Problémi s wmpnetwk.exe

[vyosek]

Reseni je proste, rozdelte log do vice prispevku

[doomguy]

OTL logfile created on: 7.3.2012 18:46:02 - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = C:\Users\Karel\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,75 Gb Total Physical Memory | 0,42 Gb Available Physical Memory | 23,80% Memory free
4,37 Gb Paging File | 2,14 Gb Available in Paging File | 49,00% Paging File free
Paging file location(s): c:\pagefile.sys 2686 4096 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 49,81 Gb Total Space | 0,85 Gb Free Space | 1,71% Space Free | Partition Type: NTFS
Drive D: | 300,88 Gb Total Space | 7,92 Gb Free Space | 2,63% Space Free | Partition Type: NTFS
Drive E: | 115,07 Gb Total Space | 34,69 Gb Free Space | 30,15% Space Free | Partition Type: NTFS
Drive F: | 2,79 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive I: | 197,15 Gb Total Space | 28,55 Gb Free Space | 14,48% Space Free | Partition Type: FAT32

Computer Name: KAREL-PC | User Name: Karel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.03.07 18:40:33 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Karel\Desktop\OTL.exe
PRC - [2012.02.29 08:55:08 | 017,148,552 | R--- | M] (Skype Technologies S.A.) -- C:\Users\Karel\Desktop\Phone\Skype.exe
PRC - [2012.02.28 17:38:56 | 001,987,976 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.02.28 17:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012.02.23 17:23:24 | 004,031,368 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012.02.23 17:23:21 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.02.13 18:58:30 | 000,275,736 | ---- | M] (http://tortoisesvn.net) -- C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
PRC - [2012.01.31 16:21:09 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2012.01.03 14:10:44 | 001,494,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
PRC - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.12.29 11:00:02 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2011.12.06 04:12:16 | 000,404,992 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2011.12.06 04:11:44 | 000,163,328 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2011.12.05 22:13:56 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2011.11.03 09:29:04 | 004,657,048 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files\SpeedFan\speedfan.exe
PRC - [2011.07.28 17:58:54 | 004,514,992 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files\BOINC\boincmgr.exe
PRC - [2011.07.28 17:58:50 | 000,070,832 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files\BOINC\boinctray.exe
PRC - [2011.07.28 17:58:48 | 000,902,320 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files\BOINC\boinc.exe
PRC - [2011.06.24 05:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.06.08 14:49:48 | 000,159,744 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2011.06.08 13:02:00 | 000,633,856 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2011.04.27 13:53:38 | 000,742,944 | ---- | M] (EnTech Taiwan) -- C:\Program Files\PowerStrip\PStrip.exe
PRC - [2011.04.27 08:56:10 | 000,232,896 | ---- | M] (Vuze Inc.) -- C:\Program Files\Vuze\Azureus.exe
PRC - [2011.03.21 13:19:36 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 22:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.11.20 22:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2007.11.01 17:49:20 | 000,771,648 | R--- | M] (Microsoft Corp.) -- F:\setup.exe


========== Modules (No Company Name) ==========

MOD - [2012.03.07 18:04:55 | 000,192,512 | ---- | M] () -- C:\Users\Karel\AppData\Local\Temp\sfamcc00002.dll
MOD - [2012.03.07 18:04:55 | 000,172,032 | ---- | M] () -- C:\Users\Karel\AppData\Local\Temp\sfareca00002.dll
MOD - [2012.03.06 19:45:06 | 000,192,512 | ---- | M] () -- C:\Users\Karel\AppData\Local\Temp\sfamcc00001.dll
MOD - [2012.03.06 19:45:06 | 000,172,032 | ---- | M] () -- C:\Users\Karel\AppData\Local\Temp\sfareca00001.dll
MOD - [2012.02.25 12:02:22 | 008,527,008 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2012.02.18 01:14:34 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\af6e0dd358a5edc094dca9e7957f1038\WindowsFormsIntegration.ni.dll
MOD - [2012.02.18 01:13:00 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\f01c5c76d0a19516a37b7bd191a02cda\System.Core.ni.dll
MOD - [2012.02.17 17:07:31 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\74fcc0f56435d0396f9524cd4293d3e5\PresentationFramework.Aero.ni.dll
MOD - [2012.02.17 17:07:20 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\42ae8760f0a74ab774e82a64368aa1f6\System.Web.ni.dll
MOD - [2012.02.17 17:07:15 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a1c4a635721f85bef0ea4194b888b871\System.Runtime.Remoting.ni.dll
MOD - [2012.02.17 17:07:03 | 014,339,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\02f7846cbc5c02a5dbf50fd34325eb61\PresentationFramework.ni.dll
MOD - [2012.02.17 17:06:39 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6c51e152e7404188914c9fa4d8503ff9\System.Windows.Forms.ni.dll
MOD - [2012.02.17 17:06:31 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ab87129c2b603f218e4aa5300c9b1bdd\System.Drawing.ni.dll
MOD - [2012.02.17 17:06:29 | 012,234,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f4b2424c1b32fbd11130482bb899b7ae\PresentationCore.ni.dll
MOD - [2012.02.17 17:06:20 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\47b9e7f070271ff50f988f75ea68fa3e\WindowsBase.ni.dll
MOD - [2012.02.17 17:06:15 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll
MOD - [2012.02.17 17:06:12 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll
MOD - [2012.02.17 17:06:10 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll
MOD - [2012.02.13 18:58:02 | 000,070,424 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\libsasl32.dll
MOD - [2012.02.13 18:57:58 | 000,099,096 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\CrashRpt.dll
MOD - [2012.02.10 17:38:53 | 000,043,520 | ---- | M] () -- C:\Users\Karel\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_weblink.CZE
MOD - [2012.01.31 16:21:17 | 000,783,360 | ---- | M] () -- C:\Program Files\Opera\gstreamer\gstreamer.dll
MOD - [2012.01.31 16:21:17 | 000,316,928 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll
MOD - [2012.01.31 16:21:17 | 000,275,968 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll
MOD - [2012.01.31 16:21:17 | 000,168,448 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
MOD - [2012.01.31 16:21:17 | 000,099,840 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll
MOD - [2012.01.31 16:21:17 | 000,098,816 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll
MOD - [2012.01.31 16:21:17 | 000,098,816 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll
MOD - [2012.01.31 16:21:17 | 000,078,336 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll
MOD - [2012.01.31 16:21:17 | 000,076,800 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll
MOD - [2012.01.31 16:21:17 | 000,068,608 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll
MOD - [2012.01.31 16:21:17 | 000,064,000 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll
MOD - [2012.01.31 16:21:17 | 000,046,592 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll
MOD - [2012.01.31 16:21:17 | 000,045,568 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gsttypefindfunctions.dll
MOD - [2012.01.15 17:08:18 | 000,013,824 | ---- | M] () -- C:\Users\Karel\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_Updater.CZE
MOD - [2012.01.15 17:08:06 | 000,097,792 | ---- | M] () -- C:\Users\Karel\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_EScript.CZE
MOD - [2012.01.14 09:51:48 | 009,291,776 | ---- | M] () -- C:\Users\Karel\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_rdlang32.cze
MOD - [2012.01.03 14:10:54 | 000,054,784 | ---- | M] () -- C:\Program Files\Adobe\Reader 10.0\Reader\Locale\cs_CZ\BRdlang32.CZE
MOD - [2012.01.03 14:10:44 | 000,249,232 | ---- | M] () -- C:\Program Files\Adobe\Reader 10.0\Reader\sqlite.dll
MOD - [2011.12.23 11:13:05 | 000,028,160 | ---- | M] () -- C:\Users\Karel\AppData\Roaming\Azureus\plugins\azutp\win32\utp.dll
MOD - [2011.12.23 09:16:50 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\bb1d36ae26e7cadf563061596682e747\UIAutomationProvider.ni.dll
MOD - [2011.12.23 09:16:22 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011.12.05 22:14:02 | 000,095,232 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
MOD - [2011.12.05 22:10:38 | 000,369,152 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2011.07.05 11:14:54 | 000,081,920 | ---- | M] () -- C:\Program Files\BOINC\zlib1.dll
MOD - [2011.04.27 08:56:18 | 000,102,400 | ---- | M] () -- C:\Program Files\Vuze\plugins\azitunes\jacob-1.14.3-x86.dll
MOD - [2011.04.27 08:56:10 | 000,087,480 | ---- | M] () -- C:\Program Files\Vuze\aereg.dll
MOD - [2010.11.13 02:54:29 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 02:54:19 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.04 17:53:46 | 000,237,568 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010.11.04 17:53:34 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll


========== Win32 Services (SafeList) ==========

SRV - [2012.02.29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Users\Karel\Desktop\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.02.28 17:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.02.23 17:23:21 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.01.19 12:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.12.31 18:12:50 | 000,819,729 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\mrvcl32.exe -- (Adobe Licensing Console)
SRV - [2011.12.29 11:00:30 | 000,136,584 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\RaMaint.exe -- (LMIMaint)
SRV - [2011.12.29 11:00:02 | 000,374,152 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2011.12.20 20:15:16 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011.12.06 04:11:44 | 000,163,328 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011.12.05 22:13:56 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2011.09.16 15:10:50 | 000,390,528 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2011.06.08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (atidgllk)
DRV - [2012.02.23 17:12:28 | 000,610,648 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.02.23 17:12:16 | 000,337,112 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.02.23 17:10:59 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\Drivers\aswrdr2.sys -- (aswRdr)
DRV - [2012.02.23 17:10:39 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.02.23 17:10:34 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012.02.23 17:10:16 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.02.04 10:56:09 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2011.12.29 11:00:04 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2011.12.16 16:53:01 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV - [2011.12.06 04:44:22 | 009,067,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011.12.06 03:11:50 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011.11.15 04:50:16 | 000,112,096 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2011.10.17 18:40:44 | 000,085,520 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2011.09.21 10:25:34 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\cpuz135_x32.sys -- (cpuz135)
DRV - [2011.09.16 15:10:50 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2011.09.16 15:10:50 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2011.08.17 10:03:58 | 000,137,472 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2011.08.17 10:03:50 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2011.08.17 09:56:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011.08.17 09:56:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011.08.17 09:56:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011.08.17 09:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2011.07.29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2011.07.29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2011.06.24 06:25:26 | 000,039,424 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\aoddriver2.sys -- (AODDriver4.01)
DRV - [2011.04.01 16:06:52 | 000,009,592 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Users\Karel\AppData\Local\0 A.D. alpha\binaries\system\aken.sys -- (Aken)
DRV - [2011.03.18 17:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\system32\speedfan.sys -- (speedfan)
DRV - [2010.11.20 22:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010.11.20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010.11.20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010.11.20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010.11.20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 22:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010.11.20 22:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\terminpt.sys -- (terminpt)
DRV - [2010.11.20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.02.18 09:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2010.01.28 02:33:30 | 000,100,352 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009.05.04 17:30:28 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.11.11 13:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2008.11.11 13:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2008.11.11 13:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.07.23 23:29:16 | 000,047,744 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vserial.sys -- (vserial)
DRV - [2008.07.23 23:29:16 | 000,015,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vsb.sys -- (vsbus)
DRV - [2008.01.25 13:40:20 | 000,015,453 | ---- | M] (Danish Wireless Design A/S) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\FlashUSB.sys -- (FlashUSB)
DRV - [2007.07.15 02:37:04 | 000,027,992 | ---- | M] (EnTech Taiwan) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\pstrip.sys -- (PStrip)
DRV - [1996.04.03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\giveio.sys -- (giveio)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss ... ffd5b19739
IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTe ... ffd5b19739
IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_ss ... ffd5b19739"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=adbar ... 5b19739&q="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.03.03 12:18:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.11 12:48:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.13 17:58:18 | 000,000,000 | ---D | M]

[2011.12.21 18:33:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karel\AppData\Roaming\Mozilla\Extensions
[2012.02.21 19:20:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions
[2012.02.21 19:20:48 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com
[2012.01.31 16:21:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.02.11 12:48:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2012.03.03 12:18:56 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
() (No name found) -- C:\USERS\KAREL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IGW4UYY4.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI
[2012.02.11 12:48:59 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.21 19:20:16 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.01.31 16:21:10 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.01.31 16:21:10 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [boincmgr] C:\Program Files\BOINC\boincmgr.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [boinctray] C:\Program Files\BOINC\boinctray.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NSU_agent] C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe ()
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (Power Software Ltd)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000..\Run: [Clownfish] C:\Program Files\Clownfish\Clownfish.exe ()
O4 - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000..\Run: [Skype] C:\Users\Karel\Desktop\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000..\Run: [zASRockInstantBoot] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerStrip.lnk = C:\Program Files\PowerStrip\PStrip.exe (EnTech Taiwan)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.3.1)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_03)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.168.254 192.168.167.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{83F932DD-A0C4-4280-B27F-4A9578869CD2}: DhcpNameServer = 192.168.168.254 192.168.167.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007.09.27 03:18:49 | 000,087,910 | R--- | M] () - F:\autorun.ico -- [ CDFS ]
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\dvdcheck.exe
O33 - MountPoints2\F\Shell\directx\command - "" = DirectX9\dxsetup.exe
O33 - MountPoints2\F\Shell\setup\command - "" = F:\setup.exe -- [2007.11.01 17:49:20 | 000,771,648 | R--- | M] (Microsoft Corp.)
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\Install.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.vorbis - C:\Windows\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.IV41 - C:\Windows\System32\ir41_32.ax (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[doomguy]

