Prosím o kontrolu logu

Zpráva

Masek-33 · #1 Příspěvek od **Masek-33** » 07 led 2012 22:31

poslední dobou se mi pravidelně seká PC třeba 1x za 2 minuty na 10 sekund "zamrzne" a nereaguje, proto bych Vás chtěl požádat o kontrolu logu a případně poradit co s tím.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:23:21, on 7.1.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\F-Secure\Common\FSHDLL32.EXE
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Petr\_PROGRAMY\HiJackThis\hijackthis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\F-Secure\NRS\iescript\baselitmus.dll
O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\F-Secure\NRS\iescript\baselitmus.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Returnil Virtual System Core Service (RVSMONBL) - CJSC Returnil Software - C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 5133 bytes

#2 Příspěvek od **Mc_Murphy** » 08 led 2012 06:53

Zdravím.

Jako první bych Ti doporučil odinstalovat Spybot - Search & Destroy. Program má svá nejlepší léta již dávno za sebou a není schopen čelit aktuálním hrozbám.

Stejně tak i program TuneUp Utilities bych doporučil svižně odinstalovat. Pokud budeš jeho prostřednictvím něco v systému měnit, jsi na nejlepší cestě poškodit systém. Takové jsou naše zkušenosti.

Proč nemáš Windows XP Service Pack 3 ?

Vlož mi sem i druhý log ze RSITu, který se jmenuje info.txt a najdeš jej v C:\RSIT

Stáhni na Plochu utilitu CKScanner.

Spusť ji a klikni na Search for files.
Po dokončení scanu klikni na Save List to File a následně OK.
Na Ploše se vytvoří log s názvem ckfiles.txt, jeho obsah mi sem vlož.

Stáhni a spusť WVCheck.exe nebo WVCheck.zip.

Stiskni klávesu [Enter].
Program začne prohledávat PC, délka skenování je závislá na počtu souborů ve Tvém PC.
Po dokončení skenování se Ti zobrazí log, který mi sem zkopíruj (log případně najdeš i na Ploše).

Masek-33 · #3 Příspěvek od **Masek-33** » 08 led 2012 13:21

tak Spybot i Tune Up Utililies jsem odinstaloval, SP3 nemám, protože jsem tenkráte měl s tím nějaké problémy. Sice mám starší PC ale nikdy mi to nedělal, to sekání se začlo tak půl roku zpět.
Včera jsem pročítal fóra a trochu jsem akorát pozměnil antivir a firewall.

znovu log z RSTI:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-01-08 13:14:38
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 25 GB (70%) free of 36 GB
Total RAM: 3071 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:15:17, on 8.1.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
D:\Petr\_PROGRAMY\RSIT\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ZoneAlarm Installer] "C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r download /c "C:\Program Files\CheckPoint\Install\Install.xml" /w
O4 - HKLM\..\Run: [COMODO] C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLA.exe
O4 - HKLM\..\Run: [CPA] C:\Program Files\COMODO\COMODO GeekBuddy\VALA.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: !SASWinLogon - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Returnil Virtual System Core Service (RVSMONBL) - CJSC Returnil Software - C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe

--
End of file - 4352 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.7, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.3, check4change-owner@mozdev.org:1.8.6, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, jqs@sun.com:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732]
"Description"=6.0.12.732
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-08-02 577536]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-11-20 110184]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-11-28 3744552]
"ZoneAlarm Installer"=C:\Program Files\CheckPoint\Install\Launcher.exe [2012-01-07 403088]
"COMODO"=C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLA.exe [2011-11-23 208184]
"CPA"=C:\Program Files\COMODO\COMODO GeekBuddy\VALA.exe [2011-11-23 182584]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-12-21 6676808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2011-12-20 2696512]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360Amigo]
C:\Program files\360Amigo\360Amigo.exe [2011-09-28 5308704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.5\ICQ.exe [2011-06-29 124216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
C:\Program Files\QIP Infium\infium.exe [2009-09-22 5661184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^RVS 2010.lnk]
C:\PROGRA~1\Returnil\RVS3\rvsgui.exe [2009-11-26 6891984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\WINDOW~4\WINDOW~1.EXE [2008-05-26 123904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\HRY\TmNationsForever\TmForever.exe"="D:\HRY\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"D:\HRY\Call of Duty 2\CoD2MP_s.exe"="D:\HRY\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\HRY\Call of Duty 4\iw3mp.exe"="D:\HRY\Call of Duty 4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\QIP Infium\infium.exe"="C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"D:\HRY\WoW\World of Warcraft\Launcher.exe"="D:\HRY\WoW\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"VIDC.XFR1"=xfcodec.dll
"msacm.vorbis"=vorbis.acm
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll

======List of files/folders created in the last 1 month======

2012-01-08 13:14:39 ----D---- C:\Program Files\trend micro
2012-01-08 13:14:38 ----D---- C:\rsit
2012-01-08 13:02:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
2012-01-07 23:21:02 ----A---- C:\WINDOWS\system32\mfc71.dll
2012-01-07 23:20:58 ----A---- C:\WINDOWS\system32\gdiplus.dll
2012-01-07 23:12:17 ----D---- C:\Program Files\Zone Labs
2012-01-07 23:11:48 ----D---- C:\WINDOWS\Internet Logs
2012-01-07 23:09:57 ----D---- C:\Program Files\CheckPoint
2012-01-07 23:03:17 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-01-07 23:03:17 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-01-07 23:03:15 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-01-07 23:03:15 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-01-07 23:03:15 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-01-07 23:03:14 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-01-07 23:03:14 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-01-07 23:03:14 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-01-07 23:02:25 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-01-07 23:02:25 ----A---- C:\WINDOWS\avastSS.scr
2012-01-07 23:02:10 ----D---- C:\Program Files\AVAST Software
2012-01-07 23:02:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-01-07 22:37:15 ----D---- C:\Program Files\Google
2011-12-19 18:59:24 ----A---- C:\WINDOWS\system32\drivers\inspect.sys
2011-12-19 18:59:22 ----A---- C:\WINDOWS\system32\drivers\cmdhlp.sys
2011-12-19 18:59:22 ----A---- C:\WINDOWS\system32\drivers\cmdGuard.sys
2011-12-19 18:59:20 ----A---- C:\WINDOWS\system32\drivers\cmderd.sys
2011-12-19 18:58:58 ----A---- C:\WINDOWS\system32\cmdcsr.dll
2011-12-19 18:58:56 ----A---- C:\WINDOWS\system32\guard32.dll
2011-12-14 16:41:54 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Real
2011-12-11 18:17:34 ----D---- C:\Program Files\Clownfish

======List of files/folders modified in the last 1 month======

2012-01-08 13:14:39 ----RD---- C:\Program Files
2012-01-08 13:10:45 ----D---- C:\WINDOWS\Temp
2012-01-08 13:08:51 ----SHD---- C:\WINDOWS\Installer
2012-01-08 13:07:36 ----SD---- C:\WINDOWS\Tasks
2012-01-08 13:07:28 ----D---- C:\WINDOWS\system32
2012-01-08 13:05:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-01-08 13:02:28 ----A---- C:\WINDOWS\wincmd.ini
2012-01-08 13:01:47 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-08 13:01:23 ----D---- C:\WINDOWS
2012-01-08 12:55:31 ----D---- C:\Program Files\F-Secure
2012-01-07 23:24:14 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-01-07 23:22:02 ----D---- C:\WINDOWS\system32\drivers
2012-01-07 23:21:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\COMODO
2012-01-07 23:21:34 ----D---- C:\Program Files\COMODO
2012-01-07 23:20:44 ----D---- C:\WINDOWS\Prefetch
2012-01-07 23:15:57 ----HD---- C:\WINDOWS\inf
2012-01-07 23:02:58 ----D---- C:\WINDOWS\WinSxS
2012-01-07 22:51:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\f-secure
2012-01-07 22:41:17 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
2012-01-07 22:41:15 ----D---- C:\WINDOWS\SoftwareDistribution
2012-01-07 22:41:15 ----D---- C:\WINDOWS\Logs
2012-01-07 22:39:51 ----D---- C:\Program Files\CCleaner
2012-01-06 13:28:49 ----D---- C:\Program Files\Mozilla Firefox
2012-01-03 14:42:42 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TS3Client
2012-01-01 18:17:12 ----D---- C:\Program Files\TeamSpeak 3 Client
2011-12-21 21:05:28 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2011-12-12 22:01:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\System32\DRIVERS\gagp30kx.sys [2004-08-03 46464]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-12-19 97760]
R0 RVSystem;RVSystem; C:\WINDOWS\system32\Drivers\RVSystem.sys [2010-06-14 45136]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-10 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-11-28 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-11-28 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-11-28 435032]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-11-28 314456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-11-28 52952]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-12-19 494816]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-12-19 31704]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 rvsmon;rvsmon; C:\WINDOWS\system32\DRIVERS\rvsmon.sys [2009-10-16 262184]
R1 rvsmonn;rvsmonn; C:\WINDOWS\system32\DRIVERS\rvsmonn1.sys [2009-10-16 28640]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-11-28 20568]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-11-28 111320]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-10-05 165376]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-10-05 18048]
R2 rvsmonf;rvsmonf; C:\WINDOWS\system32\DRIVERS\rvsmonf.sys [2009-10-16 1033416]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-08-18 4017536]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 a4qnu18s;a4qnu18s; C:\WINDOWS\system32\drivers\a4qnu18s.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2004-08-03 38016]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\J:\INSTALL\GMSIPCI.SYS []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-11-28 44768]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-11-23 1052472]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-12-19 1960584]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-09-29 214520]
R2 RVSMONBL;Returnil Virtual System Core Service; C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe [2009-11-26 1216184]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-01-09 153376]
S3 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
S3 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-09-29 75064]
S4 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-09-24 72704]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S4 PuranDefrag;PuranDefrag; C:\WINDOWS\system32\PuranDefragS.exe [2011-02-15 233472]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.09 2012-01-08 13:15:29

