
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosím o kontrolu meho zataraleho pc
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
prosím o kontrolu meho zataraleho pc
dobrý den mam problem s pc bezduvodne se zasekava a nevim cim to je? prikladam log z RSIT.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Mamka at 2012-01-13 17:22:17
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 187 GB (79%) free of 238 GB
Total RAM: 1014 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:22:32, on 13.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\IObit\Advanced SystemCare 5\Asc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Mamka.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: esnips toolbar helper - {F9B72325-A029-4a39-943A-02433C978829} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll
O3 - Toolbar: esnips Toolbar - {3132F1DF-2C69-49f5-ACA5-69965FC18E59} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeUpdateTimer] C:\WINDOWS\adobeuptdt.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 6324 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\ASC5_AutoClean.job
C:\WINDOWS\tasks\ASC5_AutoUpdate.job
C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6, wrc@avast.com:20110101, Cetrumcz@igeared:1.203.023.002, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.3&q="
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@macromedia.com/FlashPlayer10]
"Description"=Adobe Flash Player 10.0
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{B13721C7-F507-4982-B2E5-502A71474FED}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
C:\Program Files\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
SweetIM Search.xml
sweetim.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-29 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-29 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9B72325-A029-4a39-943A-02433C978829}]
CescrtHlpr Object - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll [2009-05-27 221184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3132F1DF-2C69-49f5-ACA5-69965FC18E59} - esnips Toolbar - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll [2009-05-27 172032]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
{D5D47440-0750-463D-BAEF-A47D02414806}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-11-12 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-11-12 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-11-12 141336]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"AdobeUpdateTimer"=C:\WINDOWS\adobeuptdt.exe [2010-11-23 852992]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-03-13 114992]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ICQ"=~C:\Program Files\ICQ7.2\ICQ.exe silent loginmode=4 []
"Advanced SystemCare 5"=C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2011-11-12 1647448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-03-13 114992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Mamka^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-11-03 205312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FFDS"=ffdshow.ax
"vidc.XVID"=xvidvfw.dll
"msacm.ac3filter"=ac3filter.acm
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
======List of files/folders created in the last 1 month======
2012-01-13 17:22:18 ----D---- C:\Program Files\trend micro
2012-01-13 17:22:17 ----D---- C:\rsit
2012-01-13 17:19:24 ----A---- C:\WINDOWS\system32\SET97.tmp
2012-01-13 17:19:12 ----A---- C:\WINDOWS\imsins.BAK
2012-01-13 17:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-01-13 17:18:08 ----D---- C:\WINDOWS\LastGood
2012-01-13 17:17:56 ----A---- C:\WINDOWS\system32\SET89.tmp
2012-01-13 17:17:55 ----A---- C:\WINDOWS\system32\SET8A.tmp
2012-01-13 17:10:46 ----D---- C:\Program Files\CCleaner
2012-01-13 17:00:21 ----D---- C:\6296022c5a8064ed76fdfa
2012-01-11 17:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-11 17:41:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-11 17:40:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-11 17:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-11 17:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-01-09 20:07:39 ----D---- C:\10239da1af544d9442
2012-01-09 15:41:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2012-01-09 15:40:20 ----A---- C:\WINDOWS\system32\SET141.tmp
2012-01-09 15:39:39 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\winrm
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\GroupPolicy
2012-01-09 15:39:30 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2012-01-09 15:39:27 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2012-01-09 15:39:02 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2012-01-09 15:37:02 ----A---- C:\WINDOWS\system32\RegistryDefragBootTime.exe
2012-01-09 15:22:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2012-01-09 15:22:17 ----D---- C:\Program Files\Common Files\Java
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\javaws.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\javaw.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\java.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-01-09 15:11:36 ----HDC---- C:\WINDOWS\ie8
2012-01-09 14:56:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-01-09 14:56:17 ----D---- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
2012-01-09 14:39:00 ----D---- C:\Documents and Settings\Mamka\Data aplikací\IObit
2012-01-09 14:38:59 ----D---- C:\Program Files\IObit
2011-12-16 20:29:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-16 20:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-16 20:29:17 ----D---- C:\WINDOWS\Driver Cache
2011-12-16 20:29:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-15 17:02:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-15 17:02:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-15 17:00:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-15 17:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
======List of files/folders modified in the last 1 month======
2012-01-13 17:22:18 ----D---- C:\Program Files
2012-01-13 17:22:17 ----D---- C:\WINDOWS\Prefetch
2012-01-13 17:20:37 ----HD---- C:\WINDOWS\inf
2012-01-13 17:20:34 ----D---- C:\WINDOWS
2012-01-13 17:20:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-13 17:20:27 ----D---- C:\WINDOWS\system32
2012-01-13 17:20:15 ----D---- C:\WINDOWS\ie8updates
2012-01-13 17:19:29 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-13 17:18:07 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-13 17:15:01 ----D---- C:\WINDOWS\Temp
2012-01-13 17:12:01 ----D---- C:\WINDOWS\system32\config
2012-01-13 17:04:26 ----SD---- C:\WINDOWS\Tasks
2012-01-13 17:03:36 ----SHD---- C:\WINDOWS\Installer
2012-01-13 17:03:36 ----SHD---- C:\Config.Msi
2012-01-13 17:03:35 ----D---- C:\Program Files\SweetIM
2012-01-13 17:03:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2012-01-12 21:06:59 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-01-12 18:45:05 ----D---- C:\WINDOWS\Debug
2012-01-12 12:46:23 ----SHD---- C:\WINDOWS\CSC
2012-01-11 17:40:17 ----A---- C:\WINDOWS\system32\MRT.exe
2012-01-10 17:02:18 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-09 16:12:28 ----D---- C:\Program Files\Mozilla Firefox
2012-01-09 15:46:12 ----D---- C:\WINDOWS\security
2012-01-09 15:42:02 ----D---- C:\WINDOWS\AppPatch
2012-01-09 15:41:21 ----RSD---- C:\WINDOWS\assembly
2012-01-09 15:41:21 ----D---- C:\WINDOWS\Microsoft.NET
2012-01-09 15:39:45 ----D---- C:\WINDOWS\Help
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\wbem
2012-01-09 15:37:53 ----D---- C:\WINDOWS\Minidump
2012-01-09 15:22:17 ----D---- C:\Program Files\Common Files
2012-01-09 15:21:46 ----D---- C:\Program Files\Java
2012-01-09 15:14:56 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-09 15:14:56 ----D---- C:\Program Files\Internet Explorer
2012-01-09 15:12:30 ----D---- C:\WINDOWS\WBEM
2012-01-09 15:12:25 ----D---- C:\WINDOWS\Media
2012-01-09 15:10:22 ----D---- C:\Documents and Settings\Mamka\Data aplikací\Skype
2012-01-03 13:50:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-03 13:49:54 ----D---- C:\WINDOWS\WinSxS
2011-12-16 00:07:15 ----D---- C:\Documents and Settings\Mamka\Data aplikací\ICQ
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-11-16 50704]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-11-03 6273504]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-31 117888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-07 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2011-11-10 490840]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-10 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Mamka at 2012-01-13 17:22:17
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 187 GB (79%) free of 238 GB
Total RAM: 1014 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:22:32, on 13.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\IObit\Advanced SystemCare 5\Asc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Mamka.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: esnips toolbar helper - {F9B72325-A029-4a39-943A-02433C978829} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll
O3 - Toolbar: esnips Toolbar - {3132F1DF-2C69-49f5-ACA5-69965FC18E59} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeUpdateTimer] C:\WINDOWS\adobeuptdt.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 6324 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\ASC5_AutoClean.job
C:\WINDOWS\tasks\ASC5_AutoUpdate.job
C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971, {EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6, wrc@avast.com:20110101, Cetrumcz@igeared:1.203.023.002, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.3&q="
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@macromedia.com/FlashPlayer10]
"Description"=Adobe Flash Player 10.0
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{B13721C7-F507-4982-B2E5-502A71474FED}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
C:\Program Files\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{EEE6C361-6118-11DC-9C72-001320C79847}
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
SweetIM Search.xml
sweetim.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-29 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-29 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9B72325-A029-4a39-943A-02433C978829}]
CescrtHlpr Object - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll [2009-05-27 221184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3132F1DF-2C69-49f5-ACA5-69965FC18E59} - esnips Toolbar - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll [2009-05-27 172032]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
{D5D47440-0750-463D-BAEF-A47D02414806}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-11-12 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-11-12 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-11-12 141336]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"AdobeUpdateTimer"=C:\WINDOWS\adobeuptdt.exe [2010-11-23 852992]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-03-13 114992]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ICQ"=~C:\Program Files\ICQ7.2\ICQ.exe silent loginmode=4 []
"Advanced SystemCare 5"=C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2011-11-12 1647448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-03-13 114992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Mamka^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-11-03 205312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FFDS"=ffdshow.ax