========== Files/Folders - Created Within 7 Days ==========

[2012.03.07 18:44:50 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.03.07 18:41:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Games
[2012.03.07 18:40:20 | 000,584,704 | ---- | C] (OldTimer Tools) -- C:\Users\Karel\Desktop\OTL.exe
[2012.03.07 17:52:32 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.03.07 17:52:30 | 000,000,000 | ---D | C] -- C:\rsit
[2012.03.07 07:47:23 | 000,000,000 | ---D | C] -- C:\Users\Karel\Desktop\Updater
[2012.03.07 07:47:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.03.07 07:47:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012.03.06 20:09:34 | 000,642,712 | ---- | C] (Microsoft Corporation) -- C:\Users\Karel\Desktop\gfwlivesetup_4d5308d2e0000001_DIR.exe
[2012.03.05 19:54:17 | 000,000,000 | ---D | C] -- C:\Users\Karel\Desktop\reifnsk
[2012.03.03 22:28:25 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Roaming\Media Player Classic
[2012.03.03 21:40:48 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo
[2012.03.03 21:40:48 | 000,000,000 | ---D | C] -- C:\Program Files\MediaInfo
[2012.03.03 16:58:45 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Local\by_dekart811
[2012.03.03 12:18:58 | 000,044,376 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2012.03.02 19:14:30 | 000,000,000 | ---D | C] -- C:\Users\Karel\Desktop\LeagueOfLegends
[2012.03.02 19:13:58 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Local\PMB Files
[2012.03.02 19:13:54 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2012.03.02 19:13:12 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2012.03.02 17:51:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperLobby client
[2012.03.01 16:21:07 | 000,000,000 | ---D | C] -- C:\Program Files\Valve
[2012.03.01 16:20:28 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2012.03.01 15:59:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.03.01 15:59:34 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2012.02.29 22:47:42 | 000,000,000 | ---D | C] -- C:\Users\Karel\AppData\Local\TSVNCache
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.03.07 18:51:05 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.03.07 18:50:33 | 013,386,132 | ---- | M] () -- C:\Users\Karel\Desktop\ivap198-b2138.zip
[2012.03.07 18:40:33 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Users\Karel\Desktop\OTL.exe
[2012.03.07 18:29:07 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.03.07 01:29:01 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.03.06 20:09:34 | 000,642,712 | ---- | M] (Microsoft Corporation) -- C:\Users\Karel\Desktop\gfwlivesetup_4d5308d2e0000001_DIR.exe
[2012.03.06 20:05:53 | 000,781,383 | ---- | M] () -- C:\Users\Karel\Desktop\RSIT.exe
[2012.03.06 18:15:18 | 000,666,216 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.03.06 18:15:18 | 000,651,938 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.03.06 18:15:18 | 000,139,898 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.03.06 18:15:18 | 000,120,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.03.06 18:09:41 | 000,010,741 | ---- | M] () -- C:\Users\Karel\AppData\Roaming\PStrip.ini
[2012.03.06 18:08:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.06 18:08:32 | 1408,688,128 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.05 19:50:35 | 000,237,172 | ---- | M] () -- C:\Users\Karel\Desktop\[1.2.3]ReiMinimap_v3.0_03.zip
[2012.03.05 02:32:22 | 000,014,780 | ---- | M] () -- C:\Users\Karel\Desktop\ais.class
[2012.03.05 02:32:22 | 000,001,116 | ---- | M] () -- C:\Users\Karel\Desktop\mod_ReiMinimap.class
[2012.03.04 21:10:46 | 000,010,741 | ---- | M] () -- C:\Users\Karel\AppData\Roaming\PStrip.bak
[2012.03.04 21:08:57 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.04 21:08:57 | 000,020,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.03 22:39:45 | 000,202,593 | ---- | M] () -- C:\Users\Karel\Desktop\thumbs20120303223741.jpg
[2012.03.03 22:37:52 | 002,613,302 | ---- | M] () -- C:\Users\Karel\Desktop\thumbs20120303223741.bmp
[2012.03.03 22:13:13 | 000,327,548 | ---- | M] () -- C:\Users\Karel\Desktop\kabat.jpg
[2012.03.03 16:56:15 | 001,363,482 | ---- | M] () -- C:\Users\Karel\Desktop\Portal.2.Coop.cesky.navod.jak.spustit.Launcher.!!!!.zip
[2012.03.03 14:28:02 | 000,000,038 | ---- | M] () -- C:\Windows\AviSplitter.INI
[2012.03.03 12:18:58 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012.03.03 10:27:32 | 000,006,144 | ---- | M] () -- C:\Users\Karel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.03 02:26:21 | 2094,388,736 | ---- | M] () -- C:\Users\Karel\Desktop\Kabát-Banditi-di-Praga---Turné-2011.avi
[2012.03.02 23:25:39 | 010,957,025 | ---- | M] () -- C:\Users\Karel\Desktop\Super Hostile - Sunburn Islands v1.1.zip
[2012.03.02 21:19:28 | 000,040,241 | ---- | M] () -- C:\Users\Karel\Desktop\kabat-logo.jpg
[2012.03.02 20:08:15 | 000,086,258 | ---- | M] () -- C:\Users\Karel\Desktop\TES V Skyrim- Main theme.pdf
[2012.03.02 19:15:57 | 000,000,384 | ---- | M] () -- C:\Users\Karel\Desktop\Resume Download of League of Legends.url
[2012.03.02 19:13:02 | 002,257,408 | ---- | M] () -- C:\Users\Karel\Desktop\LeagueofLegends.exe
[2012.03.02 17:51:11 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\HyperLobby client.lnk
[2012.03.01 20:26:06 | 000,010,741 | ---- | M] () -- C:\Users\Karel\AppData\Roaming\PStrip.bko
[2012.03.01 20:25:53 | 000,010,764 | ---- | M] () -- C:\Users\Karel\AppData\Roaming\PStrip.bk!
[2012.03.01 18:40:36 | 000,000,712 | ---- | M] () -- C:\Users\Karel\Desktop\Garry's Mod.lnk
[2012.03.01 16:45:11 | 000,001,099 | ---- | M] () -- C:\Users\Karel\Desktop\Garry's Mod Dedicated Server.lnk
[2012.03.01 16:19:28 | 011,074,226 | ---- | M] () -- C:\Users\Karel\Desktop\SAMP-0.3d.rar
[2012.03.01 15:59:35 | 000,000,856 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2012.03.01 15:54:00 | 000,001,610 | -H-- | M] () -- C:\Windows\EPMBatch.ept
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.03.07 18:51:05 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.03.07 18:49:26 | 013,386,132 | ---- | C] () -- C:\Users\Karel\Desktop\ivap198-b2138.zip
[2012.03.06 20:05:51 | 000,781,383 | ---- | C] () -- C:\Users\Karel\Desktop\RSIT.exe
[2012.03.05 19:50:35 | 000,237,172 | ---- | C] () -- C:\Users\Karel\Desktop\[1.2.3]ReiMinimap_v3.0_03.zip
[2012.03.05 15:36:22 | 003,862,147 | ---- | C] () -- C:\Users\Karel\Desktop\minecraft-1.1.jar
[2012.03.05 15:36:21 | 003,886,365 | ---- | C] () -- C:\Users\Karel\Desktop\minecraft.jar
[2012.03.05 15:36:21 | 002,362,837 | ---- | C] () -- C:\Users\Karel\Desktop\minecraft-1.0.0.jar
[2012.03.05 02:32:22 | 000,014,780 | ---- | C] () -- C:\Users\Karel\Desktop\ais.class
[2012.03.05 02:32:22 | 000,001,116 | ---- | C] () -- C:\Users\Karel\Desktop\mod_ReiMinimap.class
[2012.03.03 22:39:44 | 000,202,593 | ---- | C] () -- C:\Users\Karel\Desktop\thumbs20120303223741.jpg
[2012.03.03 22:37:48 | 002,613,302 | ---- | C] () -- C:\Users\Karel\Desktop\thumbs20120303223741.bmp
[2012.03.03 22:13:12 | 000,327,548 | ---- | C] () -- C:\Users\Karel\Desktop\kabat.jpg
[2012.03.03 16:56:05 | 001,363,482 | ---- | C] () -- C:\Users\Karel\Desktop\Portal.2.Coop.cesky.navod.jak.spustit.Launcher.!!!!.zip
[2012.03.03 09:06:30 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2012.03.03 00:26:51 | 2094,388,736 | ---- | C] () -- C:\Users\Karel\Desktop\Kabát-Banditi-di-Praga---Turné-2011.avi
[2012.03.02 23:24:36 | 010,957,025 | ---- | C] () -- C:\Users\Karel\Desktop\Super Hostile - Sunburn Islands v1.1.zip
[2012.03.02 21:19:28 | 000,040,241 | ---- | C] () -- C:\Users\Karel\Desktop\kabat-logo.jpg
[2012.03.02 20:08:15 | 000,086,258 | ---- | C] () -- C:\Users\Karel\Desktop\TES V Skyrim- Main theme.pdf
[2012.03.02 19:15:57 | 000,000,384 | ---- | C] () -- C:\Users\Karel\Desktop\Resume Download of League of Legends.url
[2012.03.02 19:12:58 | 002,257,408 | ---- | C] () -- C:\Users\Karel\Desktop\LeagueofLegends.exe
[2012.03.01 16:45:11 | 000,001,099 | ---- | C] () -- C:\Users\Karel\Desktop\Garry's Mod Dedicated Server.lnk
[2012.03.01 16:45:10 | 000,000,712 | ---- | C] () -- C:\Users\Karel\Desktop\Garry's Mod.lnk
[2012.03.01 16:18:54 | 011,074,226 | ---- | C] () -- C:\Users\Karel\Desktop\SAMP-0.3d.rar
[2012.02.26 17:53:38 | 000,065,536 | ---- | C] () -- C:\Windows\IFinst27.exe
[2012.02.12 21:25:21 | 000,007,605 | ---- | C] () -- C:\Users\Karel\AppData\Local\Resmon.ResmonCfg
[2012.01.08 10:07:05 | 000,010,741 | ---- | C] () -- C:\Users\Karel\AppData\Roaming\PStrip.bko
[2012.01.07 18:56:52 | 000,010,764 | ---- | C] () -- C:\Users\Karel\AppData\Roaming\PStrip.bk!
[2012.01.07 18:56:48 | 000,010,741 | ---- | C] () -- C:\Users\Karel\AppData\Roaming\PStrip.bak
[2012.01.07 18:50:50 | 000,010,741 | ---- | C] () -- C:\Users\Karel\AppData\Roaming\PStrip.ini
[2011.12.31 18:12:50 | 000,819,729 | ---- | C] ( ) -- C:\Windows\System32\mrvcl32.exe
[2011.12.26 23:48:33 | 000,006,144 | ---- | C] () -- C:\Users\Karel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.12.22 14:02:35 | 000,019,840 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2011.12.22 14:02:34 | 002,469,760 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2011.12.22 14:02:34 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2011.12.22 14:02:34 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2011.12.22 14:02:34 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2011.12.22 13:51:58 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011.12.21 18:59:43 | 000,666,216 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2011.12.21 18:59:43 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2011.12.21 18:59:43 | 000,139,898 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2011.12.21 18:59:43 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2011.12.20 20:24:16 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.12.20 20:20:22 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011.12.20 20:19:51 | 000,146,432 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2011.12.20 20:19:51 | 000,072,704 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2011.12.05 22:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011.12.05 22:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011.11.14 20:47:22 | 000,608,507 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011.11.10 03:28:32 | 000,204,960 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2011.11.10 03:28:32 | 000,157,152 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.11.20 22:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2010.11.20 22:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe

========== LOP Check ==========

[2012.03.05 19:57:45 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\.minecraft
[2012.02.26 23:55:34 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\.spoutcraft
[2012.02.18 10:02:05 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\0ad
[2012.03.07 18:55:17 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Azureus
[2012.02.21 19:20:14 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Babylon
[2012.02.04 11:57:29 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Baumaschinen Simulator 2011
[2012.01.06 15:20:35 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\CadSoft
[2011.12.23 09:42:58 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Canneverbe Limited
[2012.02.21 19:15:26 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\fltk.org
[2011.12.22 13:49:07 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\GameRanger
[2011.12.27 13:37:01 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\HyperLobby
[2012.01.01 18:22:02 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Image-Line
[2011.12.20 20:55:35 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\IrfanView
[2012.03.07 18:54:59 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\IVAO
[2012.02.26 17:41:27 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\LG Electronics
[2012.01.04 20:48:39 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Mumble
[2012.02.06 16:12:47 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Nokia
[2011.12.20 20:45:32 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Opera
[2012.02.06 16:07:24 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\PC Suite
[2011.12.26 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Publish Providers
[2012.02.26 16:11:07 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\pymclevel
[2011.12.26 18:56:36 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Sony
[2012.02.28 22:07:51 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Subversion
[2012.02.14 22:31:52 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\TeamViewer
[2012.03.01 21:31:20 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\TS3Client
[2012.01.08 16:44:20 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Ubisoft
[2012.02.07 17:13:57 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\wargaming.net
[2009.07.14 05:53:46 | 000,013,438 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 22:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 22:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010.11.20 22:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 22:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 22:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 05:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2010.11.20 22:29:20 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.09.29 17:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2011.09.29 17:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\System32\drivers\tcpip.sys
[2011.09.29 17:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011.04.25 07:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe

< >

< %systemroot%*.* /U /s >
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\568b9dd10ae9a208d238af25e5517d0a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\568b9dd10ae9a208d238af25e5517d0a\*.tmp -> ]
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[7 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.03.05 19:57:45 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\.minecraft
[2012.02.26 23:55:34 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\.spoutcraft
[2012.02.18 10:02:05 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\0ad
[2011.12.25 14:53:43 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Adobe
[2011.12.20 20:23:18 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\ATI
[2012.03.07 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Azureus
[2012.02.21 19:20:14 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Babylon
[2012.02.04 11:57:29 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Baumaschinen Simulator 2011
[2012.01.06 15:20:35 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\CadSoft
[2011.12.23 09:42:58 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Canneverbe Limited
[2012.02.21 19:15:26 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\fltk.org
[2011.12.22 13:49:07 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\GameRanger
[2011.12.27 13:37:01 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\HyperLobby
[2011.12.20 20:16:17 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Identities
[2012.01.01 18:22:02 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Image-Line
[2012.01.08 16:34:06 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\InstallShield
[2011.12.20 20:55:35 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\IrfanView
[2012.03.07 18:54:59 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\IVAO
[2012.02.26 17:41:27 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\LG Electronics
[2011.12.20 21:26:13 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Macromedia
[2010.11.21 01:46:50 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Media Center Programs
[2012.03.03 22:28:45 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Media Player Classic
[2012.02.15 12:25:26 | 000,000,000 | --SD | M] -- C:\Users\Karel\AppData\Roaming\Microsoft
[2012.02.10 14:17:27 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Mozilla
[2012.01.04 20:48:39 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Mumble
[2012.02.06 16:12:47 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Nokia
[2011.12.20 20:45:32 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Opera
[2012.02.06 16:07:24 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\PC Suite
[2011.12.26 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Publish Providers
[2012.02.26 16:11:07 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\pymclevel
[2012.03.07 18:49:05 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Skype
[2011.12.26 18:56:36 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Sony
[2012.02.28 22:07:51 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Subversion
[2012.02.14 22:31:52 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\TeamViewer
[2012.02.28 22:15:48 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\TortoiseSVN
[2012.03.01 21:31:20 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\TS3Client
[2012.01.08 16:44:20 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\Ubisoft
[2012.02.07 17:13:57 | 000,000,000 | ---D | M] -- C:\Users\Karel\AppData\Roaming\wargaming.net

