Prosím o kontrolu- pomalejší PC a internet

Zpráva

vlk · #1 Příspěvek od **vlk** » 08 pro 2011 15:47

Dobrý den,

prosím o kontrolu logu. Nedávno mi Avast zahlásil rootkit a několik dní se mi zdá, že jsou PC a internet někdy pomalejší.

Děkuji!

Logfile of random's system information tool 1.09 (written by random/random)
Run by Pet at 2011-12-08 15:40:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (28%) free of 25 GB
Total RAM: 767 MB (22% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:40:46, on 8.12.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Garmin\MyGarminAgent\MyGarminAgent.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Opera\opera.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\RSIT.exe
C:\Program Files\trend micro\Pet.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.audible.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [MyGarminAgent] C:\Program Files\Garmin\MyGarminAgent\MyGarminAgent.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Add to AMV/AVI Video Converter... - C:\Program Files\Media Player Utilities 4.21\AMVConverter\grab.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 9859 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://eu.ask.com?o=14672&l=dis"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}:6.0.06, {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.3, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.1.9&q="

"hblite@hblite.com"=C:\Program Files\hblite\bin\11.0.358.0\firefox\extensions
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
AskHPRFF.js
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npBitCometAgent.dll
npdeployJava1.dll
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
{800b5000-a755-47e1-992b-48a1c1357f07}
{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin.xml
winampsearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2008-03-09 824656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll [2008-02-29 468280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2008-03-09 824656]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-11-11 7311360]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-11-11 86016]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"CTSysVol"=C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe [2005-02-15 57344]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"Adobe Photo Downloader"=C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe [2008-04-01 61440]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-11-28 3744552]
"MyGarminAgent"=C:\Program Files\Garmin\MyGarminAgent\MyGarminAgent.exe [2010-03-16 337256]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative Detector"=C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe [2004-12-02 102400]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"PCSpeedUp"=C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk [2011-09-14 2003]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
Rundll32 P17.dll,P17Helper []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-12-06 69216]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=223
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\STRONG DC\StrongDC.exe"="C:\Program Files\STRONG DC\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Java\jre1.6.0_07\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre1.6.0_07\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\WinFast\WFDTV\DVBTAP.exe"="C:\Program Files\WinFast\WFDTV\DVBTAP.exe:*:Enabled:WinFast DTV Application"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\JetAudio\JcServer.exe"="C:\Program Files\JetAudio\JcServer.exe:*:Enabled:jcServer"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FMVC"=fmcodec.dll

======File associations======

.js - open - NOTEPAD.EXE %1
.vbs - open - NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2011-12-08 15:40:27 ----D---- C:\Program Files\trend micro
2011-12-08 15:40:25 ----D---- C:\rsit
2011-12-08 15:36:20 ----A---- C:\Program Files\RSIT.exe
2011-12-03 21:00:05 ----A---- C:\WINDOWS\system32\drivers\afc.sys
2011-12-03 21:00:00 ----A---- C:\WINDOWS\system32\unicows.dll
2011-11-25 16:08:00 ----A---- C:\WINDOWS\system32\javaws.exe
2011-11-25 16:08:00 ----A---- C:\WINDOWS\system32\javaw.exe
2011-11-25 16:08:00 ----A---- C:\WINDOWS\system32\java.exe
2011-11-21 20:29:43 ----A---- C:\WINDOWS\MixBKS.INI
2011-11-19 17:03:09 ----D---- C:\Program Files\QuickTime

======List of files/folders modified in the last 1 month======

2011-12-08 15:40:31 ----D---- C:\WINDOWS\Prefetch
2011-12-08 15:40:27 ----RD---- C:\Program Files
2011-12-08 15:34:17 ----A---- C:\WINDOWS\wincmd.ini
2011-12-08 15:24:27 ----D---- C:\WINDOWS\TEMP
2011-12-08 15:15:49 ----SD---- C:\WINDOWS\Tasks
2011-12-08 15:11:47 ----D---- C:\WINDOWS\system32\CatRoot2
2011-12-08 15:10:49 ----D---- C:\WINDOWS
2011-12-07 23:08:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-12-07 20:58:54 ----D---- C:\Program Files\Winamp
2011-12-07 17:00:20 ----A---- C:\WINDOWS\NeroDigital.ini
2011-12-07 16:51:31 ----D---- C:\Program Files\Opera
2011-12-06 22:33:55 ----D---- C:\Documents and Settings\Pet\Data aplikací\Adobe
2011-12-06 22:33:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-12-06 22:22:13 ----D---- C:\Documents and Settings\Pet\Data aplikací\gtk-2.0
2011-12-06 20:59:03 ----D---- C:\WINDOWS\system32
2011-12-04 21:12:46 ----HD---- C:\Documents and Settings\All Users\Data aplikací\ArcSoft
2011-12-04 21:12:35 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-04 20:38:03 ----D---- C:\Program Files\Free Video Converter
2011-12-04 20:37:48 ----A---- C:\WINDOWS\win.ini
2011-12-04 19:54:37 ----D---- C:\Program Files\CCleaner
2011-12-04 10:02:46 ----D---- C:\Documents and Settings\Pet\Data aplikací\BSplayer
2011-12-03 21:05:29 ----D---- C:\Documents and Settings\Pet\Data aplikací\ArcSoft
2011-12-03 21:04:40 ----HD---- C:\WINDOWS\inf
2011-12-03 21:00:05 ----D---- C:\WINDOWS\system32\drivers
2011-12-03 20:59:48 ----D---- C:\Program Files\Common Files\ArcSoft
2011-12-03 20:59:29 ----D---- C:\Program Files\ArcSoft
2011-12-03 14:03:24 ----A---- C:\WINDOWS\WDICT32.INI
2011-12-02 12:27:19 ----SHD---- C:\WINDOWS\Installer
2011-12-02 10:25:24 ----D---- C:\WINDOWS\system32\CatRoot
2011-12-02 10:24:04 ----HD---- C:\Config.Msi
2011-11-29 09:19:27 ----D---- C:\Program Files\Mozilla Firefox
2011-11-28 19:01:23 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-11-25 19:38:27 ----D---- C:\Documents and Settings\Pet\Data aplikací\Skype
2011-11-25 19:35:00 ----D---- C:\Documents and Settings\Pet\Data aplikací\skypePM
2011-11-25 16:08:40 ----D---- C:\Program Files\Common Files\Java
2011-11-25 16:07:55 ----D---- C:\Program Files\Java
2011-11-20 10:31:55 ----D---- C:\Documents and Settings\Pet\Data aplikací\Apple Computer
2011-11-19 17:06:23 ----D---- C:\WINDOWS\WinSxS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 d346bus;d346bus; C:\WINDOWS\system32\DRIVERS\d346bus.sys [2004-03-12 156800]
R0 d346prt;d346prt; C:\WINDOWS\System32\Drivers\d346prt.sys [2004-03-12 5248]
R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2011-08-18 64512]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 Vax347b;Vax347b; C:\WINDOWS\system32\DRIVERS\Vax347b.sys [2005-04-25 159616]
R0 Vax347s;Vax347s; C:\WINDOWS\System32\Drivers\Vax347s.sys [2004-04-30 5248]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-11-28 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-11-28 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-11-28 435032]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-11-28 314456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-11-28 52952]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-11-28 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-11-28 111320]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]
R3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2010-01-06 1714176]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LgBttPort;LGE Bluetooth TransPort; C:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2008-02-18 96256]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-11-11 3532928]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;Sound Blaster Audigy; C:\WINDOWS\system32\drivers\P17.sys [2005-07-07 1389056]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 wfcxacap;WinFast TV PCI Audio Capture Driver; C:\WINDOWS\system32\DRIVERS\wfcxacap.sys []
S2 wfcxatun;WinFast TV Analog Tuner Driver; C:\WINDOWS\system32\drivers\wfcxatun.sys []
S2 WFCXVCAP;WinFast TV Video Capture Driver; C:\WINDOWS\system32\drivers\wfcxvcap.sys []
S3 AR5211;TP-LINK Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-12-21 470048]
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2004-10-15 15295]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 genmcmnUSB;USB Scroll Mouse Driver; C:\WINDOWS\system32\DRIVERS\gflmouhid.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys []
S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys []
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 s916bus;Sony Ericsson Device 916 driver (WDM); C:\WINDOWS\system32\DRIVERS\s916bus.sys [2007-11-02 83496]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2008-11-19 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2008-11-19 19968]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2008-11-19 24832]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver; C:\WINDOWS\system32\drivers\wfcxdtun.sys []
S3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver; C:\WINDOWS\system32\drivers\wfcxtcap.sys []
S3 wfcxxbar;WinFast TV Crossbar Driver; C:\WINDOWS\system32\drivers\wfcxxbar.sys []
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-11-28 44768]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2007-12-12 65536]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2011-10-28 2152152]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-11-11 131139]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-06-18 167936]
R2 StarWindService;StarWind iSCSI Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-10-11 38912]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2007-12-12 1531989]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-07 136176]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-03-12 68096]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-07 136176]
S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 08 pro 2011 17:09