======Uninstall list======

-->MsiExec /X{EFC1B35C-FFF2-41D8-A70A-CE6037F8040B}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
360Amigo System Speedup PRO-->C:\Program files\360Amigo\Uninstall.exe /REMOVE
7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe"
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10s_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil11e_Plugin.exe -maintain plugin
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
AGEIA PhysX v7.07.24-->MsiExec.exe /X{EFC1B35C-FFF2-41D8-A70A-CE6037F8040B}
Aktualizace systému Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958470)-->"C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971032)-->"C:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981350)-->"C:\WINDOWS\$NtUninstallKB981350$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982381)-->"C:\WINDOWS\$NtUninstallKB982381$\spuninst\spuninst.exe"
Ashampoo Burning Studio 2010 Advanced-->"C:\Program Files\Ashampoo\Ashampoo Burning Studio 2010 Advanced\unins000.exe"
Ashampoo Photo Commander 7.30-->"C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\unins000.exe"
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\aswRunDll.exe "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Call of Duty(R) 2 Patch 1.3-->D:\HRY\Call of Duty 2\Uninst_Call of Duty(R) 2 Patch 1.3.exe /U "D:\HRY\Call of Duty 2\Uninst_Call of Duty(R) 2 Patch 1.3.log"
Call Of Duty(R) 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DBECFA83-42DC-4585-A970-A764AB01A956}\setup.exe" -l0x5
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Clownfish for Skype-->"C:\Program Files\Clownfish\uninstall.exe"
Comodo Dragon-->"C:\Program Files\Comodo\Dragon\uninstall.exe"
COMODO GeekBuddy-->C:\Program Files\COMODO\COMODO GeekBuddy\uninstall.exe
COMODO Internet Security-->MsiExec.exe /I{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
HijackThis 2.0.2-->"D:\Petr\_PROGRAMY\HiJackThis\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
CHIP System-Check-Tool 1.1.9.15-->"C:\Program Files\CHIP System-Check-Tool\unins000.exe"
ICQ7.5-->"C:\Program Files\InstallShield Installation Information\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 23-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216023FF}
jetAudio Basic VX-->C:\Program Files\InstallShield Installation Information\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}\setup.exe -runfromtemp -l0x0005 -removeonly
K-Lite Mega Codec Pack 5.9.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
League of Legends-->"C:\Program Files\InstallShield Installation Information\{918A9082-6287-4D25-9002-5E5D5E4971CB}\setup.exe" -runfromtemp -l0x0409 -removeonly
LogMeIn Hamachi-->C:\WINDOWS\system32\\msiexec.exe /i {8BBB5E4C-3F5E-4C07-BFBE-33B34600783A} REMOVE=ALL
LogMeIn Hamachi-->MsiExec.exe /I{8BBB5E4C-3F5E-4C07-BFBE-33B34600783A}
Microsoft .NET Framework 2.0 Language Pack - CSY-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - CSY\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Office XP Professional-->MsiExec.exe /I{92110405-6000-11D3-8CFE-0050048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Minecraft Beta Cracked-->C:\Documents and Settings\Administrator\Data aplikací\.minecraft\Uninstall.exe
Mozilla Firefox 7.0.1 (x86 cs)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 6.0 Parser (KB927977)-->MsiExec.exe /I{5A710547-B58E-488B-828D-CA9A25A0533C}
NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall
OpenOffice.org 3.2-->MsiExec.exe /I{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}
Oprava Hotfix systému Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP číslo KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
PDF Password Remover v3.1-->"C:\Program Files\PDF Password Remover v3.1\unins000.exe"
PDF-Viewer-->"C:\Program Files\Tracker Software\PDF Viewer\unins000.exe"
Puran Defrag 7.2-->"C:\Program Files\Puran Defrag\unins000.exe"
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x5 -removeonly
Returnil Virtual System 2010-->MsiExec.exe /X{57489CCA-86ED-43CF-82D0-BF6A70C0D433}
Skype™ 5.5-->MsiExec.exe /X{AA59DDE4-B672-4621-A016-4C248204957A}
Solid Edge V20-->MsiExec.exe /X{886F91D5-4B45-45DC-938E-6B0276C6B015}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
TmNationsForever Update 2010-03-15-->"D:\HRY\TmNationsForever\unins000.exe"
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray-->"C:\WINDOWS\$NtUninstallKB952011$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft (2)\Uninstall.exe
Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"
ZoneAlarm Free-->"C:\Program Files\CheckPoint\Install\Install.exe" /s uninstall

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: avast! Antivirus
FW: COMODO Firewall

======System event log======

Computer Name: MAZEL
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě F-Secure Anti-Virus Firewall Daemon úspěšně odeslán.

Record Number: 18363
Source Name: Service Control Manager
Time Written: 20111012142118.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: MAZEL
Event Code: 7036
Message: Stav služby F-Secure ORSP Client byl změněn na: Spuštěno

Record Number: 18362
Source Name: Service Control Manager
Time Written: 20111012142118.000000+120
Event Type: Informace
User:

Computer Name: MAZEL
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě F-Secure ORSP Client úspěšně odeslán.

Record Number: 18361
Source Name: Service Control Manager
Time Written: 20111012142118.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: MAZEL
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě F-Secure Gatekeeper úspěšně odeslán.

Record Number: 18360
Source Name: Service Control Manager
Time Written: 20111012142118.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: MAZEL
Event Code: 7036
Message: Stav služby Služba modelu COM pro zápis na disk CD (IMAPI) byl změněn na: Spuštěno

Record Number: 18359
Source Name: Service Control Manager
Time Written: 20111012142118.000000+120
Event Type: Informace
User:

=====Application event log=====

Computer Name: MAZEL
Event Code: 1800
Message: Služba Centrum zabezpečení systému Windows byla spuštěna.

Record Number: 1198
Source Name: SecurityCenter
Time Written: 20110301162138.000000+060
Event Type: Informace
User:

Computer Name: MAZEL
Event Code: 1000
Message: Chybující aplikace anorua.exe, verze 0.0.0.0, chybující modul , verze 0.0.0.0, adresa chyby 0x00016d7e.

Record Number: 1197
Source Name: Application Error
Time Written: 20110228172705.000000+060
Event Type: Chyba
User:

Computer Name: MAZEL
Event Code: 4097
Message: Aplikace C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\At1.exe vygenerovala aplikační chybu.
K chybě došlo dne 28. 02. 2011 v 17:27:04,859
Vygenerovaná výjimka: c0000005 na adrese 0040FD31 (At1)

Record Number: 1196
Source Name: DrWatson
Time Written: 20110228172705.000000+060
Event Type: Informace
User:

Computer Name: MAZEL
Event Code: 4097
Message: Aplikace C:\WINDOWS\Anorua.exe vygenerovala aplikační chybu.
K chybě došlo dne 28. 02. 2011 v 17:27:03,046
Vygenerovaná výjimka: c0000005 na adrese 00416D7E (Anorua)

Record Number: 1195
Source Name: DrWatson
Time Written: 20110228172703.000000+060
Event Type: Informace
User:

Computer Name: MAZEL
Event Code: 1000
Message: Chybující aplikace at1.exe, verze 0.0.0.0, chybující modul at1.exe, verze 0.0.0.0, adresa chyby 0x0000fd31.

Record Number: 1194
Source Name: Application Error
Time Written: 20110228172701.000000+060
Event Type: Chyba
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Adobe\AGL
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2c02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"P_SCHEMA"=C:\Program Files\Solid Edge V20\Schema

-----------------EOF-----------------

CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\administrator\nabídka start\programy\minecraft beta cracked\start minecraft beta cracked.lnk
c:\documents and settings\administrator\nabídka start\programy\minecraft beta cracked\uninstall minecraft beta cracked.lnk
c:\documents and settings\administrator\plocha\start minecraft beta cracked.lnk
scanner sequence 3.AB.11.REAASL
----- EOF -----

Windows Validation Check
Version: 1.9.12.5
Log Created On: 1320_08-01-2012
-----------------------

Windows Information
-----------------------
Windows Version: Windows XP Service Pack 2
Windows Mode: Normal
Systemroot Path: C:\WINDOWS

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Do not download or install updates automatically.
-----------------------
Last success time for Automatic Updates for 'Detect', 'Download' and 'Install' could not be found.

WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------

WVCheck's File Dump
-----------------------
WVCheck found no known bad files.

WVCheck's Dir Dump
-----------------------
WVCheck found no known bad directories.

WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.

WVCheck's MBAM Quarantine Check
-----------------------
There were no bad files quarantined by MBAM.

WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.

WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - 1b4ccc59980da34e75f20e42b283b027

-------- End of File, program close at 1320_08-01-2012 --------

#4 Příspěvek od **Mc_Murphy** » 08 led 2012 15:19

OK.

Mno, já bych Ti ten ServicePack 3 přeci jen doporučoval doinstalovat. Mám dva také celkem staré počítače a u obou s tím nejsou vůbec žádné problémy. Většinou s ním bývají problémy, protože dokáže odhalit nelegální systém, proto jsem se ptal. SP3 řeší spoustu chyb v systému, v jeho funkčnosti i zabezpečení.
Totéž se týče aktualizace MS Internet Exploreru. Měl bys ho udržovat aktuální, protože i když ho nepoužíváš, opět to řeší spoustu věcí v systému samotném.

Také vidím, že používáš klienta µTorrent. Uvědom si nebezpečí stahování z P2P sítí, které jsou potenciálním bezpečnostním rizikem a prakticky neustále jsou zdrojem virů.

Zbytečně se tím vystavuješ riziku a o tom, co se z torrentů stahuje především, nebudeme polemizovat, že?!

Provedeme ještě pro jistotu scan s MBAM...

Stáhni a nainstaluj Malwarebytes' Anti-Malware (zkráceně MBAM) podle návodu z tohoto topicu.

Proveď aktualizaci virové databáze.
V záložce Kontrolor zvol Úplná kontrola a zaškrtni všechny pevné disky, které máš na počítači.
Předem nic nemaž!!
MBAM mívá občas falešné detekce, proto vlož jeho log do příspěvku a počkej na posouzení!

Masek-33 · #5 Příspěvek od **Masek-33** » 08 led 2012 18:15

Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Verze databáze: v2012.01.08.02

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Administrator :: MAZEL [limited]

8.1.2012 16:18:43
mbam-log-2012-01-08 (18-13-36).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 242835
Uplynulý čas: 1 hodin, 49 minut, 15 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
D:\Petr\_PROGRAMY\NOD32view\ESET Antivirus License Finder (MiNODLogin) 3.7.5.1.exe.vir (Riskware.KG) -> Žádná instrukce nebyla provedena.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\pwdremover.exe (PSWTool.PdfCracker) -> Žádná instrukce nebyla provedena.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\EasyAccount.exe.vir (RiskWare.Tool.CK) -> Žádná instrukce nebyla provedena.