< %APPDATA%\*.exe /s >
[2011.12.23 11:10:19 | 000,310,208 | ---- | M] (Georgia Institute of Technology) -- C:\Users\Karel\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
[2012.02.28 16:47:24 | 001,457,888 | ---- | M] (GameRanger Technologies) -- C:\Users\Karel\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
[2011.12.20 20:58:26 | 000,015,086 | R--- | M] () -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{5D87C09F-512F-474A-A306-0FE3B89C396F}\launcher.exe
[2012.02.06 16:31:25 | 000,053,248 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{889D48DA-457F-4C8B-9095-6458F2793B12}\ARPPRODUCTICON.exe
[2012.02.06 16:31:25 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{889D48DA-457F-4C8B-9095-6458F2793B12}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
[2012.02.06 16:31:25 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{889D48DA-457F-4C8B-9095-6458F2793B12}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
[2012.02.06 16:31:25 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{889D48DA-457F-4C8B-9095-6458F2793B12}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
[2012.02.06 16:31:25 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Karel\AppData\Roaming\Microsoft\Installer\{889D48DA-457F-4C8B-9095-6458F2793B12}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.03.07 01:29:01 | 000,000,934 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012.03.07 18:29:07 | 000,000,938 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.03.04 21:08:57 | 000,020,640 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.04 21:08:57 | 000,020,640 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.06 18:15:18 | 000,139,898 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2012.03.06 18:15:18 | 000,120,870 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2012.03.06 18:15:18 | 000,666,216 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2012.03.06 18:15:18 | 000,651,938 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2012.03.06 18:15:18 | 001,576,554 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"zASRockInstantBoot" =
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 22:29:41 | 001,174,016 | ---- | M] (Microsoft Corporation)
"PC Suite Tray" = "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray -- [2011.06.16 15:21:06 | 001,500,160 | ---- | M] (Nokia)
"Clownfish" = "C:\Program Files\Clownfish\Clownfish.exe" -- [2012.02.13 11:16:24 | 001,055,992 | ---- | M] ()
"Skype" = "C:\Users\Karel\Desktop\Phone\Skype.exe" /minimized /regrun -- [2012.02.29 08:55:08 | 017,148,552 | R--- | M] (Skype Technologies S.A.)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.02.11 12:48:59 | 000,924,600 | ---- | M] (Mozilla Corporation) MD5=FCB5ABEA5D4A7284A1333B477DD0A403 -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2011.12.22 13:54:14 | 000,748,336 | ---- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >
[2012.01.31 16:21:09 | 000,949,104 | ---- | M] (Opera Software) MD5=CC7001E619906A0FF78C162A0A39D5B7 -- C:\Program Files\Opera\opera.exe

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.03.07 18:51:05 | 000,000,512 | ---- | M] () MD5=279C99AFB4EB6A7E322C73ACABD48679 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2012.03.01 16:42:07 | 000,036,346 | ---- | M] () -- \Program Files\Valve\Garry's Mod\garrysmod\addons\phx2\sound\phx\eggcrack.wav
[2009.02.01 21:30:28 | 000,000,574 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\Glass\glasswindow018a_cracked.vmt
[2009.02.01 21:30:28 | 000,022,064 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\Glass\glasswindow018a_cracked.vtf
[2012.03.03 19:26:23 | 000,000,550 | ---- | M] () -- \Users\Karel\AppData\Roaming\Microsoft\Windows\Recent\Portal.2.Crack.Fix-SKIDROW.lnk
[2010.07.14 03:47:54 | 000,000,100 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\cstrike\materials\concrete\prodwllecracked.vmt
[2010.07.14 03:47:54 | 000,174,968 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\cstrike\materials\concrete\prodwllecracked.vtf
[2010.07.14 04:13:06 | 000,000,540 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\Glass\glasswindow018a_cracked.vmt
[2010.07.14 04:13:06 | 000,022,064 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\Glass\glasswindow018a_cracked.vtf

< *keygen* /s >
[2010.01.23 09:50:40 | 000,036,864 | ---- | M] () -- \Program Files\EAGLE-5.7.0\bin\Keygen.exe