Zdravim a pekny den preji

Avast mel pred par dny falesnou detekci rootkitu, je jiz vyresena novou aktualizaci databaze

Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

vlk · #3 Příspěvek od **vlk** » 08 pro 2011 18:33

Děkuji

a posílám oba logy

OTL logfile created on: 8.12.2011 17:46:34 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Pet\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

767,48 Mb Total Physical Memory | 371,44 Mb Available Physical Memory | 48,40% Memory free
1,83 Gb Paging File | 1,56 Gb Available in Paging File | 85,42% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,42 Gb Total Space | 6,78 Gb Free Space | 27,75% Space Free | Partition Type: NTFS
Drive D: | 208,45 Gb Total Space | 13,43 Gb Free Space | 6,44% Space Free | Partition Type: NTFS
Drive H: | 74,55 Gb Total Space | 1,63 Gb Free Space | 2,18% Space Free | Partition Type: NTFS

Computer Name: PET-88D5662E278 | User Name: Pet | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.12.08 17:41:51 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pet\Plocha\OTL.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011.10.28 09:09:08 | 001,191,216 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2011.10.28 09:09:06 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2010.10.27 19:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010.08.25 11:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010.03.16 08:36:30 | 000,337,256 | ---- | M] () -- C:\Program Files\Garmin\MyGarminAgent\myGarminAgent.exe
PRC - [2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.04.01 12:21:56 | 000,061,440 | R--- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe
PRC - [2007.12.12 01:05:04 | 001,531,989 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
PRC - [2007.12.12 01:05:04 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
PRC - [2005.04.02 01:51:48 | 000,217,600 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
PRC - [2005.02.15 16:10:16 | 000,057,344 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
PRC - [2004.12.13 03:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2004.12.02 18:23:34 | 000,102,400 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe

========== Modules (No Company Name) ==========

MOD - [2011.12.08 10:55:15 | 001,645,056 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11120800\algo.dll
MOD - [2011.12.08 00:32:09 | 000,241,528 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11120800\aswRep.dll
MOD - [2011.09.10 17:46:05 | 000,430,568 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\VipreBridge.dll
MOD - [2011.09.10 17:46:02 | 000,589,184 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\RPAPI.dll
MOD - [2011.09.10 17:44:20 | 000,508,776 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\Lavasoft\Ad-Aware\Defs\thorax.aaw
MOD - [2011.08.18 14:25:12 | 000,308,560 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\Vipre.dll
MOD - [2010.03.16 08:37:06 | 000,034,664 | ---- | M] () -- C:\Program Files\Garmin\MyGarminAgent\MyGarminAgentCSY.dll
MOD - [2010.03.16 08:36:30 | 000,337,256 | ---- | M] () -- C:\Program Files\Garmin\MyGarminAgent\myGarminAgent.exe
MOD - [2005.05.03 12:38:42 | 000,064,512 | R--- | M] () -- C:\WINDOWS\system32\P17.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (Moliuustp)
SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.10.28 09:09:06 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2007.12.12 01:05:04 | 001,531,989 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2007.12.12 01:05:04 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2005.04.02 01:51:48 | 000,217,600 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe -- (StarWindService)
SRV - [2004.12.13 03:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)

========== Driver Services (SafeList) ==========

DRV - [2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.08.18 14:25:12 | 000,064,512 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2011.08.18 14:25:12 | 000,015,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\kernexplorer.sys -- (Lavasoft Kernexplorer)
DRV - [2010.01.06 04:31:32 | 001,714,176 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athuw.sys -- (AR9271)
DRV - [2009.09.29 07:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgbtport.sys -- (LgBttPort)
DRV - [2009.09.29 07:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgvmodem.sys -- (LGVMODEM)
DRV - [2009.09.29 07:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgbtbus.sys -- (lgbusenum)
DRV - [2008.11.19 16:09:10 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2008.11.19 16:09:08 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2008.11.19 16:09:08 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2008.04.13 23:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2008.04.13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.02.18 17:29:16 | 000,096,256 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2007.11.02 11:47:38 | 000,083,496 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s916bus.sys -- (s916bus) Sony Ericsson Device 916 driver (WDM)
DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006.11.02 16:51:58 | 000,013,560 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4c74-92FE-5B863F82066B})
DRV - [2005.12.21 03:16:34 | 000,470,048 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2005.07.07 09:14:30 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17)
DRV - [2005.04.25 10:43:58 | 000,159,616 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Vax347b.sys -- (Vax347b)
DRV - [2005.01.10 11:15:30 | 000,106,496 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2005.01.10 11:15:24 | 000,138,752 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2004.08.03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.08.03 22:59:44 | 000,095,360 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\atapi.sys -- (atapi)
DRV - [2004.04.30 09:33:00 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\Vax347s.sys -- (Vax347s)
DRV - [2004.03.12 22:41:42 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d346prt.sys -- (d346prt)
DRV - [2004.03.12 22:41:28 | 000,156,800 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d346bus.sys -- (d346bus)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.audible.com/
IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/sli ... ie7&query="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://eu.ask.com?o=14672&l=dis"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.3
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.1.9&q="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\hblite@hblite.com: C:\Program Files\hblite\bin\11.0.358.0\firefox\extensions
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.11.29 07:53:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.19 17:04:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{A89AED22-9133-424c-88E7-C8235C5FF302}: C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\