"vidc.XVID"=xvidvfw.dll
"msacm.ac3filter"=ac3filter.acm
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
======List of files/folders created in the last 1 month======
2012-01-13 17:22:18 ----D---- C:\Program Files\trend micro
2012-01-13 17:22:17 ----D---- C:\rsit
2012-01-13 17:19:24 ----A---- C:\WINDOWS\system32\SET97.tmp
2012-01-13 17:19:12 ----A---- C:\WINDOWS\imsins.BAK
2012-01-13 17:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-01-13 17:18:08 ----D---- C:\WINDOWS\LastGood
2012-01-13 17:17:56 ----A---- C:\WINDOWS\system32\SET89.tmp
2012-01-13 17:17:55 ----A---- C:\WINDOWS\system32\SET8A.tmp
2012-01-13 17:10:46 ----D---- C:\Program Files\CCleaner
2012-01-13 17:00:21 ----D---- C:\6296022c5a8064ed76fdfa
2012-01-11 17:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-11 17:41:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-11 17:40:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-11 17:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-11 17:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-01-09 20:07:39 ----D---- C:\10239da1af544d9442
2012-01-09 15:41:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2012-01-09 15:40:20 ----A---- C:\WINDOWS\system32\SET141.tmp
2012-01-09 15:39:39 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\winrm
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\GroupPolicy
2012-01-09 15:39:30 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2012-01-09 15:39:27 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2012-01-09 15:39:02 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2012-01-09 15:37:02 ----A---- C:\WINDOWS\system32\RegistryDefragBootTime.exe
2012-01-09 15:22:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2012-01-09 15:22:17 ----D---- C:\Program Files\Common Files\Java
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\javaws.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\javaw.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\java.exe
2012-01-09 15:21:51 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-01-09 15:11:36 ----HDC---- C:\WINDOWS\ie8
2012-01-09 14:56:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-01-09 14:56:17 ----D---- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
2012-01-09 14:39:00 ----D---- C:\Documents and Settings\Mamka\Data aplikací\IObit
2012-01-09 14:38:59 ----D---- C:\Program Files\IObit
2011-12-16 20:29:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-16 20:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-16 20:29:17 ----D---- C:\WINDOWS\Driver Cache
2011-12-16 20:29:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-15 17:02:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-15 17:02:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-15 17:00:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-15 17:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
======List of files/folders modified in the last 1 month======
2012-01-13 17:22:18 ----D---- C:\Program Files
2012-01-13 17:22:17 ----D---- C:\WINDOWS\Prefetch
2012-01-13 17:20:37 ----HD---- C:\WINDOWS\inf
2012-01-13 17:20:34 ----D---- C:\WINDOWS
2012-01-13 17:20:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-13 17:20:27 ----D---- C:\WINDOWS\system32
2012-01-13 17:20:15 ----D---- C:\WINDOWS\ie8updates
2012-01-13 17:19:29 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-13 17:18:07 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-13 17:15:01 ----D---- C:\WINDOWS\Temp
2012-01-13 17:12:01 ----D---- C:\WINDOWS\system32\config
2012-01-13 17:04:26 ----SD---- C:\WINDOWS\Tasks
2012-01-13 17:03:36 ----SHD---- C:\WINDOWS\Installer
2012-01-13 17:03:36 ----SHD---- C:\Config.Msi
2012-01-13 17:03:35 ----D---- C:\Program Files\SweetIM
2012-01-13 17:03:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2012-01-12 21:06:59 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-01-12 18:45:05 ----D---- C:\WINDOWS\Debug
2012-01-12 12:46:23 ----SHD---- C:\WINDOWS\CSC
2012-01-11 17:40:17 ----A---- C:\WINDOWS\system32\MRT.exe
2012-01-10 17:02:18 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-09 16:12:28 ----D---- C:\Program Files\Mozilla Firefox
2012-01-09 15:46:12 ----D---- C:\WINDOWS\security
2012-01-09 15:42:02 ----D---- C:\WINDOWS\AppPatch
2012-01-09 15:41:21 ----RSD---- C:\WINDOWS\assembly
2012-01-09 15:41:21 ----D---- C:\WINDOWS\Microsoft.NET
2012-01-09 15:39:45 ----D---- C:\WINDOWS\Help
2012-01-09 15:39:38 ----D---- C:\WINDOWS\system32\wbem
2012-01-09 15:37:53 ----D---- C:\WINDOWS\Minidump
2012-01-09 15:22:17 ----D---- C:\Program Files\Common Files
2012-01-09 15:21:46 ----D---- C:\Program Files\Java
2012-01-09 15:14:56 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-09 15:14:56 ----D---- C:\Program Files\Internet Explorer
2012-01-09 15:12:30 ----D---- C:\WINDOWS\WBEM
2012-01-09 15:12:25 ----D---- C:\WINDOWS\Media
2012-01-09 15:10:22 ----D---- C:\Documents and Settings\Mamka\Data aplikací\Skype
2012-01-03 13:50:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-03 13:49:54 ----D---- C:\WINDOWS\WinSxS
2011-12-16 00:07:15 ----D---- C:\Documents and Settings\Mamka\Data aplikací\ICQ
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-11-16 50704]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-11-03 6273504]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-31 117888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-07 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2011-11-10 490840]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-10 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: prosím o kontrolu meho zataraleho pc
Zdravim a pekny podvecer preji
Odinstalujte Advanced SystemCare 4 a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti
Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy
Odinstalujte SweetIM
Stahnete OTL (viz muj podpis) a ulozte jej na plochu





- Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
- Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
- Zaskrtnete okenko Pro vsechny uzivatele
- Zaskrtnete okenko Kontrola na havet "LOP"
- Zaskrtnete okenko Kontrola na havet "Purity"
- Stari souboru zmente z 30 dnu na 7 dnu
- Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
Kód: Vybrat vše
CREATERESTOREPOINT netsvcs drivers32 savembr:0 /md5start atapi.sys autochk.exe cdrom.sys explorer.exe hal.dll scecli.dll svchost.exe tcpip.sys userinit.exe winlogon.exe /md5stop %systemroot%*.* /U /s %SYSTEMDRIVE%\*.exe %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles %systemroot%\Tasks\*.job %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\system32\*.dll /lockedfiles %systemroot%\system32\drivers\*.sys /3 %systemroot%\system32\*.* /3 %SYSTEMDRIVE%\*.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s %SystemDrive%\PhysicalMBR.bin /md5 *crack* /s *keygen* /s *loader* /s
- Kliknete na tlacitko Prohledat
- Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Re: prosím o kontrolu meho zataraleho pc
prikladam tedy logy z OLT.txt nejdrive:
OTL logfile created on: 13.1.2012 17:46:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1014,23 Mb Total Physical Memory | 578,90 Mb Available Physical Memory | 57,08% Memory free
2,39 Gb Paging File | 2,08 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 182,93 Gb Free Space | 78,55% Space Free | Partition Type: NTFS
Computer Name: UZIVATEL | User Name: Mamka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2012.01.13 17:43:19 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory\OTL.exe
PRC - [2012.01.09 16:12:16 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.02.23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (No Company Name) ==========
MOD - [2012.01.13 13:15:43 | 001,678,336 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011300\algo.dll
MOD - [2012.01.12 21:43:08 | 001,677,824 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011201\algo.dll
MOD - [2012.01.09 16:12:15 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.02.23 16:04:14 | 000,144,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswDld.dll
MOD - [2010.01.27 02:07:32 | 003,884,312 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
========== Win32 Services (SafeList) ==========
SRV - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2008.08.07 11:17:30 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
========== Driver Services (SafeList) ==========
DRV - [2011.02.23 15:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.02.23 15:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.02.23 15:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.02.23 15:55:47 | 000,102,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.02.23 15:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.02.23 15:54:57 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.02.23 15:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.11.16 17:33:38 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2008.10.31 03:14:20 | 000,117,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008.06.06 09:24:44 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.05.07 07:38:36 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008.05.07 07:38:20 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.05.07 07:38:20 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.04.17 15:33:26 | 004,707,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://search.icq.com/search/afe_result ... r=1.2.9&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6
FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101
FF - prefs.js..extensions.enabledItems: Cetrumcz@igeared:1.203.023.002
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.4.3&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@macromedia.com/FlashPlayer10: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011.03.08 16:30:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.09 16:12:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.09 15:21:51 | 000,000,000 | ---D | M]
[2009.10.11 17:34:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Extensions
[2012.01.05 09:23:20 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions
[2012.01.05 09:23:20 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.04.10 11:07:30 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012.01.08 15:15:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-1.xml
[2011.09.07 15:52:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-10.xml
[2011.10.04 12:09:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-11.xml
[2011.11.22 18:53:14 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-12.xml
[2012.01.09 16:12:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-13.xml
[2011.03.05 00:49:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-2.xml
[2011.03.09 13:07:43 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-3.xml
[2011.03.11 21:26:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-4.xml
[2011.03.24 05:11:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-5.xml
[2011.03.25 18:33:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-6.xml
[2011.05.16 05:39:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-7.xml
[2011.08.21 19:01:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-8.xml
[2011.08.31 14:39:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-9.xml
[2012.01.04 14:54:58 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.gif