(konec)

všechnou to jsou takový "pofidérní" programy

nic vážnýho (mám je v PC asi 5 let)

#6 Příspěvek od **Mc_Murphy** » 09 led 2012 06:49

Nálezy MBAMu dej smazat a poté MBAM zase odinstaluj.

Mno, to první není jen tak nějaký "pofidérní" programy. To první je ochcávadlo na NODa, což tu netrpíme! Máš štěstí, že ho nemáš nainstalovaný, jinak by se nepokračovalo v prohlídce do jeho odstranění.
Každopádně to smaž, cracky do PC nepatří, pak se nediv, že to máš zaflákaný.

Potom fixni v HJT níže uvedené položky.
"Fixnout" znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
HJT najdeš zde: C:\Program Files\trend micro\Administrator.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O20 - Winlogon Notify: !SASWinLogon - Invalid registry found

A protože je log ze RSITu nějaký podivný, udělej mi ještě jeden scan s OTL.

Takže stáhni OTL z tohoto odkazu a ulož jej na Plochu.

Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
Zaškrtni okénko Pro všechny uživatele.
Zaškrtni okénko Kontrola na havěť "LOP".
Zaškrtni okénko Kontrola na havěť "Purity".
Stáři souborů změň z 30 dnů na 7 dnů!!
Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

CREATERESTOREPOINT
netsvc
drivers32
savembr:0
/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop
%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe
%userprofile%\Plocha\*.*
%userprofile%\Desktop\*.*
%ALLUSERSPROFILE%\Plocha\*.*
%ALLUSERSPROFILE%\Desktop\*.*
*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*TemDono* /s
*AutoKMS* /s
*KMSEmulator* /s
*activator* /s
*serial* /s
*w7lxe* /s
*AutoRearm* /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

Klikni na tlačítko [Prohledat].
Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

Masek-33 · #7 Příspěvek od **Masek-33** » 09 led 2012 17:32

Nálezy MBAM jsem smazal, v HJT jsem vše fixnul.

OTL Extras logfile created on: 9.1.2012 16:56:46 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 78,66% Memory free
4,84 Gb Paging File | 4,37 Gb Available in Paging File | 90,30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 35,51 Gb Total Space | 24,56 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive D: | 372,61 Gb Total Space | 64,37 Gb Free Space | 17,28% Space Free | Partition Type: NTFS
Drive E: | 39,01 Gb Total Space | 33,22 Gb Free Space | 85,16% Space Free | Partition Type: FAT32
Drive Z: | 1024,00 Mb Total Space | 1014,53 Mb Free Space | 99,08% Space Free | Partition Type: NTFS

Computer Name: MAZEL | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"56507:TCP" = 56507:TCP:*:Enabled:Pando Media Booster
"56507:UDP" = 56507:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"56507:TCP" = 56507:TCP:*:Enabled:Pando Media Booster
"56507:UDP" = 56507:UDP:*:Enabled:Pando Media Booster

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.5\ICQ.exe" = C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\HRY\TmNationsForever\TmForever.exe" = D:\HRY\TmNationsForever\TmForever.exe:*:Enabled:TmForever -- ()
"C:\Program Files\Xfire\Xfire.exe" = C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire -- (Xfire Inc.)
"D:\HRY\Call of Duty 2\CoD2MP_s.exe" = D:\HRY\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s -- ()
"D:\HRY\Call of Duty 4\iw3mp.exe" = D:\HRY\Call of Duty 4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"C:\Program Files\QIP Infium\infium.exe" = C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium -- (QIP)
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"D:\HRY\WoW\World of Warcraft\Launcher.exe" = D:\HRY\WoW\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\ICQ7.5\ICQ.exe" = C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{57489CCA-86ED-43CF-82D0-BF6A70C0D433}" = Returnil Virtual System 2010
"{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}" = OpenOffice.org 3.2
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7F947BFE-C2DF-4779-9909-5BEE746BD0C4}" = Microsoft .NET Framework 2.0 Language Pack - CSY
"{886F91D5-4B45-45DC-938E-6B0276C6B015}" = Solid Edge V20
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8BBB5E4C-3F5E-4C07-BFBE-33B34600783A}" = LogMeIn Hamachi
"{8D273DE5-ABFA-4BD0-A9D7-EE9C971438C4}_is1" = PDF-Viewer
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{92110405-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{C13E90B0-4E1C-11DB-6784-0152EAA218BE}" = Call of Duty(R) 2 Patch 1.3
"{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}" = COMODO Internet Security
"{DBECFA83-42DC-4585-A970-A764AB01A956}" = Call Of Duty(R) 2
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic VX
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EFC1B35C-FFF2-41D8-A70A-CE6037F8040B}" = AGEIA PhysX v7.07.24
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"360Amigo" = 360Amigo System Speedup PRO
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Ashampoo Burning Studio 2010 Advanced_is1" = Ashampoo Burning Studio 2010 Advanced
"Ashampoo Photo Commander 7_is1" = Ashampoo Photo Commander 7.30
"Audacity_is1" = Audacity 1.2.6
"avast" = avast! Free Antivirus
"CCleaner" = CCleaner
"Clownfish" = Clownfish for Skype
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Free WMA to MP3 Converter_is1" = Free WMA to MP3 Converter 1.16
"HijackThis" = HijackThis 2.0.2
"CHIP System-Check-Tool_is1" = CHIP System-Check-Tool 1.1.9.15
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.9.0
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.60.0.1800
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Microsoft .NET Framework 2.0 Language Pack - CSY" = Microsoft .NET Framework 2.0 Language Pack - CSY
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"PDF Password Remover v3.1_is1" = PDF Password Remover v3.1
"Puran Defrag_is1" = Puran Defrag 7.2
"SystemRequirementsLab" = System Requirements Lab
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"The KMPlayer" = The KMPlayer (remove only)
"TmNationsForever_is1" = TmNationsForever Update 2010-03-15
"Totalcmd" = Total Commander (Remove or Repair)
"Windows XP Service Pack" = Windows XP Service Pack 2
"World of Warcraft" = World of Warcraft
"Xfire" = Xfire (remove only)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"QIP Infium" = QIP Infium 2.0.9032 RC4

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10.8.2011 19:20:46 | Computer Name = MAZEL | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Takové síťové připojení neexistuje.

Error - 14.8.2011 8:58:06 | Computer Name = MAZEL | Source = Application Error | ID = 1000
Description = Chybující aplikace lollauncher.exe, verze 0.0.0.0, chybující modul
lollauncher.exe, verze 0.0.0.0, adresa chyby 0x00015f68.

Error - 28.9.2011 8:29:10 | Computer Name = MAZEL | Source = Application Error | ID = 1000
Description = Chybující aplikace pokemon-online.exe, verze 0.0.0.0, chybující modul
unknown, verze 0.0.0.0, adresa chyby 0x02e0e979.

Error - 28.9.2011 10:28:19 | Computer Name = MAZEL | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 19.11.2011 13:48:48 | Computer Name = MAZEL | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 19.11.2011 13:49:40 | Computer Name = MAZEL | Source = crypt32 | ID = 131075
Description = Načtení automatické aktualizace souboru CAB kořenového seznamu jiného
výrobce z: <http://www.download.windowsupdate.com/m ... ootstl.cab>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 19.11.2011 14:39:01 | Computer Name = MAZEL | Source = F-Secure Anti-Virus | ID = 103
Description =

Error - 22.11.2011 10:23:58 | Computer Name = MAZEL | Source = F-Secure Anti-Virus | ID = 103
Description =

Error - 7.1.2012 18:01:04 | Computer Name = MAZEL | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 7.1.2012 18:01:05 | Computer Name = MAZEL | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Zvolený server nemůže provést požadovanou operaci.

[ System Events ]
Error - 30.12.2011 5:24:52 | Computer Name = MAZEL | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.6 pro síťovou kartu s adresou 0014853DE180
byla serverem DHCP 192.168.1.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 31.12.2011 7:48:47 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 2.1.2012 14:48:00 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 2.1.2012 15:57:51 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 2.1.2012 16:33:51 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 2.1.2012 17:09:50 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 3.1.2012 12:55:55 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 4.1.2012 15:13:40 | Computer Name = MAZEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 7.1.2012 17:39:48 | Computer Name = MAZEL | Source = sr | ID = 1
Description = Filtr nástroje Obnovení systému zjistil neočekávanou chybu 0xC0000056
při zpracování souboru {E25B25B3- .. 39EEE1DD0} na svazku HarddiskVolume1. Sledování
svazku bylo ukončeno.

Error - 8.1.2012 11:17:24 | Computer Name = MAZEL | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby wuauserv
s argumenty za účelem spuštění serveru: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

< End of report >

Masek-33 · #8 Příspěvek od **Masek-33** » 09 led 2012 17:33

OTL logfile created on: 9.1.2012 16:56:45 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 78,66% Memory free
4,84 Gb Paging File | 4,37 Gb Available in Paging File | 90,30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 35,51 Gb Total Space | 24,56 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive D: | 372,61 Gb Total Space | 64,37 Gb Free Space | 17,28% Space Free | Partition Type: NTFS
Drive E: | 39,01 Gb Total Space | 33,22 Gb Free Space | 85,16% Space Free | Partition Type: FAT32
Drive Z: | 1024,00 Mb Total Space | 1014,53 Mb Free Space | 99,08% Space Free | Partition Type: NTFS

Computer Name: MAZEL | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.01.09 16:49:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
PRC - [2012.01.08 14:08:31 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.12.21 00:41:44 | 006,676,808 | ---- | M] (COMODO) -- C:\Program Files\Comodo\COMODO Internet Security\cfp.exe
PRC - [2011.12.19 18:59:00 | 001,960,584 | ---- | M] (COMODO) -- C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2009.11.26 14:44:20 | 001,216,184 | ---- | M] (CJSC Returnil Software) -- C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe
PRC - [2007.09.14 06:02:10 | 001,080,264 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2006.11.12 23:47:00 | 005,296,128 | ---- | M] () -- C:\Program Files\Audacity\audacity.exe
PRC - [2006.08.02 22:12:00 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2012.01.08 19:57:50 | 001,666,048 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12010801\algo.dll
MOD - [2012.01.08 14:08:31 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2006.11.12 23:47:00 | 005,296,128 | ---- | M] () -- C:\Program Files\Audacity\audacity.exe
MOD - [2004.08.08 16:28:36 | 000,065,536 | ---- | M] () -- C:\Program Files\Audacity\Plug-Ins\sc4.dll
MOD - [2004.08.08 16:17:48 | 000,061,440 | ---- | M] () -- C:\Program Files\Audacity\Plug-Ins\Hard Limiter.dll
MOD - [2004.08.08 16:09:14 | 000,065,536 | ---- | M] () -- C:\Program Files\Audacity\Plug-Ins\GVerb.dll