[2008.08.27 20:43:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Extensions
[2011.11.29 09:25:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions
[2011.08.26 15:50:29 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011.11.29 09:25:48 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.04.17 15:42:01 | 000,000,000 | ---D | M] (BitComet Helper) -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010.02.04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\askcom.xml
[2011.11.23 23:30:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-1.xml
[2008.05.06 15:59:05 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-2.xml
[2008.05.07 09:05:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-3.xml
[2008.07.03 17:55:15 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-4.xml
[2008.07.16 12:24:11 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-5.xml
[2011.07.19 20:56:37 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-6.xml
[2008.02.19 17:16:46 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin.xml
[2008.04.15 19:48:32 | 000,001,362 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\winampsearch.xml
[2011.11.29 07:54:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.11.25 16:08:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PET\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\NPUAUBJH.DEFAULT\EXTENSIONS\{195A3098-0BD5-4E90-AE22-BA1C540AFD1E}
[2010.05.02 09:39:56 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.11.29 07:53:42 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2008.01.23 07:20:30 | 000,491,520 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.11.11 20:50:39 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2011.11.11 20:50:39 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.04.01 17:58:30 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2011.11.11 20:50:39 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2011.11.11 20:50:39 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2011.11.11 20:50:39 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Ask Search (Enabled)
CHR - default_search_provider: search_url = http://websearch.ask.com/redirect?clien ... cale=en_EU
CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: BitCometAgent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Garmin Communicator Plug-In (Enabled) = C:\Program Files\Garmin GPS Plugin\npGarmin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2008.07.07 17:29:45 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (ICQ Toolbar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\Toolbar\WebBrowser: (ICQ Toolbar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O3 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.4\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [MyGarminAgent] C:\Program Files\Garmin\MyGarminAgent\myGarminAgent.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll ()
O4 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 223
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O7 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O8 - Extra context menu item: Add to AMV/AVI Video Converter... - C:\Program Files\Media Player Utilities 4.21\AMVConverter\grab.html ()
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (ICQ, Inc.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (ICQ, Inc.)
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D4EF3FB-B54C-41E3-9352-4BF855981466}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{76322F29-C086-459B-9081-AA4873EC4BAD}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Pet\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Pet\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{4778ef57-5331-11dd-9aee-0008a163532a}\Shell\AutoRun\command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{4778ef57-5331-11dd-9aee-0008a163532a}\Shell\open\Command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{c2739c30-8b1a-11dd-9b65-0008a163532a}\Shell\AutoRun\command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{c2739c30-8b1a-11dd-9b65-0008a163532a}\Shell\open\Command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{cbc22b4e-2e77-11dd-9a8b-0008a163532a}\Shell\AutoRun\command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{cbc22b4e-2e77-11dd-9a8b-0008a163532a}\Shell\open\Command - "" = wscript.exe VirusRemoval.vbs
O33 - MountPoints2\{d4d77ca8-1d21-11e1-a2f7-0008a163532a}\Shell\AutoRun\command - "" = M:\DVAP.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (smrgdf H:\Program Files\iolo\System Mechanic Professional 6\)
O34 - HKLM BootExecute: (iolobtdfg C:\WINDOWS\system32)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FMVC - C:\WINDOWS\System32\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.12.08 17:41:51 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Pet\Plocha\OTL.exe
[2011.12.08 15:40:27 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.12.08 15:40:25 | 000,000,000 | ---D | C] -- C:\rsit
[2011.12.07 16:54:59 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Pet\Recent
[2011.12.03 21:03:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ArcSoft Connect
[2011.12.03 21:01:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ArcSoft MediaImpression
[2011.12.03 21:00:05 | 000,018,688 | ---- | C] (Arcsoft, Inc.) -- C:\WINDOWS\System32\drivers\afc.sys
[2011.12.03 21:00:00 | 000,245,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unicows.dll
[2011.07.23 16:17:11 | 004,195,288 | ---- | C] (Garmin International) -- C:\Program Files\GarminMapUpdater_v2.7.10.exe
[2011.04.18 16:14:07 | 004,157,464 | ---- | C] (Garmin International) -- C:\Program Files\GarminMapUpdater_v2.6.7.exe
[2011.04.17 20:18:35 | 004,157,448 | ---- | C] (Garmin International) -- C:\Program Files\GarminMapUpdater_v2.6.6.exe
[2010.10.15 10:37:28 | 012,443,528 | ---- | C] (DsNET Corp) -- C:\Program Files\aTube_Catcher.exe
[2010.09.14 17:45:53 | 003,821,175 | ---- | C] (Jan Fiala ) -- C:\Program Files\pspad454inst_cz.exe
[2010.02.06 12:52:44 | 025,012,216 | ---- | C] (Aist mediaLab AG) -- C:\Program Files\moviexone.exe
[2009.10.14 19:05:51 | 007,771,349 | ---- | C] (DsNET Corp ) -- C:\Program Files\aTube_Catcher_Installer.exe
[2009.06.05 11:23:02 | 044,805,700 | ---- | C] (iolo technologies, LLC ) -- C:\Program Files\SystemMechanicPro.exe
[2009.03.15 21:31:28 | 010,050,902 | ---- | C] (http://www.codecpack.com) -- C:\Program Files\Codecs6030_allin1.exe
[2008.07.07 15:54:32 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Program Files\HijackThis.exe
[2008.03.12 09:46:05 | 000,159,616 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\Vax347b.sys
[2008.03.12 09:46:05 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\Vax347s.sys
[2008.03.10 23:40:45 | 000,156,800 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d346bus.sys
[2008.03.10 23:40:45 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d346prt.sys
[2002.04.11 09:41:06 | 000,065,536 | R--- | C] ( ) -- C:\WINDOWS\System32\A3d.dll
[1996.12.02 18:44:28 | 000,582,144 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Common Files\dao350.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.12.08 17:50:57 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.12.08 17:42:51 | 000,001,331 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2011.12.08 17:41:51 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Pet\Plocha\OTL.exe
[2011.12.08 17:17:01 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.12.08 15:36:20 | 000,781,383 | ---- | M] () -- C:\Program Files\RSIT.exe
[2011.12.08 15:15:50 | 000,000,486 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2011.12.08 15:15:12 | 000,000,064 | ---- | M] () -- C:\WINDOWS\System32\rp_stats.dat
[2011.12.08 15:15:12 | 000,000,044 | ---- | M] () -- C:\WINDOWS\System32\rp_rules.dat
[2011.12.08 15:09:52 | 000,041,237 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011.12.08 15:09:50 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.08 15:09:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.12.08 15:09:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.12.08 15:09:07 | 804,835,328 | -HS- | M] () -- C:\hiberfil.sys
[2011.12.07 23:03:59 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011.12.07 17:00:20 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011.12.06 20:59:08 | 000,002,553 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011.12.05 21:06:56 | 000,217,600 | ---- | M] () -- C:\Documents and Settings\Pet\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.12.04 19:54:41 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2011.12.03 21:04:38 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2011.12.03 21:01:57 | 000,001,776 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Media Impression.lnk
[2011.12.03 15:05:10 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011.12.03 14:04:56 | 002,764,581 | ---- | M] () -- C:\Documents and Settings\Pet\Dokumenty\4290838111.pdf
[2011.12.03 14:03:24 | 000,003,155 | ---- | M] () -- C:\WINDOWS\WDICT32.INI
[2011.12.03 13:57:09 | 002,764,581 | ---- | M] () -- C:\Documents and Settings\Pet\Dokumenty\sony dcr.pdf
[2011.12.02 10:21:41 | 000,180,224 | ---- | M] () -- C:\WINDOWS\mmproxy_40.mdb
[2011.12.02 10:16:08 | 000,174,080 | ---- | M] () -- C:\WINDOWS\mmproxy_40_Backup.mdb
[2011.12.02 10:15:40 | 000,002,373 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\MovieXone 4.0.lnk
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.12.08 17:50:57 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.12.08 15:36:20 | 000,781,383 | ---- | C] () -- C:\Program Files\RSIT.exe
[2011.12.03 21:01:57 | 000,001,776 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Media Impression.lnk
[2011.12.03 14:04:55 | 002,764,581 | ---- | C] () -- C:\Documents and Settings\Pet\Dokumenty\4290838111.pdf
[2011.12.03 13:57:08 | 002,764,581 | ---- | C] () -- C:\Documents and Settings\Pet\Dokumenty\sony dcr.pdf
[2011.11.21 20:29:43 | 000,000,023 | ---- | C] () -- C:\WINDOWS\MixBKS.INI
[2011.04.24 08:20:09 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\rp_stats.dat
[2011.04.24 08:20:08 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\rp_rules.dat
[2011.04.18 22:25:48 | 000,718,366 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-117609710-2111687655-1801674531-1003-0.dat
[2011.04.17 23:02:04 | 000,188,726 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.01.23 18:14:03 | 005,017,176 | ---- | C] () -- C:\Program Files\epv.zip
[2010.09.12 23:24:18 | 000,131,376 | ---- | C] () -- C:\WINDOWS\hpoins14.dat
[2010.09.12 23:24:18 | 000,001,996 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat
[2010.05.23 15:56:23 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.03.20 22:13:30 | 000,004,049 | ---- | C] () -- C:\Documents and Settings\Pet\Local Settings\Data aplikací\bff.dat
[2010.02.06 12:15:05 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\decdll.dll
[2009.08.25 20:06:07 | 000,000,002 | ---- | C] () -- C:\WINDOWS\System32\Dvbpws.dll
[2009.08.25 19:54:20 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.06.07 12:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009.01.25 18:40:22 | 000,000,411 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009.01.25 18:40:22 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\BD7420.DAT
[2009.01.22 21:59:07 | 000,000,079 | ---- | C] () -- C:\WINDOWS\TEXTWARE.INI
[2008.11.06 17:37:32 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008.11.06 17:33:02 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008.07.07 18:04:42 | 000,019,555 | ---- | C] () -- C:\Program Files\T-Cleaner.bat
[2008.07.06 09:02:36 | 019,153,264 | ---- | C] () -- C:\Program Files\aaw2008.exe
[2008.04.22 19:25:59 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2008.04.22 19:25:58 | 000,696,320 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2008.04.15 20:51:57 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\Whoru.dll
[2008.04.15 20:34:48 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
[2008.04.12 15:32:24 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini
[2008.03.24 19:41:05 | 000,003,155 | ---- | C] () -- C:\WINDOWS\WDICT32.INI
[2008.03.13 21:29:39 | 000,217,600 | ---- | C] () -- C:\Documents and Settings\Pet\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.03.13 21:23:36 | 000,000,072 | ---- | C] () -- C:\WINDOWS\sbwin.ini
[2008.03.12 09:48:58 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008.03.11 11:49:23 | 000,005,627 | R--- | C] () -- C:\WINDOWS\System32\ludap17.ini
[2008.03.11 11:49:23 | 000,000,039 | R--- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2008.03.11 11:15:56 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.03.11 10:38:50 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008.03.11 00:10:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008.03.11 00:09:20 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008.03.11 00:03:08 | 000,000,095 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2008.03.10 15:34:40 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008.03.10 15:33:11 | 000,195,368 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008.03.10 14:55:33 | 000,001,331 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.03.10 14:51:33 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008.03.10 14:43:30 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.03.10 13:43:35 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008.03.10 13:43:34 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008.03.10 13:43:34 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008.03.10 13:43:33 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008.03.10 13:43:31 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008.03.10 13:43:31 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008.03.10 13:43:31 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2008.03.10 13:43:31 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008.03.10 13:43:28 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008.03.10 13:43:28 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006.03.06 10:41:02 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\AMV_DecDLL.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.10.14 11:56:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe
[2005.05.03 19:38:42 | 000,064,512 | R--- | C] () -- C:\WINDOWS\System32\P17.dll
[2004.09.16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004.08.17 14:58:58 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.03 21:59:44 | 000,095,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys
[2004.08.02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.03.15 19:28:50 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[2003.10.02 18:48:18 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\P17CPI.dll
[2003.04.09 15:38:04 | 000,005,664 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001.10.25 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.25 15:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 15:00:00 | 000,435,212 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 15:00:00 | 000,431,834 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 15:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 15:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 15:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 15:00:00 | 000,079,342 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 15:00:00 | 000,067,590 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 15:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 15:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 15:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001.10.25 15:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[1999.07.05 11:00:00 | 000,074,547 | ---- | C] () -- C:\WINDOWS\System32\mfc45.dll