< *loader* /s >
[2011.11.11 12:20:12 | 000,112,128 | ---- | M] () -- \Program Files\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2011.05.09 12:52:16 | 000,002,560 | ---- | M] () -- \Program Files\Nokia\Nokia PC Suite 7\Lang\MapLoader_cze.NLR
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2008.07.23 22:29:12 | 000,052,021 | ---- | M] () -- \Program Files\ODEON\JAF\Flash\loader_TIKUEDGE_INTEL_1.adl
[2008.07.23 22:29:12 | 000,052,021 | ---- | M] () -- \Program Files\ODEON\JAF\Flash\loader_TIKUEDGE_SAMSUNG_1.adl
[2008.07.23 22:29:12 | 000,051,783 | ---- | M] () -- \Program Files\ODEON\JAF\Flash\loader_TIKU_INTEL_2.adl
[2008.07.23 22:29:12 | 000,051,783 | ---- | M] () -- \Program Files\ODEON\JAF\Flash\loader_TIKU_SAMSUNG_2.adl
[2009.02.01 19:53:04 | 000,004,572 | ---- | M] () -- \Program Files\Valve\Garry's Mod\garrysmod\spawnicons\loader.si0
[2009.02.01 19:53:05 | 000,003,003 | ---- | M] () -- \Program Files\Valve\Garry's Mod\garrysmod\spawnicons\loader_static.si0
[2009.02.01 19:50:54 | 000,005,766 | ---- | M] () -- \Program Files\Valve\Garry's Mod\garrysmod\spawnicons\props_trainyard\train_loader001.si0
[2009.02.01 20:22:25 | 000,000,179 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loaderCHROME.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loaderCHROME.vtf
[2009.02.01 20:22:25 | 000,000,073 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base.vmt
[2009.02.01 20:22:25 | 000,011,128 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base.vtf
[2009.02.01 20:22:25 | 000,000,080 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base_panels.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base_panels.vtf
[2009.02.01 20:22:25 | 000,000,079 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base_sides.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_base_sides.vtf
[2009.02.01 20:22:25 | 000,000,079 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_body_hatch.vmt
[2009.02.01 20:22:25 | 000,011,128 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_body_hatch.vtf
[2009.02.01 20:22:25 | 000,000,078 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_body_side.vmt
[2009.02.01 20:22:25 | 000,011,128 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_body_side.vtf
[2009.02.01 20:22:25 | 000,000,184 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_darkCHROME.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_darkCHROME.vtf
[2009.02.01 20:22:25 | 000,000,073 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_head.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_head.vtf
[2009.02.01 20:22:25 | 000,000,078 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_hydro.vmt
[2009.02.01 20:22:25 | 000,001,512 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_hydro.vtf
[2009.02.01 20:22:25 | 000,000,082 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_hydro_cut.vmt
[2009.02.01 20:22:25 | 000,000,888 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_hydro_cut.vtf
[2009.02.01 20:22:25 | 000,000,078 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_side1.vmt
[2009.02.01 20:22:25 | 000,011,048 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_leg_side1.vtf
[2009.02.01 20:22:25 | 000,000,186 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_steelchrome1.vmt
[2009.02.01 20:22:25 | 000,002,936 | ---- | M] () -- \Program Files\Valve\Garry's Mod\hl2\materials\PerfTest\loader\loader_steelchrome1.vtf
[2012.02.29 08:49:32 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.02.29 08:49:32 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.02.29 08:49:32 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.02.29 08:49:32 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2011.12.26 21:58:30 | 000,040,660 | ---- | M] () -- \Users\Karel\AppData\Local\Opera\Opera\widgets\fastesttube-youtube-video-downloader-1.5.4-1.oex
[2010.07.14 04:14:11 | 000,000,179 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loaderCHROME.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loaderCHROME.vtf
[2010.07.14 04:14:11 | 000,000,073 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base.vmt
[2010.07.14 04:14:11 | 000,011,128 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base.vtf
[2010.07.14 04:14:11 | 000,000,080 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base_panels.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base_panels.vtf
[2010.07.14 04:14:11 | 000,000,079 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base_sides.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_base_sides.vtf
[2010.07.14 04:14:11 | 000,000,079 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_body_hatch.vmt
[2010.07.14 04:14:11 | 000,011,128 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_body_hatch.vtf
[2010.07.14 04:14:11 | 000,000,078 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_body_side.vmt
[2010.07.14 04:14:11 | 000,011,128 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_body_side.vtf
[2010.07.14 04:14:11 | 000,000,184 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_darkCHROME.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_darkCHROME.vtf
[2010.07.14 04:14:11 | 000,000,073 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_head.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_head.vtf
[2010.07.14 04:14:11 | 000,000,078 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_hydro.vmt
[2010.07.14 04:14:11 | 000,001,512 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_hydro.vtf
[2010.07.14 04:14:11 | 000,000,082 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_hydro_cut.vmt
[2010.07.14 04:14:11 | 000,000,888 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_hydro_cut.vtf
[2010.07.14 04:14:11 | 000,000,078 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_side1.vmt
[2010.07.14 04:14:11 | 000,011,048 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_leg_side1.vtf
[2010.07.14 04:14:11 | 000,000,186 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_steelchrome1.vmt
[2010.07.14 04:14:11 | 000,002,936 | ---- | M] () -- \Users\Karel\Desktop\css\Counter Strike Source 2012\hl2\materials\PerfTest\loader\loader_steelchrome1.vtf
[2012.02.29 17:59:44 | 000,004,406 | ---- | M] () -- \Users\Karel\Documents\wire\lua\entities\gmod_wire_expression2\core\extloader.lua
[2012.02.29 17:59:45 | 000,010,858 | ---- | M] () -- \Users\Karel\Documents\wire\lua\wire\stools\tool_loader.lua
[2012.02.28 22:18:13 | 000,004,406 | ---- | M] () -- \Users\Karel\Documents\wiremod\wire\lua\entities\gmod_wire_expression2\core\extloader.lua
[2012.02.28 22:18:14 | 000,010,858 | ---- | M] () -- \Users\Karel\Documents\wiremod\wire\lua\wire\stools\tool_loader.lua
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2009.07.14 05:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2011.12.21 18:58:51 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2011.12.21 18:58:51 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2011.12.21 18:58:51 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2010.11.21 01:38:44 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4.manifest
[2010.11.21 01:38:44 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4_winload.exe.mui_3bc5b827
[2010.11.21 01:38:44 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4_winresume.exe.mui_ff8b5358
[2010.11.20 22:31:02 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2010.11.20 22:31:02 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2010.11.20 22:31:02 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 03:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.13 18:54:50 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2010.11.21 01:37:59 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4.manifest
[2010.11.20 22:23:54 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 02:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:9D1B94FD

< End of report >

[doomguy]

OTL Extras logfile created on: 7.3.2012 18:46:02 - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = C:\Users\Karel\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,75 Gb Total Physical Memory | 0,42 Gb Available Physical Memory | 23,80% Memory free
4,37 Gb Paging File | 2,14 Gb Available in Paging File | 49,00% Paging File free
Paging file location(s): c:\pagefile.sys 2686 4096 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 49,81 Gb Total Space | 0,85 Gb Free Space | 1,71% Space Free | Partition Type: NTFS
Drive D: | 300,88 Gb Total Space | 7,92 Gb Free Space | 2,63% Space Free | Partition Type: NTFS
Drive E: | 115,07 Gb Total Space | 34,69 Gb Free Space | 30,15% Space Free | Partition Type: NTFS
Drive F: | 2,79 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive I: | 197,15 Gb Total Space | 28,55 Gb Free Space | 14,48% Space Free | Partition Type: FAT32