[2012.01.04 14:54:58 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.src
[2010.06.21 17:35:24 | 000,001,042 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.xml
[2011.08.07 13:41:26 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\SweetIM Search.xml
[2011.04.10 11:07:00 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\sweetim.xml
[2012.01.09 16:12:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012.01.09 16:12:17 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.11.10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.03.26 07:34:16 | 000,001,425 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Cetrumcz_igeared.xml
[2012.01.09 16:12:13 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.09 16:12:13 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.03.11 21:26:16 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2012.01.09 16:12:13 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.09 16:12:13 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.09 16:12:13 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml
========== Chrome ==========
O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (CescrtHlpr Object) - {F9B72325-A029-4a39-943A-02433C978829} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll (esnips)
O3 - HKLM\..\Toolbar: (esnips Toolbar) - {3132F1DF-2C69-49f5-ACA5-69965FC18E59} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll (esnips)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [AdobeUpdateTimer] C:\WINDOWS\adobeuptdt.exe (Microsoft)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004..\Run: [ICQ] C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/G ... meHost.cab (Oberon Flash Game Host)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C5A2EFE-A20E-4F86-B2DA-EBC012565380}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Mamka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mamka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.10.10 14:16:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 7 Days ==========
[2012.01.13 17:39:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mamka\Recent
[2012.01.13 17:22:18 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.13 17:22:17 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.13 17:10:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2012.01.13 17:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.01.13 17:00:21 | 000,000,000 | ---D | C] -- C:\6296022c5a8064ed76fdfa
[2012.01.09 20:07:39 | 000,000,000 | ---D | C] -- C:\10239da1af544d9442
[2012.01.09 15:39:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WindowsPowerShell
[2012.01.09 15:39:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm
[2012.01.09 15:39:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\GroupPolicy
[2012.01.09 15:39:30 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$968930Uinstall_KB968930$
[2012.01.09 15:22:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Sun
[2012.01.09 15:22:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.01.09 15:21:51 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012.01.09 15:21:51 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.01.09 15:21:51 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.01.09 15:21:51 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.01.09 15:11:36 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012.01.09 14:56:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2012.01.09 14:56:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2012.01.09 14:39:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2012.01.09 14:38:59 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2004.11.24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2012.01.13 17:48:05 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.13 17:35:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.13 17:34:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.13 17:34:38 | 1063,571,456 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.13 17:10:48 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
[2012.01.08 16:50:12 | 000,139,776 | ---- | M] () -- C:\Documents and Settings\Mamka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.01.13 17:48:04 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.13 17:10:48 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.13 17:04:26 | 000,000,306 | ---- | C] () -- C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
[2012.01.09 15:37:02 | 000,020,312 | ---- | C] () -- C:\WINDOWS\System32\RegistryDefragBootTime.exe
[2012.01.09 15:15:20 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Mamka\Nabídka Start\Programy\Internet Explorer.lnk
[2011.08.23 14:26:33 | 000,260,606 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-117609710-2000478354-1801674531-1004-0.dat
[2011.08.23 14:26:32 | 000,133,622 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.07.26 16:26:46 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.07.26 16:26:46 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.07.26 16:26:46 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.07.26 16:26:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.01.03 16:49:54 | 000,000,168 | ---- | C] () -- C:\Documents and Settings\Mamka\Data aplikací\default.rss
[2009.12.20 13:53:47 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.12.08 03:29:31 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009.11.25 19:00:11 | 000,139,776 | ---- | C] () -- C:\Documents and Settings\Mamka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.11.16 17:33:38 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2009.10.12 12:05:41 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.10.12 11:55:53 | 000,000,039 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009.10.11 19:34:30 | 000,000,119 | ---- | C] () -- C:\Program Files\satsukidecodersettings.ini
[2009.10.10 22:02:14 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009.10.10 21:56:33 | 000,126,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009.10.10 15:37:00 | 000,001,174 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2009.10.10 14:41:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009.10.10 14:18:39 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009.10.10 14:14:43 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009.06.02 17:11:16 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.05.29 15:52:26 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.05.29 15:47:06 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008.04.14 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008.04.14 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008.04.14 13:00:00 | 000,488,350 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008.04.14 13:00:00 | 000,483,006 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2008.04.14 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008.04.14 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2008.04.14 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008.04.14 13:00:00 | 000,095,814 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2008.04.14 13:00:00 | 000,082,470 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008.04.14 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008.04.14 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2008.04.14 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008.04.14 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008.04.14 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008.04.14 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008.04.14 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007.02.05 19:05:26 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2005.10.14 10:56:50 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.05.29 02:45:43 | 000,647,168 | ---- | C] () -- C:\WINDOWS\System32\pqdvdb.dll
[2004.11.29 15:43:20 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2004.10.12 06:40:58 | 002,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2004.10.12 06:39:48 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2004.10.12 06:39:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2004.10.09 06:40:16 | 000,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2004.10.05 08:16:08 | 000,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2004.10.03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
========== LOP Check ==========
[2011.03.08 16:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2011.09.20 07:17:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Cloudmark
[2011.01.07 11:55:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.11.24 16:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2012.01.09 14:56:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2009.10.14 21:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Muzzy Lane Software
[2009.11.16 12:10:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OrbNetworks
[2009.11.24 17:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.09.24 15:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2009.10.11 20:51:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VistaCodecs
[2009.11.30 19:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\DTC
[2009.10.16 15:04:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\esnips.com
[2012.01.09 15:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2011.12.16 00:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\ICQ
[2012.01.10 09:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2011.09.13 12:19:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy
[2009.10.11 17:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenOffice.org
[2009.11.24 17:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\PC Suite
[2011.08.23 14:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Samsung
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job
========== Purity Check ==========
========== Custom Scans ==========
< REATERESTOREPOINT >
< >
< >
< MD5 for: ATAPI.SYS >
[2008.04.14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 13:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: EXPLORER.EXE >
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 13:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SVCHOST.EXE >
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 13:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< >
< %systemroot%*.* /U /s >
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[11 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[6 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp -> ]
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[7 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ]
[1 C:\WINDOWS\Temp\_avast_\*.tmp files -> C:\WINDOWS\Temp\_avast_\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2009.12.06 15:27:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Adobe
[2010.05.08 11:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\AVS4YOU
[2009.11.30 19:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\DTC
[2009.10.16 15:04:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\esnips.com
[2012.01.09 15:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2009.10.24 21:28:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\GRETECH
[2010.10.11 12:03:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Help
[2011.12.16 00:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\ICQ