========== Win32 Services (SafeList) ==========

SRV - [2011.12.19 18:59:00 | 001,960,584 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.08.15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2009.11.26 14:44:20 | 001,216,184 | ---- | M] (CJSC Returnil Software) [Auto | Running] -- C:\WINDOWS\System32\Returnil\RVS3\rvsmon.exe -- (RVSMONBL)

========== Driver Services (SafeList) ==========

DRV - [2011.12.19 18:59:24 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2011.12.19 18:59:22 | 000,494,816 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2011.12.19 18:59:22 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.10.05 15:33:28 | 000,165,376 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.10.05 15:33:27 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.09.29 12:03:08 | 000,137,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2010.06.14 14:54:43 | 000,045,136 | ---- | M] (CJSC Returnil Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\RVSystem.sys -- (RVSystem)
DRV - [2010.06.10 19:51:39 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.10.16 13:14:28 | 000,028,640 | ---- | M] (CJSC Returnil Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rvsmonn1.sys -- (rvsmonn)
DRV - [2009.10.16 13:14:26 | 001,033,416 | ---- | M] (CJSC Returnil Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\rvsmonf.sys -- (rvsmonf)
DRV - [2009.10.16 13:14:24 | 000,262,184 | ---- | M] (CJSC Returnil Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rvsmon.sys -- (rvsmon)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2006.08.18 06:52:00 | 004,017,536 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2004.08.03 21:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "QIP Search"
FF - prefs.js..browser.search.selectedEngine: "Wikipedie (cs)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.7
FF - prefs.js..extensions.enabledItems: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.3
FF - prefs.js..extensions.enabledItems: check4change-owner@mozdev.org:1.8.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.2.6&q="
FF - prefs.js..network.proxy.type: 4

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.01.07 23:02:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.08 14:08:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.21 10:52:29 | 000,000,000 | ---D | M]

[2010.06.11 15:08:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Extensions
[2012.01.06 13:20:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions
[2011.11.13 11:20:15 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.10.20 13:21:45 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2012.01.08 14:08:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.05.21 10:52:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2011.05.21 10:52:33 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\CHECK4CHANGE-OWNER@MOZDEV.ORG.XPI
[2012.01.08 14:08:32 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.01.09 17:58:21 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.08 14:08:27 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.08 14:08:27 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.01.08 14:08:27 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.08 14:08:27 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.08 14:08:27 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - Extension: YouTube = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\

O1 HOSTS File: ([2011.08.11 00:14:03 | 000,436,347 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 15020 more lines...
O3 - HKU\S-1-5-21-1085031214-583907252-725345543-500\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ZoneAlarm Installer] "C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r download /c "C:\Program Files\CheckPoint\Install\Install.xml" /w File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0442A946-A19B-4A83-B4EC-7B5342A96A77}: DhcpNameServer = 192.168.1.1
O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\crypt32chain: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\cryptnet: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\cscdll: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\ScCertProp: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\sclgntfy: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\SensLogn: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\Schedule: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\termsrv: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\wlballoon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7\Ashampoo Photo Commander Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7\Ashampoo Photo Commander Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.06.09 21:10:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /p \??\O:)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.VP60 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: VIDC.XFR1 - C:\WINDOWS\System32\xfcodec.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
Unable to save MBR. Invalid drive designation: 0

========== Files/Folders - Created Within 7 Days ==========

[2012.01.09 16:49:50 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.01.09 16:36:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2012.01.08 17:53:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Jodix
[2012.01.08 17:53:08 | 000,000,000 | ---D | C] -- C:\Program Files\Free WMA to MP3 Converter
[2012.01.08 16:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2012.01.08 16:12:02 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.01.08 13:48:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Comodo
[2012.01.08 13:48:06 | 000,000,000 | ---D | C] -- C:\Program Files\Comodo
[2012.01.08 13:21:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Plocha\Obrázky
[2012.01.08 13:14:39 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.08 13:14:38 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.08 13:02:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2012.01.08 13:01:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\COMODO
[2012.01.07 23:21:02 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2012.01.07 23:20:58 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2012.01.07 23:09:57 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2012.01.07 23:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
[2012.01.07 23:03:17 | 000,314,456 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2012.01.07 23:03:17 | 000,020,568 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012.01.07 23:03:15 | 000,435,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2012.01.07 23:03:15 | 000,052,952 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2012.01.07 23:03:15 | 000,034,392 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2012.01.07 23:03:14 | 000,111,320 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2012.01.07 23:03:14 | 000,105,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2012.01.07 23:03:14 | 000,030,808 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2012.01.07 23:02:25 | 000,199,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2012.01.07 23:02:25 | 000,041,184 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2012.01.07 23:02:10 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.01.07 23:02:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.01.07 22:38:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Temp
[2012.01.07 22:38:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2012.01.07 22:37:15 | 000,000,000 | ---D | C] -- C:\Program Files\Google

========== Files - Modified Within 7 Days ==========

[2012.01.09 16:49:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.01.09 16:41:06 | 000,006,973 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2012.01.09 16:36:02 | 000,272,291 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2012.01.09 16:35:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.09 16:35:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.08 17:53:10 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Jodix Free WMA to MP3 Converter.lnk
[2012.01.08 16:12:06 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.01.08 13:48:54 | 000,001,653 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\COMODO Firewall.lnk
[2012.01.08 13:09:38 | 000,458,240 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\CKScanner.exe
[2012.01.07 23:21:04 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2012.01.07 23:21:02 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2012.01.07 23:03:14 | 000,002,552 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012.01.07 22:51:42 | 000,413,092 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.01.07 22:51:42 | 000,394,912 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.01.07 22:51:42 | 000,078,124 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.01.07 22:51:42 | 000,059,810 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.01.07 22:39:53 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk

========== Files Created - No Company Name ==========

[2012.01.08 17:53:10 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\Jodix Free WMA to MP3 Converter.lnk
[2012.01.08 16:12:06 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.01.08 13:48:54 | 000,001,653 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\COMODO Firewall.lnk
[2012.01.08 13:19:01 | 000,458,240 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\CKScanner.exe
[2011.10.05 19:49:11 | 000,001,647 | ---- | C] () -- C:\WINDOWS\System32\.ini
[2011.10.05 15:33:28 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011.10.05 15:33:27 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011.03.26 16:23:16 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2011.02.26 02:19:32 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.12.06 21:35:29 | 000,000,075 | ---- | C] () -- C:\WINDOWS\tmp2Level.ini
[2010.12.06 21:35:29 | 000,000,075 | ---- | C] () -- C:\WINDOWS\level.ini
[2010.11.02 17:03:35 | 000,000,135 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2010.08.27 11:56:22 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.07.21 09:24:27 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.21 18:32:42 | 002,293,286 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010.06.14 18:41:22 | 000,137,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010.06.14 17:23:11 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Administrator\Data aplikací\PnkBstrK.sys
[2010.06.14 17:17:48 | 000,214,520 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010.06.14 17:17:43 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010.06.14 17:17:35 | 000,000,281 | ---- | C] () -- C:\WINDOWS\game.ini
[2010.06.11 15:08:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.06.10 20:36:17 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\DriveInfo.dll
[2010.06.10 20:18:46 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010.06.10 19:37:31 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2010.06.10 19:29:43 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010.06.10 19:29:15 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2010.06.10 19:29:05 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2010.06.10 16:01:03 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.06.10 16:01:02 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.06.10 16:01:01 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.06.10 16:01:01 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.06.10 16:01:00 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010.06.10 16:00:58 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.06.10 15:21:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msicpl.ini
[2010.06.10 15:16:04 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\smdll.dll
[2010.06.10 15:16:01 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\Auxiliary.dll
[2010.06.10 15:16:00 | 000,266,240 | R--- | C] () -- C:\WINDOWS\System32\HookShield.dll
[2010.06.10 15:16:00 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\HookMAp.dll
[2010.06.10 15:15:59 | 000,009,728 | R--- | C] () -- C:\WINDOWS\System32\sysinfoX64.sys
[2010.06.10 15:15:59 | 000,008,192 | R--- | C] () -- C:\WINDOWS\System32\sysinfo.sys
[2010.06.10 15:15:58 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\sw24.exe
[2010.06.09 23:08:09 | 001,474,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2010.06.09 22:50:59 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010.06.09 22:49:52 | 000,172,280 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.06.09 22:42:37 | 000,006,973 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2010.06.09 21:12:48 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.06.09 21:07:43 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.05.26 21:22:14 | 000,015,552 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008.05.26 21:22:10 | 000,021,464 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008.05.26 21:22:04 | 000,014,910 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008.05.26 20:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008.05.26 20:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007.06.25 20:34:26 | 000,070,400 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2004.08.02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2002.09.20 19:19:36 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002.03.25 21:02:14 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2001.10.25 15:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 15:00:00 | 000,413,092 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 15:00:00 | 000,394,912 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 15:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 15:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 15:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 15:00:00 | 000,078,124 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 15:00:00 | 000,059,810 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 15:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 15:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 15:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 15:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001.10.11 12:30:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.11 12:30:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

========== LOP Check ==========

[2012.01.08 13:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
[2010.10.08 17:29:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Ashampoo
[2010.08.27 14:18:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7
[2011.01.10 16:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Canneverbe Limited
[2010.06.10 16:06:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\COWON
[2012.01.07 22:41:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
[2011.10.30 20:22:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ICQ
[2011.08.31 10:31:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\IObit
[2011.06.01 19:37:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\LolClient
[2010.08.28 22:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
[2010.06.14 14:54:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Returnil
[2012.01.03 14:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TS3Client
[2010.06.09 22:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
[2010.07.27 19:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Uniblue
[2010.09.19 19:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Unigraphics Solutions
[2012.01.08 16:15:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
[2011.01.09 18:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\VitySoft
[2010.06.10 21:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Windows Desktop Search
[2010.06.11 13:20:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Windows Search
[2010.06.14 21:06:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ashampoo
[2012.01.07 23:02:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2011.01.10 16:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Canneverbe Limited
[2012.01.08 14:05:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2010.06.10 19:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.10.11 16:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
[2012.01.07 22:51:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\f-secure
[2011.10.05 19:55:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\fssg
[2010.10.29 08:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2011.03.26 15:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PopCap Games
[2010.06.14 14:59:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Returnil
[2010.06.14 19:59:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TrackMania
[2010.06.09 22:45:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2010.06.09 22:45:15 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010.06.10 15:00:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software