========== LOP Check ==========

[2011.03.06 07:38:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[2010.08.16 18:11:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2008.08.18 18:45:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2011.04.27 20:15:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GARMIN
[2011.03.13 13:58:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\HBLiteSA
[2009.06.05 11:28:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\iolo
[2008.03.11 21:16:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.12.04 10:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\BSplayer
[2008.03.11 00:18:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\BSplayer Pro
[2010.02.21 13:52:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\COWON
[2008.08.18 18:46:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ESET
[2010.02.06 12:56:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\FreeFLVConverter
[2010.02.06 12:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\FreeVideoConverter
[2011.04.27 20:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\GARMIN
[2011.12.06 22:22:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\gtk-2.0
[2009.03.07 19:10:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ICQ
[2008.04.23 05:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ICQ Toolbar
[2008.08.18 21:37:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Inkscape
[2008.04.22 19:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\iolo
[2010.07.07 18:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\LG Electronics
[2008.08.22 07:57:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Nvu
[2011.09.14 10:04:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\OpenCandy
[2008.03.11 00:16:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Opera
[2010.09.09 15:29:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Smart Recorder
[2010.10.29 05:30:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Telefónica Móviles
[2009.04.27 18:15:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\VitySoft
[2010.02.25 18:59:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Zoner
[2010.07.07 18:53:49 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Pet\Data aplikací\{D94BA408-F110-488B-A65E-3AE7945F79E6}
[2011.12.08 15:15:50 | 000,000,486 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011.12.07 23:03:59 | 000,000,230 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

========== Purity Check ==========

========== Custom Scans ==========

< >

< >

< MD5 for: ATAPI.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 14:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007.06.13 14:23:39 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=ED7B460B142A32097B8A8F6ECC941815 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 23:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 21:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SVCHOST.EXE >
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2007.10.30 17:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2007.10.30 18:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[7 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[2 C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.12.06 22:33:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Adobe
[2010.03.07 22:07:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Ahead
[2011.11.20 10:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Apple Computer
[2011.12.03 21:05:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ArcSoft
[2009.01.27 18:51:03 | 000,000,000 | R--D | M] -- C:\Documents and Settings\Pet\Data aplikací\Brother
[2011.12.04 10:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\BSplayer
[2008.03.11 00:18:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\BSplayer Pro
[2010.02.21 13:52:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\COWON
[2008.03.13 17:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Creative
[2008.03.12 21:01:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\CyberLink
[2009.03.10 06:08:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\DivX
[2008.08.18 18:46:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ESET
[2010.02.06 12:56:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\FreeFLVConverter
[2010.02.06 12:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\FreeVideoConverter
[2011.04.27 20:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\GARMIN
[2011.12.06 22:22:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\gtk-2.0
[2008.03.11 00:07:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Help
[2009.03.07 19:10:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ICQ
[2008.04.23 05:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ICQ Toolbar
[2008.03.10 14:53:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Identities
[2008.08.18 21:37:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Inkscape
[2010.02.21 13:56:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\InstallShield
[2008.04.22 19:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\iolo
[2010.07.07 18:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\LG Electronics
[2008.04.14 18:09:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Macromedia
[2011.04.04 19:51:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Pet\Data aplikací\Microsoft
[2008.08.27 20:43:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Mozilla
[2008.08.22 07:57:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Nvu
[2011.09.14 10:04:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\OpenCandy
[2008.03.11 00:16:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Opera
[2010.09.14 20:01:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\PSpad
[2011.11.25 19:38:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Skype
[2011.11.25 19:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\skypePM
[2010.09.09 15:29:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Smart Recorder
[2008.05.29 21:30:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Sun
[2010.10.29 05:30:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Telefónica Móviles
[2009.04.27 18:15:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\VitySoft
[2010.02.25 18:59:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\Zoner
[2010.07.07 18:53:49 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Pet\Data aplikací\{D94BA408-F110-488B-A65E-3AE7945F79E6}

< %APPDATA%\*.exe /s >
[2009.08.11 20:21:26 | 000,087,552 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\AC3 Filter\ac3config.exe
[2009.08.11 20:21:30 | 000,090,112 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\AC3 Filter\spdif_test.exe
[2010.03.22 13:52:04 | 000,697,690 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\AC3 Filter\unins000.exe
[2010.02.23 16:01:52 | 001,185,871 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\FFDShow\unins000.exe
[2010.08.14 10:42:54 | 000,113,152 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\Haali media splitter\dsmux.exe
[2010.08.14 10:45:10 | 000,358,400 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\Haali media splitter\gdsmux.exe
[2010.08.14 10:42:06 | 000,137,728 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\Haali media splitter\mkv2vfr.exe
[2010.09.30 15:30:22 | 000,042,305 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\BSplayer\Haali media splitter\uninstall.exe
[2010.04.01 13:51:28 | 000,032,768 | ---- | M] ((주)테크노니아) -- C:\Documents and Settings\Pet\Data aplikací\LG Electronics\LG PC Suite III\UpdateHelper.exe
[2009.02.01 21:04:13 | 000,002,550 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_3F085059C49F6D876EF2B1.exe
[2009.02.01 21:04:13 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_69EA7892A31051C7C1D67E.exe
[2009.02.01 21:04:13 | 000,000,766 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_6FEFF9B68218417F98F549.exe
[2009.02.01 21:04:13 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_8C4C8FCB81D265A6821199.exe
[2009.02.01 21:04:13 | 000,001,518 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_EFB5308110BD83234E6852.exe
[2009.02.01 21:04:13 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_F8B25BCCBFB9CFDE9498AD.exe
[2011.09.14 10:05:02 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\OpenCandy\OpenCandy_90816E5037B142D0BD80578029A73372\LatestDLMgr.exe
[2011.08.01 23:38:30 | 001,872,896 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Pet\Data aplikací\OpenCandy\OpenCandy_90816E5037B142D0BD80578029A73372\pcspeedup.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2011.12.08 15:15:50 | 000,000,486 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011.12.03 15:05:10 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2011.12.08 15:09:50 | 000,000,930 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2011.12.08 17:17:01 | 000,000,934 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2011.12.08 18:01:18 | 000,000,230 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\atapi.sys

< %systemroot%\System32\config\*.sav >
[2008.03.10 15:32:23 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2008.03.10 15:32:23 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2008.03.10 15:32:23 | 000,454,656 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.12.06 20:59:08 | 000,002,553 | ---- | M] () -- C:\WINDOWS\system32\CONFIG.NT
[2011.12.08 15:09:52 | 000,041,237 | ---- | M] () -- C:\WINDOWS\system32\nvapps.xml
[2011.12.08 15:15:12 | 000,000,044 | ---- | M] () -- C:\WINDOWS\system32\rp_rules.dat
[2011.12.08 15:15:12 | 000,000,064 | ---- | M] () -- C:\WINDOWS\system32\rp_stats.dat
[2011.12.08 15:09:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Creative Detector" = "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R -- [2004.12.02 18:23:34 | 000,102,400 | ---- | M] (Creative Technology Ltd)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 07:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 07:52:38 | 001,695,232 | ---- | M] (Microsoft Corporation)
"PCSpeedUp" = C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk -- [2011.09.14 10:13:00 | 000,002,003 | ---- | M] ()

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.12.08 17:50:57 | 000,000,512 | ---- | M] () MD5=DEDB45738D44C3FEFB4267E144134678 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2008.07.08 20:35:50 | 000,008,697 | ---- | M] () -- \Program Files\BitComet\torrents\Adobe Photoshop Lightroom 1.4.1 ENG + Crack.torrent
[2008.07.09 05:04:16 | 000,002,632 | ---- | M] () -- \Program Files\BitComet\torrents\Adobe Photoshop Lightroom 1.4.1 ENG + Crack.xml
[2008.08.22 16:19:55 | 000,011,063 | ---- | M] () -- \Program Files\BitComet\torrents\System Mechanic 6.0 Pro ( Cracked ) .rar.torrent
[2008.08.22 16:37:15 | 000,001,909 | ---- | M] () -- \Program Files\BitComet\torrents\System Mechanic 6.0 Pro ( Cracked ) .rar.xml

< *keygen* /s >
[2008.02.28 17:40:28 | 000,033,792 | ---- | M] () -- \Program Files\!CRACK Adobe Photoshop Lightroom 1.4.1 ENG\!CRACK Adobe Photoshop Lightroom 1.4.1 ENG\KEYGEN\Adobe Photoshop Lightroom 1.1 keygen.exe
[2008.02.28 17:40:28 | 000,033,792 | ---- | M] () -- \Program Files\!CRACK Adobe Photoshop Lightroom 1.4.1 ENG\KEYGEN\Adobe Photoshop Lightroom 1.1 keygen.exe
[2008.07.08 16:48:56 | 000,015,495 | ---- | M] () -- \Program Files\BitComet\torrents\Adobe.Photoshop.Lightroom.v1.4.1.Multilingual.Incl.Keygen-ViRiLiTY.zip.torrent
[2008.07.08 22:39:06 | 000,002,090 | ---- | M] () -- \Program Files\BitComet\torrents\Adobe.Photoshop.Lightroom.v1.4.1.Multilingual.Incl.Keygen-ViRiLiTY.zip.xml