Computer Name: KAREL-PC | User Name: Karel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{055A1919-3BBA-4BD5-8B3C-3851879AC185}" = Morrowind
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D97F8D1-2102-53D2-5633-C992D6086801}" = CCC Help Chinese Traditional
"{0EA00EA7-42C0-ED9C-9110-2C04B8EDBA66}" = CCC Help Italian
"{0EB86B70-91FF-39BF-633C-785DF2218CC6}" = CCC Help French
"{1111706F-666A-4037-7777-203328764D10}" = JavaFX 2.0.3
"{1686C07D-C2BB-A8B2-C5ED-32C4EE1A3E62}" = CCC Help Spanish
"{18B6A9F8-25BC-5978-6B42-A50FA2CABC18}" = CCC Help English
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks v.0.7.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83217003FF}" = Java(TM) 7 Update 3
"{298C6691-46B2-2065-0DD7-1E7B3B669A47}" = CCC Help Finnish
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2D99A593-C841-43A7-B7C9-D6F3AE70B756}" = Nokia Connectivity Cable Driver
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{305C431C-CC6E-5506-CE75-29512315D306}" = AMD Drag and Drop Transcoding
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{341E1C05-5091-418F-B862-C28253A99F25}" = BOINC
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CC6719B-F874-49CF-82A0-D3F5D65FFE2A}" = Microsoft WorldWide Telescope
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{400C5445-1AE8-1A41-CAC6-AB114341F65D}" = CCC Help Swedish
"{448B1C6D-02C2-7681-66B2-624E58B25375}" = CCC Help Turkish
"{46EB9D45-FC1A-2635-1693-176E6FA1C672}" = CCC Help Portuguese
"{49B6F667-76EB-4E9D-ACD2-84B7437901C0}" = LG PC Suite II
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{54B7A3C7-0940-4C16-A509-FC3C3758D22A}_is1" = Amnesia - The Dark Descent
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5D87C09F-512F-474A-A306-0FE3B89C396F}" = RuneScape Launcher 1.2
"{5ED9E38C-9A96-49D8-89B3-92E278003FCF}" = TRS2006
"{605333A6-963F-480C-A358-1301CAA6CFF6}" = TES Construction Set
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{651F43AA-3F06-9277-6F1B-8E8155017463}" = CCC Help Polish
"{662CFD19-EA80-4EFE-A0D8-EE10EFEB3C83}" = Livestream Procaster
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68DE32E1-292B-6A02-6A53-935BFAE70C99}" = CCC Help Chinese Standard
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6F35D5AE-3D28-4408-8731-59972AE27657}" = LG PC Suite III
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{79438F1E-DEC3-443D-9DCD-FECE2D68C605}" = IL-2 Sturmovik 1946
"{7C723C94-CB1B-E2BD-0E90-BC64DA26074C}" = AMD Fuel
"{818212BA-7F8C-DDF9-64BE-F6D0B6F46D29}" = CCC Help German
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84F4542C-ED64-28AC-49B3-1A9BAB395AB4}" = CCC Help Hungarian
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{889D48DA-457F-4C8B-9095-6458F2793B12}" = Nokia Software Updater
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}" = Microsoft IntelliPoint 8.2
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C41195F-11B3-8EEC-6634-7183BE6CB1B1}" = CCC Help Japanese
"{A146E311-4ABF-57D5-3773-92D303458BEC}" = AMD Media Foundation Decoders
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A33A89D0-2F48-FD1C-A243-9073EE0592E0}" = Catalyst Control Center InstallProxy
"{A3827AD3-3553-4463-87B3-D1B88B24C468}" = TortoiseSVN 1.7.5.22551 (32 bit)
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A66FB6C7-B689-AFD5-21BA-7CAF8E44E6E6}" = Catalyst Control Center Graphics Previews Common
"{A869FEA9-B223-4324-B130-008AC50B054B}" = HyperLobby client
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Microsoft Flight Simulator X: Acceleration
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Czech
"{AE136F7F-7DC6-600F-9DF9-BFA0DF516135}" = Catalyst Control Center Localization All
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B33D8DA3-28E5-2EA8-CC16-8D8A9CED91C4}" = AMD Catalyst Install Manager
"{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
"{B4CF00AE-2622-7BC6-24EC-4E5A0A8C9135}" = CCC Help Czech
"{BA2F3EBC-FE07-4AB5-B906-14DF2C74C523}" = Age of Empires II - the Conquerors WideScreen Patcher
"{BAE1C0A8-634D-CFF1-0E0C-893092427D34}" = CCC Help Danish
"{C0E18DC4-C74A-4889-AE3A-933471023787}" = LG PC Suite III
"{C2979637-6A5A-4CF3-876C-AA2F199E3750}" = LGE GSM Device Driver OMAPV1030
"{C2DEC505-79A9-E952-32B0-31B67B83E231}" = CCC Help Korean
"{C2FB14FB-DF6B-287D-BDC3-C7BEC86F539E}" = AMD VISION Engine Control Center
"{C373F7C4-05D2-4047-96D1-6AF30661C6AA}" = PC Connectivity Solution
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{CCEFAE22-4D01-0084-D1CA-AC14AA743A97}" = CCC Help Greek
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0D14551-3A2D-433B-861F-F4DCE5422759}" = Nokia PC Suite
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DB3D1784-421D-9942-3AC4-D90B18615BBC}" = ccc-utility
"{DE460826-5E72-2357-154F-E376F9926008}" = CCC Help Norwegian
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E217A3D4-2FF9-4D5F-9C20-1386E0FF9864}" = LogMeIn
"{E21FFD29-D231-3BD3-6941-15710E44BED4}" = CCC Help Dutch
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E3E313C7-0AE2-7F44-52E8-528D4EDC74B2}" = CCC Help Thai
"{EA11B681-D0F1-4675-BEFC-59BF222844F0}_is1" = Sins Of A Solar Empire: Diplomacy v1.32 Ironclad Online
"{ED396D9C-99C3-4243-80DF-0934DEA6C66E}_is1" = Road Construction Simulator 2011 Version 1.1
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F9929777-7B6E-F53D-3105-1C06E5120CA1}" = CCC Help Russian
"{FA02ACAC-9E14-4878-A257-92A22A647C2C}" = LG USB Modem Drivers
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"72A50F48CC5601190B9C4E74D81161693133E7F7" = Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)
"8461-7759-5462-8226" = Vuze
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II Trial" = Microsoft Age of Empires II Trial Version
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"ASIO4ALL" = ASIO4ALL
"ASRock InstantBoot_is1" = ASRock InstantBoot v1.24
"AuranTS2009_is1" = Trainz Simulator 2009: World Builder Edition
"avast" = avast! Free Antivirus
"AviScreen Classic (Freeware)_is1" = AviScreen Classic Version 1.3
"CCleaner" = CCleaner
"Clownfish" = Clownfish for Skype
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"CraftBukkit" = CraftBukkit
"DriverAgent.exe" = DriverAgent by eSupport.com
"E0AC723A3DE3A04256288CADBBB011B112AED454" = Windows Driver Package - Nokia Modem (02/25/2011 4.7)
"EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 9.1.0 Home Edition
"FL Studio 10" = FL Studio 10
"FLASHDRV_UNINSTALL" = Flash Loader utility driver
"FlightSim_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Microsoft Flight Simulator X: Acceleration
"FormatFactory" = FormatFactory 2.90
"Fraps" = Fraps (remove only)
"GSMULTI" = GSMULTI V3.0
"IL Download Manager" = IL Download Manager
"InstallShield_{79438F1E-DEC3-443D-9DCD-FECE2D68C605}" = IL-2 Sturmovik 1946
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"IrfanView" = IrfanView (remove only)
"IvAp-v2_is1" = IvAp v1.9.8 (build 2138)
"JAFSetup" = JAF Setup
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.8.0 (Basic)
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mafia II_is1" = Mafia II
"MediaInfo" = MediaInfo 0.7.50
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2
"Mobiola Web Camera for S60_is1" = Mobiola Web Camera for S60 3.0.15
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"Nokia PC Suite" = Nokia PC Suite
"OpenAL" = OpenAL
"Opera 11.61.1250" = Opera 11.61
"Postal 2_is1" = Portal 2
"PowerISO" = PowerISO
"PowerStrip 3 (remove only)" = PowerStrip 3 (remove only)
"RTMshadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Flight Simulator X
"Saints Row The Third_is1" = Saints Row The Third
"SP1shadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}" = Flight Simulator X Service Pack 1
"SpeedFan" = SpeedFan (remove only)
"TA3D" = TA3D - A Remake of Total Annhilation
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"Virtual DJ Pro Full - Atomix Productions" = Virtual DJ Pro Full - Atomix Productions
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3936861771-3270663531-1454860607-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"0 A.D." = 0 A.D.
"GameRanger" = GameRanger

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4.3.2012 13:42:02 | Computer Name = Karel-PC | Source = Software Protection Platform Service | ID = 8193
Description = Plánovač aktivace licence (sppuinotify.dll) byl ukončen s následujícím
kódem chyby: 0x80070005

Error - 4.3.2012 14:42:02 | Computer Name = Karel-PC | Source = Software Protection Platform Service | ID = 8193
Description = Plánovač aktivace licence (sppuinotify.dll) byl ukončen s následujícím
kódem chyby: 0x80070005

Error - 4.3.2012 15:42:03 | Computer Name = Karel-PC | Source = Software Protection Platform Service | ID = 8193
Description = Plánovač aktivace licence (sppuinotify.dll) byl ukončen s následujícím
kódem chyby: 0x80070005

Error - 4.3.2012 16:10:03 | Computer Name = Karel-PC | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 4.3.2012 16:11:31 | Computer Name = Karel-PC | Source = WinMgmt | ID = 10
Description =

Error - 4.3.2012 19:32:25 | Computer Name = Karel-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nokia\Nokia PC Suite
7\TIS_Windows7PIM.dll se nezdařilo. Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 5.3.2012 19:32:20 | Computer Name = Karel-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nokia\Nokia PC Suite
7\TIS_Windows7PIM.dll se nezdařilo. Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 6.3.2012 13:08:41 | Computer Name = Karel-PC | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 6.3.2012 13:10:22 | Computer Name = Karel-PC | Source = WinMgmt | ID = 10
Description =

Error - 7.3.2012 3:50:32 | Computer Name = Karel-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nokia\Nokia PC Suite
7\TIS_Windows7PIM.dll se nezdařilo. Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

[ System Events ]
Error - 5.3.2012 17:41:40 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7031
Description = Služba Windows Media Player Network Sharing Service byla nečekaně
ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund:
Restart the service.