[2009.10.11 17:28:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Identities
[2012.01.10 09:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2009.10.11 17:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Macromedia
[2009.10.30 18:17:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Mamka\Data aplikací\Microsoft
[2009.10.11 17:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla
[2009.10.24 21:29:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Nero
[2011.09.13 12:19:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy
[2009.10.11 17:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenOffice.org
[2009.11.24 17:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\PC Suite
[2010.06.02 18:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Real
[2011.08.23 14:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Samsung
[2012.01.09 15:10:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Skype
[2011.02.14 08:01:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\skypePM
[2010.01.04 12:55:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Sun
[2009.10.30 18:17:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\WinRAR
< %APPDATA%\*.exe /s >
[2011.09.13 11:45:26 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\LatestDLMgr.exe
[2011.08.01 23:38:30 | 001,872,896 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\pcspeedup.exe
[2010.11.09 22:18:10 | 000,349,296 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\DLMgr_3_1.6.87.exe
[2010.10.15 21:41:18 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\SpeedstarterCZ.exe
[2010.10.23 00:29:06 | 001,472,552 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\ZrychleniPocitace.exe
[2011.06.09 20:03:56 | 005,845,528 | ---- | M] (Uniblue Systems Ltd ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\driverscanner (33).exe
[2011.09.13 12:19:45 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\LatestDLMgr.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job >
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2009.10.10 21:56:09 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2009.10.10 21:56:09 | 001,093,632 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2009.10.10 21:56:09 | 000,487,424 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2012.01.11 17:40:17 | 052,128,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MRT.exe
[2012.01.13 17:35:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 13:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 07:52:38 | 001,695,232 | ---- | M] (Microsoft Corporation)
"ICQ" = "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4 -- [2011.01.05 09:18:50 | 000,133,432 | ---- | M] (ICQ, LLC.)
< >
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.13 17:48:05 | 000,000,512 | ---- | M] () MD5=85E4A13EE04F48CAD92E7AEADD07ED3C -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2006.06.02 16:34:42 | 000,000,101 | ---- | M] () -- \WINDOWS\system32\wgacracked.txt
[6 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
< *keygen* /s >
< *loader* /s >
[2011.01.07 11:43:53 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.01.07 11:43:52 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2011.01.07 11:43:55 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.01.07 11:43:52 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.03.13 18:14:30 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\icq_profile\preloader.html
[2011.01.18 10:06:31 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_forms\preloader.html
[2011.01.18 10:06:31 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.06.07 21:11:08 | 000,006,262 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2011.01.31 21:47:16 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.06.07 21:19:10 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2011.01.31 21:47:52 | 000,029,184 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.06.09 16:21:40 | 000,003,874 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2008.06.20 18:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.04.01 08:11:42 | 000,070,944 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[6 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< End of report >
OTL logfile created on: 13.1.2012 17:46:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1014,23 Mb Total Physical Memory | 578,90 Mb Available Physical Memory | 57,08% Memory free
2,39 Gb Paging File | 2,08 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 182,93 Gb Free Space | 78,55% Space Free | Partition Type: NTFS
Computer Name: UZIVATEL | User Name: Mamka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2012.01.13 17:43:19 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory\OTL.exe
PRC - [2012.01.09 16:12:16 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.02.23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (No Company Name) ==========
MOD - [2012.01.13 13:15:43 | 001,678,336 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011300\algo.dll
MOD - [2012.01.12 21:43:08 | 001,677,824 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011201\algo.dll
MOD - [2012.01.09 16:12:15 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.02.23 16:04:14 | 000,144,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswDld.dll
MOD - [2010.01.27 02:07:32 | 003,884,312 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
========== Win32 Services (SafeList) ==========
SRV - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2008.08.07 11:17:30 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
========== Driver Services (SafeList) ==========
DRV - [2011.02.23 15:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.02.23 15:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.02.23 15:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.02.23 15:55:47 | 000,102,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.02.23 15:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.02.23 15:54:57 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.02.23 15:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.11.16 17:33:38 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2008.10.31 03:14:20 | 000,117,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008.06.06 09:24:44 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.05.07 07:38:36 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008.05.07 07:38:20 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.05.07 07:38:20 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.04.17 15:33:26 | 004,707,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "http://search.icq.com/search/afe_result ... r=1.2.9&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6
FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101
FF - prefs.js..extensions.enabledItems: Cetrumcz@igeared:1.203.023.002
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.4.3&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@macromedia.com/FlashPlayer10: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011.03.08 16:30:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.09 16:12:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.09 15:21:51 | 000,000,000 | ---D | M]
[2009.10.11 17:34:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Extensions
[2012.01.05 09:23:20 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions
[2012.01.05 09:23:20 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.04.10 11:07:30 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012.01.08 15:15:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-1.xml
[2011.09.07 15:52:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-10.xml
[2011.10.04 12:09:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-11.xml
[2011.11.22 18:53:14 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-12.xml
[2012.01.09 16:12:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-13.xml
[2011.03.05 00:49:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-2.xml
[2011.03.09 13:07:43 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-3.xml
[2011.03.11 21:26:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-4.xml
[2011.03.24 05:11:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-5.xml
[2011.03.25 18:33:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-6.xml
[2011.05.16 05:39:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-7.xml
[2011.08.21 19:01:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-8.xml
[2011.08.31 14:39:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-9.xml
[2012.01.04 14:54:58 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.gif
[2012.01.04 14:54:58 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.src
[2010.06.21 17:35:24 | 000,001,042 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.xml
[2011.08.07 13:41:26 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\SweetIM Search.xml
[2011.04.10 11:07:00 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\sweetim.xml
[2012.01.09 16:12:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012.01.09 16:12:17 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.11.10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.03.26 07:34:16 | 000,001,425 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Cetrumcz_igeared.xml
[2012.01.09 16:12:13 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.09 16:12:13 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.03.11 21:26:16 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2012.01.09 16:12:13 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.09 16:12:13 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.09 16:12:13 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml
========== Chrome ==========
O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (CescrtHlpr Object) - {F9B72325-A029-4a39-943A-02433C978829} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escort.dll (esnips)
O3 - HKLM\..\Toolbar: (esnips Toolbar) - {3132F1DF-2C69-49f5-ACA5-69965FC18E59} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll (esnips)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [AdobeUpdateTimer] C:\WINDOWS\adobeuptdt.exe (Microsoft)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004..\Run: [ICQ] C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/G ... meHost.cab (Oberon Flash Game Host)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C5A2EFE-A20E-4F86-B2DA-EBC012565380}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Mamka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mamka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.10.10 14:16:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 7 Days ==========
[2012.01.13 17:39:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mamka\Recent
[2012.01.13 17:22:18 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.13 17:22:17 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.13 17:10:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2012.01.13 17:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.01.13 17:00:21 | 000,000,000 | ---D | C] -- C:\6296022c5a8064ed76fdfa
[2012.01.09 20:07:39 | 000,000,000 | ---D | C] -- C:\10239da1af544d9442
[2012.01.09 15:39:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WindowsPowerShell
[2012.01.09 15:39:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm
[2012.01.09 15:39:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\GroupPolicy
