;c:\users\ALE~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]
R3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]
R3 ENTECH64;ENTECH64;c:\windows\system32\DRIVERS\ENTECH64.sys [x]
R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2011-03-01 130976]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech QuickCam S5500(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 RAMDiskVE;RAMDiskVE;c:\windows\system32\Drivers\RAMDiskVE.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [x]
S3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk60x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ECACHE
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08
.
Obsah adresáře 'Naplánované úlohy'
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
ezGOSvc
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uDefault_Search_URL = hxxp://search.qip.ru
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xportovat do aplikace Microsoft Office Excel - d:\programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout Free Download Managerem - file://d:\programy\Free Download Manager\dllink.htm
IE: Stáhnout video Free Download Managerem - file://d:\programy\Free Download Manager\dlfvideo.htm
IE: Stáhnout vybrané Free Download Managerem - file://d:\programy\Free Download Manager\dlselected.htm
IE: Stáhnout vše Free Download Managerem - file://d:\programy\Free Download Manager\dlall.htm
Trusted Zone: kuaiche.com\software
TCP: DhcpNameServer = 83.240.0.214 83.240.0.215
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\Aleš\AppData\Roaming\Mozilla\Firefox\Profiles\su3gsz8e.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - d:\programy\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - d:\programy\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - d:\programy\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - d:\programy\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - d:\programy\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
HKLM-Run-Windows Defender - c:\program files (x86)\Windows Defender\MSASCui.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\d:\programy\CyberLink\PowerDVD8\PowerDVD8\000.fcl"
.

Jen další blázen, v bláznivém království.
Raoul Duke
Mírně pokročilý
Mírně pokročilý
Uživatelský avatar
Registrován: 28. čer 2007

Re: jak se zbavit Autorun.inf ?

Příspěvek od Raoul Duke »

pokračování:

Kód: Vybrat vše

--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.032"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.abr"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ani"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.apd"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.arw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bay"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bmp"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cr2"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.crw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cs1"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cur"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dcr"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dcx"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dib"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djv"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djvu"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dng"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.emf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.eps"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.erf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fff"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fpx"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.gif"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.hdr"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icl"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icn"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (S-1-5-21-714342631-3113501502-3883659254-1000)
@Denied: (2) (LocalSystem)
"Progid"="Winamp.File.iff"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ilbm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.int"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.inta"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.iw4"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2c"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2k"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jbr"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jfif"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jif"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jp2"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpc"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpe"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpeg"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpg"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpk"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpx"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.kdc"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.lbm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mef"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mos"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mrw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.nef"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.nrw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.orf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbr"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcd"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pct"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcx"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pef"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pgm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pic"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pict"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pix"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.png"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ppm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psd"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psp"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspbrush"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspimage"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.raf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ras"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (S-1-5-21-714342631-3113501502-3883659254-1000)
@Denied: (2) (LocalSystem)
"Progid"="Winamp.File.raw"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgb"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgba"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rle"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rsb"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rw2"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rwl"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sgi"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sr2"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.srf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tga"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.thm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tif"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tiff"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttc"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30po"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30pp"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30ppf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (S-1-5-21-714342631-3113501502-3883659254-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbmp"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wmf"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xbm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xif"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xmp"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xpm"
.
[HKEY_USERS\S-1-5-21-714342631-3113501502-3883659254-1000\Software\SecuROM\License information*]
"datasecu"=hex:8a,25,db,7f,c1,e2,dc,af,9a,0c,2a,ce,91,15,44,94,1a,49,b7,e6,05,
   a9,7c,5b,26,2b,d1,08,a7,8c,fc,c5,e3,8f,2f,e8,d1,b0,b9,d4,f7,4e,a4,4b,3e,ef,\
"rkeysecu"=hex:9f,ca,16,75,83,0a,d6,fd,d2,a5,ab,cb,c1,0d,12,f7
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2011-08-03  16:05:36
ComboFix-quarantined-files.txt  2011-08-03 14:05
.
Před spuštěním: 2 233 548 800
Po spuštění: 1 964 634 112
.
- - End Of File - - C596047E55096780426B5E34CB764396
Jen další blázen, v bláznivém království.
Raoul Duke
Mírně pokročilý
Mírně pokročilý
Uživatelský avatar
Registrován: 28. čer 2007

Re: jak se zbavit Autorun.inf ?

