Pomaly pocitac

[freem1]

Ahojte.
Pocitac pracuje akosi pomaly a aj seka. Neviete cim to moze byt a ako to vyriesit?
Dakujem pekne.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Freemen at 2013-05-04 10:21:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (9%) free of 30 GB
Total RAM: 1023 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:22:20, on 04.05.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
D:\Program Files\Safetica\STCService.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Safetica\STCService.exe
C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
D:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
D:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
D:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
D:\Program Files\OO Software\Defrag\oodag.exe
C:\WINDOWS\system32\rundll32.exe
D:\Program Files\QipGuard\QipGuard.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
D:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
D:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_service.exe
D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Stiahnute z internetu\RSIT.exe
D:\Program Files\Trend Micro\Freemen.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [avast5] D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [QIP Internet Guardian] C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe /p
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Previesť cieľ odkazu do formátu Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Previesť do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - D:\Program Files\QIP\qip.exe (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4602F363-60A1-4F49-BD5B-8ACF7F76176C}: NameServer = 195.146.128.60,195.146.132.59
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - d:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: ABBYY PDF Transformer 3.0 – Licenčná služba (ABBYY.Licensing.PDFTransformer.Classic.3.0) - ABBYY - D:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Common Files\BinarySense\hldasvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - D:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - D:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: QipGuard - QIP.ru - D:\Program Files\QipGuard\QipGuard.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Safetica Client Service (STCService) - Safetica Technologies - D:\Program Files\Safetica\STCService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
O23 - Service: Uniblue DiskRescue - Uniblue - D:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_service.exe

--
End of file - 10966 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\EPUpdater.job
C:\WINDOWS\tasks\Uniblue DiskRescue 2009.job
C:\WINDOWS\tasks\Uniblue SpyEraser.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default

prefs.js - "browser.startup.homepage" - "http://www2.delta-search.com/?affID=119 ... 138F7F1A94"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{B7082FAA-CB62-4872-9106-E42DD88EDE45}"=D:\Program Files\McAfee\SiteAdvisor
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=D:\Program Files\Real\RealPlayer\browserrecord
"bkmrksync@nokia.com"=D:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"wrc@avast.com"=D:\Program Files\Alwil Software\Avast5\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@bittorrent.com/BitTorrentDNA]
"Description"=Delivery Network Acceleration by BitTorrent™
"Path"=D:\Program Files\DNA\plugins\npbtdna.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=D:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=d:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4]
"Description"=Office Live Update v1.4
"Path"=D:\Program Files\Microsoft\Office Live\npOLW.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69]
"Description"=RealJukebox Netscape Plugin
"Path"=D:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=D:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=D:\Program Files\VideoLAN\VLC\npvlc.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsILegitCheckPlugin.xpt
nsIOGAPlugin.xpt
nsJSRealPlayerPlugin.xpt

D:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npDivxPlayerPlugin.dll
npdrmv2.dll
npdsplay.dll
npLegitCheckPlugin.dll
npMaeC3D.dll
NPOFF12.DLL
npOGAPlugin.dll
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
npwmsdrm.dll
nsIDivxPlayerPlugin.xpt
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

D:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
babylon.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
yahoo.xml
zoznam-sk.xml

C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\
ffxtlbr@delta.com
firebit@firebit
npdevalvr@devalvr.com
pasteandgo2@holio.lin
pbreak.br@gmail.com
ver69h9.96@ecdsfrstcdwfck.net
videodowloader@videodownloader.net
{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
{20a82645-c095-46ed-80e3-08825760534b}
{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2)
{FFA36170-80B1-4535-B0E3-A4569E497DD0}

C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\searchplugins\
babylon.xml
BrowserProtect.xml
delta.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - D:\Program Files\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2013-03-07 4767304]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2010-08-18 577536]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
""= []
"Malwarebytes' Anti-Malware"=D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-12-28 198160]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpywareTerminatorUpdate"=D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-01-30 3318784]
"QIP Internet Guardian"=C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe [2011-08-22 190336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2007-11-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=D:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableStatusMessages"=0
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoStartMenuPinnedList"=0
"NoStartMenuMFUprogramsList"=0
"NoUserNameInStartMenu"=0
"NoStartMenuSubFolders"=0
"NoCommonGroups"=0
"NoPrinterTabs"=0
"NoDeletePrinter"=0
"NoAddPrinter"=0
"NoPrinters"=0
"NoFavoritesMenu"=0
"NoRecentDocsNetHood"=0
"NoChangeAnimation"=0
"NoChangeKeyboardNavigationIndicators"=0
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\WINDOWS\system32\CNAB4RPK.EXE"="C:\WINDOWS\system32\CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"D:\Program Files\BitTorrent\bittorrent.exe"="D:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"D:\Program Files\DNA\btdna.exe"="D:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"D:\Program Files\Winamp Remote\bin\Orb.exe"="D:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"D:\Program Files\Winamp Remote\bin\OrbTray.exe"="D:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"D:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="D:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"D:\Program Files\Windows Live\Messenger\msnmsgr.exe"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"D:\Program Files\Windows Live\Messenger\livecall.exe"="D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Program Files\LimeWire\LimeWire.exe"="D:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"D:\Program Files\Google\Google Talk\googletalk.exe"="D:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Pinnacle\VideoSpin\Programs\PMSRegisterFile.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"D:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"D:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\ICQ6.5\ICQ.exe"="D:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"D:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="D:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"D:\Program Files\QIP\qip.exe"="D:\Program Files\QIP\qip.exe:*:Disabled:Quiet Internet Pager"
"D:\Z internetu 2\Half Life 2\hl2.exe"="D:\Z internetu 2\Half Life 2\hl2.exe:*:Enabled:hl2"
"E:\Half Life 2\hl2.exe"="E:\Half Life 2\hl2.exe:*:Enabled:hl2"
"D:\Program Files\Google\Google Earth\plugin\geplugin.exe"="D:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator Update Support"
"D:\Program Files\QIP 2010\qip.exe"="D:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010"
"D:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="D:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Disabled:Nero ShowTime"
"D:\WRYKRYS2013\Wrykrys.exe"="D:\WRYKRYS2013\Wrykrys.exe:*:Enabled:WRYKRYS Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\VideoLAN\VLC\vlc.exe"="D:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player 2.0.6"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Windows Live\Messenger\msnmsgr.exe"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"D:\Program Files\Windows Live\Messenger\livecall.exe"="D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.vorbis"=vorbis.acm
"msacm.lhacm"=lhacm.acm
"msacm.siren"=sirenacm.dll
"VIDC.WMV3"=wmv9vcm.dll
"vidc.mjpg"=pvmjpg30.dll
"vidc.yv12"=DivX.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.DIVX"=DivX.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.bat - edit - %SystemRoot%\System32\NOTEPAD.EXE %1"
.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2013-05-04 10:21:54 ----D---- C:\rsit
2013-04-30 20:58:10 ----D---- D:\Program Files\hdvidcodec.com
2013-04-30 20:51:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\BrowserProtect
2013-04-30 20:50:34 ----D---- C:\Documents and Settings\Freemen\Data aplikací\BabSolution
2013-04-30 20:49:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Babylon
2013-04-30 20:49:45 ----D---- C:\Documents and Settings\Freemen\Data aplikací\Babylon
2013-04-30 20:49:28 ----D---- D:\Program Files\Gophoto.it
2013-04-30 20:48:46 ----D---- D:\Program Files\FirstRowSportApp.com
2013-04-27 19:53:04 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-04-27 19:53:03 ----A---- C:\WINDOWS\system32\javaw.exe
2013-04-27 19:53:03 ----A---- C:\WINDOWS\system32\java.exe
2013-04-23 21:38:16 ----A---- C:\WINDOWS\CZ SK IPTV v2.0 - Free Uninstaller.exe
2013-04-14 14:56:11 ----D---- C:\Program Files\Common Files\Skype
2013-04-11 20:57:05 ----D---- D:\Program Files\Mozilla Firefox
2013-04-11 11:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2808735$
2013-04-11 11:15:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-04-11 11:06:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-04-11 11:06:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2813170$

======List of files/folders modified in the last 1 month======

2013-05-04 10:22:08 ----D---- D:\Program Files\Trend Micro
2013-05-04 10:22:02 ----D---- C:\WINDOWS\Prefetch
2013-05-04 10:18:46 ----D---- C:\WINDOWS\temp
2013-05-04 09:57:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Safetica Client Service
2013-05-04 09:56:53 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2013-05-03 17:35:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-05-01 20:30:49 ----D---- C:\Documents and Settings\Freemen\Data aplikací\Skype
2013-05-01 19:25:22 ----D---- C:\WINDOWS\system32\config
2013-05-01 19:24:55 ----D---- C:\WINDOWS\system32\wbem
2013-05-01 19:24:54 ----D---- C:\WINDOWS\Registration
2013-05-01 19:24:19 ----D---- C:\WINDOWS\system32\CatRoot2
2013-04-30 21:01:03 ----D---- C:\WINDOWS\system32
2013-04-30 20:54:12 ----SD---- C:\WINDOWS\Tasks
2013-04-30 20:40:55 ----D---- C:\Documents and Settings\Freemen\Data aplikací\vlc
2013-04-27 19:53:41 ----SHD---- C:\WINDOWS\Installer
2013-04-27 19:53:40 ----D---- C:\Config.Msi
2013-04-27 19:53:38 ----D---- C:\Program Files\Common Files\Java
2013-04-27 19:53:03 ----D---- D:\Program Files\Java
2013-04-27 10:57:57 ----D---- C:\Kopie - GAP_subory
2013-04-27 10:57:57 ----D---- C:\GAP_subory
2013-04-27 10:57:02 ----D---- C:\WINDOWS\system32\drivers\etc
2013-04-23 21:38:16 ----D---- C:\WINDOWS
2013-04-23 21:38:13 ----D---- C:\Program Files
2013-04-22 20:58:03 ----D---- D:\Program Files\Google
2013-04-21 20:09:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2013-04-21 18:36:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-04-21 18:36:48 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-04-17 08:48:53 ----D---- C:\ALFA
2013-04-14 14:56:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-04-12 13:26:54 ----D---- C:\Program Files\Common Files\Adobe AIR
2013-04-12 08:30:48 ----D---- D:\Program Files\Mozilla Maintenance Service
2013-04-11 11:24:13 ----HD---- C:\WINDOWS\inf
2013-04-11 11:24:04 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-04-11 11:24:01 ----D---- D:\Program Files\internet explorer
2013-04-11 11:23:46 ----D---- C:\WINDOWS\ie8updates
2013-04-11 11:23:32 ----HD---- C:\WINDOWS\$hf_mig$
2013-04-11 11:23:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-04-11 11:16:13 ----A---- C:\WINDOWS\imsins.BAK
2013-04-11 11:06:58 ----A---- C:\WINDOWS\system32\MRT.exe
2013-04-09 18:17:57 ----D---- C:\Demoverzia Alfa verzia 17.11
2013-04-06 13:22:38 ----D---- C:\Documents and Settings\Freemen\Data aplikací\BSplayer PRO

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-03-07 49248]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2004-04-02 21760]
R0 nvraid;NVIDIA NForce(tm) ATA RAID Class Driver; C:\WINDOWS\system32\DRIVERS\nvraid.sys [2004-06-03 68224]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-07-05 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2013-03-07 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-03-07 765736]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-03-07 368176]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-03-07 62376]
R1 avgtp;avgtp; \??\C:\WINDOWS\system32\drivers\avgtpx86.sys []
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-03-07 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LF30FS;LF30FS; \??\D:\Program Files\Everstrike Software\Lock Folder XP 3.6\LF30XP.sys []
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2008-05-31 44384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2010-08-18 4122368]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-19 26600]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-05-17 33280]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-05-17 12928]
R3 PAC7302;Media-Tech Camera; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2008-05-12 460544]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 Safetica;Safetica; \??\D:\Program Files\Safetica\safetica.sys []
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-02-27 27632]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys []
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\WINDOWS\system32\drivers\NSDriver.sys []
S3 ak4cte4s;ak4cte4s; C:\WINDOWS\system32\drivers\ak4cte4s.sys []
S3 alvf9z92;alvf9z92; C:\WINDOWS\system32\drivers\alvf9z92.sys []
S3 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-03-07 164736]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ggsemc;Sony Ericsson USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 massfilter;ZTE Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-09-14 9728]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM); C:\WINDOWS\system32\DRIVERS\sea1bus.sys [2007-02-08 61536]
S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\sea1mdfl.sys [2007-02-08 9360]
S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\sea1mdm.sys [2007-02-08 97088]
S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\sea1mgmt.sys [2007-02-08 88624]
S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS); C:\WINDOWS\system32\DRIVERS\sea1nd5.sys [2007-02-08 18704]
S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\sea1obex.sys [2007-02-08 86432]
S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM); C:\WINDOWS\system32\DRIVERS\sea1unic.sys [2007-02-08 90800]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WimFltr;WimFltr; C:\WINDOWS\system32\DRIVERS\wimfltr.sys [2008-01-19 128104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2007-11-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys [2010-09-14 105088]
S3 ZTEusbnmea;ZTE NMEA Port; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [2010-09-14 105088]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [2010-09-14 105088]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-11 814344]
R2 ABBYY.Licensing.PDFTransformer.Classic.3.0;ABBYY PDF Transformer 3.0 – Licenčná služba; D:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [2010-02-01 759048]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2013-03-07 45248]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2004-07-14 65536]
R2 HDDlife HDD Access service;HDDlife HDD Access service; C:\Program Files\Common Files\BinarySense\hldasvc.exe [2008-02-15 832760]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2012-06-27 73728]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; D:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-12-08 93320]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 OMSI download service;Sony Ericsson OMSI download service; D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 OODefragAgent;O&O Defrag Agent; D:\Program Files\OO Software\Defrag\oodag.exe [2010-08-30 2317128]
R2 QipGuard;QipGuard; D:\Program Files\QipGuard\QipGuard.exe [2011-08-22 190336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2005-08-08 167936]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; D:\Program Files\Spyware Terminator\sp_rsser.exe [2011-01-30 496128]
R2 STCService;Safetica Client Service; D:\Program Files\Safetica\STCService.exe [2011-12-17 3926168]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2012-09-19 1699168]
R2 Uniblue DiskRescue;Uniblue DiskRescue; D:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [2008-09-10 229648]
R2 vkservice;VirusKeeper antivirus/antispyware; D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_service.exe [2008-09-26 1119584]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2004-07-14 1527887]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Google Update Service (gupdate); D:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-30 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-21 256904]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-11-14 85096]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-28 651720]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); D:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-30 136176]
S3 gusvc;Google Software Updater; D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-23 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-11 115608]
S3 NBService;NBService; D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; D:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-03-04 621056]
S3 usnjsvc;Služba Čtení deníku USN sdílených složek programu Messenger; D:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; D:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]

-----------------EOF-----------------

[Márty84]

Zdravim

Vidim tam bezet MBAM. Nasel neco pri uplne kontrole?