[2012.01.09 15:39:30 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$968930Uinstall_KB968930$
[2012.01.09 15:22:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Sun
[2012.01.09 15:22:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.01.09 15:21:51 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012.01.09 15:21:51 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.01.09 15:21:51 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.01.09 15:21:51 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.01.09 15:11:36 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012.01.09 14:56:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2012.01.09 14:56:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2012.01.09 14:39:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2012.01.09 14:38:59 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2004.11.24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2012.01.13 17:48:05 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.13 17:35:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.13 17:34:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.13 17:34:38 | 1063,571,456 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.13 17:10:48 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
[2012.01.08 16:50:12 | 000,139,776 | ---- | M] () -- C:\Documents and Settings\Mamka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.01.13 17:48:04 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.13 17:10:48 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.13 17:04:26 | 000,000,306 | ---- | C] () -- C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job
[2012.01.09 15:37:02 | 000,020,312 | ---- | C] () -- C:\WINDOWS\System32\RegistryDefragBootTime.exe
[2012.01.09 15:15:20 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Mamka\Nabídka Start\Programy\Internet Explorer.lnk
[2011.08.23 14:26:33 | 000,260,606 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-117609710-2000478354-1801674531-1004-0.dat
[2011.08.23 14:26:32 | 000,133,622 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.07.26 16:26:46 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.07.26 16:26:46 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.07.26 16:26:46 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.07.26 16:26:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.01.03 16:49:54 | 000,000,168 | ---- | C] () -- C:\Documents and Settings\Mamka\Data aplikací\default.rss
[2009.12.20 13:53:47 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.12.08 03:29:31 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009.11.25 19:00:11 | 000,139,776 | ---- | C] () -- C:\Documents and Settings\Mamka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.11.16 17:33:38 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2009.10.12 12:05:41 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.10.12 11:55:53 | 000,000,039 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009.10.11 19:34:30 | 000,000,119 | ---- | C] () -- C:\Program Files\satsukidecodersettings.ini
[2009.10.10 22:02:14 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009.10.10 21:56:33 | 000,126,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009.10.10 15:37:00 | 000,001,174 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2009.10.10 14:41:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009.10.10 14:18:39 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009.10.10 14:14:43 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009.06.02 17:11:16 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.05.29 15:52:26 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.05.29 15:47:06 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008.04.14 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008.04.14 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008.04.14 13:00:00 | 000,488,350 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008.04.14 13:00:00 | 000,483,006 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2008.04.14 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008.04.14 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2008.04.14 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008.04.14 13:00:00 | 000,095,814 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2008.04.14 13:00:00 | 000,082,470 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008.04.14 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008.04.14 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2008.04.14 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008.04.14 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008.04.14 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008.04.14 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008.04.14 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007.07.23 08:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007.07.23 08:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007.02.05 19:05:26 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2005.10.14 10:56:50 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.05.29 02:45:43 | 000,647,168 | ---- | C] () -- C:\WINDOWS\System32\pqdvdb.dll
[2004.11.29 15:43:20 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2004.10.12 06:40:58 | 002,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2004.10.12 06:39:48 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2004.10.12 06:39:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2004.10.09 06:40:16 | 000,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2004.10.05 08:16:08 | 000,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2004.10.03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
========== LOP Check ==========
[2011.03.08 16:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2011.09.20 07:17:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Cloudmark
[2011.01.07 11:55:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.11.24 16:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2012.01.09 14:56:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2009.10.14 21:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Muzzy Lane Software
[2009.11.16 12:10:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OrbNetworks
[2009.11.24 17:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.09.24 15:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2009.10.11 20:51:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VistaCodecs
[2009.11.30 19:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\DTC
[2009.10.16 15:04:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\esnips.com
[2012.01.09 15:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2011.12.16 00:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\ICQ
[2012.01.10 09:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2011.09.13 12:19:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy
[2009.10.11 17:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenOffice.org
[2009.11.24 17:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\PC Suite
[2011.08.23 14:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Samsung
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job
========== Purity Check ==========
========== Custom Scans ==========
< REATERESTOREPOINT >
< >
< >
< MD5 for: ATAPI.SYS >
[2008.04.14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 13:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: EXPLORER.EXE >
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 13:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SVCHOST.EXE >
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 13:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< >
< %systemroot%*.* /U /s >
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[11 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[6 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp -> ]
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[7 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ]
[1 C:\WINDOWS\Temp\_avast_\*.tmp files -> C:\WINDOWS\Temp\_avast_\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2009.12.06 15:27:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Adobe
[2010.05.08 11:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\AVS4YOU
[2009.11.30 19:54:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\DTC
[2009.10.16 15:04:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\esnips.com
[2012.01.09 15:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\FreeSoftwareDownload
[2009.10.24 21:28:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\GRETECH
[2010.10.11 12:03:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Help
[2011.12.16 00:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\ICQ
[2009.10.11 17:28:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Identities
[2012.01.10 09:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\IObit
[2009.10.11 17:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Macromedia
[2009.10.30 18:17:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Mamka\Data aplikací\Microsoft
[2009.10.11 17:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla
[2009.10.24 21:29:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Nero
[2011.09.13 12:19:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy
[2009.10.11 17:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\OpenOffice.org
[2009.11.24 17:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\PC Suite
[2010.06.02 18:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Real
[2011.08.23 14:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Samsung
[2012.01.09 15:10:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Skype
[2011.02.14 08:01:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\skypePM
[2010.01.04 12:55:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\Sun
[2009.10.30 18:17:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\WinRAR
< %APPDATA%\*.exe /s >
[2011.09.13 11:45:26 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\LatestDLMgr.exe
[2011.08.01 23:38:30 | 001,872,896 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\pcspeedup.exe
[2010.11.09 22:18:10 | 000,349,296 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\DLMgr_3_1.6.87.exe
[2010.10.15 21:41:18 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\SpeedstarterCZ.exe
[2010.10.23 00:29:06 | 001,472,552 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\ZrychleniPocitace.exe
[2011.06.09 20:03:56 | 005,845,528 | ---- | M] (Uniblue Systems Ltd ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\driverscanner (33).exe
[2011.09.13 12:19:45 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\LatestDLMgr.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job >
[2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2009.10.10 21:56:09 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2009.10.10 21:56:09 | 001,093,632 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2009.10.10 21:56:09 | 000,487,424 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2012.01.11 17:40:17 | 052,128,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MRT.exe
[2012.01.13 17:35:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 13:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 07:52:38 | 001,695,232 | ---- | M] (Microsoft Corporation)
"ICQ" = "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4 -- [2011.01.05 09:18:50 | 000,133,432 | ---- | M] (ICQ, LLC.)