< *loader* /s >
[2008.03.12 10:07:27 | 000,001,918 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk
[1999.11.04 15:06:48 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2011.06.01 17:10:12 | 000,287,000 | ---- | M] () -- \Program Files\COWON\iAUDIO 9\SoftonicDownloader_for_jetaudio.exe
[2009.06.19 18:51:42 | 000,389,120 | ---- | M] () -- \Program Files\Free FLV Converter\rtmpDownloaderX.ocx
[2010.01.15 16:59:06 | 000,905,216 | ---- | M] () -- \Program Files\Free FLV Converter\TubeDownloader.ocx
[2007.12.19 14:08:13 | 000,005,795 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\IMAGES\XtraPreloader\loader.jpg
[2008.09.22 11:43:29 | 000,004,089 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\IMAGES\XtraPreloader\loader.swf
[2007.12.19 14:08:14 | 000,005,520 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\MUICoreLib\xtraLoader.swf
[2008.04.23 19:24:21 | 000,003,479 | ---- | M] () -- \Program Files\ICQ6\services\icqXtraz\ver1\content\coreg\preloader04.swf
[2008.04.22 20:49:41 | 000,552,798 | ---- | M] () -- \Program Files\ICQ6\services\icqXtraz\ver1\theme\game_center\loaderBkg.png
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.03 21:59:38 | 000,230,400 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.exe
[2004.08.03 21:59:38 | 000,278,016 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.ntd
[2011.12.07 14:07:14 | 000,010,410 | ---- | M] () -- \WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf
[2008.04.14 07:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 23:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 23:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\dmloader.dll
[2008.04.13 19:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\osloader.exe
[2008.04.13 19:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\osloader.ntd
[2008.04.14 07:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]

========== Alternate Data Streams ==========

@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:F8662B30

< End of report >

vlk · #4 Příspěvek od **vlk** » 08 pro 2011 18:34

OTL Extras logfile created on: 8.12.2011 17:46:34 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Pet\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

767,48 Mb Total Physical Memory | 371,44 Mb Available Physical Memory | 48,40% Memory free
1,83 Gb Paging File | 1,56 Gb Available in Paging File | 85,42% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,42 Gb Total Space | 6,78 Gb Free Space | 27,75% Space Free | Partition Type: NTFS
Drive D: | 208,45 Gb Total Space | 13,43 Gb Free Space | 6,44% Space Free | Partition Type: NTFS
Drive H: | 74,55 Gb Total Space | 1,63 Gb Free Space | 2,18% Space Free | Partition Type: NTFS

Computer Name: PET-88D5662E278 | User Name: Pet | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"13985:TCP" = 13985:TCP:*:Enabled:BitComet 13985 TCP
"13985:UDP" = 13985:UDP:*:Enabled:BitComet 13985 UDP
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ6\ICQ.exe" = C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, Inc.)
"C:\Program Files\STRONG DC\StrongDC.exe" = C:\Program Files\STRONG DC\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\Java\jre1.6.0_07\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre1.6.0_07\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\WinFast\WFDTV\DVBTAP.exe" = C:\Program Files\WinFast\WFDTV\DVBTAP.exe:*:Enabled:WinFast DTV Application
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\JetAudio\JcServer.exe" = C:\Program Files\JetAudio\JcServer.exe:*:Enabled:jcServer -- (JetAudio, Inc.)
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{18472E28-FCA0-421F-BDAC-AC65012E29F2}" = ArcSoft MediaImpression
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1B1DDAD2-C704-49F8-8FC2-18DAAD9A87C5}" = Sound Blaster Audigy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 29
"{2D03966F-8347-4C9A-BA82-16278495A27B}" = MovieXone 4.0
"{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}" = Creative MediaSource
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{385DD1DD-65AA-408D-8E70-74601C2DB7E6}" = Ad-Aware
"{3C19E918-13AF-4C57-B50D-8C3738EFCABF}" = TOPO Czech 2010
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40034B11-149E-4310-AE89-BB575B02525B}" = LG Internet Kit
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{553B20C6-59CD-4C2F-BE37-16ABF32064BF}" = aTube Catcher 1.0
"{56CA5D3B-3002-4E7B-90FE-071D8FDF3814}" =
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.6
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6
"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E8C79CC-AC40-4E67-A959-332A366230DA}" = COWON iAUDIO 9 User's Guide
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}" = Media Player Utilities 4.21
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{92A70E71-4F0E-4C05-A777-16424E89F162}" = Garmin Communicator Plugin with myGarmin Agent
"{A5F68DC8-0278-4AD8-B413-861509B5F25B}" = ArcSoft Panorama Maker 3
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABD7DBE3-E344-4BCA-B8AD-4360494DD1D9}" = LG MC USB U330 driver
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Czech
"{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}" = LG Bluetooth Drivers
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{AFE83615-88BE-47F6-B3E4-A3FEF8B7B57F}_is1" = xrecode II 1.0.0.51
"{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}" = HP Deskjet All-In-One Software 9.0
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{C69405BB-27AF-4940-B3DA-04910B4DFD23}_is1" = aTube Catcher 1.0
"{D02220CE-1475-4F0F-9F12-251161999D53}" = Garmin MapSource
"{D4134B0B-EA9B-4835-A77A-60BEE6277101}" = Lightroom
"{D94BA408-F110-488B-A65E-3AE7945F79E6}_is1" = Odinstalovat LG PC Suite III
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic VX
"{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}" = LG USB Modem Drivers
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{E9F81423-211E-46B6-9AE0-38568BC5CF6F}" =
"{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"aTube Catcher" = aTube Catcher
"AudibleManager" = AudibleManager
"avast" = avast! Free Antivirus
"BitComet" = BitComet 1.00
"BSPlayerf" = BS.Player FREE
"CCleaner" = CCleaner
"CDex" = CDex extraction audio
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"Device Control" = Device Control
"EAXSet" = Creative EAX Settings
"EVEREST Home Edition_is1" = EVEREST Home Edition v1.51
"FBDBServer_1_5_is1" = Firebird 1.5.5
"FMCODEC" = FM Screen Capture Codec (Remove Only)
"Free FLV Converter_is1" = Free FLV Converter V 6.7.4
"Free Video Converter_is1" = Free Video Converter V 2.5
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"Magic ISO Maker v5.4 (build 0239)" = Magic ISO Maker v5.4 (build 0239)
"MagicDisc 2.6.93" = MagicDisc 2.6.93
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Mozilla Firefox 8.0.1 (x86 cs)" = Mozilla Firefox 8.0.1 (x86 cs)
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Nvu" = Nvu 1.0
"Opera 11.60.1185" = Opera 11.60
"PSPad editor_is1" = PSPad editor
"Shockwave" = Shockwave
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"SPEAKER" = Creative Speaker Settings
"Totalcmd" = Total Commander (Remove or Repair)
"Uninstall_is1" = Uninstall 1.0.0.1
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"winusb0100" = Microsoft WinUsb 1.0
"Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-117609710-2111687655-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 4.5.0.457

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 14.11.2009 14:14:53 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

Error - 6.2.2010 7:09:48 | Computer Name = PET-88D5662E278 | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 14.9.2011 4:38:22 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 6.0.2.4262, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 15.9.2011 12:28:54 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 9.0.0.4503, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 19.9.2011 14:58:49 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 9.0.0.4503, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 3.10.2011 13:18:35 | Computer Name = PET-88D5662E278 | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 11.10.2011 14:35:16 | Computer Name = PET-88D5662E278 | Source = Application Error | ID = 1000
Description = Chybující aplikace winamp.exe, verze 5.5.4.2165, chybující modul gen_ml.dll,
verze 0.0.0.0, adresa chyby 0x0001c32b.

Error - 16.10.2011 12:33:27 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 6.0.2.4262, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 27.10.2011 16:06:03 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 6.0.2.4262, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 11.11.2011 16:07:05 | Computer Name = PET-88D5662E278 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace WINWORD.EXE, verze 11.0.5604.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 21.11.2011 12:19:43 | Computer Name = PET-88D5662E278 | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 2.12.2011 5:24:04 | Computer Name = PET-88D5662E278 | Source = MsiInstaller | ID = 11706
Description = Product: Media Player Utilities 4.21 -- Error 1706. An installation
package for the product Media Player Utilities 4.21 cannot be found. Try the installation
again using a valid copy of the installation package 'Msien.msi'.

[ System Events ]
Error - 6.12.2011 16:03:01 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Analog Tuner Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 6.12.2011 16:03:01 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Video Capture Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.12.2011 2:34:37 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Analog Tuner Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.12.2011 2:34:37 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Video Capture Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.12.2011 2:34:37 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7034
Description = Služba NVIDIA Display Driver Service byla neočekávaně ukončena. Tento
stav nastal již 1krát.

Error - 7.12.2011 9:05:33 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Analog Tuner Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.12.2011 9:05:33 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Video Capture Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.12.2011 9:05:33 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7034
Description = Služba NVIDIA Display Driver Service byla neočekávaně ukončena. Tento
stav nastal již 1krát.

Error - 8.12.2011 10:10:51 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Analog Tuner Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 8.12.2011 10:10:51 | Computer Name = PET-88D5662E278 | Source = Service Control Manager | ID = 7000
Description = Služba WinFast TV Video Capture Driver neuspěla při spuštění v důsledku
následující chyby: %%2

< End of report >

#5 Příspěvek od **vyosek** » 08 pro 2011 19:09

Stahnete aswMBR http://public.avast.com/%7Egmerek/aswMBR.exe a ulozte jej na plochu.