[freem1]

To Vam neviem povedat, lebo nic take som nespustal.

[Márty84]

Tak ji spustte http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[freem1]

Takze stiahol som si aktualizaciu MBAM a spustil som uplnu kontrolu a vzdy mi to zamrzne asi tak po 3 minutach.Skusal som to 2 krat.

[Márty84]

Zkuste spustit MBAM v nouzovem rezimu.

[freem1]

To ale neviem ako sa to robi-ten nudzovy rezim.

Urobil som zatial aspon rychlu kontrolu

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.05.04.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Freemen :: FREEMEN-95805D5 [administrátor]

04.05.2013 12:49:09
MBAM-log-2013-05-04 (13-18-11).txt

Typ kontroly: Rýchla kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 260857
Uplynutý čas: 28 min, 49 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 1
HKCU\SOFTWARE\Videosoft (Trojan.DNSChanger) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

[Márty84]

Nalez nechte odstranit.


Do nouzoveho rezimu se dostanete takto:
restartujte pc, mackejte klavesu F8 - pripadne jinou, zalezi na typu stroje - a zvolte moznost nouzovy rezim.
Kdyby to neslo, zde je jiny postup http://forum.viry.cz/viewtopic.php?f=46&t=7554

[freem1]

Uplna kontrola MBAM cez nudzovy rezim

Mozem dat vsetko v pohode odstranit. Len neviem ci mozem odstranit aj tie 3 subory z D:\Program Files\-mozem?
A ako to mozem potom odstranit, ked som uz zatvoril ten program MBAM?

Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.05.04.08

Windows XP Service Pack 3 x86 NTFS (Núdzový režim)
Internet Explorer 8.0.6001.18702
Administrator :: FREEMEN-95805D5 [administrátor]

5. 5. 2013 6:39:36
MBAM-log-2013-05-05 (09-11-26).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 600271
Uplynutý čas: 2 hod, 28 min, 18 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 56
D:\Marek\PRACA\Z USB\Nero_SK__keygen7-10\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Program Files\eRightSoft\SUPER\SUPER.exe (Trojan.Downloader) -> Žiadna úloha nevykonaná.
D:\Program Files\Google\Google Earth Pro\google.earth.pro.v4.0.xxxx.generic.patch.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Program Files\PDF Password Remover v3.0\pdfdecrypt.exe (PUP.PDFPasswordRemover) -> Žiadna úloha nevykonaná.
D:\Z internetu 2\Programy\Yamicsoft.WinXP.Manager.v7.0.4.Incl.Keymaker-CORE\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Picture_Resize_Genius_2.9.7.rar (PUP.Keygen.Intro) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Recover_My_Files_v4.6.6.803.rar (Malware.Packer) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\T104(1).rar (Malware.Packer) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\T104(3).rar.part (Malware.Packer) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\W_z_Pro_14.5_9095(1).rar (Trojan.Dropper) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\ABBYY.PDF.Transformer.3.0.100.216.Freddy\399.rar (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\ABBYY.PDF.Transformer.3.0.100.216.Freddy\399\3.0.100.399.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Autocad 2006 portable\Keygen\keygen.exe (Malware.Gen) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\DAEMON.Tools.Pro.Advanced.4.41.0315.0262.patch-SND\ind.dll (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\ Drive.rar (Hacktool.Gen) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\colagen.rar (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\Legalizator Windowsu.rar (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\PDF_Password_Remover_3.0_Portable.rar (PUP.PDFPasswordRemover) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\PDF_Password_Remover_3.1.rar (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\Portable_DVDFab_6.2.1.8.rar (Trojan.FakeMS) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\Windows_XP_Genuine_Key_Generator.rar (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\WinXP Manager v7.0.1 incl keygen.rar (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Dokumenty+ostatne veci\Rar subory\XP SP3 [AntiWPA] Activator.7z (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Google_Earth_Plus_v6.0.3.2197_Final\google.earth.plus.6.0.2.2074-mpt.rar (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Na usb programy\windows.xp.manager.v8.0.1\Lz0\keygen.exe (Riskware.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Na usb programy\Yamicsoft.Windows.XP.Manager.v8.0.0.Incl.Keygen-Lz0\lzbpesf1.zip (Riskware.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\PhotoFiltre Studio X 10.3.3\keygen.rar (Trojan.Dropper.PGen) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\ABBYY FineReader Pro 9.0.0.1019\Activation\ABBYY Fine Patch Activator by O.S.Gr Team.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\ABBYY FineReader Pro 9.0.0.1019\Patch\FineReader.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\FastStone Capture 6.3 Final\KEYGEN\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Nero_SK__keygen7-10\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\OO.Defrag.Professional.v14.0.167.Incl.Keygen-MESMERiZE\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\OO.Defrag.Professional.v14.0.167.Incl.Keygen-MESMERiZE\m-od1401.zip (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\PDF Password Remover 3.0 Portable\Portable_PDF_Password_Remover_3.0.exe (PUP.PDFPasswordRemover) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\PDF Password Remover 3.1\PATCH\pdfpasswordremover3.1patch.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\PDF Password Remover 3.1\SETUP\pwdremover.exe (PSWTool.PdfCracker) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\RealPlayer_11.1.3_Build_6.0.14.955\RealPlayer 11.1.3 Build 6.0.14.955\RealPlayer 11.1.3 Build 6.0.14.955\realplayer_premium_activator_1.2.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Symantec.Norton.Products\Renew License\1BOX_NTR2011.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Symantec.Norton.Products\Renew License\allNIS-88year.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Symantec.Norton.Products\Renew License\NTR2011-v3.1.3.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\TuneUp.Utilities.2010.v9.0.3000.136.Incl.Keymaker-CORE\cr-tug90.zip (PUP.Keygen.Intro) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\TuneUp.Utilities.2010.v9.0.3000.136.Incl.Keymaker-CORE+CZ\CORE10k.EXE (PUP.Keygen.Intro) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Windows_XP_Genuine_Key_Generator\Windows XP Genuine Key Generator\MagicJellyBeanKeyFinder.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\WinXP Manager 6.0.1\KEYGEN\CORE10k.EXE (PUP.Keygen.Intro) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\XP SP3 [AntiWPA] Activator\amd64\AntiWPA.Dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\XP SP3 [AntiWPA] Activator\x86\AntiWPA.Dll (PUP.Wpakill) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Yamicsoft WinXP Manager v6.0.8\Keymaker\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Yamicsoft.WinXP.Manager.v6.0.7.WinXP_snipermaster_warxtreme.com\Yamicsoft.WinXP.Manager.v6.0.7.WinXP.Incl.Keymaker-CORE\cr-ylb01\CORE10k.EXE (PUP.Keygen.Intro) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\Programy\Yamicsoft.WinXP.Manager.v6.0.7.WinXP_snipermaster_warxtreme.com\Yamicsoft.WinXP.Manager.v6.0.7.WinXP.Incl.Keymaker-CORE\cr-ylb01\keygen.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\TuneUp Utilities 2011 10.0.4200.101\Keygen\keygen 1.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\TuneUp Utilities 2011 10.0.4200.101\Keygen\keygen 3.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\TuneUp Utilities 2011 10.0.4310.27\Keygen\keygen 1.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\TuneUp Utilities 2011 10.0.4310.27\Keygen\keygen 3.exe (RiskWare.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z internetu stiahnute\TuneUp Utilities 2013 13.0.2020.14 Final + patch-iOTA\iOTA\Patch\Patch.exe (Riskware.Tool.CK) -> Žiadna úloha nevykonaná.
D:\Z plochy disku C\25.8.2012\TuneUp Utilities 2012 12.0.3600.104 Final\keygen.exe (Malware.Packer) -> Žiadna úloha nevykonaná.
D:\Z plochy disku C\25.8.2012\TuneUp Utilities 2012 12.0.3600.104 Final\KEYGEN.rar (Malware.Packer) -> Žiadna úloha nevykonaná.

(koniec)

[Márty84]

To si delate srandu?

Mate v tom pc aspon jednu vec legalne?

Pokud jste ho zavrel, nezbyva nez udelat novy test.

[freem1]

To nemam vsetko nainstalovane, iba stiahnute a to uz davno nepouzivam, iba niektore programy z toho.
A neda sa to aj inac odstranit, aby som nemusel davat zase ten test? (ze prekopirujem len ten zoznam do nejakeho programu a on to vymaze podla toho zoznamu?)

A ked to vsetko odstranim, tak co potom dalej treba urobit?

Dakujem Vam pekne.

[Márty84]

Jinak se to odstranit neda. Nebo da, ale mohlo by dojit k problemum.

To nemam vsetko nainstalovane, iba stiahnute a to uz davno nepouzivam, iba niektore programy z toho.

To by me teda zajimalo ktere.



Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

[freem1]

OTL logfile created on: 06.05.2013 16:03:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Freemen\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country: Slovensko | Language: SKY | Date Format: dd.MM.yyyy

1023,23 Mb Total Physical Memory | 192,14 Mb Available Physical Memory | 18,78% Memory free
2,40 Gb Paging File | 1,72 Gb Available in Paging File | 71,82% Paging File free
Paging file location(s): C:\pagefile.sys 1534 1534 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 29,30 Gb Total Space | 2,27 Gb Free Space | 7,74% Space Free | Partition Type: NTFS
Drive D: | 268,79 Gb Total Space | 23,43 Gb Free Space | 8,72% Space Free | Partition Type: NTFS

Computer Name: FREEMEN-95805D5 | User Name: Freemen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.05.05 22:00:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Freemen\Plocha\OTL.exe
PRC - [2013.04.11 20:57:44 | 000,920,472 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.03.07 01:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- D:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2013.03.07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012.10.16 17:54:20 | 000,323,936 | ---- | M] (Uniblue Systems Ltd) -- D:\Program Files\Uniblue\PowerSuite\powersuite_monitor.exe
PRC - [2012.09.17 11:56:40 | 001,869,152 | ---- | M] (TuneUp Software) -- D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
PRC - [2012.09.17 11:56:38 | 001,699,680 | ---- | M] (TuneUp Software) -- D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
PRC - [2011.12.17 13:20:48 | 003,926,168 | ---- | M] (Safetica Technologies) -- D:\Program Files\Safetica\STCService.exe
PRC - [2011.08.22 14:50:52 | 000,190,336 | ---- | M] (QIP.ru) -- D:\Program Files\QipGuard\QipGuard.exe
PRC - [2011.08.22 14:50:52 | 000,190,336 | ---- | M] (QIP.ru) -- C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe
PRC - [2011.01.30 14:18:58 | 003,318,784 | ---- | M] (Crawler.com) -- D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2011.01.30 14:18:53 | 000,496,128 | ---- | M] (Crawler.com) -- D:\Program Files\Spyware Terminator\sp_rsser.exe
PRC - [2010.08.30 23:25:32 | 002,317,128 | ---- | M] (O&O Software GmbH) -- D:\Program Files\OO Software\Defrag\oodag.exe
PRC - [2010.08.18 11:31:18 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2010.02.01 16:51:07 | 000,759,048 | ---- | M] (ABBYY) -- D:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
PRC - [2009.12.28 00:34:47 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2009.12.11 00:04:22 | 000,814,344 | ---- | M] (ABBYY) -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2009.12.08 15:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) -- D:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () -- D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
PRC - [2009.03.30 17:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
PRC - [2009.03.30 17:28:36 | 000,183,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
PRC - [2008.09.26 11:10:22 | 001,119,584 | ---- | M] (AxBx) -- D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_service.exe
PRC - [2008.09.10 17:22:32 | 000,229,648 | ---- | M] (Uniblue) -- D:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.02.15 14:17:00 | 000,832,760 | ---- | M] (BinarySense, Inc.) -- C:\Program Files\Common Files\BinarySense\hldasvc.exe
PRC - [2007.12.10 15:55:26 | 000,323,584 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\PAC7302\Monitor.exe
PRC - [2007.01.11 14:26:56 | 000,063,112 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CNAB4RPK.EXE
PRC - [2006.10.26 13:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
PRC - [2004.07.14 01:05:10 | 001,527,887 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
PRC - [2004.07.14 01:05:10 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe


========== Modules (No Company Name) ==========

MOD - [2013.05.06 09:44:26 | 002,082,816 | ---- | M] () -- D:\Program Files\Alwil Software\Avast5\defs\13050600\algo.dll
MOD - [2013.04.21 18:36:46 | 016,032,648 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll
MOD - [2013.04.11 20:57:42 | 003,133,336 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012.10.16 17:54:28 | 001,109,344 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\ui_dll.dll
MOD - [2012.10.16 17:54:28 | 000,627,552 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\libGLESv2.dll
MOD - [2012.10.16 17:54:28 | 000,587,616 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\locale\en\resources.dll
MOD - [2012.10.16 17:54:26 | 020,763,488 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\libcef.dll
MOD - [2012.10.16 17:54:26 | 000,117,088 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\libEGL.dll
MOD - [2012.10.16 17:54:24 | 001,099,632 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\avcodec-53.dll
MOD - [2012.10.16 17:54:24 | 000,189,296 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\avformat-53.dll
MOD - [2012.10.16 17:54:24 | 000,122,736 | ---- | M] () -- D:\Program Files\Uniblue\PowerSuite\avutil-51.dll
MOD - [2011.08.22 14:50:48 | 000,185,728 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\QipGuard\chrome.dll
MOD - [2011.01.30 14:21:38 | 001,901,570 | ---- | M] () -- D:\Program Files\Spyware Terminator\TorentDll.dll
MOD - [2009.12.28 00:35:22 | 000,008,704 | ---- | M] () -- D:\Program Files\Real\RealPlayer\rpchromebrowserrecordhelper.dll
MOD - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () -- D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
MOD - [2009.02.13 12:44:56 | 000,071,696 | ---- | M] () -- d:\Program Files\McAfee\SiteAdvisor\mcfrmwk.dll
MOD - [2009.02.13 12:44:52 | 000,207,376 | ---- | M] () -- d:\Program Files\McAfee\SiteAdvisor\cntscan.dll
MOD - [2009.02.13 12:44:52 | 000,117,264 | ---- | M] () -- d:\Program Files\McAfee\SiteAdvisor\apengine.dll
MOD - [2008.04.14 05:21:47 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007.10.20 09:00:04 | 000,139,264 | ---- | M] () -- D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_sscan.dll
MOD - [2001.10.28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll


========== Services (SafeList) ==========

SRV - [2013.04.21 18:36:49 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.11 20:57:43 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013.03.07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.10.16 17:54:20 | 000,030,048 | ---- | M] () [On_Demand | Stopped] -- D:\Program Files\Uniblue\PowerSuite\powersuite_service.exe -- (Uniblue.PowersuiteSvc)
SRV - [2012.09.17 11:56:38 | 001,699,680 | ---- | M] (TuneUp Software) [Auto | Running] -- D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.12.17 13:20:48 | 003,926,168 | ---- | M] (Safetica Technologies) [Auto | Running] -- D:\Program Files\Safetica\STCService.exe -- (STCService)
SRV - [2011.08.22 14:50:52 | 000,190,336 | ---- | M] (QIP.ru) [Auto | Running] -- D:\Program Files\QipGuard\QipGuard.exe -- (QipGuard)
SRV - [2011.07.20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011.01.30 14:18:53 | 000,496,128 | ---- | M] (Crawler.com) [Auto | Running] -- D:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2010.08.30 23:25:32 | 002,317,128 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent)
SRV - [2010.02.01 16:51:07 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- D:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe -- (ABBYY.Licensing.PDFTransformer.Classic.3.0)
SRV - [2009.12.11 00:04:22 | 000,814,344 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0)
SRV - [2009.12.08 15:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) [Auto | Running] -- D:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
SRV - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- D:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
SRV - [2009.03.30 17:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.03.04 11:25:12 | 000,621,056 | ---- | M] (Nokia.) [On_Demand | Stopped] -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.01.28 11:32:19 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.11.14 13:31:58 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2008.09.26 11:10:22 | 001,119,584 | ---- | M] (AxBx) [Auto | Running] -- D:\Program Files\AxBx\VirusKeeper 2009 Pro Trial\vk_service.exe -- (vkservice)
SRV - [2008.09.10 17:22:32 | 000,229,648 | ---- | M] (Uniblue) [Auto | Running] -- D:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe -- (Uniblue DiskRescue)
SRV - [2008.02.15 14:17:00 | 000,832,760 | ---- | M] (BinarySense, Inc.) [Auto | Running] -- C:\Program Files\Common Files\BinarySense\hldasvc.exe -- (HDDlife HDD Access service)
SRV - [2007.01.05 21:57:30 | 000,913,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006.10.26 13:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe -- (MDM)
SRV - [2004.07.14 01:05:10 | 001,527,887 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2004.07.14 01:05:10 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ggsemc.sys -- (ggsemc)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (auo1j7tc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NSDriver.sys -- (Ad-Watch Connect Filter)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a24jozjb)
DRV - [2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013.03.07 01:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.03.07 01:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.03.07 01:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.03.07 01:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.03.07 01:33:24 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2013.03.07 01:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.03.07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.03.07 01:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013.02.19 14:50:59 | 000,033,112 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012.08.29 16:42:28 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- D:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.12.17 13:21:22 | 000,261,912 | ---- | M] () [Kernel | On_Demand | Running] -- D:\Program Files\Safetica\safetica.sys -- (Safetica)
DRV - [2010.09.14 13:30:40 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2010.09.14 13:30:40 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2010.09.14 13:30:40 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2010.09.14 13:30:40 | 000,009,728 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\massfilter.sys -- (massfilter)
DRV - [2010.08.18 11:31:19 | 004,122,368 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM)
DRV - [2010.07.05 13:21:10 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2010.04.14 15:06:30 | 000,142,592 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2010.02.27 13:53:19 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2009.12.30 12:20:54 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009.02.09 07:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.02.09 07:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.02.09 07:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.02.09 07:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.05.31 11:24:29 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2008.05.12 15:40:48 | 000,460,544 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302)
DRV - [2008.04.13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.01.19 20:12:42 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007.04.16 21:46:00 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007.02.08 13:56:20 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1unic.sys -- (sea1unic)
DRV - [2007.02.08 13:56:06 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1obex.sys -- (sea1obex)
DRV - [2007.02.08 13:56:02 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1nd5.sys -- (sea1nd5)
DRV - [2007.02.08 13:56:00 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1mgmt.sys -- (sea1mgmt)
DRV - [2007.02.08 13:55:52 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1mdm.sys -- (sea1mdm)
DRV - [2007.02.08 13:55:50 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1mdfl.sys -- (sea1mdfl)
DRV - [2007.02.08 13:55:40 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sea1bus.sys -- (sea1bus)
DRV - [2006.09.24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2004.11.19 19:07:00 | 000,101,488 | ---- | M] () [Kernel | Auto | Running] -- D:\Program Files\Everstrike Software\Lock Folder XP 3.6\LF30XP.sys -- (LF30FS)
DRV - [2004.05.17 08:00:54 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2004.05.17 08:00:52 | 000,033,280 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2004.04.02 09:40:00 | 000,021,760 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nv_agp.SYS -- (nv_agp)
DRV - [2002.09.16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2001.08.18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001.08.17 23:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page = http://www.google.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page Restore =
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKLM\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms}


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = about:blank
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms}
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "http://www2.delta-search.com/?affID=119 ... 138F7F1A94"
FF - prefs.js..extensions.enabledAddons: %7B0538E3E3-7E9B-4d49-8831-A227C80A7AD3%7D:2.2.2
FF - prefs.js..extensions.enabledAddons: %7B35106bca-6c78-48c7-ac28-56df30b51d2a%7D:1.3.9
FF - prefs.js..extensions.enabledAddons: %7B6614d11d-d21d-b211-ae23-815234e1ebb5%7D:2.7.5
FF - prefs.js..extensions.enabledAddons: %7B8f8fe09b-0bd3-4470-bc1b-8cad42b8203a%7D:0.17
FF - prefs.js..extensions.enabledAddons: %7B9D6218B8-03C7-4b91-AA43-680B305DD35C%7D:3.3
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.8
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: D:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: D:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: d:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4: D:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69: D:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: D:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: D:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\Freemen\Data aplikací\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Update\1.2.183.7\npGoogleOneClick8.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: D:\Program Files\McAfee\SiteAdvisor [2009.12.17 23:26:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Program Files\Real\RealPlayer\browserrecord [2009.12.28 00:35:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: D:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2010.09.09 19:40:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\Program Files\Alwil Software\Avast5\WebRep\FF [2013.03.19 09:52:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2013.04.21 20:10:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2013.04.11 20:57:15 | 000,000,000 | ---D | M]

[2008.09.11 15:43:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Extensions
[2013.05.01 19:13:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions
[2008.03.21 23:54:30 | 000,000,000 | ---D | M] (WebTran) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
[2012.10.08 20:08:32 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2010.05.23 20:40:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.05.14 15:25:45 | 000,000,000 | ---D | M] (Live HTTP Headers) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
[2013.02.25 09:40:43 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2008.05.23 19:57:40 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2)
[2008.10.17 10:42:50 | 000,000,000 | ---D | M] (Mouse Gestures Redox) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}
[2013.04.30 20:51:17 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\ffxtlbr@delta.com
[2008.04.30 16:34:16 | 000,000,000 | ---D | M] (FireBit) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\firebit@firebit
[2009.08.07 13:21:31 | 000,000,000 | ---D | M] (DevalVR 3D plugin) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\npdevalvr@devalvr.com
[2008.03.22 12:46:27 | 000,000,000 | ---D | M] (Paste and Go 2) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\pasteandgo2@holio.lin
[2008.06.09 16:16:07 | 000,000,000 | ---D | M] (Megaupload SX.3.2) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\pbreak.br@gmail.com
[2013.04.27 10:57:53 | 000,000,000 | ---D | M] (Browsie2suayve) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\ver69h9.96@ecdsfrstcdwfck.net
[2008.06.03 20:32:37 | 000,000,000 | ---D | M] (VideoDownloader) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\videodowloader@videodownloader.net
[2013.04.30 20:49:03 | 000,216,582 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\fhdp@fhdp.tv.xpi
[2013.05.01 14:57:51 | 000,224,945 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\gophoto@gophoto.it.xpi
[2013.04.17 15:50:46 | 000,201,930 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\hdvc@hdvc.com.xpi
[2011.04.10 13:16:53 | 000,067,810 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi
[2012.12.01 15:57:35 | 000,164,308 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{6614d11d-d21d-b211-ae23-815234e1ebb5}.xpi
[2011.09.09 22:51:11 | 000,052,184 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{9D6218B8-03C7-4b91-AA43-680B305DD35C}.xpi
[2013.03.01 19:43:10 | 000,269,007 | ---- | M] () (No name found) -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.05.01 13:10:09 | 000,006,473 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\searchplugins\babylon.xml
[2013.05.01 13:10:09 | 000,006,473 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\searchplugins\BrowserProtect.xml
[2013.04.30 20:57:13 | 000,001,294 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\searchplugins\delta.xml
[2013.04.28 09:59:39 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
[2013.04.11 20:57:07 | 000,000,000 | ---D | M] (Skype Click to Call) -- D:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.04.11 20:57:08 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.04.11 20:57:08 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013.04.11 20:57:09 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{0538E3E3-7E9B-4D49-8831-A227C80A7AD3}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{35106BCA-6C78-48C7-AC28-56DF30B51D2A}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{6614D11D-D21D-B211-AE23-815234E1EBB5}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{8F8FE09B-0BD3-4470-BC1B-8CAD42B8203A}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{9D6218B8-03C7-4B91-AA43-680B305DD35C}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\FREEMEN\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\37AWXSM7.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}.XPI
[2013.04.11 20:57:44 | 000,263,064 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll
[2004.08.17 15:49:32 | 000,226,816 | ---- | M] (Microsoft Corporation) -- D:\Program Files\mozilla firefox\plugins\npdrmv2.dll
[2007.11.18 21:07:54 | 000,364,544 | ---- | M] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- D:\Program Files\mozilla firefox\plugins\npdsplay.dll
[2007.04.02 11:14:41 | 000,653,120 | ---- | M] (Maestro software, ltd.) -- D:\Program Files\mozilla firefox\plugins\npMaeC3D.dll
[2008.06.30 22:02:00 | 000,663,072 | ---- | M] (Microsoft Corporation) -- D:\Program Files\mozilla firefox\plugins\npOGAPlugin.dll
[2004.08.17 15:49:16 | 000,010,240 | ---- | M] (Microsoft Corporation) -- D:\Program Files\mozilla firefox\plugins\npwmsdrm.dll
[2012.05.02 19:17:24 | 000,001,583 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\atlas-sk.xml
[2012.05.02 19:17:24 | 000,001,380 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\azet-sk.xml
[2013.04.30 20:50:01 | 000,006,470 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.05.02 19:17:24 | 000,001,479 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\dunaj-sk.xml
[2012.05.02 19:17:24 | 000,001,473 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\slovnik-sk.xml
[2012.05.02 19:17:24 | 000,001,104 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-sk.xml
[2012.05.02 19:17:24 | 000,000,830 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\zoznam-sk.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www2.delta-search.com/?affID=119 ... 138F7F1A94
CHR - plugin: Silverlight (Enabled) = d:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Azov Sea Theme = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\edlbggommlbjkfcfpclbcffgfkmkmega\1.0.2_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\
CHR - Extension: Browsie2suayve = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jkmmljlfjicgjaajppncmnhmhkmichlc\1\
CHR - Extension: No name found = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.0\

