Výsledky 1 až 7 z 7

Téma: Přípona lnk na flash disku

  1. #1

    Standardní Přípona lnk na flash disku

    Prosím poradte.
    Když nahraju na flashku nějaký soubor, tak se změní jeho přípona na lnk. Po smazání souboru se soubor zase objeví.
    Zformátoval jsem flash disk a nepomohlo.
    Není to nějaký virus nebo podobný šmejd ?

    Nevím jak to správně popsat, ale určitě jste se s tím tady setkali. Já ale na fóru nic nenašel.

    Mám Windows 7 Professional

    Dík moc.




    DAFT Log saved on 2014-01-25 15:52:28
    -----------------------------------------------------------------------
    .bat - batfile - shell\edit\command - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .cmd - cmdfile - shell\edit\command - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .chm - chm.file - shell\open\command - "%SystemRoot%\hh.exe" %1
    .hlp - hlpfile - shell\open\command - %SystemRoot%\winhlp32.exe %1
    .inf - inffile - shell\open\command - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .ini - inifile - shell\open\command - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .js - JSFile - shell\open\command - C:\Windows\SysWow64\WScript.exe "%1" %*
    .reg - regfile - shell\edit\command - %SystemRoot%\SysWow64\notepad.exe "%1"
    .txt - txtfile - shell\open\command - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .vbs - VBSFile - shell\open\command - "%SystemRoot%\System32\WScript.exe" "%1" %*
    .vbs - VBSFile - shell\edit\command - "%SystemRoot%\System32\Notepad.exe" %1


    -------------------------------------------

    Logfile of random's system information tool 1.09 (written by random/random)
    Run by Jirka at 2014-01-25 15:59:53
    Microsoft Windows 7 Professional Service Pack 1
    System drive C: has 38 GB (25%) free of 150 GB
    Total RAM: 4095 MB (33% free)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 15:59:58, on 25.1.2014
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v11.0 (11.00.9600.1642
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
    C:\Users\Jirka\AppData\Local\Akamai\netsession_win .exe
    C:\Program Files (x86)\totalcmd\TOTALCMD.EXE
    C:\Users\Jirka\AppData\Local\Akamai\netsession_win .exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlug in_12_0_0_43.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlug in_12_0_0_43.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTools.exe
    C:\Program Files (x86)\AIMP3\AIMP3.exe
    C:\Program Files\trend micro\Jirka.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=userinit.exe
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
    O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
    O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.ex e" -launchedbylogin
    O4 - HKLM\..\Run: [setup] wscript.exe //B "C:\Users\Jirka\AppData\Local\Temp\setup.vbe"
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jirka\AppData\Local\Akamai\netsession_wi n.exe"
    O4 - HKCU\..\Run: [setup] wscript.exe //B "C:\Users\Jirka\AppData\Local\Temp\setup.vbe"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-21-2566933632-2783799034-2075055169-1004\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime (User 'Host')
    O4 - HKUS\S-1-5-21-2566933632-2783799034-2075055169-1005\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2566933632-2783799034-2075055169-1005\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
    O4 - S-1-5-21-2566933632-2783799034-2075055169-1004 Startup: setup.vbe (User 'Host')
    O4 - S-1-5-21-2566933632-2783799034-2075055169-1004 User Startup: setup.vbe (User 'Host')
    O4 - Startup: setup.vbe
    O4 - Startup: Total Commander.lnk = C:\Program Files (x86)\totalcmd\TOTALCMD.EXE
    O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe
    O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    O23 - Service: TeamViewer 3 (TeamViewer) - Unknown owner - C:\Program Files (x86)\TeamViewer3\TeamViewer_Host.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
    O23 - Service: VRAID Log Service - Unknown owner - C:\Program Files (x86)\VIA\RAID\vialogsv.exe
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 10434 bytes