Utilitu spustte a prikazte ji, at skenuje - klik na Scan
Kliknutim na Save log ulozte log aswMBR na plochu
Obsah logu aswMBR mi sem vlozte

#6 Příspěvek od **vyosek** » 08 pro 2011 19:15

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
Spustte a kliknete na Deletion
Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

Spustte znovu OTL

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:otl
SRV - File not found [Disabled | Stopped] -- -- (Moliuustp)
IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
IE - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://eu.ask.com?o=14672&l=dis"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.9&q="
[2011.11.29 09:25:48 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.04.17 15:42:01 | 000,000,000 | ---D | M] (BitComet Helper) -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010.02.04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\askcom.xml
[2011.11.23 23:30:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-1.xml
[2008.05.06 15:59:05 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-2.xml
[2008.05.07 09:05:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-3.xml
[2008.07.03 17:55:15 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-4.xml
[2008.07.16 12:24:11 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-5.xml
[2011.07.19 20:56:37 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin-6.xml
[2008.02.19 17:16:46 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\icqplugin.xml
[2008.04.15 19:48:32 | 000,001,362 | ---- | M] () -- C:\Documents and Settings\Pet\Data aplikací\Mozilla\Firefox\Profiles\npuaubjh.default\searchplugins\winampsearch.xml
CHR - default_search_provider: Ask Search (Enabled)
CHR - default_search_provider: search_url = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=en_EU
CHR - default_search_provider: suggest_url = 
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (ICQ Toolbar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\Toolbar\WebBrowser: (ICQ Toolbar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll (ICQ Inc.)
O3 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk ()
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll ()
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKU\S-1-5-21-117609710-2111687655-1801674531-1003\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[7 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[2 C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]
[2008.04.23 05:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pet\Data aplikací\ICQ Toolbar
[2011.12.08 15:15:50 | 000,000,486 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011.12.03 15:05:10 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2011.12.08 15:09:50 | 000,000,930 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2011.12.08 17:17:01 | 000,000,934 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2011.12.08 18:01:18 | 000,000,230 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:F8662B30

:services
gupdate
gupdatem
JavaQuickStarterService

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"=-
"Adobe ARM"=-
"QuickTime Task"=-
"ArcSoft Connection Service"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=-
"PCSpeedUp"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-

:files
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk
C:\Program Files\Zrychleni Pocitace
C:\Program Files\Ask.com
C:\Program Files\ICQToolbar
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

#7 Příspěvek od **vyosek** » 08 pro 2011 19:16

Takze male resume

Rad bych tu nasel tyto logy

aswMBR
USBFix
OTL po oprave

vlk · #8 Příspěvek od **vlk** » 08 pro 2011 20:55

Dal jsem scanovat PC pomocí aswMBR a uložil log dle návodu. Pak jsem stáhnul USBFix a zapojil všechny Flashky. Když jsem zapojil všechny flashky do PC, přestal jít úplně internet a totálně se zpomalilo PC. Dal jsem deletion v USB FIX, dojelo to až dokonce, ale pak zmizely úplně všechny ikony z plochy a PC nic nedělá. Co s tím?

#9 Příspěvek od **vyosek** » 08 pro 2011 21:16

Restartujte natvrdo PC, pak mrknete primo na disk ci tam neni log z USBFixu

vlk · #10 Příspěvek od **vlk** » 08 pro 2011 21:18

A mám tam nechat stále zapojené ty flashky, nebo je mám před restartem odpojit?

#11 Příspěvek od **vyosek** » 08 pro 2011 21:23

nechte je tam...

vlk · #12 Příspěvek od **vlk** » 08 pro 2011 21:47

Posílám log z aswMBR a našel jsem i log UsbFix

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-12-08 19:46:59
-----------------------------
19:46:59.937 OS Version: Windows 5.1.2600 Service Pack 3
19:46:59.937 Number of processors: 1 586 0x209
19:46:59.937 ComputerName: PET-88D5662E278 UserName: Pet
19:47:01.812 Initialize success
19:47:02.671 AVAST engine defs: 11120800
19:47:36.281 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4
19:47:36.281 Disk 0 Vendor: WDC_WD2500JB-00REA0 20.00K20 Size: 238475MB BusType: 3
19:47:36.343 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-c
19:47:36.359 Disk 1 Vendor: SAMSUNG_SP0802N TK100-24 Size: 76351MB BusType: 3
19:47:36.359 Device \Driver\atapi -> DriverStartIo f772a7c6
19:47:36.359 Device \Driver\atapi -> MajorFunction 83b518d8
19:47:38.421 Disk 0 MBR read successfully
19:47:38.421 Disk 0 MBR scan
19:47:38.453 Disk 0 Windows XP default MBR code
19:47:38.515 Disk 0 scanning sectors +488376000
19:47:38.578 Disk 0 scanning C:\WINDOWS\system32\drivers
19:47:58.062 Service scanning
19:47:58.703 Service atapi C:\WINDOWS\system32\DRIVERS\atapi.sys **LOCKED** 32
19:48:00.796 Modules scanning
19:48:17.734 Disk 0 trace - called modules:
19:48:17.750 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x83b518d8]<<
19:48:17.750 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x83f69880]
19:48:17.765 3 CLASSPNP.SYS[f786efd7] -> nt!IofCallDriver -> \Device\00000064[0x83f69350]
19:48:17.765 5 ACPI.sys[f7797620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-4[0x83f54d98]
19:48:17.765 \Driver\atapi[0x83fbdf38] -> IRP_MJ_CREATE -> 0x83b518d8
19:48:18.031 AVAST engine scan C:\WINDOWS
19:48:23.234 AVAST engine scan C:\WINDOWS\system32
19:51:08.500 AVAST engine scan C:\WINDOWS\system32\drivers
19:51:24.578 AVAST engine scan C:\Documents and Settings\Pet
19:55:06.640 AVAST engine scan C:\Documents and Settings\All Users
19:56:06.765 Scan finished successfully
20:00:15.906 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Pet\Plocha\MBR.dat"
20:00:15.953 The log file has been saved successfully to "C:\Documents and Settings\Pet\Plocha\aswMBR.txt"

############################## | UsbFix 7.059 | [Deletion]

User: Pet (Administrator) # PET-88D5662E278 [ ]
Updated 16/09/2011 by El Desaparecido
Started at 20:26:10 | 08/12/2011
Website: http://eldesaparecido.com
Submit your sample: http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

CPU: Intel(R) Celeron(R) CPU 2.40GHz
Systém Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 7.0.5730.13

Windows Firewall: Disabled /!\
Antivirus: Lavasoft Ad-Watch Live! Anti-Virus [Enabled | Updated]
Antivirus: avast! Antivirus 5.0.100664663 [Enabled | Updated]
RAM -> 767 Mb
C:\ (%systemdrive%) -> Fixed drive # 24 Gb (7 Mb free - 28%) [] # NTFS
D:\ -> Fixed drive # 208 Gb (13 Mb free - 6%) [] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Fixed drive # 75 Gb (2 Mb free - 2%) [80giga] # NTFS
I:\ -> Removable drive # 7 Gb (702 Mb free - 9%) [ZLUTAFLASH] # FAT32
J:\ -> Removable drive # 495 Mb (157 Mb free - 32%) [FLASHKA] # FAT32
K:\ -> CD-ROM
L:\ -> Removable drive # 7 Gb (3 Mb free - 39%) [KINGSTON] # FAT32
M:\ -> Removable drive # 2 Gb (42 Mb free - 2%) [PJS FLASH] # FAT32

################## | Files # Infected Folders |

Deleted ! L:\BAAN_Config.EXE.lnk
Deleted ! C:\Documents and Settings\Pet\Data aplikací\{D94BA408-F110-488B-A65E-3AE7945F79E6}
Deleted ! C:\WINDOWS\system32\autorun.inf
Deleted ! C:\Recycler\S-1-5-21-117609710-2111687655-1801674531-1003
Deleted ! D:\Recycler\S-1-5-21-117609710-2111687655-1801674531-1003
Deleted ! H:\Recycler\S-1-5-21-117609710-2111687655-1801674531-1003
Deleted ! H:\Recycler\S-1-5-21-854245398-436374069-682003330-1003

(!) Temporary files deleted.