Příspěvek od Raoul Duke »

ty zapráskaný .exe a .pif soubory pořád přibývají...
Jen další blázen, v bláznivém království.
jan.svoboda
Středně pokročilý
Středně pokročilý
Registrován: 25. pro 2009
Bydliště: Chrudim

Re: jak se zbavit Autorun.inf ?

Příspěvek od jan.svoboda »

Ok. V HijackThis fixni (zaškrtni pole vlevo od názvu a klikni na Fix checked):

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O1 - Hosts: ::1 localhost
O15 - Trusted Zone: http://software.kuaiche.com


Pak dle návodu v mém podpise použij USBFix, před jeho spuštěním zapoj opět všechny flashky apod.

Btw. Pro příště nedávej logy do code, blbě se to čte, dík ;)
Zde na foru již nejsem aktivní, vyskytuji se na Google+ (http://gplus.to/JanSvoboda), kde aktivně píšu nejen o IT.
Raoul Duke
Mírně pokročilý
Mírně pokročilý
Uživatelský avatar
Registrován: 28. čer 2007

Re: jak se zbavit Autorun.inf ?

Příspěvek od Raoul Duke »

log po proběhnutí UsbFix:

############################## | UsbFix 7.014 | [Deletion]

User: Aleš (Administrator) # ALES-PC [System manufacturer P5E]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 12:35:45 | 04/08/2011
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Core(TM)2 Quad CPU Q9550 @ 2.83GHz
CPU 2: Intel(R) Core(TM)2 Quad CPU Q9550 @ 2.83GHz
Microsoft® Windows Vista™ Business (6.0.6002 64-Bit) # Service Pack 2
Internet Explorer 9.0.8112.16421

Windows Firewall: Disabled /!\
RAM -> 4094 Mb
C:\ (%systemdrive%) -> Fixed drive # 39 Gb (2 Mb free - 5%) [Vista] # NTFS
D:\ -> Fixed drive # 195 Gb (32 Mb free - 16%) [data_0] # NTFS
E:\ -> Fixed drive # 1544 Gb (67 Mb free - 4%) [data_1] # NTFS
H:\ -> CD-ROM
I:\ -> Fixed drive # 436 Gb (40 Mb free - 9%) [data_2] # NTFS
J:\ -> Fixed drive # 29 Gb (17 Mb free - 57%) [WinXP] # NTFS
K:\ -> Fixed drive # 298 Gb (128 Mb free - 43%) [WD] # NTFS