    ======Listing Processes======

    \SystemRoot\System32\smss.exe
    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
    wininit.exe
    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
    C:\Windows\system32\services.exe
    winlogon.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    "C:\Windows\system32\nvvsvc.exe"
    "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\AUDIODG.EXE 0x2e0
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\System32\spoolsv.exe
    "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
    "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
    C:\Windows\system32\nvvsvc.exe -session -first
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    "C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
    C:\Windows\SysWOW64\nlssrv32.exe
    "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
    "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
    "C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
    C:\Windows\system32\svchost.exe -k imgsvc
    "C:\Program Files (x86)\TeamViewer3\TeamViewer_Host.exe" -service
    C:\Windows\system32\viakaraokesrv.exe
    "C:\Program Files (x86)\VIA\RAID\vialogsv.exe"
    "taskhost.exe"
    "C:\Windows\system32\Dwm.exe"
    C:\Windows\Explorer.EXE
    "C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.ex e"
    "C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64. exe"
    "C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
    "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
    "C:\Users\Jirka\AppData\Local\Akamai\netsession_wi n.exe"
    "C:\Windows\System32\wscript.exe" //B "C:\Users\Jirka\AppData\Local\Temp\setup.vbe"
    "C:\Program Files (x86)\totalcmd\TOTALCMD.EXE"
    "C:/Users/Jirka/AppData/Local/Akamai/netsession_win.exe" --client
    "C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
    "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
    C:\Windows\system32\wbem\wmiprvse.exe
    "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
    \??\C:\Windows\system32\conhost.exe "-1356971918-19043962596385198452793994141673745713-202899085019789533451889775743
    "C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_0000063c
    C:\Windows\system32\SearchIndexer.exe /Embedding
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
    "C:\Program Files\Windows Media Player\wmpnetwk.exe"
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3508.1609da00.661334806 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0 _43.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 3508 "\\.\pipe\gecko-crash-server-pipe.3508" plugin
    "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlu gin_12_0_0_43.exe" --proxy-stub-channel=Flash4260.6A98B990.9729 --host-broker-channel=Flash4260.6A98B990.15207 --host-pid=4260 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_1 2_0_0_43.dll"
    "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlu gin_12_0_0_43.exe" --channel=4336.0044F26C.1906464964 --proxy-stub-channel=Flash4260.6A98B990.9729 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_1 2_0_0_43.dll" --host-npapi-version=27 --type=renderer
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
    "taskhost.exe"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTools.exe"
    "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EX E"
    "C:\Program Files (x86)\AIMP3\AIMP3.exe"
    "C:\Temp\RSITx64.exe"
    C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

    ======Scheduled tasks folder======

    C:\Windows\tasks\Adobe Flash Player Updater.job
    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

    =========Mozilla firefox=========

    ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Pro files\0k95we88.default

    prefs.js - "browser.startup.homepage" - "www.seznam.cz"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@adobe.com/FlashPlayer]
    "Description"=Adobe® Flash® Player 12.0.0.43 Plugin
    "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_ 12_0_0_43.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@Google.com/GoogleEarthPlugin]
    "Description"=Google Earth in your browser
    "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@microsoft.com/GENUINE]
    "Description"=
    "Path"=disabled

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@Microsoft.com/NpCtrl,version=1.0]
    "Description"=Ag Player Plugin
    "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@microsoft.com/OfficeAuthz,version=14.0]
    "Description"=Office Authorization plug-in for NPAPI browsers
    "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.D LL

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@microsoft.com/SharePoint,version=14.0]
    "Description"=Microsoft SharePoint Plug-in for Firefox
    "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP. DLL

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@nokia.com/EnablerPlugin]
    "Description"=Nokia Suite Enabler Plugin
    "Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@nvidia.com/3DVision]
    "Description"=NVIDIA stereo images plugin for Mozilla browsers
    "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@nvidia.com/3DVisionStreaming]
    "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
    "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@tools.google.com/Google Update;version=3]
    "Description"=Google Update
    "Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\@tools.google.com/Google Update;version=9]
    "Description"=Google Update
    "Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlu gins\Adobe Reader]
    "Description"=Handles PDFs in-place in Firefox
    "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe. com/FlashPlayer]
    "Description"=Adobe® Flash® Player 12.0.0.43 Plugin
    "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_ 12_0_0_43.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.c om/DTPlugin,version=10.10.2]
    "Description"=Java™ Deployment Toolkit
    "Path"=C:\Windows\system32\npDeployJava1.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.c om/JavaPlugin,version=10.10.2]
    "Description"=Oracle® Next Generation Java™ Plug-In
    "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@micros oft.com/GENUINE]
    "Description"=
    "Path"=disabled

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Micros oft.com/NpCtrl,version=1.0]
    "Description"=Ag Player Plugin
    "Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@micros oft.com/OfficeAuthz,version=14.0]
    "Description"=Office Authorization plug-in for NPAPI browsers
    "Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.D LL