< >
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.13 17:48:05 | 000,000,512 | ---- | M] () MD5=85E4A13EE04F48CAD92E7AEADD07ED3C -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2006.06.02 16:34:42 | 000,000,101 | ---- | M] () -- \WINDOWS\system32\wgacracked.txt
[6 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
< *keygen* /s >
< *loader* /s >
[2011.01.07 11:43:53 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.01.07 11:43:52 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2011.01.07 11:43:55 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.01.07 11:43:52 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.03.13 18:14:30 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\icq_profile\preloader.html
[2011.01.18 10:06:31 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_forms\preloader.html
[2011.01.18 10:06:31 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.06.07 21:11:08 | 000,006,262 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2011.01.31 21:47:16 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.06.07 21:19:10 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2011.01.31 21:47:52 | 000,029,184 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.06.09 16:21:40 | 000,003,874 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2008.06.20 18:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.04.01 08:11:42 | 000,070,944 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[6 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< End of report >
Re: prosím o kontrolu meho zataraleho pc
druhy log z extras.txt prikladam zde:
OTL Extras logfile created on: 13.1.2012 17:46:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1014,23 Mb Total Physical Memory | 578,90 Mb Available Physical Memory | 57,08% Memory free
2,39 Gb Paging File | 2,08 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 182,93 Gb Free Space | 78,55% Space Free | Partition Type: NTFS
Computer Name: UZIVATEL | User Name: Mamka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"5985:TCP" = 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"80:TCP" = 80:TCP:*:Disabled:Vzdálená správa systému Windows – režim kompatibility (HTTP-In)
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe" = C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{129DDEC1-A6A3-3D60-AABE-76E6E5334922}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
"{1A524CFE-DF85-4555-8BC2-0C89DBD8BC2C}" = PC Connectivity Solution
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 30
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6FE8B722-4D7E-3CD7-BB3A-3AD1684B1295}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{74DCC43B-33C9-3389-BD0D-33EB37973657}" = Microsoft .NET Framework 3.5 Language Pack - csy
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Balíček ovladače systému Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 3.8)
"CCleaner" = CCleaner
"eSnipsToolbar" = eSnips
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"ie8" = Windows Internet Explorer 8
"LegWinTym 1.26 Free (22.2.2008)" = LegWinTym 1.26 Free (22.2.2008)
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"Microsoft .NET Framework 3.5 Language Pack - csy" = Microsoft .NET Framework 3.5 Language Pack - CSY
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Scorpions WinCheater 2.07 (s databází 107)_is1" = Scorpions WinCheater
"The KMPlayer" = The KMPlayer (remove only)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
"XP Codec Pack" = XP Codec Pack
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== Last 10 Event Log Errors ==========
[ Antivirus Events ]
Error - 5.3.2011 11:11:25 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 5.3.2011 16:45:25 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 5:56:36 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 14:59:04 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 23:44:27 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 9:37:26 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 13:17:29 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 23:58:20 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 8.3.2011 10:50:21 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 8.3.2011 11:25:41 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
[ Application Events ]
Error - 11.1.2012 15:14:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 5:37:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 7:46:37 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 13:25:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 13:27:54 | Computer Name = UZIVATEL | Source = MsiInstaller | ID = 11714
Description = Produkt: Microsoft .NET Framework 3.5 SP1 - Error 1714.Starší verzi
produktu Microsoft .NET Framework 3.5 SP1 nelze odebrat. Obraťte se na pracovníky
odborné pomoci. Systémová chyba: 1612.
Error - 12.1.2012 14:40:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 4:31:38 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 12:01:16 | Computer Name = UZIVATEL | Source = MsiInstaller | ID = 11714
Description = Produkt: Microsoft .NET Framework 3.5 SP1 - Error 1714.Starší verzi
produktu Microsoft .NET Framework 3.5 SP1 nelze odebrat. Obraťte se na pracovníky
odborné pomoci. Systémová chyba: 1612.
Error - 13.1.2012 12:04:39 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 12:34:50 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
[ System Events ]
Error - 12.1.2012 5:37:44 | Computer Name = UZIVATEL | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.100.11 pro síťovou kartu s adresou 001966EDAE87
byla serverem DHCP 192.168.100.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).
Error - 12.1.2012 7:46:35 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 12.1.2012 13:25:44 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 12.1.2012 13:31:07 | Computer Name = UZIVATEL | Source = Windows Update Agent | ID = 20
Description = Instalace se nezdařila: Instalace následující aktualizace se nezdařila
z důvodu chyby (0x80070643): Aktualizace Microsoft .NET Framework 3.5 Service Pack
1 a .NET Framework 3.5 Family Update pro verze rozhraní .NET 2.0 až 3.5 (KB951847)
x86.
Error - 12.1.2012 14:40:43 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 4:31:37 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 4:31:40 | Computer Name = UZIVATEL | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.100.11 pro síťovou kartu s adresou 001966EDAE87
byla serverem DHCP 192.168.100.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).
Error - 13.1.2012 12:02:17 | Computer Name = UZIVATEL | Source = Windows Update Agent | ID = 20
Description = Instalace se nezdařila: Instalace následující aktualizace se nezdařila
z důvodu chyby (0x80070643): Aktualizace Microsoft .NET Framework 3.5 Service Pack
1 a .NET Framework 3.5 Family Update pro verze rozhraní .NET 2.0 až 3.5 (KB951847)
x86.
Error - 13.1.2012 12:34:50 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 12:40:15 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7034
Description = Služba Advanced SystemCare Service 5 byla neočekávaně ukončena. Tento
stav nastal již 1krát.
< End of report >
OTL Extras logfile created on: 13.1.2012 17:46:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Mamka\Nabídka Start\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1014,23 Mb Total Physical Memory | 578,90 Mb Available Physical Memory | 57,08% Memory free
2,39 Gb Paging File | 2,08 Gb Available in Paging File | 87,25% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 182,93 Gb Free Space | 78,55% Space Free | Partition Type: NTFS
Computer Name: UZIVATEL | User Name: Mamka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"5985:TCP" = 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"80:TCP" = 80:TCP:*:Disabled:Vzdálená správa systému Windows – režim kompatibility (HTTP-In)
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe" = C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{129DDEC1-A6A3-3D60-AABE-76E6E5334922}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
"{1A524CFE-DF85-4555-8BC2-0C89DBD8BC2C}" = PC Connectivity Solution
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 30
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6FE8B722-4D7E-3CD7-BB3A-3AD1684B1295}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{74DCC43B-33C9-3389-BD0D-33EB37973657}" = Microsoft .NET Framework 3.5 Language Pack - csy
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Balíček ovladače systému Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Balíček ovladače systému Windows - Nokia Modem (05/22/2008 3.8)
"CCleaner" = CCleaner
"eSnipsToolbar" = eSnips
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"ie8" = Windows Internet Explorer 8
"LegWinTym 1.26 Free (22.2.2008)" = LegWinTym 1.26 Free (22.2.2008)
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"Microsoft .NET Framework 3.5 Language Pack - csy" = Microsoft .NET Framework 3.5 Language Pack - CSY
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Scorpions WinCheater 2.07 (s databází 107)_is1" = Scorpions WinCheater
"The KMPlayer" = The KMPlayer (remove only)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
"XP Codec Pack" = XP Codec Pack
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== Last 10 Event Log Errors ==========
[ Antivirus Events ]
Error - 5.3.2011 11:11:25 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 5.3.2011 16:45:25 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 5:56:36 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 14:59:04 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 6.3.2011 23:44:27 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 9:37:26 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 13:17:29 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 7.3.2011 23:58:20 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 8.3.2011 10:50:21 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
Error - 8.3.2011 11:25:41 | Computer Name = UZIVATEL | Source = avast! | ID = 33554522
Description =
[ Application Events ]
Error - 11.1.2012 15:14:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 5:37:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 7:46:37 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 13:25:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 12.1.2012 13:27:54 | Computer Name = UZIVATEL | Source = MsiInstaller | ID = 11714
Description = Produkt: Microsoft .NET Framework 3.5 SP1 - Error 1714.Starší verzi
produktu Microsoft .NET Framework 3.5 SP1 nelze odebrat. Obraťte se na pracovníky
odborné pomoci. Systémová chyba: 1612.
Error - 12.1.2012 14:40:44 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 4:31:38 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 12:01:16 | Computer Name = UZIVATEL | Source = MsiInstaller | ID = 11714
Description = Produkt: Microsoft .NET Framework 3.5 SP1 - Error 1714.Starší verzi
produktu Microsoft .NET Framework 3.5 SP1 nelze odebrat. Obraťte se na pracovníky
odborné pomoci. Systémová chyba: 1612.
Error - 13.1.2012 12:04:39 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
Error - 13.1.2012 12:34:50 | Computer Name = UZIVATEL | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.
[ System Events ]
Error - 12.1.2012 5:37:44 | Computer Name = UZIVATEL | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.100.11 pro síťovou kartu s adresou 001966EDAE87
byla serverem DHCP 192.168.100.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).
Error - 12.1.2012 7:46:35 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 12.1.2012 13:25:44 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 12.1.2012 13:31:07 | Computer Name = UZIVATEL | Source = Windows Update Agent | ID = 20
Description = Instalace se nezdařila: Instalace následující aktualizace se nezdařila
z důvodu chyby (0x80070643): Aktualizace Microsoft .NET Framework 3.5 Service Pack
1 a .NET Framework 3.5 Family Update pro verze rozhraní .NET 2.0 až 3.5 (KB951847)
x86.