O1 HOSTS File: ([2013.04.27 10:57:02 | 000,000,786 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Pomocná služba pro přihlášení ke službě Windows Live ID) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avast5] D:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003..\Run: [QIP Internet Guardian] C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe (QIP.ru)
O4 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003..\Run: [SpywareTerminatorUpdate] D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinterTabs = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinters = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeAnimation = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O7 - HKU\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O8 - Extra context menu item: Previesť cieľ odkazu do formátu Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Previesť do Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll (Sun Microsystems, Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4602F363-60A1-4F49-BD5B-8ACF7F76176C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4602F363-60A1-4F49-BD5B-8ACF7F76176C}: NameServer = 195.146.128.60,195.146.132.59
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - d:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\Userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - D:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.09.18 13:27:22 | 000,000,000 | ---D | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2008.10.03 22:21:36 | 000,000,000 | ---D | M] - D:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2011.05.08 13:30:12 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (OODBS)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.mjpg - C:\WINDOWS\System32\pvmjpg30.dll (Pegasus Imaging Corporation)
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013.05.05 22:00:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Freemen\Plocha\OTL.exe
[2013.05.05 10:38:37 | 000,031,584 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2013.05.05 10:38:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\TuneUp Utilities 2013
[2013.05.05 10:22:19 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Freemen\Recent
[2013.05.04 12:09:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2013.05.04 12:09:31 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013.05.04 10:21:54 | 000,000,000 | ---D | C] -- C:\rsit
[2013.04.30 20:59:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ffdshow
[2013.04.30 20:58:10 | 000,000,000 | ---D | C] -- D:\Program Files\hdvidcodec.com
[2013.04.30 20:58:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Nabídka Start\Programy\hdvidcodec.com
[2013.04.30 20:52:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Nabídka Start\Programy\BrowserProtect
[2013.04.30 20:51:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\BrowserProtect
[2013.04.30 20:50:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution
[2013.04.30 20:49:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2013.04.30 20:49:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Data aplikací\Babylon
[2013.04.30 20:49:28 | 000,000,000 | ---D | C] -- D:\Program Files\Gophoto.it
[2013.04.30 20:48:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Nabídka Start\Programy\FirstRowSportApp.com
[2013.04.30 20:48:46 | 000,000,000 | ---D | C] -- D:\Program Files\FirstRowSportApp.com
[2013.04.27 19:53:04 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.04.27 19:53:03 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.04.27 19:53:03 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.04.27 07:46:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Doctor Web
[2013.04.23 21:38:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Nabídka Start\Programy\CZ-SK-IPTV v2.0
[2013.04.23 21:01:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
[2013.04.22 20:41:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Freemen\Plocha\Nová složka (2)
[2013.04.14 14:56:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.04.14 14:56:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Skype
[2013.04.11 20:57:05 | 000,000,000 | ---D | C] -- D:\Program Files\Mozilla Firefox
[2010.09.16 11:53:45 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Data aplikací\hpe85.dll
[2010.09.11 14:16:41 | 007,848,416 | ---- | C] (IObit ) -- C:\Documents and Settings\Freemen\Data aplikací\asc-setup.exe
[2 C:\Documents and Settings\Freemen\Plocha\*.tmp files -> C:\Documents and Settings\Freemen\Plocha\*.tmp -> ]
[1 C:\Documents and Settings\All Users\Dokumenty\*.tmp files -> C:\Documents and Settings\All Users\Dokumenty\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.05.06 16:08:06 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.05.06 15:59:09 | 000,000,366 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.05.06 15:57:25 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\powersuite_monitor.job
[2013.05.06 15:57:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.05.06 15:57:17 | 1073,008,640 | -HS- | M] () -- C:\hiberfil.sys
[2013.05.06 15:57:15 | 003,854,130 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2013.05.06 11:56:01 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.05.05 22:00:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Freemen\Plocha\OTL.exe
[2013.05.05 12:19:48 | 000,000,692 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Powersuite.lnk
[2013.05.05 10:38:29 | 000,001,631 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\TuneUp 1-Click Maintenance.lnk
[2013.05.05 10:38:29 | 000,001,621 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\TuneUp Utilities 2013.lnk
[2013.05.05 10:16:36 | 000,182,784 | ---- | M] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.05.05 10:09:41 | 000,000,592 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2013.05.04 23:10:40 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2013.05.04 11:23:00 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\EPUpdater.job
[2013.05.03 14:26:44 | 012,636,543 | ---- | M] () -- C:\Documents and Settings\Freemen\Plocha\Lidlletaksk_20130402_20130409_final_sJYm1s.pdf
[2013.05.03 10:39:25 | 000,002,284 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.05.01 20:02:09 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.04.30 08:25:17 | 000,002,443 | ---- | M] () -- C:\Documents and Settings\Freemen\Plocha\Microsoft Office Word 2007.lnk
[2013.04.27 13:04:14 | 000,146,147 | ---- | M] () -- C:\Documents and Settings\Freemen\Plocha\01rastliny.pdf
[2013.04.27 10:57:02 | 000,000,786 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013.04.23 21:38:16 | 000,163,111 | ---- | M] () -- C:\WINDOWS\CZ SK IPTV v2.0 - Free Uninstaller.exe
[2013.04.23 21:38:16 | 000,000,617 | ---- | M] () -- C:\Documents and Settings\Freemen\Plocha\CZ SK IPTV v2.0.lnk
[2013.04.23 21:01:42 | 000,000,631 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
[2013.04.23 20:22:49 | 000,407,896 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.04.21 18:36:48 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.04.21 18:36:47 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.04.11 11:16:13 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013.04.10 09:34:28 | 000,001,693 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2 C:\Documents and Settings\Freemen\Plocha\*.tmp files -> C:\Documents and Settings\Freemen\Plocha\*.tmp -> ]
[1 C:\Documents and Settings\All Users\Dokumenty\*.tmp files -> C:\Documents and Settings\All Users\Dokumenty\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.05.05 22:13:43 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.05.05 12:20:29 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\powersuite_monitor.job
[2013.05.05 12:19:48 | 000,000,692 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Powersuite.lnk
[2013.05.05 10:38:29 | 000,001,631 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\TuneUp 1-Click Maintenance.lnk
[2013.05.05 10:38:29 | 000,001,621 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\TuneUp Utilities 2013.lnk
[2013.05.05 10:38:27 | 000,001,621 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\TuneUp Utilities 2013.lnk
[2013.05.05 10:09:41 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2013.05.05 09:19:13 | 1073,008,640 | -HS- | C] () -- C:\hiberfil.sys
[2013.05.04 12:09:37 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2013.05.03 14:26:13 | 012,636,543 | ---- | C] () -- C:\Documents and Settings\Freemen\Plocha\Lidlletaksk_20130402_20130409_final_sJYm1s.pdf
[2013.04.30 20:50:42 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\EPUpdater.job
[2013.04.27 13:04:12 | 000,146,147 | ---- | C] () -- C:\Documents and Settings\Freemen\Plocha\01rastliny.pdf
[2013.04.23 21:38:16 | 000,163,111 | ---- | C] () -- C:\WINDOWS\CZ SK IPTV v2.0 - Free Uninstaller.exe
[2013.04.23 21:38:16 | 000,000,617 | ---- | C] () -- C:\Documents and Settings\Freemen\Plocha\CZ SK IPTV v2.0.lnk
[2013.04.23 21:01:42 | 000,000,631 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
[2013.04.14 14:56:11 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.03.19 09:52:14 | 000,164,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.03.19 09:52:13 | 000,049,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.03.03 18:28:03 | 000,228,240 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.11.23 19:20:01 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012.09.23 13:50:47 | 000,001,264 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader(2).nast
[2012.09.18 20:09:35 | 000,001,336 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader(1).nast
[2012.08.12 11:58:04 | 000,000,300 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader.err
[2012.08.01 12:31:46 | 000,022,655 | ---- | C] () -- C:\WINDOWS\System32\msweneo-e.dll
[2012.07.20 10:28:05 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader.nast
[2012.02.15 09:46:37 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.02.15 01:57:05 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\sixdr.dat
[2011.06.26 11:56:19 | 000,000,323 | ---- | C] () -- C:\WINDOWS\System32\Remover.ini
[2011.06.26 11:56:15 | 000,000,885 | ---- | C] () -- C:\WINDOWS\System32\SP7302.INI
[2009.08.11 12:05:59 | 000,000,709 | ---- | C] () -- C:\Documents and Settings\Freemen\CommandDispatchers.xml
[2009.08.11 12:05:58 | 000,001,363 | ---- | C] () -- C:\Documents and Settings\Freemen\cleaner-config.xml
[2009.04.25 09:50:39 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Freemen\winscp.RND
[2009.03.21 10:06:46 | 000,000,464 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2009.01.07 15:01:55 | 000,005,368 | ---- | C] () -- C:\Documents and Settings\Freemen\Data aplikací\froggy_scorebox
[2009.01.07 15:01:55 | 000,000,912 | ---- | C] () -- C:\Documents and Settings\Freemen\Data aplikací\pl_accounts.pl_acc
[2009.01.07 15:01:55 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\Freemen\Data aplikací\Troll.options
[2008.11.15 22:34:49 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Freemen\Data aplikací\Skin.flk
[2008.05.31 11:18:53 | 000,000,058 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2008.05.25 08:14:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Freemen\ESTool.exe
[2008.04.03 12:16:11 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
[2008.03.22 20:16:08 | 000,000,883 | ---- | C] () -- C:\Documents and Settings\Freemen\default.pls
[2008.03.21 15:17:35 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\Freemen\.rnd
[2008.03.21 12:52:53 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\fusioncache.dat
[2008.03.21 02:19:51 | 000,182,784 | ---- | C] () -- C:\Documents and Settings\Freemen\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2008.03.21 12:51:13 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 05:21:55 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 05:22:05 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2010.02.13 12:16:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2008.08.15 15:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ascentive
[2012.09.23 11:41:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Autodesk
[2013.04.30 20:49:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2009.03.05 13:57:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Bentley
[2008.08.16 11:50:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BitDefender
[2013.04.30 20:51:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BrowserProtect
[2010.09.16 12:00:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BVRP Software
[2012.08.12 13:50:53 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2011.02.19 13:12:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.08.17 13:45:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DriverScanner
[2008.12.11 17:52:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DSNO
[2008.04.24 10:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\e-sonopress
[2008.03.25 21:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2009.11.26 12:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\FileOpen
[2009.09.28 15:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\FINE
[2008.12.23 13:15:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GroupPolicy
[2012.10.08 20:15:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\HF Designer
[2013.04.21 20:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2010.09.09 19:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2010.09.18 10:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2010.02.03 19:10:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\iolo
[2009.11.05 13:29:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LangSoft
[2011.12.03 13:38:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LightScribe
[2009.05.07 11:52:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Maestro software
[2011.02.17 21:06:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2009.03.11 14:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MSScanAppDataDir
[2008.08.13 13:39:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OrbNetworks
[2010.02.11 22:43:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Panda Security
[2010.09.14 13:34:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Paradoxx
[2010.10.20 18:03:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2009.02.03 11:17:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2009.02.03 11:23:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle VideoSpin
[2013.05.06 15:58:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Safetica Client Service
[2012.01.06 14:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
[2009.03.11 14:12:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SSScanAppDataDir
[2010.04.25 22:26:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SuperMP3Download
[2008.11.15 13:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Teleca
[2013.05.06 15:57:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2013.05.05 10:36:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2008.08.16 16:20:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Uniblue
[2009.02.03 11:19:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VideoSpin
[2008.11.24 23:05:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\vsosdk
[2012.11.11 12:44:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WinZip
[2012.10.07 14:11:54 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2012.10.07 14:11:54 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151}
[2012.10.07 14:11:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.10.07 14:11:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
[2012.10.07 14:12:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{8A09CD83-59E1-4DB1-AAFC-E25174FC6706}
[2012.10.07 14:12:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{A613CA96-150A-4A1D-90CE-67F81379DF8C}
[2013.05.05 11:26:44 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.10.07 14:12:00 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2012.10.07 14:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{FB94CE54-2703-4BFF-8E94-A0AD14C0FA22}
[2011.02.16 15:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\602XML
[2012.04.29 12:02:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Acronis
[2013.01.24 17:04:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Audacity
[2009.11.14 12:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Autodesk
[2009.12.27 13:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\avidemux
[2012.10.07 12:58:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\B8C23668-A45D-4431-9A0C-2C42F8998088
[2013.04.30 20:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution
[2013.04.30 20:49:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Babylon
[2009.03.05 13:57:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Bentley
[2008.05.24 10:16:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BinarySense
[2008.08.16 11:49:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Bitdefender
[2013.05.05 12:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BitTorrent
[2008.03.23 12:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BSplayer
[2013.04.06 13:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BSplayer PRO
[2008.12.11 18:08:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Check Identical Files
[2008.07.23 21:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008.04.05 11:24:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Cool Record Edit Pro
[2010.07.05 13:47:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DAEMON Tools
[2013.05.05 10:12:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DAEMON Tools Lite
[2010.03.07 15:29:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Design Science
[2008.07.11 13:07:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DMCache
[2009.02.17 17:22:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DNA
[2009.11.26 12:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FileOpen
[2009.09.28 15:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FINE
[2008.04.15 11:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FormEdik
[2009.05.16 13:14:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GetRightToGo
[2008.08.12 11:34:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GlarySoft
[2008.05.21 08:25:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GSC
[2009.12.27 13:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\gtk-2.0
[2011.11.18 12:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\ICQ
[2008.03.21 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\ICQLite
[2008.05.11 16:27:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\IDM
[2012.04.16 17:33:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\IObit
[2010.02.03 11:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\iolo
[2009.01.15 00:04:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\JLC's Software
[2008.04.09 14:50:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Jpeg Resampler
[2009.11.24 15:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LangSoft
[2011.02.05 17:12:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire
[2010.11.09 16:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire(2)
[2008.10.12 11:02:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Mathsoft
[2010.06.14 23:20:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Mobile Atlas Creator
[2010.09.16 14:18:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\MyPhoneExplorer
[2008.10.02 22:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Opera
[2010.08.04 13:31:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Paradoxx
[2010.10.20 18:03:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\PC Suite
[2011.05.08 16:34:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\PhotoFiltre
[2011.09.18 11:04:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\QIP
[2011.09.18 11:17:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\QipGuard
[2010.01.24 11:47:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro
[2008.06.01 22:05:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\SmsDiscount
[2010.09.16 11:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sony
[2010.09.16 11:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sony Setup
[2012.08.31 14:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Spyware Terminator
[2011.03.10 21:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Stellarium
[2010.04.25 22:26:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\SuperMP3Download
[2012.01.12 12:55:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TeamViewer
[2008.11.15 14:07:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Teleca
[2011.05.14 12:06:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall
[2011.02.20 15:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Tific
[2011.07.17 11:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\translateclient
[2010.01.19 13:09:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TrekBuddy Atlas Creator
[2012.10.07 13:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TuneUp Software
[2010.08.17 13:13:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue
[2011.06.26 11:00:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\URSoft
[2009.01.10 12:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Vso
[2009.02.07 11:25:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Weather Clock
[2009.11.10 13:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Windows Search
[2009.02.07 11:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\WTI
[2008.11.09 11:28:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\zweitgeist
[2008.05.31 15:46:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Acronis
[2008.07.11 12:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\iolo
[2009.08.30 11:44:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\SACore
[2009.11.14 15:00:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software
[2009.11.14 19:55:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Acronis
[2008.11.17 10:42:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Data aplikací\iolo
[2012.10.10 16:27:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Data aplikací\TuneUp Software