################## | Files # Infected Folders |


################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |


################## | Listing |

[04/08/2011 - 12:41:39 | SHD ] C:\$RECYCLE.BIN
[05/02/2011 - 17:04:18 | A | 4608] C:\6XSourceFilter.grf
[13/12/2010 - 04:37:21 | A | 356736] C:\AnalysisLog.sr0
[03/08/2011 - 02:38:12 | A | 0] C:\autoexec.bat
[14/04/2010 - 19:59:49 | D ] C:\Boot
[10/04/2009 - 23:36:38 | RASH | 333257] C:\bootmgr
[13/04/2010 - 00:27:02 | RAS | 8192] C:\BOOTSECT.BAK
[03/08/2011 - 16:05:36 | A | 65493] C:\ComboFix.txt
[03/08/2011 - 15:12:02 | D ] C:\Config.Msi
[02/11/2006 - 17:39:21 | SHD ] C:\Documents and Settings
[03/08/2011 - 03:50:54 | RSH | 103140] C:\ehiyvc.exe
[03/08/2011 - 15:07:34 | D ] C:\Garmin
[03/08/2011 - 00:53:12 | D ] C:\GvTemp
[12/04/2010 - 23:45:30 | D ] C:\Intel
[03/08/2011 - 15:18:15 | RSH | 103140] C:\jctidx.exe
[04/08/2011 - 12:23:56 | ASH | 4607631360] C:\pagefile.sys
[14/04/2010 - 14:19:08 | D ] C:\PerfLogs
[03/08/2011 - 02:37:55 | RD ] C:\Program Files
[03/08/2011 - 15:04:17 | RD ] C:\Program Files (x86)
[03/08/2011 - 14:50:05 | D ] C:\ProgramData
[03/08/2011 - 16:05:38 | AD ] C:\Qoobox
[03/08/2011 - 14:55:45 | D ] C:\sh4ldr
[03/08/2011 - 03:43:56 | A | 2157] C:\spyhunter.fix
[03/08/2011 - 15:59:46 | SHD ] C:\System Volume Information
[02/08/2011 - 23:39:48 | D ] C:\TEMP
[04/08/2011 - 12:41:39 | D ] C:\UsbFix
[04/08/2011 - 12:35:45 | A | 0] C:\UsbFix.txt
[23/07/2011 - 10:45:57 | RD ] C:\Users
[03/08/2011 - 15:18:47 | RSH | 103140] C:\uwgsjs.exe
[03/08/2011 - 16:05:37 | D ] C:\Windows
[04/08/2011 - 12:41:39 | D ] D:\$RECYCLE.BIN
[03/08/2011 - 15:13:48 | D ] D:\Config.Msi
[02/08/2011 - 13:44:11 | RD ] D:\Dokumenty
[04/08/2011 - 12:33:37 | D ] D:\Download
[02/08/2011 - 13:07:56 | D ] D:\Download_Torrent
[28/04/2011 - 01:35:24 | D ] D:\Garmin
[02/08/2011 - 13:22:05 | D ] D:\Hry
[03/08/2011 - 02:54:52 | RSH | 103140] D:\ipfkb.exe
[03/08/2011 - 15:19:51 | RSH | 103140] D:\jlpot.exe
[03/08/2011 - 15:16:41 | RSH | 103140] D:\kmmoh.exe
[29/07/2011 - 13:25:01 | D ] D:\Mix
[14/07/2010 - 13:48:43 | RD ] D:\MSOCache
[03/08/2011 - 14:50:05 | D ] D:\Programy
[04/08/2011 - 12:36:18 | D ] D:\RECYCLER
[03/08/2011 - 03:43:56 | A | 114] D:\spyhunter.fix
[21/12/2009 - 15:28:06 | SHD ] D:\System Volume Information
[03/08/2011 - 15:18:16 | RSH | 103140] D:\tnqvu.exe
[03/08/2011 - 03:50:54 | RSH | 103140] D:\xmecdk.exe
[04/08/2011 - 12:41:39 | D ] E:\$RECYCLE.BIN
[03/08/2011 - 15:17:14 | RSH | 103140] E:\aayvf.exe
[13/07/2011 - 13:07:31 | D ] E:\adaptec
[14/07/2011 - 15:53:17 | D ] E:\Flac
[03/08/2011 - 15:19:20 | RSH | 103140] E:\ilxmrf.exe
[29/04/2011 - 02:42:53 | D ] E:\Image
[04/10/2009 - 04:16:28 | D ] E:\Install
[03/08/2011 - 15:10:02 | RSH | 103140] E:\irhgh.exe
[27/05/2011 - 15:38:05 | D ] E:\MP3
[14/03/2011 - 16:00:01 | D ] E:\MP3_____X
[31/10/2010 - 13:14:07 | D ] E:\msdownld.tmp
[03/10/2009 - 19:15:55 | RD ] E:\MSOCache
[03/08/2011 - 15:17:45 | RSH | 103140] E:\ojhxal.exe
[28/07/2011 - 16:01:11 | D ] E:\Práce
[04/08/2011 - 12:36:18 | D ] E:\RECYCLER
[03/08/2011 - 02:54:52 | RSH | 103140] E:\ruvjj.exe
[21/12/2009 - 15:28:06 | SHD ] E:\System Volume Information
[17/10/2010 - 02:49:17 | D ] E:\Video
[04/10/2009 - 00:12:52 | D ] E:\Záloha