Error - 12.1.2012 14:40:43 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 4:31:37 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 4:31:40 | Computer Name = UZIVATEL | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.100.11 pro síťovou kartu s adresou 001966EDAE87
byla serverem DHCP 192.168.100.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).
Error - 13.1.2012 12:02:17 | Computer Name = UZIVATEL | Source = Windows Update Agent | ID = 20
Description = Instalace se nezdařila: Instalace následující aktualizace se nezdařila
z důvodu chyby (0x80070643): Aktualizace Microsoft .NET Framework 3.5 Service Pack
1 a .NET Framework 3.5 Family Update pro verze rozhraní .NET 2.0 až 3.5 (KB951847)
x86.
Error - 13.1.2012 12:34:50 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1058
Error - 13.1.2012 12:40:15 | Computer Name = UZIVATEL | Source = Service Control Manager | ID = 7034
Description = Služba Advanced SystemCare Service 5 byla neočekávaně ukončena. Tento
stav nastal již 1krát.
< End of report >
Re: prosím o kontrolu meho zataraleho pc
Pravidla fora hovori jasne o pomoci s nelegalnimi systemy, takze co s tim udelame 

Re: prosím o kontrolu meho zataraleho pc
nevím o jakem nelegalnim systemu mluvite, nejsem si vedoma co mam v pc, pokud tam neco vidite to co ja ne tak prosim mi to napiste dekuji
Re: prosím o kontrolu meho zataraleho pc
Tohle c:\WINDOWS\system32\wgacracked.txt asi nebude simulator akvarijnich rybicek nybrz crack aby se nemusela na system legalne kupovat licence.
Nebo ji mate snad zakoupenou
Nebo ji mate snad zakoupenou

Re: prosím o kontrolu meho zataraleho pc
opravdu nevim, jeto mozne ze je nelegalni, ale kdyz jsem pc kupovala tak system jiz tam byl. Tak pokud dale nechcete mi pomoct s mym problemem, tak to nechame byt a hodim fajfku jako ze je vyrizeno.
s pozdravem
s pozdravem
Re: prosím o kontrolu meho zataraleho pc


- Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
- Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
Kód: Vybrat vše
:otl IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1 IE - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\URLSearchHook: - No CLSID value found FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaulturl: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.9&q=" FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.3&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" [2012.01.05 09:23:20 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2011.04.10 11:07:30 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2012.01.08 15:15:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-1.xml [2011.09.07 15:52:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-10.xml [2011.10.04 12:09:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-11.xml [2011.11.22 18:53:14 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-12.xml [2012.01.09 16:12:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-13.xml [2011.03.05 00:49:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-2.xml [2011.03.09 13:07:43 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-3.xml [2011.03.11 21:26:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-4.xml [2011.03.24 05:11:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-5.xml [2011.03.25 18:33:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-6.xml [2011.05.16 05:39:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-7.xml [2011.08.21 19:01:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-8.xml [2011.08.31 14:39:57 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-9.xml [2012.01.04 14:54:58 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.gif [2012.01.04 14:54:58 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.src [2010.06.21 17:35:24 | 000,001,042 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.xml [2011.08.07 13:41:26 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\SweetIM Search.xml [2011.04.10 11:07:00 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\sweetim.xml File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MAMKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\551FKEFA.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847} O3 - HKLM\..\Toolbar: (esnips Toolbar) - {3132F1DF-2C69-49f5-ACA5-69965FC18E59} - C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll (esnips) O3 - HKLM\..\Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found. O3 - HKU\S-1-5-21-117609710-2000478354-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. [2012.01.09 14:56:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\IObit [2012.01.09 14:39:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mamka\Data aplikací\IObit [2012.01.09 14:38:59 | 000,000,000 | ---D | C] -- C:\Program Files\IObit [2012.01.10 09:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mamka\Data aplikací\IObit [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [3 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ] [11 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ] [1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ] [6 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ] [1 C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\*.tmp -> ] [6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [7 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ] [1 C:\WINDOWS\Temp\_avast_\*.tmp files -> C:\WINDOWS\Temp\_avast_\*.tmp -> ] 2011.09.13 11:45:26 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\LatestDLMgr.exe [2011.08.01 23:38:30 | 001,872,896 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\pcspeedup.exe [2010.11.09 22:18:10 | 000,349,296 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\DLMgr_3_1.6.87.exe [2010.10.15 21:41:18 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\SpeedstarterCZ.exe [2010.10.23 00:29:06 | 001,472,552 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\ZrychleniPocitace.exe [2011.06.09 20:03:56 | 005,845,528 | ---- | M] (Uniblue Systems Ltd ) -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\driverscanner (33).exe [2011.09.13 12:19:45 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\LatestDLMgr.exe [2012.01.13 17:04:26 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job :services AdvancedSystemCareService5 :reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "5985:TCP"=- "80:TCP"=- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"=- "SunJavaUpdateSched"=- "AdobeUpdateTimer"=- "SweetIM"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=- "MSMSGS"=- "ICQ"=- "Advanced SystemCare 5"=- [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb] [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe"=- :files C:\Program Files\SweetIM C:\Program Files\eSnips.com\eSnipsToolbar C:\WINDOWS\tasks\ASC5_AutoClean.job C:\WINDOWS\tasks\ASC5_AutoUpdate.job C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job c:\WINDOWS\system32\wgacracked.txt /d %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH]
- Nasledne kliknete na Opravit
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: prosím o kontrolu meho zataraleho pc
prikladam:
All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.2.9&q=" removed from browser.search.defaulturl
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.4.3&q=" removed from keyword.URL
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaultenginename
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaulturl
Prefs.js: "ICQ Search" removed from sweetim.toolbar.previous.browser.search.selectedEngine
Prefs.js: "chrome://browser-region/locale/region.properties" removed from sweetim.toolbar.previous.keyword.URL
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\skin folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\nl-NL folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\it-IT folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\fr-FR folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\es-ES folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\en-US folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\de-DE folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\content folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-10.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-11.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-12.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-13.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-9.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.gif moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.src moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\SweetIM Search.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\sweetim.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3132F1DF-2C69-49f5-ACA5-69965FC18E59} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3132F1DF-2C69-49f5-ACA5-69965FC18E59}\ deleted successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
C:\Documents and Settings\All Users\Data aplikací\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\IObit folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Toolbox folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Log folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Boottime folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Backup folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V4 folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare\Backup\Registry folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare\Backup folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\Update folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\SecurityHole_Backup folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\LatestNews folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\BootTimeLog folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\ASCServiceLog folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5 folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 3 folder moved successfully.
C:\Program Files\IObit folder moved successfully.
Folder C:\Documents and Settings\Mamka\Data aplikací\IObit\ not found.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET147.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET148.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET149.tmp deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP10B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP153.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP156.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E5.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E6.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8.tmp folder deleted successfully.
C:\WINDOWS\CSC\csc1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI126.tmp deleted successfully.
C:\WINDOWS\Installer\MSI172.tmp deleted successfully.
C:\WINDOWS\Installer\MSI184.tmp deleted successfully.
C:\WINDOWS\Installer\MSI189.tmp deleted successfully.
C:\WINDOWS\Installer\MSI88.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF0.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\BIT1B.tmp deleted successfully.
C:\WINDOWS\system32\CONFIG.TMP deleted successfully.
C:\WINDOWS\system32\SET141.tmp deleted successfully.
C:\WINDOWS\system32\SET89.tmp deleted successfully.
C:\WINDOWS\system32\SET8A.tmp deleted successfully.
C:\WINDOWS\system32\SET97.tmp deleted successfully.
C:\WINDOWS\system32\SETE2.tmp deleted successfully.
C:\WINDOWS\Temp\MAN11.tmp deleted successfully.
C:\WINDOWS\Temp\MAN39.tmp deleted successfully.
C:\WINDOWS\Temp\SDB3C.tmp deleted successfully.
C:\WINDOWS\Temp\VWL12.tmp deleted successfully.