========== Purity Check ==========

[freem1]

========== Custom Scans ==========

< >
[2008.03.21 01:23:52 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2008.03.21 01:30:01 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2008.12.23 11:28:06 | 000,000,382 | ---- | C] () -- C:\WINDOWS\Tasks\Uniblue DiskRescue 2009.job
[2008.12.23 11:35:05 | 000,000,342 | ---- | C] () -- C:\WINDOWS\Tasks\Uniblue SpyEraser.job
[2012.06.13 21:35:27 | 000,000,366 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.11.11 13:23:11 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.04.30 20:50:42 | 000,000,274 | ---- | C] () -- C:\WINDOWS\Tasks\EPUpdater.job
[2013.05.05 12:20:29 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\powersuite_monitor.job

< >

< MD5 for: AGP440.SYS >
[2007.11.18 21:21:29 | 016,730,975 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\dllcache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2007.11.18 21:21:29 | 016,730,975 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
[2004.08.17 15:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2007.11.18 21:21:29 | 016,730,975 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\$NtUninstallKB932716-v2$\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\Driver Cache\i386\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 22:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 15:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 15:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall\Acad\%SystemRoot%\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
[2007.11.18 21:05:07 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2007.11.18 21:21:29 | 016,730,975 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 22:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2007.11.18 21:21:29 | 016,730,975 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\system32\dllcache\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.08.24 11:00:52 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.25 13:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 15:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.03 23:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 15:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: NVRAID.SYS >
[2004.06.03 04:40:50 | 000,068,224 | R--- | M] (NVIDIA Corporation) MD5=A5C77D944410FADEE380FB20B432760D -- C:\WINDOWS\system32\drivers\nvraid.sys

< MD5 for: SCECLI.DLL >
[2004.08.17 15:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
[2004.08.04 01:56:58 | 000,152,576 | ---- | M] (Microsoft Corporation) MD5=DA5CF1C368B33D75602FD6B3A7F5E0C6 -- C:\cmdcons\SYSTEM32\SMSS.EXE

< MD5 for: SVCHOST.EXE >
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 15:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\SoftwareDistribution\Download\c45c7070dd9219a4a37516c02fc0d005\sp2qfe\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2007.11.18 21:01:54 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 15:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 15:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 15:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[4 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[108 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.02.16 15:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\602XML
[2008.04.28 16:13:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\ABBYY
[2012.04.29 12:02:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Acronis
[2009.01.28 20:31:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Adobe
[2010.12.05 17:06:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Ahead
[2008.08.17 15:17:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Apple Computer
[2013.01.24 17:04:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Audacity
[2009.11.14 12:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Autodesk
[2009.12.27 13:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\avidemux
[2012.10.07 12:58:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\B8C23668-A45D-4431-9A0C-2C42F8998088
[2013.04.30 20:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution
[2013.04.30 20:49:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Babylon
[2009.03.05 13:57:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Bentley
[2008.05.24 10:16:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BinarySense
[2008.08.16 11:49:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Bitdefender
[2013.05.05 12:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BitTorrent
[2008.03.23 12:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BSplayer
[2013.04.06 13:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\BSplayer PRO
[2008.12.11 18:08:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Check Identical Files
[2008.07.23 21:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008.04.05 11:24:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Cool Record Edit Pro
[2008.03.23 13:43:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\CyberLink
[2010.07.05 13:47:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DAEMON Tools
[2013.05.05 10:12:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DAEMON Tools Lite
[2010.03.07 15:29:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Design Science
[2009.12.24 15:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DivX
[2008.07.11 13:07:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DMCache
[2009.02.17 17:22:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\DNA
[2012.11.28 22:15:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\dvdcss
[2010.05.27 22:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FastStone
[2009.11.26 12:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FileOpen
[2009.09.28 15:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FINE
[2008.04.15 11:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\FormEdik
[2009.05.16 13:14:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GetRightToGo
[2008.08.12 11:34:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GlarySoft
[2008.08.29 09:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Google
[2008.05.21 08:25:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\GSC
[2009.12.27 13:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\gtk-2.0
[2008.05.01 17:40:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Help
[2011.11.18 12:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\ICQ
[2008.03.21 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\ICQLite
[2011.05.08 21:08:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Identities
[2008.05.11 16:27:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\IDM
[2008.04.18 18:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\InstallShield
[2012.04.16 17:33:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\IObit
[2010.02.03 11:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\iolo
[2009.01.15 00:04:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\JLC's Software
[2008.04.09 14:50:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Jpeg Resampler
[2009.11.24 15:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LangSoft
[2011.02.05 17:12:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire
[2010.11.09 16:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire(2)
[2008.03.21 10:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Macromedia
[2008.12.16 19:39:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Malwarebytes
[2008.10.12 11:02:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Mathsoft
[2013.05.05 10:12:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Media Player Classic
[2011.02.16 15:32:39 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft
[2010.06.14 23:20:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Mobile Atlas Creator
[2009.07.03 10:43:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Mozilla
[2010.09.16 14:18:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\MyPhoneExplorer
[2008.10.02 22:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Opera
[2010.08.04 13:31:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Paradoxx
[2010.10.20 18:03:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\PC Suite
[2011.05.08 16:34:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\PhotoFiltre
[2011.09.18 11:04:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\QIP
[2011.09.18 11:17:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\QipGuard
[2010.01.24 11:47:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro
[2010.03.08 12:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Real
[2010.03.10 11:09:52 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Freemen\Data aplikací\SecuROM
[2013.05.01 20:30:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Skype
[2009.09.19 13:22:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\skypePM
[2008.06.01 22:05:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\SmsDiscount
[2010.09.16 11:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sony
[2008.11.15 14:00:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sony Ericsson
[2010.09.16 11:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sony Setup
[2012.08.31 14:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Spyware Terminator
[2011.03.10 21:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Stellarium
[2008.04.06 12:19:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Sun
[2010.04.25 22:26:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\SuperMP3Download
[2008.03.21 11:15:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Talkback
[2008.04.13 09:18:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\teamspeak2
[2012.01.12 12:55:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TeamViewer
[2008.11.15 14:07:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Teleca
[2011.05.14 12:06:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall
[2011.02.20 15:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Tific
[2011.07.17 11:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\translateclient
[2010.01.19 13:09:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TrekBuddy Atlas Creator
[2012.10.07 13:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\TuneUp Software
[2010.08.17 13:13:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue
[2011.06.26 11:00:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\URSoft
[2013.04.30 20:40:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\vlc
[2009.01.10 12:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Vso
[2009.02.07 11:25:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Weather Clock
[2013.05.05 10:12:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Winamp
[2009.11.10 13:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\Windows Search
[2010.01.09 14:33:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\WinRAR
[2009.02.07 11:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\WTI
[2008.11.09 11:28:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Freemen\Data aplikací\zweitgeist

< %APPDATA%\*.exe /s >
[2010.09.11 14:16:41 | 007,848,416 | ---- | M] (IObit ) -- C:\Documents and Settings\Freemen\Data aplikací\asc-setup.exe
[2013.04.07 11:48:48 | 000,009,808 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution\Shared\BabMaint.exe
[2013.04.07 11:48:50 | 000,012,880 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution\Shared\BUSUninstall.exe
[2013.04.07 11:48:49 | 000,394,320 | ---- | M] (Babylon Ltd.) -- C:\Documents and Settings\Freemen\Data aplikací\BabSolution\Shared\GUninstaller.exe
[2009.07.30 11:33:16 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\crashreporter.exe
[2009.07.30 11:33:18 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\updater.exe
[2009.07.30 11:33:18 | 000,014,848 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xpcshell.exe
[2009.07.30 11:33:18 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xpicleanup.exe
[2009.07.30 11:33:19 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xpidl.exe
[2009.07.30 11:33:19 | 000,018,432 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xpt_dump.exe
[2009.07.30 11:33:19 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xpt_link.exe
[2009.07.30 11:33:19 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xulrunner-stub.exe
[2009.07.30 11:33:19 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Documents and Settings\Freemen\Data aplikací\LimeWire\browser\xulrunner\xulrunner.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\ClearMem.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\ClickCleaner.exe
[2010.02.03 11:08:51 | 000,017,542 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\ContextMenuManager.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\DesktopCleaner.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\DiskAnalyzer.exe
[2010.02.03 11:08:50 | 000,013,262 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\DuplicateFilesFinder.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\FileSecurity.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\FileSplitter.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\IconManager.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\IEManager.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\JunkFileCleaner.exe
[2010.02.03 11:08:50 | 000,005,430 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\LiveUpdate.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\OptimizationWizard.exe
[2010.02.03 11:08:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\PrivacyProtector.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\ProcessManager.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\RegistryCleaner.exe
[2010.02.03 11:08:51 | 000,009,662 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\RegistryDefrag.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\RepairCenter.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\RunShortcutCreator.exe
[2010.02.03 11:08:51 | 000,005,430 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\ServiceManager.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\Shutdown.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\StartupManager.exe
[2010.02.03 11:08:51 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\SystemFolder_msiexec.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\SystemInfo.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\Uninstaller.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\WallpaperChanger.exe
[2010.02.03 11:08:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{1043E281-B080-4947-9BD7-3F1D233BF6D2}\WinXP_Manager.exe
[2008.07.09 15:10:31 | 000,003,584 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
[2008.10.12 11:00:13 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}\ARPPRODUCTICON.exe
[2009.10.09 12:11:03 | 000,040,960 | R--- | M] (InstallShield Software Corp.) -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{3995EF63-2672-458F-88B2-355696C13C07}\ARPPRODUCTICON.exe
[2009.10.09 12:11:03 | 000,408,142 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{3995EF63-2672-458F-88B2-355696C13C07}\NewShortcut1.exe
[2009.10.09 12:11:03 | 000,408,142 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{3995EF63-2672-458F-88B2-355696C13C07}\NewShortcut2.exe
[2012.10.07 14:15:50 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\ClearMem.exe
[2012.10.07 14:15:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\ClickCleaner.exe
[2012.10.07 14:15:54 | 000,017,542 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\ContextMenuManager.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\DesktopCleaner.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\DiskAnalyzer.exe
[2012.10.07 14:15:51 | 000,013,262 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\DuplicateFilesFinder.exe
[2012.10.07 14:15:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\FileSecurity.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\FileSplitter.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\IconManager.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\IEManager.exe
[2012.10.07 14:15:55 | 000,017,542 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\IPSwitcher.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\JunkFileCleaner.exe
[2012.10.07 14:15:55 | 000,005,430 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\LiveUpdate.exe
[2012.10.07 14:15:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\OptimizationWizard.exe
[2012.10.07 14:15:53 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\PrivacyProtector.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\ProcessManager.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\RegistryCleaner.exe
[2012.10.07 14:15:55 | 000,009,662 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\RegistryDefrag.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\RepairCenter.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\RunShortcutCreator.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\ServiceManager.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\Shutdown.exe
[2012.10.07 14:15:51 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\StartupManager.exe
[2012.10.07 14:15:55 | 000,014,534 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\SystemFolder_msiexec.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\SystemInfo.exe
[2012.10.07 14:15:55 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\Uninstaller.exe
[2012.10.07 14:15:53 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\WallpaperChanger.exe
[2012.10.07 14:15:54 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{65A08382-39FB-44B9-9A73-F2A859E748F5}\WinXP_Manager.exe
[2009.10.09 12:10:14 | 000,040,960 | R--- | M] (InstallShield Software Corp.) -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{A054FCB8-B570-4941-B37D-E8643E8973CA}\ARPPRODUCTICON.exe
[2009.10.09 12:10:15 | 000,408,142 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{A054FCB8-B570-4941-B37D-E8643E8973CA}\NewShortcut1.exe
[2009.10.09 12:10:14 | 000,408,142 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{A054FCB8-B570-4941-B37D-E8643E8973CA}\NewShortcut2.exe
[2009.05.04 09:40:02 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{BBE86170-A71D-4B31-B4C9-44B32885901A}\_16496df1.exe
[2009.05.04 09:40:02 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{BBE86170-A71D-4B31-B4C9-44B32885901A}\_2cd672ae.exe
[2009.05.04 09:40:02 | 000,015,086 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{BBE86170-A71D-4B31-B4C9-44B32885901A}\_69525f90.exe
[2009.10.09 12:02:04 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2008.10.12 11:00:58 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Microsoft\Installer\{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}\ARPPRODUCTICON.exe
[2010.08.05 11:03:27 | 015,736,940 | ---- | M] (Paradoxx Software s.r.o. ) -- C:\Documents and Settings\Freemen\Data aplikací\Paradoxx\PhoneReport\Updates\update_3.60.03.99.exe
[2011.08.22 14:50:52 | 000,190,336 | ---- | M] (QIP.ru) -- C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe
[2010.01.09 21:23:24 | 000,371,200 | ---- | M] (RaimaSoft) -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro\RaimaTV.exe
[2007.09.20 18:33:04 | 000,421,888 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro\Encoders\Flac.exe
[2008.07.04 08:25:48 | 000,544,768 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro\Encoders\lame.exe
[2008.03.16 14:51:12 | 001,470,464 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\RaimaRadioPro\Encoders\OggEnc2.exe
[2010.06.26 21:03:16 | 000,439,816 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Freemen\Data aplikací\Real\Update\setup3.10\setup.exe
[2010.08.14 13:52:06 | 000,452,104 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Freemen\Data aplikací\Real\Update\setup3.12\setup.exe
[2010.04.04 11:33:36 | 000,439,816 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Freemen\Data aplikací\Real\Update\temp\~Upg0\setup.exe
[2013.04.27 11:02:29 | 000,903,072 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Freemen\Data aplikací\Sun\Java\JRERunOnce.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall\Acad\%SystemRoot%\explorer.exe
[2001.10.25 13:00:00 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall\Acad\%SystemSystem%\calc.exe
[2011.05.14 13:39:53 | 000,007,680 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall\Acad\1000000b00002i\rundll32.exe
[2011.05.14 12:06:28 | 000,007,680 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Thinstall\Acad\4000001700003i\AdskScSrv.exe
[2009.03.12 17:38:18 | 006,346,176 | ---- | M] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\acpi_authenticamd_-_x86_family_15_model_441_3_2_0.EXE
[2009.03.12 17:41:15 | 015,743,560 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\acpi_pnp0f036_30_189_0.exe
[2009.03.12 17:56:43 | 090,740,384 | ---- | M] (NVIDIA Corporation ) -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\pci_ven_10de_dev_00df67_6_4.08_english_whql.exe
[2009.03.12 17:36:52 | 000,340,500 | ---- | M] () -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\pci_ven_10de_dev_00e35_10_2600_0521.exe
[2009.03.12 17:54:08 | 018,734,784 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\pci_ven_10de_dev_00ea_subsys_085018495_10_00_6300.exe
[2009.03.12 17:45:44 | 038,674,984 | ---- | M] (NVIDIA Corporation ) -- C:\Documents and Settings\Freemen\Data aplikací\Uniblue\DriverScanner\Download\pci_ven_10de_dev_03266_14_11_7519.19_geforce_winxp_32bit_english_whql.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.07.05 13:21:10 | 000,721,904 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2008.03.21 02:13:41 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2008.03.21 02:13:41 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2008.03.21 02:13:40 | 000,466,944 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.05.06 15:57:15 | 003,854,130 | ---- | M] () -- C:\WINDOWS\system32\oodbs.lor