[04/08/2011 - 12:41:39 | D ] I:\$RECYCLE.BIN
[29/05/2011 - 23:54:28 | D ] I:\Any Video Converter
[03/08/2011 - 15:19:21 | RSH | 103140] I:\hvuewv.exe
[03/08/2011 - 15:18:49 | RSH | 103140] I:\kamyqm.exe
[03/08/2011 - 01:29:44 | RSH | 103140] I:\ntiagg.exe
[03/08/2011 - 15:10:02 | RSH | 103140] I:\ohalod.exe
[03/08/2011 - 02:54:52 | RSH | 103140] I:\punvgp.exe
[04/08/2011 - 12:36:19 | D ] I:\RECYCLER
[07/04/2011 - 03:22:09 | D ] I:\Star Trek 01 - Film
[11/04/2008 - 07:26:02 | D ] I:\Star Trek 02 - Khanův Hněv
[17/02/2011 - 00:55:07 | D ] I:\Star Trek 03 - The Search for Spock
[02/01/2010 - 13:59:53 | SHD ] I:\System Volume Information
[03/08/2011 - 15:19:52 | RSH | 103140] I:\urjaci.exe
[22/12/2010 - 22:40:28 | D ] I:\Video_N
[03/08/2011 - 15:00:10 | A | 103140] I:\ysthd.exe
[04/05/2011 - 11:38:21 | D ] I:\_filmy pro mamku
[02/08/2011 - 13:07:14 | D ] I:\_filmy pro Péťu
[04/08/2011 - 12:41:39 | D ] J:\$RECYCLE.BIN
[20/07/2010 - 14:07:23 | D ] J:\Adaptec
[03/08/2011 - 15:16:12 | RSH | 103140] J:\anjgkg.exe
[24/01/2011 - 20:12:54 | D ] J:\ApolloDVD
[03/08/2011 - 15:18:50 | RSH | 103140] J:\arskl.exe
[20/12/2009 - 23:55:41 | A | 0] J:\AUTOEXEC.BAT
[20/12/2009 - 23:51:55 | SH | 211] J:\boot.ini
[18/08/2004 - 12:00:00 | RASH | 4952] J:\Bootfont.bin
[20/12/2009 - 23:55:41 | A | 0] J:\CONFIG.SYS
[03/08/2011 - 00:46:55 | D ] J:\Documents and Settings
[25/01/2011 - 00:53:57 | D ] J:\DVDPean Output
[25/05/2011 - 16:46:26 | D ] J:\Hry
[21/12/2009 - 13:43:49 | D ] J:\Intel
[20/12/2009 - 23:55:41 | RASH | 0] J:\IO.SYS
[20/12/2009 - 23:55:41 | RASH | 0] J:\MSDOS.SYS
[18/08/2004 - 12:00:00 | RASH | 47564] J:\NTDETECT.COM
[18/08/2004 - 12:00:00 | RASH | 250048] J:\ntldr
[19/07/2010 - 01:23:47 | D ] J:\NVIDIA
[03/08/2011 - 00:41:17 | ASH | 2145386496] J:\pagefile.sys
[19/07/2011 - 20:36:07 | RD ] J:\Program Files
[04/08/2011 - 12:36:19 | D ] J:\RECYCLER
[03/08/2011 - 15:18:19 | RSH | 103140] J:\stkbum.exe
[21/12/2009 - 01:53:22 | SHD ] J:\System Volume Information
[28/04/2011 - 00:15:19 | D ] J:\Temp
[03/08/2011 - 00:46:14 | D ] J:\WINDOWS

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
E:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
I:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
J:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |


Pár podivných .exe souborů ještě na jednotkách zbylo tak jsem je smáznul ručně.

Ale normální režim stále nefunguje, mám podezření že se nějak seknul Combofix.
Když jsem ho spouštěl poprvé tak v jeho průběhu došlo k restartování počítače a po něm se po naběhnutí do oken objevilo modré okno Combofixu a počítač zamrz (neprobral se ani po půl hodině). Tak jsem ho restartoval a od té doby pokračuji v nouzovém režimu přotože normální po něděhnutí stále zamrzá, combofix /uninstall nepomohlo.
Jen další blázen, v bláznivém království.
jan.svoboda
Středně pokročilý
Středně pokročilý
Registrován: 25. pro 2009
Bydliště: Chrudim

Re: jak se zbavit Autorun.inf ?

Příspěvek od jan.svoboda »

Vidím, že problém jsi již před mojí poslední radou začal řešit u konkurence, takže hodně štěstí.
Zde na foru již nejsem aktivní, vyskytuji se na Google+ (http://gplus.to/JanSvoboda), kde aktivně píšu nejen o IT.
Odpovědět

Zpět na „Viry, antiviry a bezpečnost“