========== Purity Check ==========

========== Custom Scans ==========

< netsvc >

< MD5 for: ATAPI.SYS >
[2002.09.20 19:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2002.08.29 02:27:50 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2002.09.20 19:05:14 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=82CD2AA659D68781D29BA87421BE0E40 -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\system32\autochk.exe

< MD5 for: CDROM.SYS >
[2002.09.20 19:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2002.08.29 02:27:56 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=6506E033AD04CFEC9EE56DBEFD1083DD -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
[2009.12.22 19:39:20 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2009.12.22 19:39:20 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtUninstallKB952011$\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2002.09.20 19:05:24 | 001,004,544 | ---- | M] (Microsoft Corporation) MD5=11D80755545CFB5EB9659EE88440EAE2 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

< MD5 for: HAL.DLL >
[2002.09.20 19:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2004.08.03 21:59:20 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=C321C95318495909A0066FB0EDC97287 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2002.08.29 02:05:04 | 000,127,872 | ---- | M] (Microsoft Corporation) MD5=E8D2B5D5186A9B93D7019D7A74D77A1E -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
[2004.08.03 21:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\system32\HAL.DLL

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\system32\scecli.dll
[2002.09.20 19:04:42 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B2666CAB5E8C8A741D63F18D551A47FB -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

< MD5 for: SVCHOST.EXE >
[2001.10.25 15:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=329945887A0C684C38A4845330BC9100 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
[2011.12.24 17:50:20 | 000,182,856 | ---- | M] () MD5=B382935AB01B27D0E14F267DBF288896 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2002.08.29 02:58:12 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 11:45:14 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 11:45:14 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\system32\userinit.exe
[2002.09.20 19:05:48 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B26871B5CE92F9D95AE6E62119799EB9 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\system32\winlogon.exe
[2011.12.24 17:50:20 | 000,182,856 | ---- | M] () MD5=B382935AB01B27D0E14F267DBF288896 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2002.09.20 19:05:50 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=FF8857D1AF59071F172C0FAD0FD33E87 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

< %systemroot%*.* /U /s >
[20 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.01.08 13:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
[2010.11.04 18:06:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Adobe
[2010.10.08 17:29:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Ashampoo
[2010.08.27 14:18:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7
[2011.01.10 16:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Canneverbe Limited
[2010.06.10 16:06:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\COWON
[2012.01.07 22:41:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
[2011.10.30 20:22:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ICQ
[2010.06.09 21:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Identities
[2010.06.10 16:03:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\InstallShield
[2011.08.31 10:31:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\IObit
[2011.06.01 19:37:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\LolClient
[2010.06.14 16:00:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
[2010.06.10 16:01:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
[2011.07.20 19:30:06 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
[2010.06.11 15:08:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
[2010.08.28 22:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
[2011.12.14 16:41:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Real
[2010.06.14 14:54:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Returnil
[2011.12.21 21:05:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Skype
[2011.11.30 14:55:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\skypePM
[2011.01.09 17:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sun
[2012.01.03 14:42:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TS3Client
[2010.06.09 22:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
[2010.07.27 19:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Uniblue
[2010.09.19 19:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Unigraphics Solutions
[2012.01.08 16:15:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
[2011.01.09 18:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\VitySoft
[2010.06.10 21:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Windows Desktop Search
[2010.06.11 13:20:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Windows Search
[2011.03.26 13:26:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Xfire

< %APPDATA%\*.exe /s >
[2011.09.14 18:42:35 | 000,015,872 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft\Minecraft Crack.exe
[2011.03.01 14:26:14 | 000,270,848 | ---- | M] (Teckda) -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Beta Cracked.exe
[2010.10.21 02:00:02 | 000,695,296 | ---- | M] (AnjoCaido) -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Updater.exe
[2010.09.25 10:15:25 | 000,232,159 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft.exe
[2010.10.11 13:19:58 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.06.10 19:51:39 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2010.06.09 22:48:52 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2010.06.09 22:48:52 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2010.06.09 22:48:52 | 000,434,176 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.01.07 23:03:14 | 000,002,552 | ---- | M] () -- C:\WINDOWS\system32\CONFIG.NT
[2012.01.07 23:21:02 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\gdiplus.dll
[2012.01.07 23:21:04 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mfc71.dll
[2012.01.09 16:36:02 | 000,272,291 | ---- | M] () -- C:\WINDOWS\system32\NvApps.xml
[2012.01.07 22:51:42 | 000,078,124 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.01.07 22:51:42 | 000,059,810 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.01.07 22:51:42 | 000,413,092 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.01.07 22:51:42 | 000,394,912 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.01.09 16:35:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %SYSTEMDRIVE%\*.exe >

< %userprofile%\Plocha\*.* >
[2011.09.28 15:29:28 | 000,000,684 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\360Amigo System Speedup.lnk
[2010.07.27 22:32:58 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Audacity.lnk
[2012.01.08 13:19:17 | 000,000,448 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\ckfiles.txt
[2012.01.08 13:09:38 | 000,458,240 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\CKScanner.exe
[2011.12.11 18:17:41 | 000,001,564 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Clownfish.lnk
[2011.11.12 21:41:54 | 009,052,058 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Duck-Sauce--Barba-Streisand-(Ovey-Remix)_2.mp3
[2012.01.08 17:53:10 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Jodix Free WMA to MP3 Converter.lnk
[2012.01.08 18:13:42 | 000,002,874 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\mbam-log-2012-01-08 (18-13-36).txt
[2011.12.04 18:14:01 | 000,002,503 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Microsoft Excel.lnk
[2010.09.08 15:35:18 | 000,002,467 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Microsoft PowerPoint.lnk
[2011.09.21 16:25:06 | 000,002,559 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Microsoft Word.lnk
[2011.11.17 21:37:33 | 000,000,629 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Nový objekt - Textový dokument (2).txt
[2011.07.06 20:57:51 | 000,003,517 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Nový objekt - Textový dokument.txt
[2012.01.09 16:49:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2011.03.20 12:29:57 | 000,000,740 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Puran Defrag.lnk
[2010.06.14 16:11:02 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\QIP Infium.lnk
[2010.06.10 20:29:20 | 000,001,692 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RESTART.lnk
[2010.06.09 22:42:39 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Total Commander.lnk
[2010.06.11 00:43:52 | 000,001,692 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Vypne PC.lnk
[2011.10.07 21:07:31 | 000,000,567 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\WoW - CD Key.txt
[2012.01.08 13:20:25 | 000,001,319 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\WVCheck_1320_08-01-2012.txt
[2010.07.23 11:22:46 | 000,000,643 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Zástupce - hijackthis.lnk
[2010.11.05 21:54:38 | 000,000,853 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Zástupce - ImageReady.lnk
[2010.09.24 21:59:00 | 000,000,848 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Zástupce - Photoshop.lnk
[2010.06.14 15:29:25 | 000,000,747 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Zástupce - rvsgui.lnk
[2010.12.19 17:50:32 | 000,000,608 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Zástupce - Wow.lnk

< %userprofile%\Desktop\*.* >

< %ALLUSERSPROFILE%\Plocha\*.* >
[2010.06.18 21:09:26 | 000,000,624 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Call of Duty 2 Hra jednoho hráče.lnk
[2010.06.18 21:09:26 | 000,000,624 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Call of Duty 2 Hra více hráčů.lnk
[2010.06.21 17:12:22 | 000,000,433 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Call of Duty(R) 4 - Modern Warfare(TM) Multiplayer.lnk
[2010.06.21 17:12:22 | 000,000,433 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Call of Duty(R) 4 - Modern Warfare(TM) Singleplayer.lnk
[2012.01.07 22:39:53 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.08 13:48:54 | 000,001,653 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\COMODO Firewall.lnk
[2011.07.11 16:55:23 | 000,001,487 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\ICQ7.5.lnk
[2011.09.09 14:41:22 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\LogMeIn Hamachi.lnk
[2012.01.08 16:12:06 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2011.05.21 10:52:44 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2010.08.28 21:54:51 | 000,000,871 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\OpenOffice.org 3.2.lnk
[2011.06.01 19:16:33 | 000,000,675 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Play League of Legends.lnk
[2011.12.21 20:48:17 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2010.09.19 19:17:31 | 000,001,856 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Solid Edge V20.lnk
[2011.07.20 19:28:36 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\TeamSpeak 3 Client.lnk
[2010.06.14 19:50:00 | 000,000,591 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\TmNationsForever.lnk
[2010.06.14 21:18:20 | 000,000,638 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Xfire.lnk

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[2011.09.14 18:42:35 | 000,015,872 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\.minecraft\Minecraft Crack.exe
[2011.03.01 14:26:14 | 000,270,848 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Beta Cracked.exe