C:\WINDOWS\Temp\VWL3A.tmp deleted successfully.
C:\WINDOWS\Temp\WLF13.tmp deleted successfully.
C:\WINDOWS\Temp\WLF3B.tmp deleted successfully.
C:\WINDOWS\Temp\_avast_\unp141327813.tmp deleted successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\pcspeedup.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\DLMgr_3_1.6.87.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\SpeedstarterCZ.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\ZrychleniPocitace.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\driverscanner (33).exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\LatestDLMgr.exe moved successfully.
C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job moved successfully.
========== SERVICES/DRIVERS ==========
Error: No service named AdvancedSystemCareService5 was found to stop!
Service\Driver key AdvancedSystemCareService5 not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\5985:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\80:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeUpdateTimer deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SweetIM not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON.EXE deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 5 not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe deleted successfully.
========== FILES ==========
File\Folder C:\Program Files\SweetIM not found.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\components folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\chrome\content folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\chrome folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3 folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar folder moved successfully.
File\Folder C:\WINDOWS\tasks\ASC5_AutoClean.job not found.
File\Folder C:\WINDOWS\tasks\ASC5_AutoUpdate.job not found.
File\Folder C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job not found.
c:\WINDOWS\system32\wgacracked.txt deleted successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Mamka
->Temp folder emptied: 4265434 bytes
->Temporary Internet Files folder emptied: 4818976 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 75411672 bytes
->Google Chrome cache emptied: 5971818 bytes
->Flash cache emptied: 646 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 516587620 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 171606692 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 10255637 bytes
Total Files Cleaned = 753,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: Mamka
->Flash cache emptied: 0 bytes
User: NetworkService
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 01132012_190924
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
Registry entries deleted on Reboot...
All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-117609710-2000478354-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.2.9&q=" removed from browser.search.defaulturl
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.4.3&q=" removed from keyword.URL
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaultenginename
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaulturl
Prefs.js: "ICQ Search" removed from sweetim.toolbar.previous.browser.search.selectedEngine
Prefs.js: "chrome://browser-region/locale/region.properties" removed from sweetim.toolbar.previous.keyword.URL
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\skin folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\nl-NL folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\it-IT folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\fr-FR folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\es-ES folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\en-US folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale\de-DE folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\locale folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar\content folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-10.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-11.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-12.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-13.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin-9.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.gif moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.src moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\icqplugin.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\SweetIM Search.xml moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\Mozilla\Firefox\Profiles\551fkefa.default\searchplugins\sweetim.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3132F1DF-2C69-49f5-ACA5-69965FC18E59} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3132F1DF-2C69-49f5-ACA5-69965FC18E59}\ deleted successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\escorTlbr.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D5D47440-0750-463D-BAEF-A47D02414806} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5D47440-0750-463D-BAEF-A47D02414806}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}\ not found.
Registry value HKEY_USERS\S-1-5-21-117609710-2000478354-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
C:\Documents and Settings\All Users\Data aplikací\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\IObit folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Toolbox folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Log folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Boottime folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5\Backup folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare V4 folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare\Backup\Registry folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare\Backup folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit\Advanced SystemCare folder moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\IObit folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\Update folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\SecurityHole_Backup folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\LatestNews folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\BootTimeLog folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5\ASCServiceLog folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 5 folder moved successfully.
C:\Program Files\IObit\Advanced SystemCare 3 folder moved successfully.
C:\Program Files\IObit folder moved successfully.
Folder C:\Documents and Settings\Mamka\Data aplikací\IObit\ not found.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET147.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET148.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET149.tmp deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP10B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP153.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP156.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E5.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E6.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8.tmp folder deleted successfully.
C:\WINDOWS\CSC\csc1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI126.tmp deleted successfully.
C:\WINDOWS\Installer\MSI172.tmp deleted successfully.
C:\WINDOWS\Installer\MSI184.tmp deleted successfully.
C:\WINDOWS\Installer\MSI189.tmp deleted successfully.
C:\WINDOWS\Installer\MSI88.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF0.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\a895d28c086dbd02365a5c9f46ae977a\BIT1B.tmp deleted successfully.
C:\WINDOWS\system32\CONFIG.TMP deleted successfully.
C:\WINDOWS\system32\SET141.tmp deleted successfully.
C:\WINDOWS\system32\SET89.tmp deleted successfully.
C:\WINDOWS\system32\SET8A.tmp deleted successfully.
C:\WINDOWS\system32\SET97.tmp deleted successfully.
C:\WINDOWS\system32\SETE2.tmp deleted successfully.
C:\WINDOWS\Temp\MAN11.tmp deleted successfully.
C:\WINDOWS\Temp\MAN39.tmp deleted successfully.
C:\WINDOWS\Temp\SDB3C.tmp deleted successfully.
C:\WINDOWS\Temp\VWL12.tmp deleted successfully.
C:\WINDOWS\Temp\VWL3A.tmp deleted successfully.
C:\WINDOWS\Temp\WLF13.tmp deleted successfully.
C:\WINDOWS\Temp\WLF3B.tmp deleted successfully.
C:\WINDOWS\Temp\_avast_\unp141327813.tmp deleted successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_07723EE6B78C4E84BE537008215D6566\pcspeedup.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\DLMgr_3_1.6.87.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\SpeedstarterCZ.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_23DAE09D85A8450D8900CCEB5EE68740\ZrychleniPocitace.exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\driverscanner (33).exe moved successfully.
C:\Documents and Settings\Mamka\Data aplikací\OpenCandy\OpenCandy_F1CD2FE0F9464A41BC6B0D298A9B5ECA\LatestDLMgr.exe moved successfully.
C:\WINDOWS\Tasks\ASCv5_AutoUpdateD.job moved successfully.
========== SERVICES/DRIVERS ==========
Error: No service named AdvancedSystemCareService5 was found to stop!
Service\Driver key AdvancedSystemCareService5 not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\5985:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\80:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeUpdateTimer deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SweetIM not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON.EXE deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 5 not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\All Users\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe deleted successfully.
========== FILES ==========
File\Folder C:\Program Files\SweetIM not found.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\components folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\chrome\content folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3\chrome folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar\1.3.0.3 folder moved successfully.
C:\Program Files\eSnips.com\eSnipsToolbar folder moved successfully.
File\Folder C:\WINDOWS\tasks\ASC5_AutoClean.job not found.
File\Folder C:\WINDOWS\tasks\ASC5_AutoUpdate.job not found.
File\Folder C:\WINDOWS\tasks\ASCv5_AutoUpdateD.job not found.
c:\WINDOWS\system32\wgacracked.txt deleted successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Mamka
->Temp folder emptied: 4265434 bytes
->Temporary Internet Files folder emptied: 4818976 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 75411672 bytes
->Google Chrome cache emptied: 5971818 bytes
->Flash cache emptied: 646 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 516587620 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 171606692 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 10255637 bytes
Total Files Cleaned = 753,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: Mamka
->Flash cache emptied: 0 bytes
User: NetworkService
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 01132012_190924
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
Registry entries deleted on Reboot...
Re: prosím o kontrolu meho zataraleho pc

- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte

Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy

- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace

Re: prosím o kontrolu meho zataraleho pc
moc krat dekuji pc se zatim chova jako novy, bez problemu a zavad, jiz se neseka, jsem rada, ze jsem narazila jeste v tomto svete na cloveka, ktery si na nic nehraje, mockrat vam jeste jednou dekuji.
s pozdravem Hana
s pozdravem Hana
Re: prosím o kontrolu meho zataraleho pc
Jeste drobny uklid po utilitach
OTC http://oldtimer.geekstogo.com/OTC.exe
A je to
Nemate zac, rad jsem pomohl
Zase nekdy 
A na rozloucenou vam zahraje nase kapela



- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC


Nemate zac, rad jsem pomohl


A na rozloucenou vam zahraje nase kapela