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"SpywareTerminatorUpdate" = "D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe" -- [2011.01.30 14:18:58 | 003,318,784 | ---- | M] (Crawler.com)
"QIP Internet Guardian" = C:\Documents and Settings\Freemen\Data aplikací\QipGuard\QipGuard.exe /p -- [2011.08.22 14:50:52 | 000,190,336 | ---- | M] (QIP.ru)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.05.06 16:08:06 | 000,000,512 | ---- | M] () MD5=A15163B6D3E7CE58564BA7416CA7E8BA -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2013.05.05 10:28:39 | 000,000,658 | ---- | M] () -- \Documents and Settings\Freemen\Recent\TuneUp Utilities 2013 +crack.lnk
[2013.05.05 10:26:17 | 000,000,600 | ---- | M] () -- \Documents and Settings\Freemen\Recent\TuneUp Utilities 2013 Crack+CZ(1).lnk

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2013.04.02 09:34:36 | 000,945,776 | ---- | M] () -- \ALFA\Downloader.exe
[2013.04.12 16:44:04 | 000,000,051 | ---- | M] () -- \ALFA\DownloaderVys.dat
[2010.07.21 13:35:56 | 000,000,065 | ---- | M] () -- \ALFA\TEMP\DownloaderVys.dat
[2013.04.02 09:34:36 | 000,945,776 | ---- | M] () -- \Demoverzia Alfa verzia 17.11\Downloader.exe
[2013.04.09 08:23:12 | 000,000,053 | ---- | M] () -- \Demoverzia Alfa verzia 17.11\DownloaderVys.dat
[2013.02.20 16:28:38 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2013.02.20 16:28:38 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2013.02.20 16:28:38 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2009.10.09 12:09:36 | 000,001,005 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Autodesk\Autodesk Data Management\Nástroje\Autodesk Autoloader 2009.lnk
[2009.11.10 16:19:49 | 000,000,774 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Autodesk\Autodesk Data Management\Nástroje\Autodesk Autoloader 2010 for Vault.lnk
[2010.11.09 13:56:18 | 000,002,713 | ---- | M] () -- \Documents and Settings\Freemen\Data aplikací\LimeWire(2)\browser(2)\xulrunner(2)\components(2)\uriloader.xpt
[2012.11.13 03:12:56 | 000,001,607 | ---- | M] () -- \Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\ffxtlbr@delta.com\content\loader.xul
[2006.08.24 20:10:00 | 000,000,245 | ---- | M] () -- \Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\videodowloader@videodownloader.net\defaults\preferences\videodownloader.js
[2006.09.29 18:06:00 | 000,029,026 | ---- | M] () -- \Documents and Settings\Freemen\Data aplikací\Mozilla\Firefox\Profiles\37awxsm7.default\extensions\videodowloader@videodownloader.net\chrome\videodownloader.jar
[2009.11.10 16:19:49 | 000,000,928 | ---- | M] () -- \Documents and Settings\Freemen\Dokumenty\inventor\Autoloader.ipj.lnk
[2012.09.18 20:12:37 | 000,001,336 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader(1).nast
[2012.09.23 13:50:47 | 000,001,264 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader(2).nast
[2012.08.12 13:16:52 | 000,000,300 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader.err
[2012.08.12 13:50:23 | 000,001,024 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\SRDownloader.nast
[2009.04.09 11:46:12 | 000,000,575 | ---- | M] () -- \Documents and Settings\Freemen\Nabídka Start\Xm's Downloader.lnk
[2009.04.09 11:46:12 | 000,000,575 | ---- | M] () -- \Documents and Settings\Freemen\Plocha\Prehravace + programy na mp3\Xm's Downloader.lnk
[2013.04.02 12:49:28 | 001,269,360 | ---- | M] () -- \OLYMP\Downloader.exe
[2013.04.03 13:54:15 | 000,000,037 | ---- | M] () -- \OLYMP\DownloaderVys.dat
[2008.02.10 11:37:08 | 000,025,240 | ---- | M] () -- \Program Files\AutoCAD LT 2009\AecLoader.arx
[2007.06.27 20:03:00 | 000,177,448 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2009.12.23 19:49:04 | 000,329,216 | ---- | M] () -- \Program Files\Common Files\DVDVideoSoft\Dll\HttpVideoDownloader.dll
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2004.08.17 15:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 20:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 20:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[1996.10.15 09:53:16 | 000,078,848 | ---- | M] () -- \WINDOWS\system32\INLOADER.DLL
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >
[2013.05.05 10:38:29 | 000,001,759 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\TuneUp Utilities 2013\All functions\TuneUp Program Deactivator.lnk

< *serial* /s >
[2004.08.04 00:15:54 | 000,030,067 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2013.05.05 12:06:22 | 000,002,824 | ---- | M] () -- \Documents and Settings\Freemen\Data aplikací\BitTorrent\Uniblue PowerSuite Pro 2013 4.1.5.1 Final + Serial.torrent
[2012.10.08 20:20:16 | 000,032,768 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\HF Designer\{EA8756B0-7720-48D5-BA76-5220AEDF0851}\mdbu\Locations!IX_VolumeSerialNumber_Location.ind
[2012.10.08 20:20:16 | 000,008,192 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Data aplikací\HF Designer\{EA8756B0-7720-48D5-BA76-5220AEDF0851}\mdbu\Media!IX_VolumeSerialNumber.ind
[2012.10.17 17:01:00 | 000,000,042 | ---- | M] () -- \Documents and Settings\Freemen\Local Settings\Temp\Rar$EX06.953\Uniblue PowerSuite Pro 2013 4.1.4.0 Multilingual\Serial.txt
[2013.05.05 12:18:28 | 000,000,928 | ---- | M] () -- \Documents and Settings\Freemen\Recent\Serial (2).lnk
[2013.05.05 12:18:25 | 000,001,295 | ---- | M] () -- \Documents and Settings\Freemen\Recent\Serial.lnk
[2013.05.05 12:08:16 | 000,000,589 | ---- | M] () -- \Documents and Settings\Freemen\Recent\Uniblue PowerSuite Pro 2013 4.1.5.1 Final + Serial.lnk
[2008.02.10 10:33:58 | 000,002,274 | ---- | M] () -- \Program Files\AutoCAD LT 2009\WebDepot\RTSerialNumberHelp.html
[2008.07.31 18:41:44 | 000,002,502 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\AdLM\R1\cs-CZ\Webdepot\RTSerialNumberHelp.html
[2008.03.13 00:10:18 | 000,005,392 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\GIS\ImportExport\7.0\tcl_library\grammar_fa\tests\fa_serial.test
[2005.07.26 23:48:38 | 000,138,752 | ---- | M] () -- \Program Files\Common Files\business objects\3.0\bin\saxmlserialize.dll
[2005.07.26 23:36:42 | 000,212,992 | ---- | M] () -- \Program Files\Common Files\business objects\3.0\bin\saxserialize.dll
[2005.07.04 13:45:22 | 000,064,048 | R--- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-20\ftserial.sys
[2005.07.04 13:45:24 | 000,004,665 | R--- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-20\USBSerialPort.INF
[2008.11.15 14:04:07 | 000,011,548 | ---- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-20\USBSerialPort.PNF
[2005.07.04 13:44:44 | 000,064,048 | R--- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-25\ftserial.sys
[2005.07.04 13:44:48 | 000,004,656 | R--- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-25\USBSerialPort.INF
[2008.11.15 14:04:07 | 000,011,532 | ---- | M] () -- \Program Files\Common Files\Teleca Shared\DSS-25\USBSerialPort.PNF
[2007.10.11 09:55:12 | 000,929,792 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2004.08.17 15:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2008.03.21 12:52:17 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.03.21 12:53:38 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.05.30 23:24:44 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.25 18:03:34 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.09 11:45:16 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011.08.12 19:06:47 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\01dc643b54310ebc5ab7e4696df426bc\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011.08.12 19:16:29 | 002,278,912 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c00ebc8ce0c48b3181b6ad31e1e2eb53\System.Runtime.Serialization.ni.dll
[2011.08.13 12:16:09 | 002,344,960 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d16e6abd9a2121e4f55e69a92114f937\System.Runtime.Serialization.ni.dll
[2013.01.10 12:23:56 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\c058f32978bc7384cb6c27386770ce2d\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.01.10 12:24:33 | 002,637,312 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\cb18987e708b9658078ead051f693d16\System.Runtime.Serialization.ni.dll
[2009.10.27 00:45:16 | 000,970,752 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\FL_System_Runtime_Serialization_dll_133675_____x86.3643236F_FC70_11D3_A536_0090278A1BB8
[2010.05.30 23:43:34 | 000,970,752 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\FL_System_Runtime_Serialization_dll_133676_____x86.3643236F_FC70_11D3_A536_0090278A1BB8
[2009.10.27 00:45:16 | 000,970,752 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\FL_System_Runtime_Serialization_dll_147207_____x86.3643236F_FC70_11D3_A536_0090278A1BB8
[2013.02.14 12:11:07 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.02.14 12:11:05 | 001,026,936 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2004.07.15 15:31:54 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2003.04.07 20:24:52 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2008.09.10 17:46:28 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.04.07 23:48:30 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 14:16:28 | 001,026,936 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 14:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2008.04.14 04:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2007.06.27 14:59:02 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2008.04.14 04:17:26 | 000,028,416 | ---- | M] () -- \WINDOWS\system32\dllcache\grserial.sys
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\dllcache\serial.sys
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\WINDOWS\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 229 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8FF81EB0
@Alternate Data Stream - 212 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8927A071
@Alternate Data Stream - 154 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:1CE11B51
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:2BE9FEFC

< End of report >

[freem1]

OTL Extras logfile created on: 06.05.2013 16:03:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Freemen\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country: Slovensko | Language: SKY | Date Format: dd.MM.yyyy

1023,23 Mb Total Physical Memory | 192,14 Mb Available Physical Memory | 18,78% Memory free
2,40 Gb Paging File | 1,72 Gb Available in Paging File | 71,82% Paging File free
Paging file location(s): C:\pagefile.sys 1534 1534 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 29,30 Gb Total Space | 2,27 Gb Free Space | 7,74% Space Free | Partition Type: NTFS
Drive D: | 268,79 Gb Total Space | 23,43 Gb Free Space | 8,72% Space Free | Partition Type: NTFS