################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoFolderOptions

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{4778ef57-5331-11dd-9aee-0008a163532a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{c2739c30-8b1a-11dd-9b65-0008a163532a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{cbc22b4e-2e77-11dd-9a8b-0008a163532a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{d4d77ca8-1d21-11e1-a2f7-0008a163532a}

################## | Listing |

[10/09/2011 - 17:09:51 | N | 302078] C:\aaw7boot.log
[11/03/2008 - 00:07:21 | D ] C:\audiograbber
[16/04/2008 - 19:40:22 | N | 211] C:\boot.ini
[25/10/2001 - 15:00:00 | N | 4952] C:\Bootfont.bin
[07/07/2008 - 18:03:36 | N | 3450] C:\Bug.txt
[02/12/2011 - 10:24:04 | D ] C:\Config.Msi
[10/03/2008 - 14:48:28 | N | 0] C:\CONFIG.SYS
[25/12/2009 - 21:21:47 | D ] C:\Documents and Settings
[09/09/2008 - 19:35:00 | D ] C:\DVDVideoSoft
[27/04/2011 - 20:39:20 | D ] C:\Garmin
[08/12/2011 - 15:09:07 | ASH | 804835328] C:\hiberfil.sys
[10/03/2008 - 14:48:28 | N | 0] C:\IO.SYS
[10/03/2008 - 14:48:28 | N | 0] C:\MSDOS.SYS
[03/08/2004 - 21:38:34 | N | 47564] C:\NTDETECT.COM
[27/04/2011 - 18:44:51 | N | 250576] C:\ntldr
[11/07/2011 - 21:55:15 | N | 7764] C:\Obnovený dokument 1.txt
[11/07/2011 - 21:55:28 | N | 442] C:\Obnovený dokument 2.txt
[11/07/2011 - 21:55:15 | N | 7764] C:\Obnovený dokument.txt
[08/12/2011 - 15:09:05 | ASH | 1207959552] C:\pagefile.sys
[08/12/2011 - 17:50:57 | N | 512] C:\PhysicalMBR.bin
[08/12/2011 - 15:40:27 | D ] C:\Program Files
[08/12/2011 - 20:34:13 | SHD ] C:\RECYCLER
[08/12/2011 - 15:41:08 | D ] C:\rsit
[23/11/2008 - 18:16:32 | SHD ] C:\System Volume Information
[07/11/2010 - 19:05:19 | D ] C:\temp
[06/12/2008 - 10:35:57 | D ] C:\totalcmd
[08/12/2011 - 20:34:14 | D ] C:\UsbFix
[08/12/2011 - 20:39:30 | A | 2190] C:\UsbFix.txt
[08/12/2011 - 15:10:49 | D ] C:\WINDOWS
[07/01/2010 - 18:50:26 | N | 7432192] D:\5.1.1.exe
[16/11/2011 - 07:20:54 | D ] D:\AJA
[04/09/2006 - 20:01:11 | D ] D:\Daemontools346
[23/07/2011 - 16:39:10 | D ] D:\downloads
[10/03/2008 - 23:41:06 | D ] D:\driver_msi
[03/08/2008 - 14:25:40 | D ] D:\ebooks
[27/06/2011 - 09:20:10 | D ] D:\EFT
[17/11/2011 - 18:41:42 | D ] D:\fotky
[04/09/2006 - 20:04:50 | N | 17] D:\INSTALL.LOG
[29/10/2011 - 16:32:43 | D ] D:\Kačka
[18/04/2011 - 21:25:21 | D ] D:\Mapy
[28/11/2011 - 19:16:32 | D ] D:\Moto
[07/12/2011 - 16:35:51 | D ] D:\MOVIES
[19/07/2011 - 17:00:12 | D ] D:\Muzika
[17/11/2011 - 15:57:35 | D ] D:\NEXUS
[07/12/2011 - 20:52:20 | D ] D:\NLP
[10/03/2008 - 13:43:27 | D ] D:\NVIDIA
[07/04/2009 - 19:31:30 | D ] D:\Prace
[08/12/2011 - 20:34:13 | SHD ] D:\RECYCLER
[10/03/2008 - 23:45:37 | D ] D:\saveeemee
[04/04/2011 - 22:55:22 | D ] D:\scitani
[07/08/2010 - 13:31:39 | D ] D:\SKOLA
[23/11/2008 - 18:16:32 | SHD ] D:\System Volume Information
[04/09/2006 - 20:01:24 | D ] D:\totalcomander
[08/10/2011 - 12:19:03 | N | 54541] D:\treeinfo.wc
[15/02/2010 - 18:56:26 | N | 181760] D:\Untitled.MSWMM
[05/09/2006 - 21:15:57 | N | 1518731264] D:\xp.PQI
[07/03/2010 - 00:15:55 | D ] D:\_ZALOHA_PETR
[16/12/2007 - 16:38:26 | D ] H:\069e964fee3bc829dbf66b5655cb5b
[05/01/2002 - 02:18:20 | N | 84992] H:\atl70.dll
[05/09/2009 - 09:39:14 | D ] H:\auta
[08/08/2010 - 14:16:44 | D ] H:\EFT
[14/08/2007 - 23:42:11 | D ] H:\f31a78b1c6e61590ba3c9534
[18/04/2010 - 13:01:33 | D ] H:\Muzika_zaloha
[05/12/2011 - 14:31:39 | D ] H:\Obrázky
[31/12/2010 - 10:06:39 | D ] H:\Opera
[06/03/2008 - 16:00:07 | D ] H:\Program Files
[08/12/2011 - 20:34:14 | SHD ] H:\RECYCLER
[05/07/2010 - 09:03:09 | D ] H:\Svět motorů
[23/11/2008 - 18:16:32 | SHD ] H:\System Volume Information
[26/08/2009 - 21:26:47 | D ] H:\WinFast WorkArea
[06/09/2006 - 22:57:31 | N | 1518993408] H:\xp.PQI
[08/12/2010 - 11:57:30 | D ] I:\reiki
[21/11/2011 - 23:04:06 | N | 41] I:\pmp_usb.ini
[21/11/2011 - 23:04:06 | N | 474] I:\winamp_cache_0001.xml
[04/01/2011 - 06:26:04 | D ] I:\whispers
[16/06/2011 - 07:16:18 | D ] I:\mojemeditace
[11/11/2011 - 20:06:46 | D ] I:\texty
[29/10/2010 - 15:54:50 | D ] I:\jack canfield
[05/10/2010 - 12:53:58 | D ] I:\sporice
[14/03/2011 - 08:15:30 | D ] I:\tappingy
[03/11/2010 - 12:58:40 | D ] I:\Try it on everything
[12/07/2011 - 14:33:46 | N | 19968] I:\kenny.doc
[29/09/2011 - 07:20:46 | D ] I:\MP3
[23/03/2011 - 06:21:04 | D ] I:\meditace
[16/06/2011 - 22:36:44 | D ] I:\Vizitky
[11/11/2011 - 20:06:18 | D ] I:\ze seminářů
[06/12/2011 - 22:48:28 | N | 1602048] I:\vizitky Alena.doc
[09/10/2011 - 15:58:42 | N | 32622] I:\emoce.odt
[11/10/2010 - 11:47:18 | D ] I:\seminar hojnost
[27/11/2010 - 17:16:30 | D ] I:\Webovky
[14/11/2011 - 08:15:52 | D ] I:\nlp
[14/03/2011 - 22:47:22 | D ] I:\bargainbeyondbelief
[16/06/2011 - 06:59:28 | D ] I:\knihy
[16/11/2010 - 08:26:56 | D ] I:\science of getting rich kompletni
[22/08/2011 - 13:17:32 | D ] I:\EFT A AJ
[04/01/2011 - 06:25:48 | D ] I:\subliminal
[08/10/2011 - 17:59:22 | N | 31887] I:\emotions.odt
[08/01/2011 - 09:39:46 | D ] I:\prelozit
[03/09/2010 - 10:52:36 | N | 879856] I:\3688945_l.jpg
[09/01/2011 - 21:46:56 | D ] I:\FOUND.000
[11/10/2011 - 10:55:46 | N | 45056] I:\emoce2.doc
[02/06/2011 - 17:41:10 | D ] I:\texty na web
[09/10/2011 - 20:17:52 | N | 16389] I:\emoce2.odt
[23/09/2011 - 10:35:24 | D ] I:\newsletter
[19/09/2011 - 08:26:24 | D ] I:\helbea
[04/01/2011 - 07:22:34 | D ] I:\Esther and Jerry Hicks
[18/07/2011 - 22:37:12 | N | 23708230] I:\Derren Brown Mind Control Invisible Man.avi
[29/08/2011 - 23:41:46 | D ] I:\alena
[03/02/2011 - 07:25:28 | D ] I:\marketing
[24/08/2011 - 13:10:56 | D ] I:\Videa CZ Brad
[03/02/2011 - 15:11:48 | D ] I:\NA NASTENKY
[12/05/2011 - 23:57:34 | N | 131] I:\.~lock.pro frantu#
[17/02/2011 - 12:06:28 | D ] I:\Prednaska zdravi M-Klub
[30/09/2011 - 08:06:46 | N | 34816] I:\newsletter 1.doc
[12/05/2011 - 23:54:42 | N | 35322] I:\Nový objekt - Textový dokument OpenDocument.odt
[28/09/2011 - 12:47:18 | D ] I:\tonyrobbins
[04/06/2011 - 23:01:44 | D ] I:\make your success easy
[02/04/2010 - 17:47:54 | N | 22016] I:\JSTE CHYTRY STUDENT.doc