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videol an.org/vlc,version=2.1.1]
    "Description"=VLC Multimedia Plugin
    "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
    Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-03-08 6669000]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-12 551400]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
    Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-12 209384]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
    Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08 515848]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\ Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
    Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-03-08 4171464]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\ Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
    Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\ Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]
    Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08 448776]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
    "CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2012-02-20 456704]
    "Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-09-19 1028896]
    "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe [2012-04-04 446392]
    "setup"=wscript.exe //B C:\Users\Jirka\AppData\Local\Temp\setup.vbe []

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
    "Akamai NetSession Interface"=C:\Users\Jirka\AppData\Local\Akamai\net session_win.exe [2013-06-05 4489472]
    ""= []
    "setup"=wscript.exe //B C:\Users\Jirka\AppData\Local\Temp\setup.vbe []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
    C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.ex e [2012-03-09 1073312]

    [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\ Windows\CurrentVersion\Run]
    "HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2011-06-24 5199984]
    "avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2013-12-18 684600]
    "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
    "AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.ex e [2010-02-22 406992]
    "setup"=wscript.exe //B C:\Users\Jirka\AppData\Local\Temp\setup.vbe []
    "SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-07-25 5624784]

    C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Startup
    setup.vbe
    Total Commander.lnk - C:\Program Files (x86)\totalcmd\TOTALCMD.EXE

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ShellServiceObjectDelayLoad]
    WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks]
    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOV EEX.DLL [2013-03-08 6669000]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\ Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOV EEX.DLL [2013-03-08 4171464]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\securityproviders]
    "SecurityProviders"=credssp.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\AFD]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System]
    "ConsentPromptBehaviorAdmin"=0
    "ConsentPromptBehaviorUser"=3
    "EnableLUA"=0
    "EnableUIADesktopToggle"=0
    "PromptOnSecureDesktop"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\explorer]
    "NoActiveDesktop"=1
    "NoActiveDesktopChanges"=1
    "ForceActiveDesktopOn"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
    "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
    "vidc.mrle"=msrle32.dll
    "vidc.msvc"=msvidc32.dll
    "msacm.imaadpcm"=imaadp32.acm
    "msacm.msg711"=msg711.acm
    "msacm.msgsm610"=msgsm32.acm
    "msacm.msadpcm"=msadp32.acm
    "midimapper"=midimap.dll
    "wavemapper"=msacm32.drv
    "vidc.uyvy"=msyuv.dll
    "vidc.yuy2"=msyuv.dll
    "vidc.yvyu"=msyuv.dll
    "vidc.iyuv"=iyuv_32.dll
    "vidc.i420"=iyuv_32.dll
    "vidc.yvu9"=tsbyuv.dll
    "msacm.l3acm"=C:\Windows\System32\l3codeca.acm
    "wave"=wdmaud.drv
    "midi"=wdmaud.drv
    "mixer"=wdmaud.drv
    "aux"=wdmaud.drv
    "VIDC.ACDV"=ACDV.dll
    "wave1"=wdmaud.drv
    "midi1"=wdmaud.drv
    "mixer1"=wdmaud.drv

    ======File associations======

    .bat - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .cmd - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .inf - install - %SystemRoot%\SysWow64\InfDefaultInstall.exe "%1"
    .ini - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .js - edit - C:\Windows\SysWow64\Notepad.exe %1
    .js - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
    .reg - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .txt - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .vbs - edit - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
    .vbs - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
    .cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

    ======List of files/folders created in the last 1 month======

    2014-01-25 15:59:53 ----D---- C:\rsit
    2014-01-25 15:59:53 ----D---- C:\Program Files\trend micro
    2014-01-25 12:40:22 ----A---- C:\Windows\system32\sdnclean64.exe
    2014-01-25 12:40:20 ----D---- C:\ProgramData\Spybot - Search & Destroy
    2014-01-25 12:40:18 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
    2014-01-22 19:06:55 ----D---- C:\Program Files (x86)\PC Connectivity Solution
    2014-01-22 18:39:42 ----D---- C:\Users\Jirka\AppData\Roaming\Nokia Suite
    2014-01-22 18:39:42 ----D---- C:\Users\Jirka\AppData\Roaming\Nokia
    2014-01-22 17:54:03 ----SHD---- C:\Config.Msi
    2014-01-21 23:25:14 ----D---- C:\ProgramData\Installations
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\win32k.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbuhci.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbport.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbohci.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbhub.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbehci.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbd.sys
    2014-01-15 20:02:45 ----A---- C:\Windows\system32\drivers\usbccgp.sys
    2014-01-15 20:02:44 ----A---- C:\Windows\system32\drivers\netio.sys
    2014-01-06 18:51:53 ----D---- C:\Users\Jirka\AppData\Roaming\dvdcss

    ======List of files/folders modified in the last 1 month======

    2014-01-25 15:59:58 ----D---- C:\Windows\Prefetch
    2014-01-25 15:59:57 ----D---- C:\Windows\Temp
    2014-01-25 15:59:53 ----RD---- C:\Program Files
    2014-01-25 15:59:44 ----D---- C:\Temp
    2014-01-25 15:52:05 ----D---- C:\Users\Jirka\AppData\Roaming\AIMP3
    2014-01-25 15:46:03 ----D---- C:\Windows\system32\Tasks
    2014-01-25 15:46:02 ----HD---- C:\ProgramData
    2014-01-25 15:46:02 ----D---- C:\Windows\Tasks
    2014-01-25 14:38:46 ----SHD---- C:\System Volume Information
    2014-01-25 13:51:23 ----D---- C:\Windows\system32\config
    2014-01-25 12:40:24 ----SD---- C:\ProgramData\Microsoft
    2014-01-25 12:40:22 ----D---- C:\Windows\System32
    2014-01-25 12:40:18 ----RD---- C:\Program Files (x86)
    2014-01-25 12:03:29 ----D---- C:\ProgramData\NVIDIA
    2014-01-25 00:48:58 ----D---- C:\Users\Jirka\AppData\Roaming\vlc
    2014-01-24 21:50:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2014-01-24 21:31:34 ----D---- C:\pp
    2014-01-24 19:09:26 ----D---- C:\Windows\rescache
    2014-01-23 19:59:48 ----D---- C:\Program Files (x86)\rajce
    2014-01-23 17:07:36 ----AD---- C:\Windows
    2014-01-22 23:07:20 ----D---- C:\Windows\system32\catroot
    2014-01-22 19:14:22 ----D---- C:\Windows\system32\drivers
    2014-01-22 19:08:21 ----D---- C:\Windows\inf
    2014-01-22 19:07:57 ----SHD---- C:\Windows\Installer
    2014-01-22 19:07:30 ----D---- C:\Program Files (x86)\Common Files
    2014-01-22 19:06:58 ----DC---- C:\Windows\system32\DRVSTORE
    2014-01-22 19:06:58 ----D---- C:\Windows\system32\DriverStore
    2014-01-22 19:06:35 ----D---- C:\Program Files (x86)\Nokia
    2014-01-22 19:06:31 ----D---- C:\Windows\system32\catroot2
    2014-01-22 17:41:53 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
    2014-01-21 23:51:54 ----D---- C:\Users\Jirka\AppData\Roaming\PC Suite
    2014-01-21 23:51:32 ----D---- C:\Windows\system32\drivers\UMDF
    2014-01-21 23:26:17 ----D---- C:\Program Files\DIFX
    2014-01-16 17:59:30 ----D---- C:\Windows\SysWOW64
    2014-01-16 11:29:08 ----D---- C:\Windows\winsxs
    2014-01-15 20:07:09 ----D---- C:\Windows\system32\MRT
    2014-01-15 20:03:13 ----D---- C:\Windows\debug
    2014-01-15 20:03:08 ----A---- C:\Windows\system32\MRT.exe
    2014-01-05 22:09:16 ----D---- C:\ProgramData\regid.1986-12.com.adobe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
    R0 viamrx64;viamrx64; C:\Windows\system32\DRIVERS\viamrx64.sys [2010-11-18 135680]
    R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-12-18 131576]
    R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-11-14 28600]
    R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
    R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
    R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-12-18 108440]
    R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2012-02-15 11576]
    R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-04-25 104560]
    R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
    R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2011-06-14 2159728]
    S2 DgiVecpgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
    S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
    S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
    S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
    S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
    S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
    S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
    S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
    S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
    S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2013-01-23 12800]
    S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2013-01-23 171008]
    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
    S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
    S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
    S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
    S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
    S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2009-08-10 23040]
    S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2009-08-10 73216]
    S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
    S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
    S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
    S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
    S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
    S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
    S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
    S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sy s [2013-01-23 9216]
    S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
    S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
    S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2013-11-14 440376]
    R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2013-12-18 440376]
    R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
    R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
    R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\SysWOW64\nlssrv32.exe [2012-01-31 66560]
    R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-09-19 14997280]
    R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-23 922912]
    R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-19 2155296]
    R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-10-15 3921880]
    R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-09-20 1042272]
    R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-09-13 171416]
    R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-10-23 414496]
    R2 TeamViewer;TeamViewer 3; C:\Program Files (x86)\TeamViewer3\TeamViewer_Host.exe [2008-01-28 94208]
    R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2011-06-14 27760]
    R2 VRAID Log Service;VRAID Log Service; C:\Program Files (x86)\VIA\RAID\vialogsv.exe [2011-03-15 55920]
    R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EX E [2010-01-09 4925184]
    S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe [2013-09-11 105144]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ms corsvw.exe [2013-09-11 124088]
    S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-12 116648]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe [2014-01-22 257928]
    S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
    S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\as pnet_state.exe [2013-09-11 51808]
    S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-12 116648]
    S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetw collectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-03-08 30798512]
    S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-10 119408]
    S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
    S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll ,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
    S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
    S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
    S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
    S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
    S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-15 1255736]
    S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framewo rk64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SM SvcHost.exe [2013-09-11 139856]
    S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framewo rk64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SM SvcHost.exe [2013-09-11 139856]
    S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framewor k64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SM SvcHost.exe [2013-09-11 139856]