< *keygen* /s >

< *loader* /s >
[2005.03.24 12:51:08 | 000,002,090 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge\Resources\en\_media\rssloader.swf
[2005.03.16 18:16:50 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2001.01.16 05:55:36 | 000,053,248 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7Debug\coloader.dll
[2001.01.16 03:22:34 | 000,002,560 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7Debug\coloader.tlb
[2011.07.11 16:52:47 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.5\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.07.11 16:52:48 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.5\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.07.11 16:52:47 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.5\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.07.11 16:55:50 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\icq_profile\preloader.html
[2011.07.11 16:55:53 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\profile_forms\preloader.html
[2011.07.11 16:55:54 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\profile_lightboxs\preloader.html
[2011.07.12 19:23:59 | 000,003,830 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\rps\preloader02.swf
[2011.07.11 17:03:14 | 000,003,830 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\slide-a-lama\preloader02.swf
[2011.07.12 19:05:56 | 000,003,830 | ---- | M] () -- \Program Files\ICQ7.5\Xtraz\icq\content\zoopaloola\preloader02.swf
[2010.02.17 04:44:10 | 000,006,308 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2010.08.28 21:55:03 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.02.17 11:37:14 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2010.08.28 21:56:01 | 000,029,696 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.02.18 01:06:56 | 000,003,872 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2007.04.01 19:31:22 | 000,094,208 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Bmp_Loader.dll
[2007.04.01 19:31:22 | 000,364,544 | ---- | M] () -- \Program Files\Solid Edge V20\Program\CGM_Loader.dll
[2007.04.01 19:31:22 | 000,376,832 | ---- | M] () -- \Program Files\Solid Edge V20\Program\CGM_NIST_Loader.dll
[2007.04.01 19:31:22 | 000,090,112 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Converter_Loader.dll
[2007.04.01 19:31:22 | 000,065,536 | ---- | M] () -- \Program Files\Solid Edge V20\Program\DFT_Loader.dll
[2007.04.01 19:31:22 | 000,512,000 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Dgn_Loader.dll
[2007.04.01 19:31:22 | 000,065,536 | ---- | M] () -- \Program Files\Solid Edge V20\Program\DWF_Loader.dll
[2007.04.01 19:31:24 | 005,304,320 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Dwg_Loader.dll
[2007.04.01 19:31:22 | 000,040,960 | ---- | M] () -- \Program Files\Solid Edge V20\Program\EMF_Loader.dll
[2007.04.01 19:31:22 | 000,086,016 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Gif_Loader.dll
[2007.04.01 19:31:22 | 000,118,784 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Jpeg_Loader.dll
[2007.04.01 19:31:24 | 000,110,592 | ---- | M] () -- \Program Files\Solid Edge V20\Program\LoaderFactory.dll
[2007.04.01 19:31:24 | 000,122,880 | ---- | M] () -- \Program Files\Solid Edge V20\Program\MI_Loader.dll
[2007.04.01 19:31:24 | 000,020,992 | ---- | M] () -- \Program Files\Solid Edge V20\Program\NULL_Loader.dll
[2007.04.01 19:31:24 | 000,057,344 | ---- | M] () -- \Program Files\Solid Edge V20\Program\PLMXMLLoader.dll
[2007.04.01 19:31:24 | 000,028,160 | ---- | M] () -- \Program Files\Solid Edge V20\Program\PRT_Loader.dll
[2007.04.01 19:31:26 | 000,421,888 | ---- | M] () -- \Program Files\Solid Edge V20\Program\Tiff_Loader.dll
[2007.04.01 19:31:28 | 000,053,248 | ---- | M] () -- \Program Files\Solid Edge V20\Program\UGPrtLoader.dll
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2002.09.20 19:03:42 | 000,031,744 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2004.08.03 21:59:38 | 000,230,400 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2004.08.03 21:59:38 | 000,278,016 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2007.06.25 20:34:26 | 000,070,400 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll

< *minodlogin* /s >

< *tnod* /s >
[2007.04.01 19:31:48 | 000,000,112 | ---- | M] () -- \Program Files\Solid Edge V20\WebPublish\default\icons\lastnode.gif
[2007.04.01 19:31:50 | 000,000,112 | ---- | M] () -- \Program Files\Solid Edge V20\WebPublish\generic\icons\lastnode.gif

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >

< *serial* /s >
[2010.12.04 02:04:10 | 000,413,696 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.51204.0\System.Runtime.Serialization.dll
[2011.03.09 18:23:51 | 001,186,816 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.51204.0\System.Runtime.Serialization.ni.dll
[2002.09.20 18:21:56 | 000,062,208 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2010.06.10 21:15:34 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.10 20:32:43 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2005.09.23 06:28:56 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2005.12.20 17:13:56 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2004.08.17 14:43:56 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2004.08.17 14:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2004.07.19 17:54:20 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2001.10.25 15:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2001.10.25 15:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2001.10.25 15:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2001.10.25 15:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2004.08.17 14:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"SoundMan" = SOUNDMAN.EXE -- [2006.08.02 22:12:00 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.)
"NvCplDaemon" = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup -- [2004.08.17 14:49:28 | 000,033,280 | ---- | M] (Microsoft Corporation)
"avast" = "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui -- [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software)
"ZoneAlarm Installer" = "C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r download /c "C:\Program Files\CheckPoint\Install\Install.xml" /w
"COMODO Internet Security" = "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h -- [2011.12.21 00:41:44 | 006,676,808 | ---- | M] (COMODO)
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed" = 1
"NoChange" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed" = 1

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2004.08.17 14:49:24 | 000,015,360 | ---- | M] (Microsoft Corporation)

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

< %SystemDrive%\PhysicalMBR.bin /md5 >

< End of report >

#9 Příspěvek od **Mc_Murphy** » 10 led 2012 06:58

Odinstaluj ještě Pando Networks (Pando Media Booster).

Znovu spusť OTL.

Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

Kód: Vybrat vše

:Commands
[emptytemp]
[emptyflash]
[resethosts]
[purity]
[clearallrestorepoints]

:Services
JavaQuickStarterService

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
FF - prefs.js..browser.search.defaultenginename: "QIP Search"
FF - prefs.js..extensions.enabledItems: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q="
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\CHECK4CHANGE-OWNER@MOZDEV.ORG.XPI
O3 - HKU\S-1-5-21-1085031214-583907252-725345543-500\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O20 - Winlogon\Notify\!SASWinLogon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\crypt32chain: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\cryptnet: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\cscdll: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\ScCertProp: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\sclgntfy: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\SensLogn: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\Schedule: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\termsrv: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found
O20 - Winlogon\Notify\wlballoon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found

:Files
C:\Program Files\Malwarebytes' Anti-Malware
C:\WINDOWS\System32\drivers\mbam.sys
C:\Program Files\F-Secure
D:\Petr\_PROGRAMY\NOD32view /d
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE /d
C:\Documents and Settings\All Users\Data aplikací\f-secure
C:\Documents and Settings\Administrator\Data aplikací\IObit
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com] /d
C:\Documents and Settings\Administrator\Data aplikací\.minecraft\Minecraft Crack.exe /d
C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Beta Cracked.exe /d
c:\documents and settings\administrator\plocha\start minecraft beta cracked.lnk /d
C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:Reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360Amigo]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

Klikni na tlačítko [Opravit].
Po dokončení skenu se objeví log, ten mi sem vlož.
Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

Masek-33 · #10 Příspěvek od **Masek-33** » 10 led 2012 16:34

OTL logfile created on: 10.1.2012 16:18:03 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,26 Gb Available Physical Memory | 75,50% Memory free
4,84 Gb Paging File | 4,25 Gb Available in Paging File | 87,69% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 35,51 Gb Total Space | 24,35 Gb Free Space | 68,58% Space Free | Partition Type: NTFS
Drive D: | 372,61 Gb Total Space | 64,35 Gb Free Space | 17,27% Space Free | Partition Type: NTFS
Drive E: | 39,01 Gb Total Space | 33,22 Gb Free Space | 85,16% Space Free | Partition Type: FAT32
Drive Z: | 1024,00 Mb Total Space | 1014,53 Mb Free Space | 99,08% Space Free | Partition Type: NTFS

Computer Name: MAZEL | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.01.09 16:49:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
PRC - [2012.01.08 14:08:31 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.12.21 00:41:44 | 006,676,808 | ---- | M] (COMODO) -- C:\Program Files\Comodo\COMODO Internet Security\cfp.exe
PRC - [2011.12.19 18:59:00 | 001,960,584 | ---- | M] (COMODO) -- C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2009.12.02 10:49:54 | 003,639,648 | ---- | M] (ashampoo GmbH & Co. KG) -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\apc.exe
PRC - [2009.11.26 14:44:20 | 001,216,184 | ---- | M] (CJSC Returnil Software) -- C:\WINDOWS\system32\Returnil\RVS3\rvsmon.exe
PRC - [2007.09.14 06:02:10 | 001,080,264 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2006.08.02 22:12:00 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2012.01.10 10:45:16 | 001,666,560 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011000\algo.dll
MOD - [2012.01.08 14:08:31 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2009.11.23 14:44:34 | 000,406,528 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\PlugIns\APC_CRW.dll
MOD - [2009.11.23 14:44:18 | 000,406,528 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\PlugIns\APC_ARW.dll
MOD - [2008.06.02 12:36:16 | 000,091,488 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\PlugIns\apc_pnm.dll
MOD - [2008.06.02 12:35:46 | 000,284,000 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\PlugIns\APC_DNG.dll
MOD - [2006.12.15 18:57:04 | 000,045,056 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Photo Commander 7\MouseHook.dll

========== Win32 Services (SafeList) ==========

SRV - [2011.12.19 18:59:00 | 001,960,584 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.08.15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2009.11.26 14:44:20 | 001,216,184 | ---- | M] (CJSC Returnil Software) [Auto | Running] -- C:\WINDOWS\System32\Returnil\RVS3\rvsmon.exe -- (RVSMONBL)

========== Driver Services (SafeList) ==========

DRV - [2011.12.19 18:59:24 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2011.12.19 18:59:22 | 000,494,816 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2011.12.19 18:59:22 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.10.05 15:33:28 | 000,165,376 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.10.05 15:33:27 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.09.29 12:03:08 | 000,137,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2010.06.14 14:54:43 | 000,045,136 | ---- | M] (CJSC Returnil Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\RVSystem.sys -- (RVSystem)
DRV - [2010.06.10 19:51:39 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.10.16 13:14:28 | 000,028,640 | ---- | M] (CJSC Returnil Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rvsmonn1.sys -- (rvsmonn)
DRV - [2009.10.16 13:14:26 | 001,033,416 | ---- | M] (CJSC Returnil Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\rvsmonf.sys -- (rvsmonf)
DRV - [2009.10.16 13:14:24 | 000,262,184 | ---- | M] (CJSC Returnil Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rvsmon.sys -- (rvsmon)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2006.08.18 06:52:00 | 004,017,536 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2004.08.03 21:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "QIP Search"
FF - prefs.js..browser.search.selectedEngine: "Wikipedie (cs)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.7
FF - prefs.js..extensions.enabledItems: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.3
FF - prefs.js..extensions.enabledItems: check4change-owner@mozdev.org:1.8.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.2.6&q="
FF - prefs.js..network.proxy.type: 4