[08/06/2011 - 10:53:18 | D ] I:\osobni nakupy
[24/05/2005 - 01:52:20 | N | 9750226] I:\02 REIKI 02.m4a
[14/10/2011 - 21:25:10 | D ] I:\TESTOVÁNÍ
[19/09/2011 - 08:47:58 | D ] I:\carol- videa
[30/08/2011 - 00:04:24 | D ] I:\eft prezentace
[14/10/2011 - 15:59:54 | D ] I:\Jak si pomocí EFT vylepšit vztahy
[23/10/2011 - 21:13:48 | N | 106] I:\.~lock.Final Exam Alena.odt#
[14/06/2010 - 14:43:54 | N | 94] I:\.~lock.plakat leto deti.doc#
[11/06/2010 - 05:59:16 | N | 396288] I:\~WRL3523.tmp
[08/11/2011 - 20:45:18 | N | 95232] J:\Final exam_Petr_Lukes.doc
[20/12/2010 - 06:36:00 | N | 131] J:\.~lock.Josef Jungmann#
[30/08/2011 - 09:04:38 | N | 145920] J:\vizitky.doc
[22/03/2011 - 10:47:48 | N | 160] J:\.~lock.Nový objekt - Prezentace OpenDocument.odp#
[07/04/2011 - 06:29:14 | D ] J:\obhájit si svoji existenci
[14/04/2011 - 07:52:30 | N | 13377536] J:\Wayne Dyer Ambition to Meaning The Shift (Part 1 of 12).mpg
[14/04/2011 - 07:52:36 | N | 30227619] J:\Wayne Dyer Ambition to Meaning The Shift (Part 1 of 12)[1].flv
[28/08/2011 - 20:51:34 | D ] J:\Anime
[29/08/2011 - 23:33:46 | N | 1165824] J:\úvod do EFT Alena.ppt
[24/07/2011 - 19:44:24 | N | 9941] J:\vizitka AlenaII.svg
[29/08/2011 - 23:45:54 | N | 336595] J:\vizitka AlenaII.svg.pdf
[29/08/2011 - 23:50:42 | N | 196298] J:\EFT Body II.jpg
[29/08/2011 - 23:59:48 | N | 741134] J:\úvod do EFT 2.odp
[18/05/2011 - 21:52:22 | D ] L:\Spolecne foto 05_2011
[19/11/2011 - 11:39:36 | D ] L:\František
[29/01/2010 - 08:21:08 | N | 437248] L:\NCR přehled.doc
[17/06/2010 - 11:48:36 | N | 33792] L:\Dopis_Alena.doc
[05/05/2010 - 00:04:26 | D ] L:\Clanek
[15/11/2011 - 10:57:26 | D ] L:\Seminář Stres Management
[07/05/2010 - 11:38:20 | N | 293965824] L:\00132.MTS
[24/11/2011 - 15:06:26 | N | 183808] L:\vizitky Alena.doc
[16/08/2010 - 22:18:52 | N | 2515988] L:\upravena.jpg
[04/09/2011 - 22:26:34 | D ] L:\Ferrari Dlouha Lhota
[23/11/2011 - 07:15:12 | D ] L:\Den jakosti 10_2011
[24/11/2011 - 15:07:18 | N | 174592] L:\vizitky Petr.doc
[07/09/2011 - 20:08:54 | D ] L:\Certifikace Alena
[19/05/2010 - 21:15:58 | N | 68096] L:\Sila naseho podvedomi II.doc
[20/11/2011 - 14:31:44 | N | 1000025770] L:\21-gramů-CZ-dabing---Drama--Krimi,-USA,-2003-(nejlepsi-filmy.mypage.cz).avi
[29/05/2010 - 14:15:32 | D ] L:\enfield manuals
[25/10/2011 - 20:24:38 | D ] L:\NLP
[03/07/2011 - 22:26:40 | D ] L:\Phoenix
[28/06/2010 - 23:02:14 | N | 95232] L:\Good_morning.doc
[29/10/2009 - 21:11:46 | N | 1322808] L:\EFT_MANUAL.pdf
[27/12/2009 - 21:57:04 | N | 657201] L:\Debbie_Ford_Temna_stranka_hledacu_svetla.pdf
[02/12/2011 - 10:47:48 | N | 5909641] L:\Video23.wmv
[11/07/2011 - 14:05:18 | D ] L:\TRANSLAT
[08/08/2010 - 13:21:38 | N | 28160] L:\Seminář peníze.doc
[05/12/2011 - 15:00:24 | N | 36864] L:\zůstat do konce života sám.doc
[08/12/2011 - 20:00:16 | N | 2294] L:\aswMBR.txt
[05/09/2011 - 21:36:40 | N | 86202] L:\Facebook Pages Insider's Guide.pdf
[05/10/2011 - 19:42:22 | D ] L:\Faktury
[08/12/2011 - 20:20:48 | N | 1238088] L:\UsbFix.exe
[28/02/2010 - 22:23:30 | D ] L:\Prednaska
[04/03/2010 - 22:32:42 | D ] L:\EFT
[23/04/2002 - 03:21:24 | N | 581632] L:\Convert II.exe
[17/08/2010 - 12:18:08 | N | 1708032] L:\Rotorové vinutí 200MW.ppt
[20/08/2010 - 11:32:30 | N | 304128] L:\doc1.doc
[01/11/2011 - 14:12:58 | N | 85504] L:\fiting.xls
[03/11/2011 - 15:37:22 | D ] L:\NLP2
[11/03/2010 - 11:43:16 | N | 10798496] L:\winamp5572_full_emusic-7plus_en-us.exe
[22/08/2010 - 13:18:44 | N | 697344] L:\REVERSALS_ebook_6_16_9.doc
[11/03/2010 - 13:09:20 | D ] L:\HD
[18/03/2010 - 16:28:20 | D ] L:\Panorama
[18/03/2010 - 16:28:48 | D ] L:\web
[23/08/2010 - 19:23:12 | N | 972800] L:\Český překlad_Ťukání na dobrou noc.doc
[24/08/2010 - 10:45:56 | N | 26624] L:\Seminar hojnost.doc
[08/09/2011 - 06:01:24 | D ] L:\Romantic Relationships
[09/04/2010 - 10:04:16 | D ] L:\Lingea
[05/12/2011 - 15:58:08 | N | 130] L:\.~lock.zůstat do konce života sám.doc#
[03/09/2010 - 12:10:22 | N | 21526016] L:\Orin Creating Money Clearing Beliefs and Old Programs.mp3
[16/10/2010 - 07:44:50 | D ] L:\konečná verze
[17/10/2010 - 18:59:36 | D ] L:\SEMINÁŘ
[09/11/2010 - 18:34:24 | D ] L:\PC studio
[01/08/2011 - 16:14:12 | D ] L:\web foto
[16/11/2010 - 23:18:02 | D ] L:\fotky táta
[17/08/2011 - 09:00:00 | D ] L:\Bulharsko 08_2011
[01/08/2011 - 16:15:48 | D ] L:\Foto PJS
[26/06/2011 - 16:57:40 | N | 3096424] L:\ccsetup307.exe
[08/01/2011 - 18:58:10 | N | 1378] L:\BOOTEX.LOG
[25/09/2011 - 23:26:38 | D ] L:\09_2011 Chotěšov
[23/01/2011 - 13:38:02 | N | 34816] L:\Gregg Braden- Žehnání.doc
[26/06/2011 - 17:04:20 | D ] L:\Narozeniny 70 Aleny mama
[15/07/2011 - 21:55:24 | D ] L:\SEMINAR HOJNOSTI
[17/02/2011 - 16:12:54 | N | 182784] L:\reverzace konecna verze.doc
[21/02/2011 - 20:42:04 | N | 14809600] L:\SEMINÁŘEA3.doc
[22/08/2011 - 17:07:48 | D ] L:\AA Exporters Scan
[20/03/2011 - 21:23:08 | N | 35840] L:\updated order.doc
[24/07/2011 - 19:06:58 | N | 9900] L:\vizitka AlenaII.svg
[24/07/2011 - 19:30:24 | N | 30550] L:\vizitka AlenaII.pdf
[06/10/2011 - 23:11:08 | D ] L:\Objednávka Indie
[28/08/2011 - 19:48:50 | N | 809472] L:\úvod do EFT Petr.ppt
[12/10/2011 - 20:43:52 | N | 393728] L:\6 Human neesds obrázek.doc
[22/03/2011 - 22:19:52 | N | 28672] L:\updated order.xls
[07/04/2011 - 08:32:58 | D ] L:\WORKSHOP
[17/04/2011 - 23:15:24 | N | 100864] L:\PETER_LUKES_APRIL11.xls
[15/05/2011 - 12:10:14 | D ] L:\filmy

################## | Vaccin |

#13 Příspěvek od **vyosek** » 08 pro 2011 21:50

Fajn, jeste udelejte ten OTL a pak jeste neco malo proverime, nelibi se mi tam jeden zaznam v OTL a ted i aswMBR jej potvrdil...

vlk · #14 Příspěvek od **vlk** » 08 pro 2011 21:57

Když provedu to OTL, smaže to všechny soubory z Flash disků? Pokud ano, je to nutné, nerad bych přišel o některá data.

#15 Příspěvek od **vyosek** » 08 pro 2011 22:00

Ne nesmaze, OTL si flash disku nevsima...

VIRY.CZ

Prosím o kontrolu- pomalejší PC a internet

Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet

Re: Prosím o kontrolu- pomalejší PC a internet