    -----------------EOF-----------------
    Naposledy upravil gras; 25.01.2014 v 17:11. Důvod: doplněni udaju
    Mám doma počítač.

  2. #2

    Standardní Re: Přípona lnk na flash disku

    To se s tím fakt nikdo nesetkal ?
    Mám doma počítač.

  3. #3

    Standardní Re: Přípona lnk na flash disku

    Soubor s koncovkou "lnk" znamená link jako odkaz... prostě zástupce.
    Ty tam nekopíruješ soubory a dáváš tam pouze zástupce

    To bude asi celý problém..
    Paul Atreides
    NPE-squad.com - Clan Leader

    COMP: Win7 x64 prof. | C2D E8400 3Ghz | ASUS P5B DeLuxe | Corsair 6000 MB DDR2 800MHz | ASUS GTX 560 Ti 1GB-DDR5 | SB Audigy SE 7.1 | Seagate 1000GB & 500GB (šuple WD 320GB) | Corsair 520W | 26" LG fullHD 1920x1080px 8ms
    NAS-server: Win Home Server 2011 | 1,6 Atom D525 (2 core | 4 threads) | ASrock mini-ITX | 4 GB DDR3 800MHz | Western 1TB GreenPower | Fortron 200W 80-BronzePlus | ftp, web, mumble, vpn, Servio DLNA share system, komplet PLEXI case
    NetBook: ASUS Eee1001PQ (violet) | 1,6 ATOM | 1 GB RAM | 250GB HDD | 1024x600 px LCD | baterie 7h :)
    FOTO: Olympus E-520 | 14-42 ZuikoDigital | 40-150 ZuikoDigital

  4. #4

    Standardní Re: Přípona lnk na flash disku

    Citace Původně odeslal Atreides Zobrazit příspěvek
    Soubor s koncovkou "lnk" znamená link jako odkaz... prostě zástupce.
    Ty tam nekopíruješ soubory a dáváš tam pouze zástupce

    To bude asi celý problém..
    **************
    Nejsem geniální, ale debil taky ne. )

    Zkopíruju fotku, film, soubor.doc, prostě cokoliv - po znovunačtení flashky se přípony změní na .lnk.
    Když soubory smažu, tak se tam zase objeví. To není přece normální.

    Nevím jestli je to vir? "Chytl" jsem to od bráchy, kde sem mu instaloval ( léta prověřený) programy na nový počítač. Jemu se změnily přípony snad v celým počítaču.
    Psal do ty firmy, kde ho koupil a prej se jim už stalo, že prodali zavirovanej počítač.
    Takže kopírováním zastupce to fakt není.
    Mám doma počítač.

  5. #5

    Standardní Re: Přípona lnk na flash disku

    OK tak tedy jinak - napsal jsem do Googlu "virus lnk usb" a našlo mi to že to je opravdu virus
    a že se řeší takto:

    run cmd.... then choose your drive name..(example G: ) type G: then press enter
    then type attrib -a -s -r -h /s /d.. then wait for a moment...then if it display your drive G: again.. check your drive...and if you see a folder w/o name..click it and you will see your files..copy it to the desktop and format your FD....