Computer Name: FREEMEN-95805D5 | User Name: Freemen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.scr [@ = MicroStation Resource] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Force Uninstall] -- D:\Program Files\Perfect Uninstaller\PU.exe "%1" ()
Directory [JpegResamplerDir] -- "D:\Program Files\JPEG Resampler\JpegResampler.exe" "%1" (David Macek)
Directory [PlayWithVLC] -- "D:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "D:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "D:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "D:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5190:TCP" = 5190:TCP:*:Enabled:icq
"5190:UDP" = 5190:UDP:*:Enabled:icq2
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"D:\Program Files\Windows Live\Messenger\msnmsgr.exe" = D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)
"D:\Program Files\Windows Live\Messenger\livecall.exe" = D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\WINDOWS\system32\CNAB4RPK.EXE" = C:\WINDOWS\system32\CNAB4RPK.EXE:*:Disabled:Canon LBP2900 RPC Server Process -- (CANON INC.)
"C:\Program Files\DNA\btdna.exe" = C:\Program Files\DNA\btdna.exe:*:Enabled:DNA -- (BitTorrent, Inc.)
"D:\Program Files\BitTorrent\bittorrent.exe" = D:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"D:\Program Files\DNA\btdna.exe" = D:\Program Files\DNA\btdna.exe:*:Enabled:DNA -- (BitTorrent, Inc.)
"D:\Program Files\Winamp Remote\bin\Orb.exe" = D:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb -- (Orb Networks, Inc.)
"D:\Program Files\Winamp Remote\bin\OrbTray.exe" = D:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray -- (Orb Networks)
"D:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = D:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client -- (Orb Networks)
"D:\Program Files\Windows Live\Messenger\msnmsgr.exe" = D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)
"D:\Program Files\Windows Live\Messenger\livecall.exe" = D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- (Microsoft Corporation)
"D:\Program Files\LimeWire\LimeWire.exe" = D:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- (Lime Wire, LLC)
"D:\Program Files\Google\Google Talk\googletalk.exe" = D:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk -- (Google)
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe" = D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager -- (Pinnacle Systems)
"D:\Program Files\Pinnacle\VideoSpin\Programs\PMSRegisterFile.exe" = D:\Program Files\Pinnacle\VideoSpin\Programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile -- ( )
"D:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe" = D:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi -- (Pinnacle Systems)
"D:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe" = D:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin -- (Pinnacle Systems)
"C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll" = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin -- (Google)
"C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe" = C:\Documents and Settings\Freemen\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin -- (Google)
"D:\Program Files\ICQ6.5\ICQ.exe" = D:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Program Files\Sony Ericsson\Update Service\Update Service.exe" = D:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service -- ()
"D:\Program Files\QIP\qip.exe" = D:\Program Files\QIP\qip.exe:*:Disabled:Quiet Internet Pager -- (The Author of QIP)
"D:\Z internetu 2\Half Life 2\hl2.exe" = D:\Z internetu 2\Half Life 2\hl2.exe:*:Enabled:hl2 -- ()
"E:\Half Life 2\hl2.exe" = E:\Half Life 2\hl2.exe:*:Enabled:hl2
"D:\Program Files\Google\Google Earth\plugin\geplugin.exe" = D:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth -- (Google)
"D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe" = D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator Update Support -- (Crawler.com)
"D:\Program Files\QIP 2010\qip.exe" = D:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010 -- (QIP)
"D:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe" = D:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Disabled:Nero ShowTime -- (Nero AG)
"D:\WRYKRYS2013\Wrykrys.exe" = D:\WRYKRYS2013\Wrykrys.exe:*:Enabled:WRYKRYS Application -- (Lubomír Chudek Anra)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"D:\Program Files\VideoLAN\VLC\vlc.exe" = D:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player 2.0.6 -- (VideoLAN)
"D:\Program Files\TuneUp Utilities 2013\UpdateWizard.exe" = D:\Program Files\TuneUp Utilities 2013\UpdateWizard.exe:*:Enabled:TuneUp Update Wizard -- (TuneUp Software)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}" = Apple Software Update
"{08CA9554-B5FE-4313-938F-D4A417B81175}" = QuickTime
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0C35EAE4-A535-46B7-B4BF-68952BD94E68}" = Uniblue DiskRescue 2009
"{0DEA94ED-915A-4834-A87E-388D012C8E02}" = Medal of Honor Allied Assault
"{10A44844-4465-456E-8C97-80BDD4F68845}" = Pomocník pro přihlášení ke službě Windows Live ID
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{121C477C-5B7B-44E3-B621-BDDB542AE8FD}" = TuneUp Utilities Language Pack (en-GB)
"{15AFD370-C93B-4295-8849-986E59D17945}" = Nexus Radio
"{17EAD3D5-7E7D-47A3-A63C-C07AB46D468B}" = Windows Live Mail
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.6.2
"{1B8FE958-A304-4902-BF7A-4E2F0F5B7017}_is1" = GPSBabel 1.3.7-beta20091003
"{1BF66D77-6604-4f3f-B3AE-D640AFB58A88}" = Autodesk Vault 2010 (Client)
"{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205ACCD7-5342-4694-91F3-3A99E4FD5AA6}" = Mathcad 14 Help
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{239BB983-8A2D-4974-B780-2ADAE32752D5}" = Windows Live installer
"{23BE4DF2-293D-4077-82F4-1FD8C269277C}" = TuneUp Utilities Language Pack (en-US)
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{280C9F2B-45ED-493B-B406-31C1434CAF7C}" = Survey Link Extension
"{2936C36D-E461-44C5-B49E-627AB0A91D86}" = OLYMP 13.30.00
"{2949F05A-0840-45E9-81AA-DFF630E2679E}" = Freeware PDF Unlocker
"{2F881B56-CBDF-4EC6-A8D2-6412A879C66A}_is1" = AMR Player 1.3
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.011.00
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{327B8A58-747E-4B53-B9F1-BCE209BD46C8}" = STORMWARE REPORT Viewer
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{350ADE44-16B2-4F03-967D-0BA626570AAC}" = STORMWARE REPORT Viewer
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3995EF63-2672-458F-88B2-355696C13C07}" = Hydraflow Hydrographs Extension for AutoCAD Civil 3D 2009
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{47A481C1-10BE-4EE9-9C81-879F4ACC9C4E}" = Poradca pre inováciu na systém Windows Vista
"{49FC50FC-F965-40D9-89B4-CBFF80941033}" = Windows Movie Maker 2.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{4EDB1CA5-983F-4FC3-A8E3-E34981E05A60}" = Pinnacle VideoSpin
"{5265664F-6128-405C-9225-9782A85954FD}" = USB Scanner
"{52CC5969-BBBF-4752-ACCB-5E835F64AF72}" = Windows Live Fotogalerie
"{547C9628-C490-48AB-94F4-7F2495562930}" = PDF to DWG Converter
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Zem
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1" = Panda USB Vaccine 1.0.1.4
"{55D9E026-DCB0-46FF-B60A-68B972228CF6}" = Autodesk Design Review 2010
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5783F2D7-7000-0405-0002-0060B0CE6BBA}" = AutoCAD Civil 3D 2009 - český
"{5783F2D7-7009-0405-0002-0060B0CE6BBA}" = AutoCAD LT 2009 - český
"{5783F2D7-8000-0405-0002-0060B0CE6BBA}" = AutoCAD Civil 3D 2010 - česky
"{5783F2D7-8000-0405-1002-0060B0CE6BBA}" = Jazykový balíček pro aplikaci AutoCAD Civil 3D 2010 – čeština
"{57CDBAE6-0896-4E78-88F0-C673E4BB44FD}" = Lock Folder XP 3.6
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{65A08382-39FB-44B9-9A73-F2A859E748F5}" = WinXP Manager
"{668B2B3A-4241-409F-A4AE-79B5016A487E}" = Sony Ericsson PC Suite
"{66DCA952-0A6D-46AB-93B9-64379F829FAD}" = Windows Live Writer
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{69E369F1-6A92-47B5-86D5-474A7E06B3DC}" = ALFA 19.31.00
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{723D0010-CA4C-4248-B206-10B80B1EDBCC}" = Jazykový balíček Autodesk Vault 2010 (Client) – čeština
"{7694EC32-CB0E-4B35-9088-7B320CB1F4FE}" = Nokia PC Suite
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{793A260C-CDBF-499C-ABBA-B51E8E076867}_is1" = Uniblue Powersuite
"{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}" = Microsoft Visual Basic Power Packs 3.0
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{7BC6B815-D9F1-4C43-82B4-7CB25458DD31}" = O&O Defrag Professional
"{82427977-8776-4087-90CA-9F65174D3C4D}" = Nokia Connectivity Cable Driver
"{83721450-E604-4C37-ABEB-CE7F18C587C8}" = LightScribe Template Labeler
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF}" = SweetIM Toolbar for Internet Explorer 3.4
"{90120000-0010-041B-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Slovak) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-041B-0000-0000000FF1CE}" = Microsoft Office Access MUI (Slovak) 2007
"{90120000-0015-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-041B-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Slovak) 2007
"{90120000-0019-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Slovak) 2007
"{90120000-001A-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_PROPLUS_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_PROPLUS_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_PROPLUS_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90538B62-F392-4DE1-B886-7B48123866E9}" = LightScribe System Software
"{90F50409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core
"{90F60409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core - English
"{9180B851-7FC1-42E4-948C-D55B39F3CE41}_is1" = T-Mobile Communication Center 3.60.03.99
"{91C0B95B-B83A-4828-A775-BBE2DD421051}" = Nero 7 Premium
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A040AC77-C1AA-4CC9-8931-9F648AF178F6}" = VC 9.0 Runtime
"{A054FCB8-B570-4941-B37D-E8643E8973CA}" = Hydraflow Storm Sewers Extension for AutoCAD Civil 3D 2009
"{A2F2DFE6-6018-4128-B368-2DA39237309F}" = EasyRecovery Professional
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}" = Media-Tech Camera
"{A6F5703D-A4B1-4857-9EDD-DC0ABBBB0D96}" = TuneUp Utilities Language Pack (en-US)
"{A8BB9906-E618-406A-B161-7383AFF46C39}" = EasyRecovery Professional
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A95A76C9-6F65-477E-83A0-9F884B6DC21B}" = TuneUp Utilities Language Pack (en-US)
"{AAB6D0F8-02B3-4E89-B24C-0BB153C21445}" = Windows Presentation Foundation Language Pack (CSY)
"{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 8.0 Professional Edition
"{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-1029-4770-7760-000000000004}{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B4013E5D-C833-4C8D-A942-AD7BBDFD9389}" = Autodesk Vault 2009 (Client)
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player
"{B7CB0BF3-791E-44D3-9F04-786E36D51C9D}" = PC Connectivity Solution
"{B96D2269-568B-4CBF-9332-12FAE8B158F7}" = Medieval CUE Splitter
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BBE86170-A71D-4B31-B4C9-44B32885901A}" = Website-Blocker
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}" = WinZip 12.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1A71BF0-B95D-4963-AFE1-4A9F65AECC8A}" = Bentley MicroStation V8 XM Edition 08.09.04.51
"{E1A88DE8-BD36-4DEA-8DD8-E35EF475ADC7}" = Opera 9.52
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster
"{E666A69B-A76D-43D5-AF28-4B2150A6EDE2}" = Mathcad 14
"{E81D9FF6-B45F-4DD4-9673-86B08AF6F705}" = HDDlife Pro 3.1
"{E848C9C0-E6FF-4A3F-9D67-AE53AC3628FE}" = SweetIM for Messenger 2.7
"{EBD38AE9-D52D-448D-9DB4-4D5F66E1DAFC}" = Mathcad 14 Resource Center
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 1.60.13
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F1000000-0001-0000-0000-074957833700}" = ABBYY FineReader 10 Professional Edition
"{F62475E6-6F06-4D65-97D3-71D3CB696A1C}" = Windows Live Messenger
"{F6B1D53B-2A68-377D-AC39-C8FD359FF6F1}" = Google Talk Plugin
"{FA200000-0001-0000-0000-074957833700}" = ABBYY PDF Transformer 2.0
"{FA300000-0001-0000-0000-074957833700}" = ABBYY PDF Transformer 3.0
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FB09515C-8E3E-4E0F-A1F2-032F38DEC185}" = Microsoft .NET Framework 3.0 Czech Language Pack
"{FDF42E5F-B254-4A31-BE0E-B423580B03B2}_is1" = GGmenu verzia 1.99
"{FEE5DEDD-2EE8-451B-B8E8-967146E0B569}" = Hydraflow Express Extension for AutoCAD Civil 3D 2009
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"ABBYY PDF Transformer 3.0" = ABBYY PDF Transformer 3.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced Grapher_is1" = Advanced Grapher 2.2
"Advanced Task Scheduler" = Advanced Task Scheduler (Remove or Repair)
"AIDA64 Extreme Edition_is1" = AIDA64 Extreme Edition v1.70
"Aide PDF to DXF Converter_is1" = Aide PDF to DXF Converter 9.5
"Allok Video to MP4 Converter_is1" = Allok Video to MP4 Converter 5.1.0814
"Any DWG DXF Converter_is1" = Any DWG DXF Converter 2010
"Audacity_is1" = Audacity 2.0.2
"Auto Mouse_is1" = Auto Mouse 1.3
"AutoCAD LT 2009 - český" = AutoCAD LT 2009 - český
"Autodesk Design Review 2010" = Autodesk Design Review 2010
"Autodesk Vault 2009 (Client)" = Autodesk Vault 2009 (Client)
"Autodesk Vault 2009 (Client)_C3D_2009_VE_HF1" = C3D_2009_VE_HF1
"Autodesk Vault 2010 (Client)" = Autodesk Vault 2010 (Client)
"Autopark 2008 START" = Autopark 2008 START
"avast" = avast! Free Antivirus
"Avidemux 2.4" = Avidemux 2.4
"Balls of Steel: Creature Attack!_is1" = Balls of Steel: Creature Attack! 2.0
"BSPlayerp" = BS.Player PRO
"CAD standardy CAD" = CAD standardy
"Canon LBP2900" = Canon LBP2900
"CCleaner" = CCleaner
"CD Recovery Toolbox Free_is1" = CD Recovery Toolbox Free 1.1
"CDex" = CDex extraction audio
"Cucusoft YouTube Mate (Downloader+Player+Converter)_is1" = Cucusoft YouTube Mate 7.16
"CZ SK IPTV v2.0 - Free" = CZ SK IPTV v2.0
"D978F69D5F15B845BD6BC6F8BF9BCD36982A2087" = Balíček ovladače systému Windows - Nokia Modem (02/24/2009 4.0)
"DamageCopier 3.1" = DamageCopier 3.1
"Defraggler" = Defraggler
"Derive 6" = Derive 6
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"downloadhotfile.com Free Image Converter_is1" = downloadhotfile.com Free Image Converter
"DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1" = DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.8.5
"DVDFab 6_is1" = DVDFab 6.2.1.8 (31/12/2009)
"E7F682214B951640C9C539C41FDA1A7F836FF7B6" = Balíček ovladače systému Windows - Nokia Modem (02/23/2009 7.01.0.2)
"Easy MP3 Sound Recorder_is1" = Easy MP3 Sound Recorder version 3.0
"Elcomm" = Elcomm
"EMcalc_is1" = EMcalc 3.6
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.50
"FastStone Capture" = FastStone Capture 6.3
"FBDBServer_1_5_is1" = Firebird 1.5.1.4481
"Flash File Recovery_is1" = Flash File Recovery v5.1
"FormEdik_is1" = FormEdik 1.19
"Free YouTube Download_is1" = Free YouTube Download 2.3
"Function Grapher_is1" = Function Grapher 3.0.1
"GameParkClient_is1" = GamePark
"GoldWave v5.58" = GoldWave v5.58
"Google Chrome" = Google Chrome
"Graphing Calculator 3D_is1" = Graphing Calculator 3D 2.2
"HappyFoto-Designer_is1" = HF Designer 4.4
"HD Tune Pro_is1" = HD Tune Pro 3.50
"HiCalc Your Trusted Calculator for PC_is1" = HiCalc Your Trusted Calculator for PC version 1.0
"High Quality Photo Resizer_is1" = High Quality Photo Resizer 1.60
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"IL Download Manager" = IL Download Manager
"Image2PDF Add-On library for PDF Creator Pilot_is1" = Image2PDF Add-On
"Img2Ozf_is1" = Img2Ozf Version 3
"InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"InstallShield_{A2F2DFE6-6018-4128-B368-2DA39237309F}" = EasyRecovery Professional Trial
"InstallShield_{A8BB9906-E618-406A-B161-7383AFF46C39}" = EasyRecovery Professional
"InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"IrfanView" = IrfanView (remove only)
"JLC's Internet TV" = JLC's Internet TV
"JPEG Resampler_is1" = JPEG Resampler Vs 5.0
"jwDuplFiles_is1" = jwDuplFiles 2.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.5.1
"Konvertor" = Konvertor
"LimeWire" = LimeWire PRO 5.1.2
"Maestro Citrid" = Maestro Citrid - komponent na prezeranie 3D mesta, v1.3
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verzia 1.75.0.1300
"Marsu-Fix" = Marsu-Fix
"Math Calculator_is1" = Math Calculator 2.1.3
"Mathmatix" = Mathmatix 1.0
"Mega Pinball" = Mega Pinball
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0 Czech Language Pack" = Microsoft .NET Framework 3.0 Czech Language Pack
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MOBILedit!" = MOBILedit! 3.0
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox 20.0.1 (x86 sk)" = Mozilla Firefox 20.0.1 (x86 sk)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP3Resizer_is1" = MP3Resizer 1.8.4
"MPE" = MyPhoneExplorer
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Multi Virus Cleaner 2009_is1" = Multi Virus Cleaner 2009
"MultyGraphiX_is1" = MultyGraphiX 1.1
"MyDefrag v4.3.1_is1" = MyDefrag v4.3.1
"NEXIS32 3.90.201" = IDA NEXIS 32 rel. 3.90
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia PC Suite" = Nokia PC Suite
"Norton Utilities_is1" = Norton Utilities
"NVIDIA Drivers" = NVIDIA Drivers
"Orb" = Winamp Remote
"OziExplorer 3.95_is1" = OziExplorer 3.95
"OziExplorer3D_is1" = OziExplorer3D Version 1.10
"Part generator csn_is1" = Part generator csn
"Part generator din_is1" = Part generator din
"Part generator prog_is1" = Part generator prog
"PDF Password Remover v2.5_is1" = PDF Password Remover v2.5
"PDF Password Remover v3.0_is1" = PDF Password Remover v3.0
"PDF Password Remover v3.1_is1" = PDF Password Remover v3.1
"pdfFactory Pro" = pdfFactory Pro
"Perfect Uninstaller_is1" = Perfect Uninstaller v6.3.3.6
"PhotoFiltre Studio" = PhotoFiltre Studio
"PhotoRescue Expert PC Demo_is1" = PhotoRescue Expert PC Demo 2.1.713
"Pinball Arcade Trial Version 1.0" = Microsoft Pinball Arcade Trial
"PROPLUS" = Microsoft Office Professional Plus 2007
"PSPad editor_is1" = PSPad editor
"RAM Saver Pro version 7.5" = RAM Saver Pro version 7.5
"RamCleaner" = RamCleaner
"RarmaRadio_is1" = RarmaRadio 2.31.1
"Replay_Converter_1" = Replay Converter 2.50
"Safetica Free" = Safetica Endpoint Security
"SMath_is1" = SMath v4
"SpeedFan" = SpeedFan (remove only)
"SpyEraser_is1" = Uniblue SpyEraser
"Spyware Terminator_is1" = Spyware Terminator
"Squib Ball" = Squib Ball
"Stellarium_is1" = Stellarium 0.10.6.1
"SUPER ©" = SUPER © Version 2009.bld.35 (Jan 5, 2009)
"Super Sound Recorder Pro_is1" = Super Sound Recorder Pro 4.0.2
"SuperMP3Download" = Super MP3 Download
"SystemRequirementsLab" = System Requirements Lab
"Tinynice MP3Recorder_is1" = Tinynice MP3Recorder 1.00 Beta
"Totalcmd" = Total Commander (Remove or Repair)
"Translate Client" = Client for Google Translate
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"Ultra MP4 Video Converter_is1" = Ultra MP4 Video Converter 4.2.0825
"Uninstall_is1" = Uninstall 1.0.0.1
"Update Service" = Update Service
"VeryPDF Image2PDF v3.2_is1" = VeryPDF Image2PDF v3.2
"VirusKeeper 2009 Pro Trial_is1" = VirusKeeper 2009 Pro Trial
"VLC media player" = VLC media player 2.0.6
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Doctor 2.5 Retail zoo_is1" = Windows Doctor 2.5
"Windows Doctor_is1" = Windows Doctor 2.0
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archivátor
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Worms Armageddon - New Edition CZ" = Worms Armageddon - New Edition CZ
"WRYKRYS_is1" = WRYKRYS v. 3/2013
"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
"Xm's Downloader" = Xm's Downloader
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"YouTubeGet_is1" = YouTubeGet 5.4
"YU2010_is1" = Your Uninstaller! 7