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.01.07 23:02:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.08 14:08:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.21 10:52:29 | 000,000,000 | ---D | M]

[2010.06.11 15:08:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Extensions
[2012.01.06 13:20:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions
[2011.11.13 11:20:15 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.10.20 13:21:45 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\wrvg0wlf.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2012.01.08 14:08:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.05.21 10:52:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2011.05.21 10:52:33 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\CHECK4CHANGE-OWNER@MOZDEV.ORG.XPI
[2012.01.08 14:08:32 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.01.09 17:58:21 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.08 14:08:27 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.08 14:08:27 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.01.08 14:08:27 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.08 14:08:27 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.08 14:08:27 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - Extension: YouTube = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\

O1 HOSTS File: ([2011.08.11 00:14:03 | 000,436,347 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 15020 more lines...
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ZoneAlarm Installer] "C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r download /c "C:\Program Files\CheckPoint\Install\Install.xml" /w File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0442A946-A19B-4A83-B4EC-7B5342A96A77}: DhcpNameServer = 192.168.1.1
O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7\Ashampoo Photo Commander Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Data aplikací\Ashampoo Photo Commander 7\Ashampoo Photo Commander Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.06.09 21:10:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /p \??\O:)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[CLEARALLRESTOREPOINTS]
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2012.01.09 20:08:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dokumenty\OJOsoft Corporation
[2012.01.09 20:08:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\OJOsoft
[2012.01.09 20:07:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Common Share
[2012.01.09 20:07:57 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\WINDOWS\System32\devil.dll
[2012.01.09 20:07:29 | 000,351,744 | ---- | C] (The Public) -- C:\WINDOWS\System32\avisynth.dll
[2012.01.09 20:07:26 | 000,000,000 | ---D | C] -- C:\Program Files\OJOsoft
[2012.01.09 16:49:50 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.01.09 16:36:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2012.01.08 17:53:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Jodix
[2012.01.08 17:53:08 | 000,000,000 | ---D | C] -- C:\Program Files\Free WMA to MP3 Converter
[2012.01.08 16:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2012.01.08 16:12:02 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.01.08 13:48:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Comodo
[2012.01.08 13:48:06 | 000,000,000 | ---D | C] -- C:\Program Files\Comodo
[2012.01.08 13:21:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Plocha\Obrázky
[2012.01.08 13:14:39 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.08 13:14:38 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.08 13:02:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2012.01.08 13:01:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\COMODO
[2012.01.07 23:21:02 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2012.01.07 23:20:58 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2012.01.07 23:09:57 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2012.01.07 23:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
[2012.01.07 23:03:17 | 000,314,456 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2012.01.07 23:03:17 | 000,020,568 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012.01.07 23:03:15 | 000,435,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2012.01.07 23:03:15 | 000,052,952 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2012.01.07 23:03:15 | 000,034,392 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2012.01.07 23:03:14 | 000,111,320 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2012.01.07 23:03:14 | 000,105,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2012.01.07 23:03:14 | 000,030,808 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2012.01.07 23:02:25 | 000,199,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2012.01.07 23:02:25 | 000,041,184 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2012.01.07 23:02:10 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.01.07 23:02:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.01.07 22:38:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Temp
[2012.01.07 22:38:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2012.01.07 22:37:15 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.12.19 18:59:24 | 000,097,760 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\inspect.sys
[2011.12.19 18:59:22 | 000,494,816 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmdGuard.sys
[2011.12.19 18:59:22 | 000,031,704 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmdhlp.sys
[2011.12.19 18:59:20 | 000,018,056 | ---- | C] (COMODO) -- C:\WINDOWS\System32\drivers\cmderd.sys
[2011.12.19 18:58:58 | 000,033,984 | ---- | C] (COMODO) -- C:\WINDOWS\System32\cmdcsr.dll
[2011.12.19 18:58:56 | 000,301,224 | ---- | C] (COMODO) -- C:\WINDOWS\System32\guard32.dll
[2011.12.14 16:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Data aplikací\Real
[2011.12.11 18:18:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dokumenty\Skype Voice Records
[2011.12.11 18:17:34 | 000,000,000 | ---D | C] -- C:\Program Files\Clownfish

========== Files - Modified Within 30 Days ==========

[2012.01.10 16:09:31 | 000,005,115 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2012.01.10 16:04:46 | 000,272,291 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2012.01.10 16:04:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.09 20:11:15 | 000,015,360 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.09 20:08:23 | 000,000,874 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\OJOsoft Total Video Converter.lnk
[2012.01.09 16:49:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.01.09 16:35:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.08 17:53:10 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Jodix Free WMA to MP3 Converter.lnk
[2012.01.08 16:12:06 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.01.08 13:48:54 | 000,001,653 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\COMODO Firewall.lnk
[2012.01.08 13:09:38 | 000,458,240 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\CKScanner.exe
[2012.01.07 23:21:04 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll
[2012.01.07 23:21:02 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2012.01.07 23:03:14 | 000,002,552 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012.01.07 22:51:42 | 000,413,092 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.01.07 22:51:42 | 000,394,912 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.01.07 22:51:42 | 000,078,124 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.01.07 22:51:42 | 000,059,810 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.01.07 22:39:53 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2011.12.21 20:48:17 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2011.12.19 18:59:24 | 000,097,760 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\inspect.sys
[2011.12.19 18:59:22 | 000,494,816 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmdGuard.sys
[2011.12.19 18:59:22 | 000,031,704 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmdhlp.sys
[2011.12.19 18:59:20 | 000,018,056 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmderd.sys
[2011.12.19 18:58:58 | 000,033,984 | ---- | M] (COMODO) -- C:\WINDOWS\System32\cmdcsr.dll
[2011.12.19 18:58:56 | 000,301,224 | ---- | M] (COMODO) -- C:\WINDOWS\System32\guard32.dll
[2011.12.11 18:17:41 | 000,001,564 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Clownfish.lnk

========== Files Created - No Company Name ==========

[2012.01.09 20:08:23 | 000,000,874 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\OJOsoft Total Video Converter.lnk
[2012.01.08 17:53:10 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\Jodix Free WMA to MP3 Converter.lnk
[2012.01.08 16:12:06 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2012.01.08 13:48:54 | 000,001,653 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\COMODO Firewall.lnk
[2012.01.08 13:19:01 | 000,458,240 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\CKScanner.exe
[2011.12.11 18:17:41 | 000,001,564 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\Clownfish.lnk
[2011.10.05 19:49:11 | 000,001,647 | ---- | C] () -- C:\WINDOWS\System32\.ini
[2011.10.05 15:33:28 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011.10.05 15:33:27 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011.03.26 16:23:16 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2011.02.26 02:19:32 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.12.06 21:35:29 | 000,000,075 | ---- | C] () -- C:\WINDOWS\tmp2Level.ini
[2010.12.06 21:35:29 | 000,000,075 | ---- | C] () -- C:\WINDOWS\level.ini
[2010.11.02 17:03:35 | 000,000,135 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2010.08.27 11:56:22 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.07.21 09:24:27 | 000,015,360 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.21 18:32:42 | 002,293,286 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010.06.14 18:41:22 | 000,137,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010.06.14 17:23:11 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Administrator\Data aplikací\PnkBstrK.sys
[2010.06.14 17:17:48 | 000,214,520 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010.06.14 17:17:43 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010.06.14 17:17:35 | 000,000,281 | ---- | C] () -- C:\WINDOWS\game.ini
[2010.06.11 15:08:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.06.10 20:36:17 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\DriveInfo.dll
[2010.06.10 20:18:46 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010.06.10 19:37:31 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2010.06.10 19:29:43 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010.06.10 19:29:15 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2010.06.10 19:29:05 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2010.06.10 16:01:03 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.06.10 16:01:02 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.06.10 16:01:01 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.06.10 16:01:01 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.06.10 16:01:00 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010.06.10 16:00:58 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.06.10 15:21:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msicpl.ini
[2010.06.10 15:16:04 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\smdll.dll
[2010.06.10 15:16:01 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\Auxiliary.dll
[2010.06.10 15:16:00 | 000,266,240 | R--- | C] () -- C:\WINDOWS\System32\HookShield.dll
[2010.06.10 15:16:00 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\HookMAp.dll
[2010.06.10 15:15:59 | 000,009,728 | R--- | C] () -- C:\WINDOWS\System32\sysinfoX64.sys
[2010.06.10 15:15:59 | 000,008,192 | R--- | C] () -- C:\WINDOWS\System32\sysinfo.sys
[2010.06.10 15:15:58 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\sw24.exe
[2010.06.09 23:08:09 | 001,474,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2010.06.09 22:50:59 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010.06.09 22:49:52 | 000,172,280 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.06.09 22:42:37 | 000,005,115 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2010.06.09 21:12:48 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.06.09 21:07:43 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.05.26 21:22:14 | 000,015,552 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008.05.26 21:22:10 | 000,021,464 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008.05.26 21:22:04 | 000,014,910 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008.05.26 20:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008.05.26 20:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007.07.22 17:39:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007.06.25 20:34:26 | 000,070,400 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2004.08.02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2002.09.20 19:19:36 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002.03.25 21:02:14 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2001.10.25 15:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 15:00:00 | 000,413,092 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 15:00:00 | 000,394,912 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 15:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 15:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 15:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 15:00:00 | 000,078,124 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 15:00:00 | 000,059,810 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 15:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 15:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 15:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 15:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001.10.11 12:30:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.11 12:30:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

========== Custom Scans ==========

< :Commands >

< [emptytemp] >

< [emptyflash] >

< [resethosts] >

< [purity] >

< >

< :Services >

< JavaQuickStarterService >

< >

< :OTL >

< IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm >

< IE - HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ >
Invalid Switch:

< FF - prefs.js..browser.search.defaultenginename: "QIP Search" >

< FF - prefs.js..extensions.enabledItems: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1 >

< FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.2.6&q=" >

< FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found >
Invalid Switch: PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

< File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI >

< File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI >

< File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI >

< File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781} >

< File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\WRVG0WLF.DEFAULT\EXTENSIONS\CHECK4CHANGE-OWNER@MOZDEV.ORG.XPI >

< O3 - HKU\S-1-5-21-1085031214-583907252-725345543-500\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. >