    Přičemž si máš sehnat pořádnej antivir např. NOD !
    Paul Atreides
    NPE-squad.com - Clan Leader

    COMP: Win7 x64 prof. | C2D E8400 3Ghz | ASUS P5B DeLuxe | Corsair 6000 MB DDR2 800MHz | ASUS GTX 560 Ti 1GB-DDR5 | SB Audigy SE 7.1 | Seagate 1000GB & 500GB (šuple WD 320GB) | Corsair 520W | 26" LG fullHD 1920x1080px 8ms
    NAS-server: Win Home Server 2011 | 1,6 Atom D525 (2 core | 4 threads) | ASrock mini-ITX | 4 GB DDR3 800MHz | Western 1TB GreenPower | Fortron 200W 80-BronzePlus | ftp, web, mumble, vpn, Servio DLNA share system, komplet PLEXI case
    NetBook: ASUS Eee1001PQ (violet) | 1,6 ATOM | 1 GB RAM | 250GB HDD | 1024x600 px LCD | baterie 7h :)
    FOTO: Olympus E-520 | 14-42 ZuikoDigital | 40-150 ZuikoDigital

  6. #6

    Standardní Re: Přípona lnk na flash disku

    A ještě co jsem našel v C:\Temp ti běží exe soubor "RSITx64.exe" ,který je onen virus - nicméně ten se ti bude vytvářet při každém spuštění, musíš najít zdroj.
    1) mít aktuální db antiviru (nevím jestli AVG jej pozná)
    2) zkontrolovat celý systém C: (jakmile budeš mít napadené jiné exe (např explorer.exe), tak ti budou vytvářet stále nové viry do C:\temp)
    3) jakmile tvuj antvir pozná tento virus, pak restartuj a nech antivir aby blokoval všechny spouštějící se exe soubory.
    Paul Atreides
    NPE-squad.com - Clan Leader

    COMP: Win7 x64 prof. | C2D E8400 3Ghz | ASUS P5B DeLuxe | Corsair 6000 MB DDR2 800MHz | ASUS GTX 560 Ti 1GB-DDR5 | SB Audigy SE 7.1 | Seagate 1000GB & 500GB (šuple WD 320GB) | Corsair 520W | 26" LG fullHD 1920x1080px 8ms
    NAS-server: Win Home Server 2011 | 1,6 Atom D525 (2 core | 4 threads) | ASrock mini-ITX | 4 GB DDR3 800MHz | Western 1TB GreenPower | Fortron 200W 80-BronzePlus | ftp, web, mumble, vpn, Servio DLNA share system, komplet PLEXI case
    NetBook: ASUS Eee1001PQ (violet) | 1,6 ATOM | 1 GB RAM | 250GB HDD | 1024x600 px LCD | baterie 7h :)
    FOTO: Olympus E-520 | 14-42 ZuikoDigital | 40-150 ZuikoDigital

  7. #7

    Standardní Re: Přípona lnk na flash disku

    ááha. Diky, zkusim. Ono asi taky záleží na tom, jak se hledá na Googlu. Asi mám rezervy. Díííky
    Mám doma počítač.

Informace o tématu

Users Browsing this Thread

Toto téma si právě prohlíží 1 uživatelů. (0 registrovaných a 1 anonymních)

Podobná témata

  1. Vrácení USB flash disku
    Založil pre.vit v sekci fóra Reklamace a §
    Odpovědí: 17
    Poslední příspěvek: 09.06.2006, 15:18
  2. Nezobrazení flash disku
    Založil dovatron v sekci fóra Optické, přenosné a jiné disk(et)y
    Odpovědí: 5
    Poslední příspěvek: 11.04.2006, 15:25
  3. Ztrata dat z flash disku
    Založil aja v sekci fóra Optické, přenosné a jiné disk(et)y
    Odpovědí: 3
    Poslední příspěvek: 13.02.2006, 15:04
  4. Boot z USB flash disku
    Založil Petr75 v sekci fóra Optické, přenosné a jiné disk(et)y
    Odpovědí: 5
    Poslední příspěvek: 30.10.2005, 18:25
  5. Partition na flash disku
    Založil Frost v sekci fóra Paměti
    Odpovědí: 6
    Poslední příspěvek: 03.03.2004, 07:18

Pravidla přispívání

  • Nemůžete zakládat nová témata
  • Nemůžete zasílat odpovědi
  • Nemůžete přikládat přílohy
  • Nemůžete upravovat své příspěvky
  •