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1078081533-1214440339-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"4be18d36df03b2e1" = Map Grabber
"Audio/Video Conference" = Audio/Video Conference 4.2+
"BitTorrent" = BitTorrent
"BitTorrent DNA" = DNA
"c1cf4c0f01c31177" = eDANE – aplikácia sekcie daňovej FR SR pre podávanie daňových dokumentov
"DeleteFIXPhoto2" = DeleteFIX Photo 2.03
"QIP 2005" = QIP 2005 8095
"QIP 2010" = QIP 2010 3.1.6116
"QipGuard" = QIP Internet Guardian

========== Last 20 Event Log Errors ==========

[ Antivirus Events ]
Error - 31.05.2009 10:25:38 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 01.09.2009 4:05:08 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 03.09.2009 10:26:20 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 06.10.2009 16:18:22 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 06.10.2009 16:26:07 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 06.11.2009 14:22:28 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 06.11.2009 17:50:09 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 10.11.2009 9:02:49 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 27.12.2009 18:54:44 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

Error - 01.01.2010 10:07:05 | Computer Name = FREEMEN-95805D5 | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 22.02.2013 12:59:07 | Computer Name = FREEMEN-95805D5 | Source = MsiInstaller | ID = 11711
Description = Produkt: Google Zem -- Chyba 1711.Pri zápise inštalaCných informácií
na disk sa vyskytla chyba. PresvedCte sa, Ci je k dispozícii dostatok miesta na
disku a kliknite na tlaCidlo Opakovať, prípadne tlaCidlom Zrušiť ukonCite inštaláciu.

Error - 22.02.2013 20:00:59 | Computer Name = FREEMEN-95805D5 | Source = Userenv | ID = 1512
Description = Systém Windows nemůže uvolnit soubor registru. Nebyla uvolněna paměť
používaná registrem. To je často způsobeno tím, že jsou služby spuštěny pomocí
uživatelského účtu. Zkuste služby konfigurovat pro spuštění pomocí účtu místní nebo
síťové služby. Pokud problém přetrvává, obraťte se na správce. DETAIL - Na disku
není dost místa.

Error - 07.03.2013 2:56:32 | Computer Name = FREEMEN-95805D5 | Source = JavaQuickStarterService | ID = 1
Description =

Error - 12.03.2013 7:04:47 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace alfa32.exe, verze 19.20.0.0, chybující modul ntdll.dll,
verze 5.1.2600.6055, adresa chyby 0x00002caf.

Error - 14.03.2013 11:48:56 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace alfa32.exe, verze 19.20.0.0, chybující modul ntdll.dll,
verze 5.1.2600.6055, adresa chyby 0x00002caf.

Error - 17.03.2013 15:22:15 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace acrobat.exe, verze 9.0.0.332, chybující modul acrobat.dll,
verze 9.0.0.332, adresa chyby 0x00092d17.

Error - 29.03.2013 8:17:05 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace iexplore.exe, verze 8.0.6001.18702, chybující modul
msxml3.dll, verze 8.100.1053.0, adresa chyby 0x000a1465.

Error - 02.04.2013 8:56:53 | Computer Name = FREEMEN-95805D5 | Source = LightScribeService | ID = 5
Description = Data for previous error event.

Error - 23.04.2013 14:41:43 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace plugin-container.exe, verze 20.0.1.4847, chybující
modul xul.dll, verze 20.0.1.4847, adresa chyby 0x008d1ea0.

Error - 05.05.2013 7:05:44 | Computer Name = FREEMEN-95805D5 | Source = Application Error | ID = 1000
Description = Chybující aplikace powersuite.exe, verze 4.1.4.0, chybující modul
libcef.dll, verze 1.1025.607.0, adresa chyby 0x006c54b7.

[ OSession Events ]
Error - 13.03.2010 9:36:47 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2086
seconds with 660 seconds of active time. This session ended with a crash.

Error - 13.03.2010 9:59:29 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6524.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 13647
seconds with 3660 seconds of active time. This session ended with a crash.

Error - 28.03.2010 7:49:38 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6524.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 4296
seconds with 3240 seconds of active time. This session ended with a crash.

Error - 13.04.2010 16:05:17 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5
seconds with 0 seconds of active time. This session ended with a crash.

Error - 17.04.2010 6:39:14 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6524.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 54
seconds with 0 seconds of active time. This session ended with a crash.

Error - 17.04.2010 8:26:17 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6524.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 6397
seconds with 4080 seconds of active time. This session ended with a crash.

Error - 18.04.2010 7:23:27 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3579
seconds with 1080 seconds of active time. This session ended with a crash.

Error - 03.05.2010 16:11:05 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 14
seconds with 0 seconds of active time. This session ended with a crash.

Error - 03.05.2010 16:11:16 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4
seconds with 0 seconds of active time. This session ended with a crash.

Error - 17.05.2010 6:17:40 | Computer Name = FREEMEN-95805D5 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6524.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10294
seconds with 540 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 05.05.2013 3:18:24 | Computer Name = FREEMEN-95805D5 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 05.05.2013 4:26:48 | Computer Name = FREEMEN-95805D5 | Source = Service Control Manager | ID = 7034
Description = Služba TuneUp Utilities Service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 05.05.2013 4:40:18 | Computer Name = FREEMEN-95805D5 | Source = Service Control Manager | ID = 7034
Description = Služba TuneUp Utilities Service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 05.05.2013 15:56:59 | Computer Name = FREEMEN-95805D5 | Source = Print | ID = 19
Description = Došlo k chybě sdílení tiskárny + 1722, tiskárna pdfFactory Pro název
sdílení Tiskárna.

Error - 05.05.2013 15:58:06 | Computer Name = FREEMEN-95805D5 | Source = DCOM | ID = 10010
Description = Server {4EB61BAC-A3B6-4760-9581-655041EF4D69} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 06.05.2013 2:24:14 | Computer Name = FREEMEN-95805D5 | Source = Print | ID = 19
Description = Došlo k chybě sdílení tiskárny + 1722, tiskárna pdfFactory Pro název
sdílení Tiskárna.

Error - 06.05.2013 2:25:35 | Computer Name = FREEMEN-95805D5 | Source = DCOM | ID = 10010
Description = Server {4EB61BAC-A3B6-4760-9581-655041EF4D69} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 06.05.2013 8:11:46 | Computer Name = FREEMEN-95805D5 | Source = Print | ID = 19
Description = Došlo k chybě sdílení tiskárny + 1722, tiskárna pdfFactory Pro název
sdílení Tiskárna.

Error - 06.05.2013 8:13:00 | Computer Name = FREEMEN-95805D5 | Source = DCOM | ID = 10010
Description = Server {4EB61BAC-A3B6-4760-9581-655041EF4D69} se v daném časovém limitu
neregistroval u služby DCOM.

Error - 06.05.2013 9:57:47 | Computer Name = FREEMEN-95805D5 | Source = Print | ID = 19
Description = Došlo k chybě sdílení tiskárny + 1722, tiskárna pdfFactory Pro název
sdílení Tiskárna.

[ TuneUp Events ]
Error - 28.01.2011 10:27:21 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 28.01.2011 14:28:09 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 28.01.2011 17:07:11 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 29.01.2011 0:38:57 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 29.01.2011 7:05:14 | Computer Name = FREEMEN-95805D5 | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.01.2011 7:08:14 | Computer Name = FREEMEN-95805D5 | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.01.2011 7:08:19 | Computer Name = FREEMEN-95805D5 | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.01.2011 7:12:14 | Computer Name = FREEMEN-95805D5 | Source = TuneUp Program Statistics | ID = 131840
Description =

Error - 29.01.2011 9:51:54 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 30.01.2011 4:36:21 | Computer Name = FREEMEN-95805D5 | Source = TuneUp.UtilitiesSvc | ID = 300
Description =


< End of report >