Error - 6.3.2012 11:30:37 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7031
Description = Služba Windows Media Player Network Sharing Service byla nečekaně
ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund:
Restart the service.

Error - 6.3.2012 13:09:15 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Adobe Licensing Console bylo dosaženo
časového limitu (30000 ms).

Error - 6.3.2012 13:09:15 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7000
Description = Služba Adobe Licensing Console neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 6.3.2012 13:12:40 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7031
Description = Služba TeamViewer 7 byla nečekaně ukončena. Stalo se to 1 krát. Následující
opravná akce bude spuštěna za 2000 milisekund: Restart the service.

Error - 6.3.2012 13:12:54 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7031
Description = Služba TeamViewer 7 byla nečekaně ukončena. Stalo se to 2 krát. Následující
opravná akce bude spuštěna za 2000 milisekund: Restart the service.

Error - 6.3.2012 13:13:01 | Computer Name = Karel-PC | Source = Service Control Manager | ID = 7034
Description = Služba TeamViewer 7 byla neočekávaně ukončena. Tento stav nastal již
3krát.

Error - 6.3.2012 13:38:06 | Computer Name = Karel-PC | Source = DCOM | ID = 10001
Description =

Error - 6.3.2012 15:00:44 | Computer Name = Karel-PC | Source = BROWSER | ID = 8032
Description =

Error - 7.3.2012 9:10:40 | Computer Name = Karel-PC | Source = bowser | ID = 8003
Description =


< End of report >

[doomguy]

Teb keygen od Eaglu a Eagle jsem uz smazal protze sem si budu kupovat lepsi CAD sistem

[vyosek]

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (VGPU)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (atidgllk)
  IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss ... ffd5b19739
  IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  IE - HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=110482&mntrId=fa5aec7500000000000000ffd5b19739
  FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
  FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
  FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
  FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_ss&affID=110482&mntrId=fa5aec7500000000000000ffd5b19739"
  FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=adbartrp&affID=110482&mntrId=fa5aec7500000000000000ffd5b19739&q="
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  [2012.02.21 19:20:48 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com
  () (No name found) -- C:\USERS\KAREL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IGW4UYY4.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI
  O13 - gopher Prefix: missing
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  [3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\568b9dd10ae9a208d238af25e5517d0a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\568b9dd10ae9a208d238af25e5517d0a\*.tmp -> ]
  [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  [7 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [2012.03.07 01:29:01 | 000,000,934 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2012.03.07 18:29:07 | 000,000,938 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  :services
  gupdate
  gupdatem
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "LogMeIn GUI"=-
  "PWRISOVM.EXE"=-
  "Adobe ARM"=-
  "SunJavaUpdateSched"=-
  "LogMeIn Hamachi Ui"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "zASRockInstantBoot"=-
  "PC Suite Tray"=-
  "Skype"=-
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[doomguy]

All processes killed
========== OTL ==========
Service VGPU stopped successfully!
Service VGPU deleted successfully!
Service atidgllk stopped successfully!
Service atidgllk deleted successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\S-1-5-21-3936861771-3270663531-1454860607-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_USERS\S-1-5-21-3936861771-3270663531-1454860607-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3936861771-3270663531-1454860607-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-3936861771-3270663531-1454860607-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Prefs.js: "Search the web (Babylon)" removed from browser.search.defaultenginename
Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1
Prefs.js: "Search the web (Babylon)" removed from browser.search.selectedEngine
Prefs.js: "http://search.babylon.com/?babsrc=HP_ss ... ffd5b19739" removed from browser.startup.homepage
Prefs.js: "http://search.babylon.com/?babsrc=adbar ... 5b19739&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\content folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com\components folder moved successfully.
C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\igw4uyy4.default\extensions\ffxtlbr@babylon.com folder moved successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7C7F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder deleted successfully.
C:\Windows\SoftwareDistribution\Download\568b9dd10ae9a208d238af25e5517d0a\BITB4A5.tmp deleted successfully.
C:\Windows\System32\tmp6BD7.tmp deleted successfully.
C:\Windows\System32\tmp6BD8.tmp deleted successfully.
C:\Windows\Temp\fla9E66.tmp deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\aviflt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\bmpFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\fliFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\Get.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\gifFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\jpgFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\KcActiveX.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\kcedit.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\kcfile.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\kclist.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\KcWebX.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\mmfs2.dll deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\pcxFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\pngFlt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\Registry2.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\tgaflt.ift deleted successfully.
C:\Windows\Temp\mrt5B58.tmp\volume.mfx deleted successfully.
C:\Windows\Temp\mrt5B58.tmp folder deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\aviflt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\bmpFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\fliFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\Get.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\gifFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\jpgFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\KcActiveX.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\kcedit.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\kcfile.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\kclist.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\KcWebX.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\mmfs2.dll deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\pcxFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\pngFlt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\Registry2.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\tgaflt.ift deleted successfully.
C:\Windows\Temp\mrt8C57.tmp\volume.mfx deleted successfully.
C:\Windows\Temp\mrt8C57.tmp folder deleted successfully.
C:\Windows\Temp\mrt8CD3.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrt8CD3.tmp folder deleted successfully.
C:\Windows\Temp\mrt93E5.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrt93E5.tmp folder deleted successfully.
C:\Windows\Temp\mrt951D.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrt951D.tmp folder deleted successfully.
C:\Windows\Temp\mrtC83D.tmp\stdrt.exe deleted successfully.
C:\Windows\Temp\mrtC83D.tmp folder deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn GUI deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PWRISOVM.EXE deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zASRockInstantBoot deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\PC Suite Tray deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Karel
->Temp folder emptied: 205170188 bytes
->Temporary Internet Files folder emptied: 523446 bytes
->Java cache emptied: 19631 bytes
->FireFox cache emptied: 49229851 bytes
->Opera cache emptied: 6381450 bytes
->Flash cache emptied: 6725 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 25076 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 249,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Karel
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.35.1 log created on 03082012_200040

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\_avast_\Webshlock.txt not found!

Registry entries deleted on Reboot...

[vyosek]

Jak se chova PC

[doomguy]

Dobře ma rychlí start asi 10 sekund moc dekuju. . Co si myslite o novem avastu 7 ? nedavno sem si ho aktualizoval a prave nainstalovala se tato verze jinak pocitac funguje perfektne dekuju moc

[vyosek]

Ja jsem s Avastem velmi spokojen, nyni jsem zakoupil licenci na jeho komplexni balicek zabezpeceni a paradni

[doomguy]

Supr sem rad ze ste rad jinak dekuju jeste jednou moc ste pomohly tak zas nekdy naschle.

[vyosek]

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

A je to...

I za chodnik74, nemate zac