< O20 - Winlogon\Notify\!SASWinLogon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\crypt32chain: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\cryptnet: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\cscdll: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\ScCertProp: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\sclgntfy: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\SensLogn: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\Schedule: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\termsrv: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< O20 - Winlogon\Notify\wlballoon: DllName - (Reg Error: Key error.) - Reg Error: Key error. File not found >

< >

< :Files >

< C:\Program Files\Malwarebytes' Anti-Malware >

< C:\WINDOWS\System32\drivers\mbam.sys >
[2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

< C:\Program Files\F-Secure >

< D:\Petr\_PROGRAMY\NOD32view /d >
Invalid Switch: d

< C:\Documents and Settings\All Users\Data aplikací\f-secure >

< C:\Documents and Settings\Administrator\Data aplikací\IObit >

< C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software >

< C:\Documents and Settings\All Users\Data aplikací\TuneUp Software >

< C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software >

< D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com] /d >
Invalid Switch: d

< C:\Documents and Settings\Administrator\Data aplikací\.minecraft\Minecraft Crack.exe /d >
Invalid Switch: d

< C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Beta Cracked.exe /d >
Invalid Switch: d

< c:\documents and settings\administrator\plocha\start minecraft beta cracked.lnk /d >
Invalid Switch: d

< C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware >

< %windir%\system32\*.tmp.dll /s >

< %windir%\system32\SET*.tmp /s >

< %windir%\*.tmp /s >
[20 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]

< >

< :Reg >

< [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360Amigo] >

< [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ] >

< [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium] >

< [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui] >

< [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] >

< End of report >

#11 Příspěvek od **Mc_Murphy** » 10 led 2012 16:45

Co kdybys četl pořádně návody, které Ti píšu?

Kliknul jsi na blbé tlačítko...

Masek-33 · #12 Příspěvek od **Masek-33** » 10 led 2012 21:44

Omlouvám se

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 923122 bytes
->Temporary Internet Files folder emptied: 37691 bytes
->Java cache emptied: 384994 bytes
->FireFox cache emptied: 54929763 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 470 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 189071 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 54,00 mb

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore points cleared and new OTL Restore Point set!
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKU\S-1-5-21-1085031214-583907252-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "QIP Search" removed from browser.search.defaultenginename
Prefs.js: {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1 removed from extensions.enabledItems
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.2.6&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1085031214-583907252-725345543-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon\ deleted successfully.
========== FILES ==========
C:\Program Files\Malwarebytes' Anti-Malware\Languages folder moved successfully.
C:\Program Files\Malwarebytes' Anti-Malware\Chameleon folder moved successfully.
C:\Program Files\Malwarebytes' Anti-Malware folder moved successfully.
C:\WINDOWS\System32\drivers\mbam.sys moved successfully.
C:\Program Files\F-Secure\Spam Control\aspam folder moved successfully.
C:\Program Files\F-Secure\Spam Control folder moved successfully.
C:\Program Files\F-Secure\NRS\litmus-ff@f-secure.com\components folder moved successfully.
C:\Program Files\F-Secure\NRS\litmus-ff@f-secure.com folder moved successfully.
C:\Program Files\F-Secure\NRS folder moved successfully.
C:\Program Files\F-Secure\FSGUI folder moved successfully.
C:\Program Files\F-Secure\Common\custom folder moved successfully.
C:\Program Files\F-Secure\Common folder moved successfully.
C:\Program Files\F-Secure folder moved successfully.
D:\Petr\_PROGRAMY\NOD32view\NOD32view4_06_4.exe deleted successfully.
D:\Petr\_PROGRAMY\NOD32view folder deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF.Password.Remover.v2.5-TBE\file_id.diz deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF.Password.Remover.v2.5-TBE\pdfdecrypt.exe deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF.Password.Remover.v2.5-TBE\tbe.nfo deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF.Password.Remover.v2.5-TBE\winDecrypt.exe deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF.Password.Remover.v2.5-TBE folder deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF Password Remover 2.5\pwdremover.exe deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\PDF Password Remover 2.5 folder deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\pwdremover.exe deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE\read_me.txt deleted successfully.
D:\Petr\_PROGRAMY\PDF.Password.Remover.v2.5-TBE folder deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\setup folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\Setup folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\ORSP Client folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\NRS folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\HIPS folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\fstnb folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\FSPC folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\FSMA folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\FSFW folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\FSAV\Users folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\FSAV folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\ExploitShield folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\DAAS2 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs\custom folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\logs folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2\revocation folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2\keys folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2\crl folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2\cert folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2\acl folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure\Daas2 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\f-secure folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\IObit\IObit Malware Fighter folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\IObit folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens\Cache folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations\Cache folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens\Cache folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\TuneUp Registry Editor folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\StartUp Manager folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\Speed Optimizer folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\Dashboard folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities 2010\en-US folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities 2010\en-GB folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities 2010 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\StartUp Manager\Vypnuté objekty pro všechny uživatele folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\StartUp Manager folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software\TuneUp Utilities\StartUp Manager folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\LocalService\Data aplikací\TuneUp Software folder moved successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\XFire instal\xfire_installer_40700.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\XFire instal folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\punkbuster\pbsvc.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\punkbuster\pbsvNEW.dll deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\punkbuster folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ac130-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\aftermath-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airlift.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\airplane-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\ambush.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\armada-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\armada-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\armada-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\armada-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\armada-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\blackout.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_a.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\bog_b.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\cargoship.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\coup-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-13.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-14.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\hunted.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\icbm.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\jeepride-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\jeepride-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\jeepride-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\killhouse.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_a.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\launchfacility_b-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-13.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-14.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-15.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-16.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-17.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-18.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\scoutsniper.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-0.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-13.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\sniperescape-save_now.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-12.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-13.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-14.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-15.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-7.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-8.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_assault.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-1.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-10.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-11.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-13.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-14.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-15.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-16.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-2.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-3.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-4.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-5.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-6.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-9.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave\village_defend-levelend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\autosave folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\ac130.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\aftermath.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\airlift.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\airplane.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\ambush.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\armada.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\blackout.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\bog_a.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\bog_b.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\cargoship.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\coup.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\hunted.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\icbm.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\jeepride.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\killhouse.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\launchfacility_a.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\launchfacility_b.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\scoutsniper.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\sniperescape.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\village_assault.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save\village_defend.svg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\save folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mods\trubkacod4\mpdata deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mods\trubkacod4 folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mods\ModWarfare\mpdata deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mods\ModWarfare folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mods folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\config.cfg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\config_mp.cfg deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mpdata deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek\mpdata.corrupt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\Masek folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles\active.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\profiles folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\patch\CoD4MW-1.6-1.7-PatchSetup.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\patch\CoD4MW-1.6-PatchSetup.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\patch folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\Directions.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\EA.ZIP.vir deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\EasyAccount.exe.vir deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\oldplayerstats.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\playerstats.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA\ReadMe.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\EA folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\crack\iw3sp.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\crack folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\cestina\CoD4_cz10.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\cestina\opravny-soubor-cod-4.exe deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\cestina\readme.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\cestina folder deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com].iso deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\MUJ POSTUP.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com]\Serial.txt deleted successfully.
D:\Petr\Hry+cracky+cz\Call of duty 4 [PC-DVD] [English] [www.topetorrent.com] folder deleted successfully.
C:\Documents and Settings\Administrator\Data aplikací\.minecraft\Minecraft Crack.exe deleted successfully.
C:\Documents and Settings\Administrator\Data aplikací\.minecraft\zaloha\Minecraft Beta Cracked.exe deleted successfully.
File\Folder c:\documents and settings\administrator\plocha\start minecraft beta cracked.lnk not found.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware\Tools folder moved successfully.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware folder moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\Installer\MSI11.tmp moved successfully.
C:\WINDOWS\Installer\MSI12.tmp moved successfully.
C:\WINDOWS\Installer\MSI13.tmp moved successfully.
C:\WINDOWS\Installer\MSI14.tmp moved successfully.
C:\WINDOWS\Installer\MSI15.tmp moved successfully.
C:\WINDOWS\Installer\MSI1D.tmp moved successfully.
C:\WINDOWS\Installer\MSI1E.tmp moved successfully.
C:\WINDOWS\Installer\MSI1F.tmp moved successfully.
C:\WINDOWS\Installer\MSI20.tmp moved successfully.
C:\WINDOWS\Installer\MSI27.tmp moved successfully.
C:\WINDOWS\Installer\MSI28.tmp moved successfully.
C:\WINDOWS\Installer\MSI29.tmp moved successfully.
C:\WINDOWS\Installer\MSI2A.tmp moved successfully.
C:\WINDOWS\Installer\MSI66.tmp moved successfully.
C:\WINDOWS\Installer\MSI6B.tmp moved successfully.
C:\WINDOWS\Installer\MSI6C.tmp moved successfully.
C:\WINDOWS\Installer\MSI6D.tmp moved successfully.
C:\WINDOWS\Installer\MSI6E.tmp moved successfully.
C:\WINDOWS\Installer\MSI6F.tmp moved successfully.
C:\WINDOWS\Installer\MSIE.tmp moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360Amigo\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Infium\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.

OTL by OldTimer - Version 3.2.31.0 log created on 01102012_213845

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

#13 Příspěvek od **Mc_Murphy** » 11 led 2012 07:03

OK, OTL provedlo, co mělo, takže dočistíme...

Spusť znovu OTL a klikni na tlačítko [CleanUp!], čímž po sobě program uklidí.

TFC http://oldtimer.geekstogo.com/TFC.exe

Stáhni a spusť.
Klikni na Start a potvrď OK.
Program uklidí a může (nemusí) restartovat PC.
Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

Panel čistič
Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

Panel registry
Klikni na Hledej problémy.
Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

Panel nástroje
Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.

Masek-33 · #14 Příspěvek od **Masek-33** » 11 led 2012 14:50

CCleaner mám

Již včer jsem si všiml, že se to záhadné "sekání" neobjevuje, tudíž doufám že to tak i zůstane

Mockrát Vám děkuju

#15 Příspěvek od **Mc_Murphy** » 11 led 2012 14:57

S CCleanerem dobrá volba.

Když nebudeš dělat s PC nějaké bejkárny, tak to tak zůstane.

Jinak tedy není vůbec zač a rádo se stalo.

Přeji pěkný den.

VIRY.CZ

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu