Preventivka, Děkuji:)

Zpráva

DavidNeva · #1 Příspěvek od **DavidNeva** » 02 pro 2012 22:33

Mohli by jste se mi na to kouknout?

Logfile of random's system information tool 1.09 (written by random/random)
Run by David at 2012-12-02 22:31:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive H: has 301 GB (63%) free of 477 GB
Total RAM: 1022 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:33, on 2.12.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17114)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\Ati2evxx.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\Ati2evxx.exe
H:\Program Files\Alwil Software\Avast5\AvastSvc.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
H:\Program Files\Bonjour\mDNSResponder.exe
H:\Program Files\Java\jre6\bin\jqs.exe
H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
H:\WINDOWS\system32\PnkBstrA.exe
H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
H:\WINDOWS\Explorer.EXE
H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
H:\WINDOWS\RTHDCPL.EXE
H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
H:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
H:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe
H:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
H:\Program Files\DivX\DivX Update\DivXUpdate.exe
H:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
H:\Program Files\iTunes\iTunesHelper.exe
H:\program files\real\realplayer\update\realsched.exe
H:\Program Files\Common Files\Java\Java Update\jusched.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Documents and Settings\David\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe
H:\Program Files\iPod\bin\iPodService.exe
H:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
H:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
H:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
H:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
H:\WINDOWS\system32\hpoipm07.exe
H:\Documents and Settings\David\Desktop\RSIT.exe
H:\Program Files\trend micro\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2790392
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.zaparit.cz/heslo.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBitT.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - H:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - H:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: BitTorrentBar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBitT.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - H:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - H:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - H:\Program Files\Softonic\Softonic\1.6.7.4\bh\Softonic.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - H:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - H:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBitT.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - H:\Program Files\Softonic\Softonic\1.6.7.4\SoftonicTlbr.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [avast5] H:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "H:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Launch LgDeviceAgent] "H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [StartCCC] "H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HydraVisionDesktopManager] "H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "H:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [APSDaemon] "H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DATAMNGR] H:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [QuickTime Task] "H:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "H:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "H:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [QuickTime Task] "H:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Google Update] "H:\Documents and Settings\David\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = H:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: HPAiODevice(hp psc 900 series) - 1.lnk = H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://H:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - H:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - H:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 0843170612
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} (Java Plug-in 1.6.0_23) -
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} (Java Plug-in 1.6.0_24) -
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} (Java Plug-in 1.6.0_26) -
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} (Java Plug-in 1.6.0_29) -
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - H:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: H:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll H:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - H:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - H:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - H:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - H:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - H:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - H:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - H:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - H:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - H:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - H:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - H:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - H:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PnkBstrA - Unknown owner - H:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia - H:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - H:\Program Files\Skype\Updater\Updater.exe

--
End of file - 13378 bytes

======Scheduled tasks folder======

H:\WINDOWS\tasks\Adobe Flash Player Updater.job
H:\WINDOWS\tasks\AppleSoftwareUpdate.job
H:\WINDOWS\tasks\avast! Emergency Update.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job
H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job
H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job

=========Mozilla firefox=========

ProfilePath - H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default

prefs.js - "browser.startup.homepage" - "http://www.searchnu.com/406"
prefs.js - "keyword.URL" - "http://dts.search-results.com/sr?src=ff ... 06&sr=0&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=H:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"wrc@avast.com"=H:\Program Files\Alwil Software\Avast5\WebRep\FF
"{0153E448-190B-4987-BDE1-F256CADA672F}"=H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"jqs@sun.com"=H:\Program Files\Java\jre6\lib\deploy\jqs\ff

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.110 Plugin
"Path"=H:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=H:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=H:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=H:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=H:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=H:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37]
"Description"=
"Path"=H:\WINDOWS\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=H:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=h:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=H:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=h:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14]
"Description"=RealJukebox Netscape Plugin
"Path"=h:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14]
"Description"=RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
"Path"=H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14]
"Description"=RealPlayer Download Plugin
"Path"=h:\program files\real\realplayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=H:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

H:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}(2)
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

H:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

H:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nppl3260.xpt
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpplugin.dll
QuickTimePlugin.class

H:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
Search_Results.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\extensions\
4fff10c03aec9@4fff10c03af02.info

H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\searchplugins\
conduit.xml
MyStart Search.xml
Search_Results.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-10-20 426736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - H:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - H:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - H:\Program Files\Java\jre6\bin\ssv.dll [2012-09-24 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
BitTorrentBar Toolbar - H:\Program Files\BitTorrentBar\prxtbBitT.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - H:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
DataMngr - H:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL [2012-03-12 101272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22 4529344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - H:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-09-24 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-09-24 79856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}]
Softonic Helper Object - H:\Program Files\Softonic\Softonic\1.6.7.4\bh\Softonic.dll [2012-08-02 248936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - H:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - H:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]
{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - H:\Program Files\BitTorrentBar\prxtbBitT.dll [2011-05-09 176936]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]
{5018CFD2-804D-4C99-9F81-25EAEA2769DE} - Softonic Toolbar - H:\Program Files\Softonic\Softonic\1.6.7.4\SoftonicTlbr.dll [2012-08-02 274536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"=H:\WINDOWS\system32\HDAShCut.exe [2005-01-08 61952]
"RTHDCPL"=H:\WINDOWS\RTHDCPL.EXE [2005-09-22 14854144]
"Alcmtr"=H:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]
"NeroFilterCheck"=H:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Share-to-Web Namespace Daemon"=H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe [2001-07-03 57344]
"avast5"=H:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2012-10-30 4297136]
"GrooveMonitor"=H:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Launch LgDeviceAgent"=H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [2010-08-03 358472]
"Launch LGDCore"=H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [2010-08-03 3649096]
"StartCCC"=H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"HydraVisionDesktopManager"=H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe [2003-09-16 270336]
"DivXUpdate"=H:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]
"APSDaemon"=H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-08-27 59280]
"Adobe Reader Speed Launcher"=H:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-07-31 38872]
"Adobe ARM"=H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-11 919008]
"DATAMNGR"=H:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE [2012-03-12 1694608]
"QuickTime Task"=H:\Program Files\QuickTime\QTTask.exe [2012-04-18 421888]
"iTunesHelper"=H:\Program Files\iTunes\iTunesHelper.exe [2012-09-09 421776]
"TkBellExe"=H:\program files\real\realplayer\update\realsched.exe [2012-10-20 296096]
"SunJavaUpdateSched"=H:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-09-17 254896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=H:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Clownfish"= []
"QuickTime Task"=H:\Program Files\QuickTime\QTTask.exe [2012-04-18 421888]
"Google Update"=H:\Documents and Settings\David\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-07-17 116648]

H:\Documents and Settings\All Users\Start Menu\Programs\Startup
HPAiODevice(hp psc 900 series) - 1.lnk - H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe

H:\Documents and Settings\David\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - H:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="H:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll H:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
H:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
H:\WINDOWS\system32\WgaLogon.dll [2009-03-11 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-19 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=H:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\Skype\Plugin Manager\skypePM.exe"="H:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"H:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="H:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"H:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="H:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2"
"H:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="H:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"H:\Program Files\Garena\Garena.exe"="H:\Program Files\Garena\Garena.exe:*:Disabled:Garena"
"H:\WINDOWS\system32\PnkBstrA.exe"="H:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"H:\WINDOWS\system32\PnkBstrB.exe"="H:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"H:\Files\Repair.exe"="H:\Files\Repair.exe:*:Enabled:Blizzard Repair Utility"
"H:\Documents and Settings\olda\My Documents\Stažené soubory\.minecraft\MinecraftSP.exe"="H:\Documents and Settings\olda\My Documents\Stažené soubory\.minecraft\MinecraftSP.exe:*:Enabled:MinecraftSP"
"H:\Documents and Settings\olda\My Documents\Stažené soubory\ChmatJabko.exe"="H:\Documents and Settings\olda\My Documents\Stažené soubory\ChmatJabko.exe:*:Enabled:ChmatJabko"
"H:\Program Files\Pando Networks\Media Booster\PMB.exe"="H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"H:\Riot Games\League of Legends\air\LolClient.exe"="H:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"H:\Riot Games\League of Legends\game\League of Legends.exe"="H:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"H:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="H:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"H:\Riot Games\League of Legends\lol.launcher.exe"="H:\Riot Games\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher"
"H:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="H:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"H:\Program Files\Steam\Steam.exe"="H:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"H:\Program Files\Steam\steamapps\neverysak\team fortress 2\hl2.exe"="H:\Program Files\Steam\steamapps\neverysak\team fortress 2\hl2.exe:*:Enabled:hl2"
"H:\Program Files\Google\Google Earth\plugin\geplugin.exe"="H:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"H:\Program Files\SimBin\STCC The Game 2\Race_Steam.exe"="H:\Program Files\SimBin\STCC The Game 2\Race_Steam.exe:*:Enabled:RACE 07"
"H:\WINDOWS\system32\dpvsetup.exe"="H:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"H:\Program Files\csko.exe"="H:\Program Files\csko.exe:*:Enabled:Half-Life Launcher"
"H:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe"="H:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe:*:Enabled:DTX broker"
"H:\Program Files\BitTorrent\BitTorrent.exe"="H:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"H:\WINDOWS\system32\javaw.exe"="H:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"H:\Program Files\Skype\Phone\Skype.exe"="H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"H:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="H:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"
"H:\Program Files\Bonjour\mDNSResponder.exe"="H:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"H:\Program Files\iTunes\iTunes.exe"="H:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"H:\Documents and Settings\David\Desktop\ChmatJabko.exe"="H:\Documents and Settings\David\Desktop\ChmatJabko.exe:*:Enabled:ChmatJabko"
"H:\Documents and Settings\Kačka\Local Settings\Temp\TeamViewer\Version7\TeamViewer.exe"="H:\Documents and Settings\Kačka\Local Settings\Temp\TeamViewer\Version7\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"H:\Program Files\Java\jre6\bin\javaw.exe"="H:\Program Files\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\Pando Networks\Media Booster\PMB.exe"="H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=H:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=H:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-12-02 22:12:57 ----D---- H:\Program Files\trend micro
2012-12-02 22:12:52 ----D---- H:\rsit
2012-11-25 20:13:05 ----D---- H:\Program Files\CCleaner
2012-11-16 21:21:24 ----A---- H:\user.js
2012-11-16 21:20:52 ----D---- H:\Program Files\Softonic
2012-11-16 01:12:28 ----HDC---- H:\WINDOWS\$NtUninstallKB2727528$
2012-11-16 01:12:04 ----HDC---- H:\WINDOWS\$NtUninstallKB2761226$

======List of files/folders modified in the last 1 month======

2012-12-02 22:31:05 ----D---- H:\WINDOWS\Prefetch
2012-12-02 22:12:57 ----RD---- H:\Program Files
2012-12-02 21:36:18 ----D---- H:\WINDOWS\Temp
2012-12-02 15:00:00 ----A---- H:\WINDOWS\SchedLgU.Txt
2012-12-02 10:46:48 ----D---- H:\WINDOWS\system32\Lang
2012-12-01 22:02:59 ----D---- H:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2012-12-01 21:57:26 ----D---- H:\Program Files\Mozilla Firefox
2012-11-30 00:29:17 ----D---- H:\WINDOWS\system32\CatRoot2
2012-11-27 14:36:55 ----SHD---- H:\WINDOWS\Installer
2012-11-27 14:36:55 ----D---- H:\Config.Msi
2012-11-27 14:36:49 ----D---- H:\Documents and Settings\All Users\Application Data\Skype
2012-11-25 21:00:34 ----D---- H:\WINDOWS
2012-11-25 20:55:31 ----A---- H:\WINDOWS\NeroDigital.ini
2012-11-25 20:55:29 ----D---- H:\Filmy
2012-11-25 20:16:39 ----D---- H:\Documents and Settings\David\Application Data\Skype
2012-11-25 20:16:38 ----D---- H:\Documents and Settings\David\Application Data\BitTorrent
2012-11-25 20:16:11 ----D---- H:\WINDOWS\Logs
2012-11-25 20:16:11 ----D---- H:\WINDOWS\Debug
2012-11-25 20:16:08 ----D---- H:\WINDOWS\Minidump
2012-11-23 19:31:11 ----HD---- H:\WINDOWS\inf
2012-11-23 12:50:40 ----D---- H:\WINDOWS\system32\drivers
2012-11-22 18:12:17 ----D---- H:\Documents and Settings\All Users\Application Data\Adobe
2012-11-22 18:12:00 ----A---- H:\WINDOWS\system32\FlashPlayerApp.exe
2012-11-21 19:01:58 ----SHD---- H:\WINDOWS\CSC
2012-11-18 19:48:22 ----RSD---- H:\WINDOWS\assembly
2012-11-18 19:40:46 ----D---- H:\WINDOWS\Microsoft.NET
2012-11-17 13:20:53 ----D---- H:\WINDOWS\WinSxS
2012-11-17 13:20:49 ----D---- H:\WINDOWS\system32
2012-11-17 13:20:49 ----A---- H:\WINDOWS\system32\PerfStringBackup.INI
2012-11-16 23:37:24 ----D---- H:\WINDOWS\system32\en-us
2012-11-16 23:37:18 ----D---- H:\Program Files\Microsoft.NET
2012-11-16 14:57:08 ----SD---- H:\WINDOWS\Tasks
2012-11-16 01:22:08 ----D---- H:\Documents and Settings\All Users\Application Data\Microsoft Help
2012-11-16 01:15:26 ----A---- H:\WINDOWS\system32\MRT.exe
2012-11-16 01:12:30 ----RSHDC---- H:\WINDOWS\system32\dllcache
2012-11-16 01:09:26 ----A---- H:\WINDOWS\win.ini
2012-11-15 21:10:14 ----HD---- H:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Texas Instruments OHCI Compliant IEEE 1394 Host Controller; H:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; H:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-06-10 45648]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); H:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); H:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); H:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; H:\WINDOWS\System32\Drivers\sptd.sys [2010-08-26 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; H:\WINDOWS\system32\drivers\Aavmker4.sys [2012-10-30 25256]
R1 aswRdr;aswRdr; H:\WINDOWS\system32\drivers\aswRdr.sys [2012-10-30 35928]
R1 aswSnx;aswSnx; H:\WINDOWS\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; H:\WINDOWS\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; H:\WINDOWS\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 intelppm;Intel Processor Driver; H:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; H:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R2 aswFsBlk;aswFsBlk; H:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMon2;avast! Standard Shield Support; H:\WINDOWS\system32\drivers\aswMon2.sys [2012-10-30 97608]
R3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i-MCE; H:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-11-22 1121536]
R3 Arp1394;1394 ARP Client Protocol; H:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; H:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; H:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-03-18 132608]
R3 dot4;MS IEEE-1284.4 Driver; H:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-13 206976]
R3 Dot4Print;Print Class Driver for IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
R3 Dot4Scan;Scan Class Driver for IEEE-1284.4; H:\WINDOWS\system32\DRIVERS\Dot4Scan.sys [2001-08-17 8704]
R3 dot4usb;Dot4USB Filter Dot4USB Filter; H:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-08-17 23808]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; H:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; H:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; H:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-09-23 3966976]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; H:\WINDOWS\system32\drivers\LGBusEnum.sys [2009-11-23 19720]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; H:\WINDOWS\system32\drivers\LGVirHid.sys [2009-11-23 14856]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; H:\WINDOWS\system32\DRIVERS\ManyCam.sys [2011-09-29 21632]
R3 mouhid;Mouse HID Driver; H:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 NIC1394;1394 Net Driver; H:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 usbaudio;USB Audio Driver (WDM); H:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; H:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;USB Mass Storage Driver; H:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; H:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; H:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-14 91904]
S3 ana4eynm;ana4eynm; H:\WINDOWS\system32\drivers\ana4eynm.sys []
S3 CCDECODE;Closed Caption Decoder; H:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpudrv;cpudrv; \??\H:\Program Files\SystemRequirementsLab\cpudrv.sys []
S3 DrvAgent32;DrvAgent32; \??\H:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\H:\Program Files\Garena\plugins\UI\safedrv.sys []
S3 hamachi;Hamachi Network Interface; H:\WINDOWS\system32\DRIVERS\hamachi.sys [2012-11-23 25280]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; H:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-08 145920]
S3 MPE;BDA MPE Filter; H:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; H:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; H:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; H:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; H:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; H:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Razerlow;Diamondback 3G USB Filter Driver; H:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-25 13225]
S3 SCREAMINGBDRIVER;Screaming Bee Audio; H:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2010-07-01 34896]
S3 SLIP;BDA Slip De-Framer; H:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; H:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; H:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 USBAAPL;Apple Mobile USB Driver; H:\WINDOWS\System32\Drivers\usbaapl.sys [2012-07-09 44032]
S3 usbscan;USB Scanner Driver; H:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; H:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; H:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; H:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; H:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-19 38528]
S3 WSTCODEC;World Standard Teletext Codec; H:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; H:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-14 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
R2 Ati HotKey Poller;Ati HotKey Poller; H:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; H:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
R2 Bonjour Service;Bonjour Service; H:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 JavaQuickStarterService;Java Quick Starter; H:\Program Files\Java\jre6\bin\jqs.exe [2012-09-24 153584]
R2 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
R2 PnkBstrA;PnkBstrA; H:\WINDOWS\system32\PnkBstrA.exe [2011-05-30 75136]
R2 Skype C2C Service;Skype C2C Service; H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-11-22 3290304]
R2 wlidsvc;Windows Live ID Sign-in Assistant; H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; H:\Program Files\iPod\bin\iPodService.exe [2012-09-09 821648]
S2 ATI Smart;ATI Smart; H:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); H:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-27 136176]
S2 SkypeUpdate;Skype Updater; H:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; H:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-22 250808]
S3 aspnet_state;ASP.NET State Service; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; h:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-30 46104]
S3 gupdatem;Služba Google Update (gupdatem); H:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-27 136176]
S3 idsvc;Windows CardSpace; h:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-30 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; H:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; H:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-26 114144]
S3 MSSQLServerADHelper;MSSQLServerADHelper; H:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; H:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; H:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; H:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 02 pro 2012 22:45

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Search
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

DavidNeva · #3 Příspěvek od **DavidNeva** » 03 pro 2012 07:01

# AdwCleaner v2.011 - Logfile created 12/03/2012 at 06:59:00
# Updated 02/12/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : David - PCO
# Boot Mode : Normal
# Running from : H:\Documents and Settings\David\Desktop\adwcleaner (1).exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

File Found : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\searchplugins\Conduit.xml
File Found : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\searchplugins\MyStart Search.xml
File Found : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\searchplugins\Search_Results.xml
File Found : H:\Documents and Settings\Kačka\Application Data\Mozilla\Firefox\Profiles\sfsrfcgf.default\searchplugins\softonic.xml
File Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\searchplugins\daemon-search.xml
File Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\searchplugins\icqplugin.xml
File Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\searchplugins\icqplugin-1.xml
File Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\searchplugins\icqplugin-2.xml
File Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\searchplugins\icqplugin-3.xml
File Found : H:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
File Found : H:\user.js
Folder Found : H:\DOCUME~1\David\LOCALS~1\Temp\boost_interprocess
Folder Found : H:\Documents and Settings\All Users\Application Data\boost_interprocess
Folder Found : H:\Documents and Settings\All Users\Application Data\ICQ\ICQToolbar
Folder Found : H:\Documents and Settings\All Users\Application Data\InstallMate
Folder Found : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\Searchqutoolbar
Folder Found : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\Smartbar
Folder Found : H:\Documents and Settings\David\Application Data\searchquband
Folder Found : H:\Documents and Settings\David\Application Data\Searchqutoolbar
Folder Found : H:\Documents and Settings\David\Application Data\Toolbar4
Folder Found : H:\Documents and Settings\David\Local Settings\Application Data\APN
Folder Found : H:\Documents and Settings\David\Local Settings\Application Data\BitTorrentBar
Folder Found : H:\Documents and Settings\David\Local Settings\Application Data\Conduit
Folder Found : H:\Documents and Settings\David\Local Settings\Application Data\Ilivid Player
Folder Found : H:\Documents and Settings\Kačka\Application Data\Mozilla\Firefox\Profiles\sfsrfcgf.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Found : H:\Documents and Settings\Kačka\Application Data\Mozilla\Firefox\Profiles\sfsrfcgf.default\extensions\ffxtlbra@softonic.com
Folder Found : H:\Documents and Settings\Kačka\Application Data\Mozilla\Firefox\Profiles\sfsrfcgf.default\Searchqutoolbar
Folder Found : H:\Documents and Settings\Kačka\Application Data\searchquband
Folder Found : H:\Documents and Settings\Kačka\Application Data\Searchqutoolbar
Folder Found : H:\Documents and Settings\Kačka\Application Data\Softonic
Folder Found : H:\Documents and Settings\Kačka\Local Settings\Application Data\BitTorrentBar
Folder Found : H:\Documents and Settings\Kačka\Local Settings\Application Data\Conduit
Folder Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Folder Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Found : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\Searchqutoolbar
Folder Found : H:\Documents and Settings\olda\Application Data\Searchqutoolbar
Folder Found : H:\Program Files\BitTorrentBar
Folder Found : H:\Program Files\Conduit
Folder Found : H:\Program Files\DAEMON Tools Toolbar
Folder Found : H:\Program Files\ICQ6Toolbar
Folder Found : H:\Program Files\Searchqu Toolbar
Folder Found : H:\Program Files\Softonic

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = H:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll
Data Found : HKLM\..\Windows [AppInit_DLLs] = H:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\BitTorrentBar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\searchqutoolbar
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Toolbar
Key Found : HKLM\Software\BitTorrentBar
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Found : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{32804100-B238-45F4-B15E-C5A2F2F7400B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A76CAD0E-7EAC-4E59-AE24-6FB67E274C86}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Found : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Key Found : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Found : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Found : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Found : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{256C4290-7E0C-441C-BFEF-7CAEA4950D58}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91B68D57-9C2C-4D12-92EF-7A6E5D9ECA8E}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{32804100-B238-45F4-B15E-C5A2F2F7400B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitTorrentBar Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic
Key Found : HKLM\Software\SearchquMediabarTb
Key Found : HKLM\Software\Softonic
Key Found : HKLM\SOFTWARE\Software
Key Found : HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{88C7F2AA-F93F-432C-8F0E-B7D85967A527}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5018CFD2-804D-4C99-9F81-25EAEA2769DE}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{88C7F2AA-F93F-432C-8F0E-B7D85967A527}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]

***** [Internet Browsers] *****

-\\ Internet Explorer v7.0.6000.17114

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2790392
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=15&cc=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com

-\\ Mozilla Firefox v15.0.1 (cs)

Profile name : default
File : H:\Documents and Settings\olda\Application Data\Mozilla\Firefox\Profiles\bwgglf45.default\prefs.js

Found : user_pref("browser.startup.homepage", "hxxp://www.searchnu.com/406");
Found : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=139&systemid=406&sr=0&q=");

Profile name : default
File : H:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\xxo4vgbc.default\prefs.js

Found : user_pref("CT2790392.1000234.TWC_TMP_city", "MLADA BOLESLAV");
Found : user_pref("CT2790392.1000234.TWC_TMP_country", "CZ");
Found : user_pref("CT2790392.1000234.TWC_locId", "EZXX1433");
Found : user_pref("CT2790392.1000234.TWC_location", "Mlada Boleslav, Czech Republic");
Found : user_pref("CT2790392.1000234.TWC_region", "OT");
Found : user_pref("CT2790392.1000234.TWC_temp_dis", "c");
Found : user_pref("CT2790392.1000234.TWC_wind_dis", "kmh");
Found : user_pref("CT2790392.1000234.weatherData", "{\"icon\":\"30.png\",\"temperature\":\"20°C\",\"temperat[...]
Found : user_pref("CT2790392.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2790392.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT2790392.FirstTime", "true");
Found : user_pref("CT2790392.FirstTimeFF3", "true");
Found : user_pref("CT2790392.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT279[...]
Found : user_pref("CT2790392.UserID", "UN23164046283891648");
Found : user_pref("CT2790392.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT2790392.autoDisableScopes", -1);
Found : user_pref("CT2790392.browser.search.defaultthis.engineName", true);
Found : user_pref("CT2790392.cbcountry_001", "CZ");
Found : user_pref("CT2790392.cbfirsttime", "Wed Aug 01 2012 16:06:45 GMT+0200 (Central Europe Daylight Time)[...]
Found : user_pref("CT2790392.embeddedsData", "[{\"appId\":\"129298377186388102\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT2790392.enableAlerts", "always");
Found : user_pref("CT2790392.enableSearchFromAddressBar", "true");
Found : user_pref("CT2790392.firstTimeDialogOpened", "true");
Found : user_pref("CT2790392.fixPageNotFoundError", "true");
Found : user_pref("CT2790392.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT2790392.fixUrls", true);
Found : user_pref("CT2790392.installId", "fft1AC.tmp.exe");
Found : user_pref("CT2790392.installType", "XPE");
Found : user_pref("CT2790392.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2790392.isNewTabEnabled", true);
Found : user_pref("CT2790392.isPerformedSmartBarTransition", "true");
Found : user_pref("CT2790392.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT2790392.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT2790392.keyword", true);
Found : user_pref("CT2790392.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Found : user_pref("CT2790392.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT2790392.openThankYouPage", "true");
Found : user_pref("CT2790392.openUninstallPage", "FALSE");
Found : user_pref("CT2790392.search.searchAppId", "129298377186388102");
Found : user_pref("CT2790392.search.searchCount", "0");
Found : user_pref("CT2790392.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT2790392.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2790392.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT2790392.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT2790392.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT2790392.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT2790392.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT2790392.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT2790392.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT2790392.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1344943551189");
Found : user_pref("CT2790392.serviceLayer_services_appTracking_lastUpdate", "1344943431576");
Found : user_pref("CT2790392.serviceLayer_services_appsMetadata_lastUpdate", "1344943431218");
Found : user_pref("CT2790392.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1343829994296");
Found : user_pref("CT2790392.serviceLayer_services_login_10.10.20.14_lastUpdate", "1344943429114");
Found : user_pref("CT2790392.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1343829995210");
Found : user_pref("CT2790392.serviceLayer_services_searchAPI_lastUpdate", "1344943429678");
Found : user_pref("CT2790392.serviceLayer_services_serviceMap_lastUpdate", "1344943427768");
Found : user_pref("CT2790392.serviceLayer_services_toolbarContextMenu_lastUpdate", "1343829995137");
Found : user_pref("CT2790392.serviceLayer_services_toolbarSettings_lastUpdate", "1344943428312");
Found : user_pref("CT2790392.serviceLayer_services_translation_lastUpdate", "1344943428247");
Found : user_pref("CT2790392.settingsINI", true);
Found : user_pref("CT2790392.shouldFirstTimeDialog", "false");
Found : user_pref("CT2790392.smartbar.CTID", "CT2790392");
Found : user_pref("CT2790392.smartbar.Uninstall", "0");
Found : user_pref("CT2790392.smartbar.homepage", true);
Found : user_pref("CT2790392.smartbar.toolbarName", "BitTorrentBar ");
Found : user_pref("CT2790392.startPage", "userChanged");
Found : user_pref("CT2790392.toolbarBornServerTime", "1-8-2012");
Found : user_pref("CT2790392.toolbarCurrentServerTime", "14-8-2012");
Found : user_pref("CT2790392.url_history0001", "hxxp://boleslavsky.denik.cz/z-regionu/?strana=2:::clickhandl[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2790392&SearchSource=1[...]
Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=1[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT2790392");
Found : user_pref("browser.search.defaultenginename", "MyStart Search");
Found : user_pref("browser.search.order.1", "Search Results");
Found : user_pref("browser.startup.homepage", "hxxp://www.searchnu.com/406");
Found : user_pref("extensions.4fff10c03af77.scode", "(function(){try{if('mystart.incredibar.com,premiumrepor[...]
Found : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=139&systemid=406&sr=0&q=");

Profile name : default
File : H:\Documents and Settings\Kačka\Application Data\Mozilla\Firefox\Profiles\sfsrfcgf.default\prefs.js

Found : user_pref("browser.search.selectedEngine", "Search the web (Softonic)");
Found : user_pref("browser.startup.homepage", "hxxp://www.searchnu.com/406");
Found : user_pref("extensions.Softonic.admin", false);
Found : user_pref("extensions.Softonic.aflt", "SD");
Found : user_pref("extensions.Softonic.autoRvrt", "false");
Found : user_pref("extensions.Softonic.cntry", "CZ");
Found : user_pref("extensions.Softonic.cv", "cv5");
Found : user_pref("extensions.Softonic.dfltLng", "");
Found : user_pref("extensions.Softonic.dfltSrch", true);
Found : user_pref("extensions.Softonic.dspNew", "Search the web (Softonic)");
Found : user_pref("extensions.Softonic.dspOld", "");
Found : user_pref("extensions.Softonic.envrmnt", "production");
Found : user_pref("extensions.Softonic.excTlbr", false);
Found : user_pref("extensions.Softonic.hdrMd5", "2553F2A29BC50E3902AD6A0F57714EF9");
Found : user_pref("extensions.Softonic.hmpg", true);
Found : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=13&[...]
Found : user_pref("extensions.Softonic.hpNew", "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=13&cc[...]
Found : user_pref("extensions.Softonic.hpOld", "hxxp://www.searchnu.com/406");
Found : user_pref("extensions.Softonic.id", "00000000000000000000003005c5dbcd");
Found : user_pref("extensions.Softonic.instlDay", "15660");
Found : user_pref("extensions.Softonic.instlRef", "INF00040");
Found : user_pref("extensions.Softonic.keyWordUrl", "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=[...]
Found : user_pref("extensions.Softonic.lastVrsnTs", "1.6.7.421:21:18");
Found : user_pref("extensions.Softonic.mntrvrsn", "1.3.0");
Found : user_pref("extensions.Softonic.newTab", true);
Found : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=1[...]
Found : user_pref("extensions.Softonic.prdct", "Softonic");
Found : user_pref("extensions.Softonic.prtnrId", "softonic");
Found : user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search set[...]
Found : user_pref("extensions.Softonic.sg", "az");
Found : user_pref("extensions.Softonic.smplGrp", "none");
Found : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
Found : user_pref("extensions.Softonic.tlbrId", "BASEirobinhoodActive");
Found : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource[...]
Found : user_pref("extensions.Softonic.vrsn", "1.6.7.4");
Found : user_pref("extensions.Softonic.vrsnTs", "1.6.7.421:21:18");
Found : user_pref("extensions.Softonic.vrsni", "1.6.7.4");
Found : user_pref("extensions.Softonic_i.dnsErr", true);
Found : user_pref("extensions.Softonic_i.hmpg", true);
Found : user_pref("extensions.Softonic_i.newTab", true);
Found : user_pref("extensions.Softonic_i.smplGrp", "none");
Found : user_pref("extensions.Softonic_i.vrsnTs", "1.6.7.421:21:18");
Found : user_pref("extensions.enabledAddons", "ffxtlbra@softonic.com:1.6.0,{972ce4c6-7e08-4474-a285-3208198c[...]
Found : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=139&systemid=406&sr=0&q=");

-\\ Google Chrome v23.0.1271.95

File : H:\Documents and Settings\olda\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Found [l.13] : homepage = "hxxp://search.conduit.com/?ctid=CT2790392&SearchSource=48",
Found [l.52] : icon_url = "hxxp://search.conduit.com/fav.ico",
Found [l.55] : keyword = "search.conduit.com",
Found [l.58] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT2790392",
Found [l.59] : suggest_url = "hxxp://search.conduit.com/"
Found [l.1661] : homepage = "hxxp://search.conduit.com/?ctid=CT2790392&SearchSource=48",

File : H:\Documents and Settings\Kačka\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Found [l.13] : urls_to_restore_on_startup = [ "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=48&cc=" ]
Found [l.2204] : urls_to_restore_on_startup = [ "hxxp://search.softonic.com/INF00040/tb_v1?SearchSource=48&cc=" ]

*************************

AdwCleaner[R1].txt - [28577 octets] - [03/12/2012 06:59:00]

########## EOF - H:\AdwCleaner[R1].txt - [28638 octets] ##########

#4 Příspěvek od **vyosek** » 03 pro 2012 08:12

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Delete
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

DavidNeva · #5 Příspěvek od **DavidNeva** » 03 pro 2012 13:47

Postupuji podle vás, ale po restartu se mi žádný výsledek neobjevuje

#6 Příspěvek od **vyosek** » 03 pro 2012 14:41

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

DavidNeva · #7 Příspěvek od **DavidNeva** » 03 pro 2012 15:42

OTL logfile created on: 3.12.2012 14:58:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = H:\Documents and Settings\David\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Czech Republic | Language: CSY | Date Format: d.M.yyyy

1022,42 Mb Total Physical Memory | 390,35 Mb Available Physical Memory | 38,18% Memory free
2,40 Gb Paging File | 1,67 Gb Available in Paging File | 69,50% Paging File free
Paging file location(s): H:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
Drive H: | 465,75 Gb Total Space | 293,45 Gb Free Space | 63,01% Space Free | Partition Type: NTFS

Computer Name: PCO | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.12.03 14:56:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\David\Desktop\OTL.exe
PRC - [2012.11.28 04:43:18 | 001,242,728 | ---- | M] (Google Inc.) -- H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2012.11.22 10:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) -- H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- H:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- H:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012.10.20 15:58:48 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- H:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2011.07.29 00:08:12 | 001,259,376 | ---- | M] () -- H:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.07.14 13:21:10 | 000,108,032 | ---- | M] () -- H:\Program Files\VideoLAN\VLC\vlc.exe
PRC - [2010.08.03 10:05:54 | 000,358,472 | ---- | M] (Logitech Inc.) -- H:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
PRC - [2010.08.03 10:03:46 | 003,649,096 | ---- | M] (Logitech Inc.) -- H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
PRC - [2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\explorer.exe
PRC - [2003.09.16 05:00:00 | 000,270,336 | ---- | M] (ATI Technologies Inc.) -- H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
PRC - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
PRC - [2002.07.23 19:02:46 | 000,184,320 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hpofxm07.exe
PRC - [2002.07.23 18:36:14 | 000,294,912 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hposts07.exe
PRC - [2002.07.23 18:12:00 | 000,299,008 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hpoevm07.exe
PRC - [2002.07.23 17:49:32 | 000,487,484 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe
PRC - [2001.07.03 17:17:04 | 000,065,536 | ---- | M] () -- H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
PRC - [2001.07.03 17:11:52 | 000,057,344 | ---- | M] (Hewlett-Packard) -- H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

========== Modules (No Company Name) ==========

MOD - [2012.12.02 21:11:32 | 002,036,224 | ---- | M] () -- H:\Program Files\Alwil Software\Avast5\defs\12120200\algo.dll
MOD - [2011.09.27 07:23:00 | 000,087,912 | ---- | M] () -- H:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.09.27 07:22:40 | 001,242,472 | ---- | M] () -- H:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

========== Services (SafeList) ==========

SRV - [2012.11.22 18:12:01 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- H:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.11.22 10:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- H:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.10.26 19:57:24 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- H:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- H:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010.06.14 23:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- H:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) [Auto | Running] -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)
SRV - [2002.12.17 17:23:30 | 000,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- H:\Program Files\Garena\plugins\UI\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (amanggak)
DRV - [2012.11.23 12:50:25 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2012.10.30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- H:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.10.30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.10.30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.10.30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012.10.30 23:51:57 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- H:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012.10.30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012.10.30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- H:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.09.29 08:04:22 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\ManyCam.sys -- (ManyCam)
DRV - [2011.07.27 12:17:59 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2010.08.26 07:39:46 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2010.07.01 13:21:14 | 000,034,896 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2010.02.26 22:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.02.26 22:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.02.26 22:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.02.26 22:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.02.11 08:38:10 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009.12.18 10:58:52 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- H:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2009.11.23 17:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2009.11.23 17:37:08 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2008.08.26 18:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 19:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2006.11.22 16:53:02 | 001,121,536 | ---- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)
DRV - [2005.11.03 15:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2005.09.23 17:56:28 | 003,966,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2005.08.10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.05.16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2005.04.25 06:43:58 | 000,013,225 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\DB3G.sys -- (Razerlow)
DRV - [2005.03.18 00:30:10 | 000,132,608 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2005.01.08 01:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2790392
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-926492609-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: H:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: H:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: H:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: H:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: H:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: H:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: H:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: H:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: h:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: H:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: H:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: H:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.10.20 15:47:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.10.20 15:59:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: H:\Program Files\Alwil Software\Avast5\WebRep\FF [2012.11.10 19:36:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.10.20 15:59:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: H:\Program Files\Mozilla Firefox\components [2012.10.26 19:57:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: H:\Program Files\Mozilla Firefox\plugins [2012.10.21 10:47:48 | 000,000,000 | ---D | M]

[2012.10.29 15:09:09 | 000,000,000 | ---D | M] (No name found) -- H:\Program Files\Mozilla Firefox\extensions
[2012.11.27 14:36:48 | 000,000,000 | ---D | M] (Skype Click to Call) -- H:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010.12.11 12:08:44 | 000,000,000 | ---D | M] (Skype extension) -- H:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}(2)
[2012.07.29 12:12:57 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.09.02 14:27:31 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012.10.29 15:09:09 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2012.10.26 19:57:25 | 000,266,720 | ---- | M] (Mozilla Foundation) -- H:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.10.20 15:59:04 | 000,129,176 | ---- | M] (RealPlayer) -- H:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2012.03.19 08:00:33 | 000,002,208 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.03.19 08:00:33 | 000,000,638 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.03.19 08:00:33 | 000,001,367 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.03.19 08:00:33 | 000,000,654 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.03.19 08:00:33 | 000,001,179 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2011.06.25 18:07:59 | 000,000,880 | ---- | M]) - H:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost www.kostici.cz
O1 - Hosts: 127.0.0.1 localhost www.1001hry.cz
O1 - Hosts: 127.0.0.1 localhost www.mimibazar.org
O1 - Hosts: 127.0.0.1 localhost www.mimibazar.cz
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - H:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] H:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] H:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DivXUpdate] H:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] H:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [HydraVisionDesktopManager] H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [Launch LGDCore] H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LgDeviceAgent] H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [Share-to-Web Namespace Daemon] H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard)
O4 - HKLM..\Run: [StartCCC] H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TkBellExe] H:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-220523388-926492609-839522115-1005..\Run: [Clownfish] File not found
O4 - HKU\S-1-5-21-220523388-926492609-839522115-500..\RunOnce: [Report] \AdwCleaner[S2].txt ()
O4 - Startup: H:\Documents and Settings\All Users\Start Menu\Programs\Startup\HPAiODevice(hp psc 900 series) - 1.lnk = H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-926492609-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - H:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 0843170612 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.124.130.1 213.168.183.97
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ABE96693-875D-4C2C-8C7C-A7AA33EC6E76}: DhcpNameServer = 10.124.130.1 213.168.183.97
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - H:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (H:\WINDOWS\system32\userinit.exe) - H:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - H:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - H:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - H:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - H:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - H:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - H:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - H:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - H:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - H:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - H:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - H:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - H:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - H:\WINDOWS\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to H:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.12.03 13:34:43 | 000,000,000 | --SD | C] -- H:\Documents and Settings\Administrator\Application Data\Microsoft
[2012.12.03 13:34:43 | 000,000,000 | RH-D | C] -- H:\Documents and Settings\Administrator\SendTo
[2012.12.03 13:34:43 | 000,000,000 | RH-D | C] -- H:\Documents and Settings\Administrator\Application Data
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu\Programs\Startup
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu\Programs\Accessories
[2012.12.03 13:34:43 | 000,000,000 | -HSD | C] -- H:\Documents and Settings\Administrator\Cookies
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Templates
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Recent
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\PrintHood
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\NetHood
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Local Settings
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\My Documents
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft Help
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Application Data\Macromedia
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Favorites
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Desktop
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Adobe
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150050}
[2012.12.02 22:12:57 | 000,000,000 | ---D | C] -- H:\Program Files\trend micro
[2012.12.02 22:12:52 | 000,000,000 | ---D | C] -- H:\rsit
[2012.03.26 20:10:05 | 000,347,896 | ---- | C] (Valve Corporation) -- H:\Program Files\vstdlib_s.dll
[2012.03.26 20:10:05 | 000,340,480 | ---- | C] (Valve Corporation) -- H:\Program Files\vstdlib.dll
[2012.03.26 20:10:04 | 000,229,624 | ---- | C] (Valve Corporation) -- H:\Program Files\tier0_s.dll
[2012.03.26 20:10:03 | 000,329,728 | ---- | C] (Valve Corporation) -- H:\Program Files\Steam.dll
[2012.03.26 20:10:03 | 000,070,144 | ---- | C] (Valve Corporation) -- H:\Program Files\steam_api_c.dll
[2012.03.26 20:10:03 | 000,067,072 | ---- | C] (Valve Corporation) -- H:\Program Files\steam_api.dll
[2012.03.26 20:10:01 | 002,968,048 | ---- | C] (Valve Corporation) -- H:\Program Files\origsteamclient.dll
[2012.03.26 20:09:59 | 000,389,120 | ---- | C] (Valve) -- H:\Program Files\hlds.exe
[2012.03.26 20:09:59 | 000,221,184 | ---- | C] (Valve) -- H:\Program Files\hltv.exe
[2012.03.26 20:09:58 | 000,086,077 | ---- | C] (Valve) -- H:\Program Files\hl.exe
[2012.03.26 20:09:57 | 000,211,456 | ---- | C] (Aureal Semiconductor) -- H:\Program Files\a3dapi.dll
[2012.03.26 20:09:57 | 000,086,077 | ---- | C] (Valve) -- H:\Program Files\csko.exe
[12 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\*.tmp files -> H:\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.12.03 15:01:25 | 000,000,512 | ---- | M] () -- H:\PhysicalMBR.bin
[2012.12.03 15:00:00 | 000,001,036 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.12.03 14:20:00 | 000,001,032 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2012.12.03 14:20:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2012.12.03 14:15:00 | 000,000,914 | ---- | M] () -- H:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.12.03 14:13:01 | 000,000,936 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.03 14:06:00 | 000,001,028 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2012.12.03 13:45:15 | 000,002,206 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2012.12.03 13:44:27 | 000,000,932 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.03 13:44:26 | 000,000,318 | -H-- | M] () -- H:\WINDOWS\tasks\avast! Emergency Update.job
[2012.12.03 13:44:25 | 000,000,280 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.03 13:44:25 | 000,000,276 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.03 13:44:19 | 000,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2012.12.02 20:13:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job
[2012.12.02 17:06:01 | 000,000,976 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2012.12.02 16:59:00 | 000,000,984 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2012.12.02 14:32:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.01 12:19:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.11.30 18:59:00 | 000,000,288 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2012.11.30 14:57:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.11.28 13:57:17 | 000,002,283 | ---- | M] () -- H:\Documents and Settings\All Users\Desktop\Skype.lnk
[12 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\*.tmp files -> H:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.12.03 15:01:25 | 000,000,512 | ---- | C] () -- H:\PhysicalMBR.bin
[2012.12.03 13:34:44 | 000,001,599 | ---- | C] () -- H:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
[2012.12.03 13:34:44 | 000,001,392 | ---- | C] () -- H:\Documents and Settings\Administrator\Desktop\Recovery-Info.lnk
[2012.12.03 13:34:44 | 000,000,792 | ---- | C] () -- H:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
[2012.08.01 13:49:02 | 000,558,133 | ---- | C] () -- H:\WINDOWS\System32\sqlite3.dll
[2012.03.26 20:20:43 | 000,147,298 | ---- | C] () -- H:\Program Files\Steam_error.mdmp
[2012.03.26 20:12:31 | 000,001,407 | ---- | C] () -- H:\Program Files\Counter-Strike 1.6.lnk
[2012.03.26 20:10:04 | 001,672,504 | ---- | C] () -- H:\Program Files\swds.dll
[2012.03.26 20:10:04 | 000,352,256 | ---- | C] () -- H:\Program Files\vgui.dll
[2012.03.26 20:10:04 | 000,344,064 | ---- | C] () -- H:\Program Files\tier0.dll
[2012.03.26 20:10:04 | 000,245,819 | ---- | C] () -- H:\Program Files\vgui2.dll
[2012.03.26 20:10:04 | 000,139,264 | ---- | C] () -- H:\Program Files\voice_speex.dll
[2012.03.26 20:10:04 | 000,053,248 | ---- | C] () -- H:\Program Files\voice_miles.dll
[2012.03.26 20:10:03 | 001,672,504 | ---- | C] () -- H:\Program Files\sw.dll
[2012.03.26 20:10:03 | 000,389,632 | ---- | C] () -- H:\Program Files\steamclient.dll
[2012.03.26 20:10:03 | 000,000,694 | ---- | C] () -- H:\Program Files\rev.ini
[2012.03.26 20:10:03 | 000,000,027 | ---- | C] () -- H:\Program Files\steamemu.ini
[2012.03.26 20:10:02 | 000,618,496 | ---- | C] () -- H:\Program Files\proxy.dll
[2012.03.26 20:10:01 | 000,161,792 | ---- | C] () -- H:\Program Files\Mssv29.asi
[2012.03.26 20:10:01 | 000,142,848 | ---- | C] () -- H:\Program Files\Mssv12.asi
[2012.03.26 20:10:00 | 001,840,440 | ---- | C] () -- H:\Program Files\hw.dll
[2012.03.26 20:10:00 | 000,351,744 | ---- | C] () -- H:\Program Files\Mss32.dll
[2012.03.26 20:10:00 | 000,125,952 | ---- | C] () -- H:\Program Files\Mp3dec.asi
[2012.03.26 20:10:00 | 000,001,330 | ---- | C] () -- H:\Program Files\InstallRecord.blob
[2012.03.26 20:10:00 | 000,000,816 | ---- | C] () -- H:\Program Files\kver.kp
[2012.03.26 20:10:00 | 000,000,063 | ---- | C] () -- H:\Program Files\language.inf
[2012.03.26 20:09:59 | 000,001,569 | ---- | C] () -- H:\Program Files\hltv.cfg
[2012.03.26 20:09:59 | 000,000,786 | ---- | C] () -- H:\Program Files\hlds_steamgames.vdf
[2012.03.26 20:09:58 | 000,122,974 | ---- | C] () -- H:\Program Files\FileSystem_Steam.dll
[2012.03.26 20:09:58 | 000,118,872 | ---- | C] () -- H:\Program Files\FileSystem_Stdio.dll
[2012.03.26 20:09:58 | 000,090,112 | ---- | C] () -- H:\Program Files\DemoPlayer.dll
[2012.03.26 20:09:58 | 000,069,632 | ---- | C] () -- H:\Program Files\dbg.dll
[2012.03.26 20:09:57 | 000,720,956 | ---- | C] () -- H:\Program Files\unins000.exe
[2012.03.26 20:09:57 | 000,258,106 | ---- | C] () -- H:\Program Files\Core.dll
[2012.03.26 20:09:56 | 000,470,334 | ---- | C] () -- H:\Program Files\unins000.dat
[2012.03.18 17:43:24 | 000,271,200 | ---- | C] () -- H:\WINDOWS\System32\PnkBstrB.exe
[2012.02.16 16:28:30 | 000,003,072 | ---- | C] () -- H:\WINDOWS\System32\iacenc.dll
[2011.05.30 14:39:18 | 000,000,319 | ---- | C] () -- H:\WINDOWS\game.ini
[2011.05.16 19:47:08 | 000,041,396 | -H-- | C] () -- H:\WINDOWS\System32\mlfcache.dat
[2011.01.22 20:01:02 | 000,000,000 | ---- | C] () -- H:\WINDOWS\System32\Access.dat
[2011.01.22 13:25:50 | 000,000,000 | ---- | C] () -- H:\WINDOWS\ativpsrm.bin
[2010.12.20 14:14:50 | 000,001,324 | ---- | C] () -- H:\WINDOWS\System32\d3d9caps.dat
[2010.12.05 20:30:44 | 000,138,160 | ---- | C] () -- H:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010.12.05 20:30:17 | 000,835,440 | ---- | C] () -- H:\WINDOWS\System32\pbsvc.exe

========== ZeroAccess Check ==========

[2010.08.03 07:20:27 | 000,000,227 | RHS- | M] () -- H:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010.04.16 17:09:07 | 001,509,888 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = H:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 13:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = H:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 01:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.09.25 15:52:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.07.15 14:59:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ADDICT-THING
[2010.08.04 02:53:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Alwil Software
[2011.09.28 10:57:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Codemasters
[2010.08.26 07:39:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.06.29 20:14:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Easybits GO
[2012.12.03 13:35:12 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ICQ
[2010.08.23 02:29:40 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Installations
[2012.10.05 16:09:58 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\MetaQuotes
[2010.08.23 03:06:10 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Nokia
[2010.08.23 02:41:28 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2010.08.23 03:03:22 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PC Suite
[2011.08.27 22:40:21 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PMB Files
[2011.10.07 17:46:35 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Screaming Bee
[2012.07.15 15:04:04 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Sony
[2011.01.22 14:47:30 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Tunngle
[2011.12.24 21:44:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.10.07 16:24:26 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\.minecraft
[2012.11.25 20:16:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\BitTorrent
[2011.10.20 15:49:44 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\DDMSettings
[2011.10.16 12:04:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\LolClient
[2012.05.24 16:32:36 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\LolClient2
[2011.12.25 19:57:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\ManyCam
[2011.12.20 19:33:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Sony
[2011.12.25 19:29:37 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Thinstall
[2012.07.19 21:32:04 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\TS3Client
[2011.11.02 19:07:18 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Zoner
[2012.11.27 14:44:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\.minecraft
[2012.02.12 14:24:31 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\LolClient
[2012.10.20 13:57:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\TeamViewer
[2011.11.02 18:50:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\Zoner
[2011.09.26 18:38:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\.minecraft
[2010.08.26 07:46:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\DAEMON Tools Lite
[2011.08.05 11:28:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\go
[2011.03.12 01:38:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\LolClient
[2010.08.24 17:41:03 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Nokia
[2010.08.23 03:06:01 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\PC Suite
[2011.10.07 17:46:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Screaming Bee
[2011.08.10 23:03:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\SystemRequirementsLab
[2011.03.18 17:29:17 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\TS3Client
[2011.01.31 17:12:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Tunngle
[2010.10.11 08:29:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Zoner

========== Purity Check ==========

========== Custom Scans ==========

< >
[2010.08.03 07:08:49 | 000,000,065 | RH-- | C] () -- H:\WINDOWS\Tasks\desktop.ini
[2010.08.03 07:19:25 | 000,000,006 | -H-- | C] () -- H:\WINDOWS\Tasks\SA.DAT
[2010.08.04 02:09:25 | 000,000,976 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2010.08.04 02:09:26 | 000,001,028 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2010.12.27 13:36:27 | 000,000,284 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2011.08.27 22:49:19 | 000,000,932 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2011.08.27 22:49:19 | 000,000,936 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2011.10.07 17:59:59 | 000,000,280 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
[2011.10.07 17:59:59 | 000,000,288 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2011.10.14 22:04:26 | 000,000,286 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2011.10.14 22:04:27 | 000,000,278 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2011.10.17 13:30:49 | 000,000,286 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2011.10.17 13:30:50 | 000,000,278 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2011.11.04 21:22:48 | 000,000,980 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2011.11.04 21:22:49 | 000,001,032 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2011.11.13 17:02:29 | 000,000,284 | ---- | C] () -- H:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2011.11.20 13:29:31 | 000,000,276 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2011.11.21 16:54:59 | 000,000,984 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2011.11.21 16:55:00 | 000,001,036 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.04.09 11:35:55 | 000,000,914 | ---- | C] () -- H:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.07.30 12:23:43 | 000,000,318 | -H-- | C] () -- H:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.09.15 19:08:02 | 000,000,980 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job

< >

< MD5 for: ATAPI.SYS >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\drivers\atapi.sys
[2004.08.04 06:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- H:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.04 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- H:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 01:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- H:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 01:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- H:\WINDOWS\system32\autochk.exe
[2004.08.04 13:00:00 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- H:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- H:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- H:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- H:\WINDOWS\system32\dllcache\cdrom.sys
[2004.08.04 13:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- H:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- H:\WINDOWS\explorer.exe
[2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- H:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.04 13:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- H:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- H:\WINDOWS\system32\HAL.DLL
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- H:\WINDOWS\ServicePackFiles\i386\hal.dll
[2005.09.29 00:35:25 | 000,134,272 | ---- | M] (Microsoft Corporation) MD5=A3961B9456DE472D2F152C9DE950FFA5 -- H:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.04 13:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- H:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 01:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- H:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 01:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- H:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.06 12:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- H:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2008.04.14 01:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- H:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 01:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- H:\WINDOWS\ServicePackFiles\i386\services.exe
[2009.02.06 11:22:21 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=4712531AB7A01B7EE059853CA17D39BD -- H:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\system32\dllcache\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\system32\services.exe
[2004.08.04 13:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- H:\WINDOWS\$NtUninstallKB956572_0$\services.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 01:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- H:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 01:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- H:\WINDOWS\system32\svchost.exe
[2004.08.04 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- H:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2005.03.14 01:55:08 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=0E66B538096A6529D1AC66E78EB0D5C8 -- H:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- H:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2005.03.14 02:17:17 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=6129E70F3D2F1E60860C930EBEAF92C2 -- H:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- H:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- H:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- H:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- H:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- H:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2004.08.04 13:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- H:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008.04.14 01:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- H:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 01:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- H:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.04 13:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- H:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 01:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- H:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 01:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- H:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[22 H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 H:\WINDOWS\CSC\*.tmp files -> H:\WINDOWS\CSC\*.tmp -> ]
[11 H:\WINDOWS\Installer\*.tmp files -> H:\WINDOWS\Installer\*.tmp -> ]
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]
[1 H:\WINDOWS\system32\Com\*.tmp files -> H:\WINDOWS\system32\Com\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2012.09.25 15:52:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.07.15 14:59:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ADDICT-THING
[2012.11.22 18:12:17 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Adobe
[2010.08.03 14:42:21 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Ahead
[2010.08.04 02:53:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Alwil Software
[2011.12.24 21:43:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Apple
[2011.12.24 21:43:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Apple Computer
[2011.07.08 14:36:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ATI
[2010.08.09 06:15:19 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Blizzard
[2011.09.28 10:57:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Codemasters
[2010.08.26 07:39:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.10.20 15:48:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DivX
[2011.06.29 20:14:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Easybits GO
[2012.12.03 13:35:12 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ICQ
[2010.08.23 02:29:40 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Installations
[2010.12.26 22:38:26 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\LogiShrd
[2010.12.26 22:45:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Logitech
[2010.08.04 14:33:24 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\McAfee
[2012.10.05 16:09:58 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\MetaQuotes
[2011.09.13 11:47:18 | 000,000,000 | --SD | M] -- H:\Documents and Settings\All Users\Application Data\Microsoft
[2012.11.16 01:22:08 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Microsoft Help
[2012.05.09 22:08:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Mozilla
[2010.08.23 03:06:10 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Nokia
[2010.08.23 02:41:28 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2010.12.31 19:06:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Norton
[2010.12.30 12:46:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NortonInstaller
[2010.08.04 16:40:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NOS
[2010.08.23 03:03:22 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PC Suite

DavidNeva · #8 Příspěvek od **DavidNeva** » 03 pro 2012 15:42

OTL logfile created on: 3.12.2012 14:58:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = H:\Documents and Settings\David\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Czech Republic | Language: CSY | Date Format: d.M.yyyy

1022,42 Mb Total Physical Memory | 390,35 Mb Available Physical Memory | 38,18% Memory free
2,40 Gb Paging File | 1,67 Gb Available in Paging File | 69,50% Paging File free
Paging file location(s): H:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
Drive H: | 465,75 Gb Total Space | 293,45 Gb Free Space | 63,01% Space Free | Partition Type: NTFS

Computer Name: PCO | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.12.03 14:56:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\David\Desktop\OTL.exe
PRC - [2012.11.28 04:43:18 | 001,242,728 | ---- | M] (Google Inc.) -- H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2012.11.22 10:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) -- H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- H:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- H:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012.10.20 15:58:48 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- H:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2011.07.29 00:08:12 | 001,259,376 | ---- | M] () -- H:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.07.14 13:21:10 | 000,108,032 | ---- | M] () -- H:\Program Files\VideoLAN\VLC\vlc.exe
PRC - [2010.08.03 10:05:54 | 000,358,472 | ---- | M] (Logitech Inc.) -- H:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
PRC - [2010.08.03 10:03:46 | 003,649,096 | ---- | M] (Logitech Inc.) -- H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
PRC - [2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\explorer.exe
PRC - [2003.09.16 05:00:00 | 000,270,336 | ---- | M] (ATI Technologies Inc.) -- H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
PRC - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
PRC - [2002.07.23 19:02:46 | 000,184,320 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hpofxm07.exe
PRC - [2002.07.23 18:36:14 | 000,294,912 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hposts07.exe
PRC - [2002.07.23 18:12:00 | 000,299,008 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hpoevm07.exe
PRC - [2002.07.23 17:49:32 | 000,487,484 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe
PRC - [2001.07.03 17:17:04 | 000,065,536 | ---- | M] () -- H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
PRC - [2001.07.03 17:11:52 | 000,057,344 | ---- | M] (Hewlett-Packard) -- H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

========== Modules (No Company Name) ==========

MOD - [2012.12.02 21:11:32 | 002,036,224 | ---- | M] () -- H:\Program Files\Alwil Software\Avast5\defs\12120200\algo.dll
MOD - [2011.09.27 07:23:00 | 000,087,912 | ---- | M] () -- H:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.09.27 07:22:40 | 001,242,472 | ---- | M] () -- H:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

========== Services (SafeList) ==========

SRV - [2012.11.22 18:12:01 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- H:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.11.22 10:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- H:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.10.26 19:57:24 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- H:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- H:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010.06.14 23:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- H:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) [Auto | Running] -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)
SRV - [2002.12.17 17:23:30 | 000,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- H:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- H:\Program Files\Garena\plugins\UI\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (amanggak)
DRV - [2012.11.23 12:50:25 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2012.10.30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- H:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.10.30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.10.30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.10.30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012.10.30 23:51:57 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- H:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012.10.30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- H:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012.10.30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- H:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.09.29 08:04:22 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\ManyCam.sys -- (ManyCam)
DRV - [2011.07.27 12:17:59 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2010.08.26 07:39:46 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2010.07.01 13:21:14 | 000,034,896 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2010.02.26 22:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.02.26 22:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.02.26 22:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.02.26 22:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.02.11 08:38:10 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009.12.18 10:58:52 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- H:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2009.11.23 17:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2009.11.23 17:37:08 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2008.08.26 18:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 19:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2006.11.22 16:53:02 | 001,121,536 | ---- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)
DRV - [2005.11.03 15:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2005.09.23 17:56:28 | 003,966,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2005.08.10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.05.16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- H:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2005.04.25 06:43:58 | 000,013,225 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\DB3G.sys -- (Razerlow)
DRV - [2005.03.18 00:30:10 | 000,132,608 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2005.01.08 01:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2790392
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-926492609-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: H:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: H:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: H:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: H:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: H:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: H:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: H:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: H:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: h:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: H:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: h:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: H:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: H:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: H:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.10.20 15:47:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.10.20 15:59:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: H:\Program Files\Alwil Software\Avast5\WebRep\FF [2012.11.10 19:36:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.10.20 15:59:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: H:\Program Files\Mozilla Firefox\components [2012.10.26 19:57:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: H:\Program Files\Mozilla Firefox\plugins [2012.10.21 10:47:48 | 000,000,000 | ---D | M]

[2012.10.29 15:09:09 | 000,000,000 | ---D | M] (No name found) -- H:\Program Files\Mozilla Firefox\extensions
[2012.11.27 14:36:48 | 000,000,000 | ---D | M] (Skype Click to Call) -- H:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010.12.11 12:08:44 | 000,000,000 | ---D | M] (Skype extension) -- H:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}(2)
[2012.07.29 12:12:57 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.09.02 14:27:31 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012.10.29 15:09:09 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2012.10.26 19:57:25 | 000,266,720 | ---- | M] (Mozilla Foundation) -- H:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.10.20 15:59:04 | 000,129,176 | ---- | M] (RealPlayer) -- H:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2012.03.19 08:00:33 | 000,002,208 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.03.19 08:00:33 | 000,000,638 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.03.19 08:00:33 | 000,001,367 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.03.19 08:00:33 | 000,000,654 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.03.19 08:00:33 | 000,001,179 | ---- | M] () -- H:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2011.06.25 18:07:59 | 000,000,880 | ---- | M]) - H:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost www.kostici.cz
O1 - Hosts: 127.0.0.1 localhost www.1001hry.cz
O1 - Hosts: 127.0.0.1 localhost www.mimibazar.org
O1 - Hosts: 127.0.0.1 localhost www.mimibazar.cz
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - H:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] H:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] H:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DivXUpdate] H:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] H:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [HydraVisionDesktopManager] H:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [Launch LGDCore] H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LgDeviceAgent] H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [Share-to-Web Namespace Daemon] H:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard)
O4 - HKLM..\Run: [StartCCC] H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TkBellExe] H:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-220523388-926492609-839522115-1005..\Run: [Clownfish] File not found
O4 - HKU\S-1-5-21-220523388-926492609-839522115-500..\RunOnce: [Report] \AdwCleaner[S2].txt ()
O4 - Startup: H:\Documents and Settings\All Users\Start Menu\Programs\Startup\HPAiODevice(hp psc 900 series) - 1.lnk = H:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-926492609-839522115-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - H:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 0843170612 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.124.130.1 213.168.183.97
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ABE96693-875D-4C2C-8C7C-A7AA33EC6E76}: DhcpNameServer = 10.124.130.1 213.168.183.97
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - H:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (H:\WINDOWS\system32\userinit.exe) - H:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - H:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - H:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - H:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - H:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - H:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - H:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - H:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - H:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - H:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - H:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - H:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - H:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - H:\WINDOWS\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to H:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.12.03 13:34:43 | 000,000,000 | --SD | C] -- H:\Documents and Settings\Administrator\Application Data\Microsoft
[2012.12.03 13:34:43 | 000,000,000 | RH-D | C] -- H:\Documents and Settings\Administrator\SendTo
[2012.12.03 13:34:43 | 000,000,000 | RH-D | C] -- H:\Documents and Settings\Administrator\Application Data
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu\Programs\Startup
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu
[2012.12.03 13:34:43 | 000,000,000 | R--D | C] -- H:\Documents and Settings\Administrator\Start Menu\Programs\Accessories
[2012.12.03 13:34:43 | 000,000,000 | -HSD | C] -- H:\Documents and Settings\Administrator\Cookies
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Templates
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Recent
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\PrintHood
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\NetHood
[2012.12.03 13:34:43 | 000,000,000 | -H-D | C] -- H:\Documents and Settings\Administrator\Local Settings
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\My Documents
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft Help
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Application Data\Macromedia
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Favorites
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Desktop
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\Adobe
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150050}
[2012.12.02 22:12:57 | 000,000,000 | ---D | C] -- H:\Program Files\trend micro
[2012.12.02 22:12:52 | 000,000,000 | ---D | C] -- H:\rsit
[2012.03.26 20:10:05 | 000,347,896 | ---- | C] (Valve Corporation) -- H:\Program Files\vstdlib_s.dll
[2012.03.26 20:10:05 | 000,340,480 | ---- | C] (Valve Corporation) -- H:\Program Files\vstdlib.dll
[2012.03.26 20:10:04 | 000,229,624 | ---- | C] (Valve Corporation) -- H:\Program Files\tier0_s.dll
[2012.03.26 20:10:03 | 000,329,728 | ---- | C] (Valve Corporation) -- H:\Program Files\Steam.dll
[2012.03.26 20:10:03 | 000,070,144 | ---- | C] (Valve Corporation) -- H:\Program Files\steam_api_c.dll
[2012.03.26 20:10:03 | 000,067,072 | ---- | C] (Valve Corporation) -- H:\Program Files\steam_api.dll
[2012.03.26 20:10:01 | 002,968,048 | ---- | C] (Valve Corporation) -- H:\Program Files\origsteamclient.dll
[2012.03.26 20:09:59 | 000,389,120 | ---- | C] (Valve) -- H:\Program Files\hlds.exe
[2012.03.26 20:09:59 | 000,221,184 | ---- | C] (Valve) -- H:\Program Files\hltv.exe
[2012.03.26 20:09:58 | 000,086,077 | ---- | C] (Valve) -- H:\Program Files\hl.exe
[2012.03.26 20:09:57 | 000,211,456 | ---- | C] (Aureal Semiconductor) -- H:\Program Files\a3dapi.dll
[2012.03.26 20:09:57 | 000,086,077 | ---- | C] (Valve) -- H:\Program Files\csko.exe
[12 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\*.tmp files -> H:\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.12.03 15:01:25 | 000,000,512 | ---- | M] () -- H:\PhysicalMBR.bin
[2012.12.03 15:00:00 | 000,001,036 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.12.03 14:20:00 | 000,001,032 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2012.12.03 14:20:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2012.12.03 14:15:00 | 000,000,914 | ---- | M] () -- H:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.12.03 14:13:01 | 000,000,936 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.03 14:06:00 | 000,001,028 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2012.12.03 13:45:15 | 000,002,206 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2012.12.03 13:44:27 | 000,000,932 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.03 13:44:26 | 000,000,318 | -H-- | M] () -- H:\WINDOWS\tasks\avast! Emergency Update.job
[2012.12.03 13:44:25 | 000,000,280 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.03 13:44:25 | 000,000,276 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.03 13:44:19 | 000,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2012.12.02 20:13:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job
[2012.12.02 17:06:01 | 000,000,976 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2012.12.02 16:59:00 | 000,000,984 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2012.12.02 14:32:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.01 12:19:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.11.30 18:59:00 | 000,000,288 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2012.11.30 14:57:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.11.28 13:57:17 | 000,002,283 | ---- | M] () -- H:\Documents and Settings\All Users\Desktop\Skype.lnk
[12 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\*.tmp files -> H:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.12.03 15:01:25 | 000,000,512 | ---- | C] () -- H:\PhysicalMBR.bin
[2012.12.03 13:34:44 | 000,001,599 | ---- | C] () -- H:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
[2012.12.03 13:34:44 | 000,001,392 | ---- | C] () -- H:\Documents and Settings\Administrator\Desktop\Recovery-Info.lnk
[2012.12.03 13:34:44 | 000,000,792 | ---- | C] () -- H:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
[2012.08.01 13:49:02 | 000,558,133 | ---- | C] () -- H:\WINDOWS\System32\sqlite3.dll
[2012.03.26 20:20:43 | 000,147,298 | ---- | C] () -- H:\Program Files\Steam_error.mdmp
[2012.03.26 20:12:31 | 000,001,407 | ---- | C] () -- H:\Program Files\Counter-Strike 1.6.lnk
[2012.03.26 20:10:04 | 001,672,504 | ---- | C] () -- H:\Program Files\swds.dll
[2012.03.26 20:10:04 | 000,352,256 | ---- | C] () -- H:\Program Files\vgui.dll
[2012.03.26 20:10:04 | 000,344,064 | ---- | C] () -- H:\Program Files\tier0.dll
[2012.03.26 20:10:04 | 000,245,819 | ---- | C] () -- H:\Program Files\vgui2.dll
[2012.03.26 20:10:04 | 000,139,264 | ---- | C] () -- H:\Program Files\voice_speex.dll
[2012.03.26 20:10:04 | 000,053,248 | ---- | C] () -- H:\Program Files\voice_miles.dll
[2012.03.26 20:10:03 | 001,672,504 | ---- | C] () -- H:\Program Files\sw.dll
[2012.03.26 20:10:03 | 000,389,632 | ---- | C] () -- H:\Program Files\steamclient.dll
[2012.03.26 20:10:03 | 000,000,694 | ---- | C] () -- H:\Program Files\rev.ini
[2012.03.26 20:10:03 | 000,000,027 | ---- | C] () -- H:\Program Files\steamemu.ini
[2012.03.26 20:10:02 | 000,618,496 | ---- | C] () -- H:\Program Files\proxy.dll
[2012.03.26 20:10:01 | 000,161,792 | ---- | C] () -- H:\Program Files\Mssv29.asi
[2012.03.26 20:10:01 | 000,142,848 | ---- | C] () -- H:\Program Files\Mssv12.asi
[2012.03.26 20:10:00 | 001,840,440 | ---- | C] () -- H:\Program Files\hw.dll
[2012.03.26 20:10:00 | 000,351,744 | ---- | C] () -- H:\Program Files\Mss32.dll
[2012.03.26 20:10:00 | 000,125,952 | ---- | C] () -- H:\Program Files\Mp3dec.asi
[2012.03.26 20:10:00 | 000,001,330 | ---- | C] () -- H:\Program Files\InstallRecord.blob
[2012.03.26 20:10:00 | 000,000,816 | ---- | C] () -- H:\Program Files\kver.kp
[2012.03.26 20:10:00 | 000,000,063 | ---- | C] () -- H:\Program Files\language.inf
[2012.03.26 20:09:59 | 000,001,569 | ---- | C] () -- H:\Program Files\hltv.cfg
[2012.03.26 20:09:59 | 000,000,786 | ---- | C] () -- H:\Program Files\hlds_steamgames.vdf
[2012.03.26 20:09:58 | 000,122,974 | ---- | C] () -- H:\Program Files\FileSystem_Steam.dll
[2012.03.26 20:09:58 | 000,118,872 | ---- | C] () -- H:\Program Files\FileSystem_Stdio.dll
[2012.03.26 20:09:58 | 000,090,112 | ---- | C] () -- H:\Program Files\DemoPlayer.dll
[2012.03.26 20:09:58 | 000,069,632 | ---- | C] () -- H:\Program Files\dbg.dll
[2012.03.26 20:09:57 | 000,720,956 | ---- | C] () -- H:\Program Files\unins000.exe
[2012.03.26 20:09:57 | 000,258,106 | ---- | C] () -- H:\Program Files\Core.dll
[2012.03.26 20:09:56 | 000,470,334 | ---- | C] () -- H:\Program Files\unins000.dat
[2012.03.18 17:43:24 | 000,271,200 | ---- | C] () -- H:\WINDOWS\System32\PnkBstrB.exe
[2012.02.16 16:28:30 | 000,003,072 | ---- | C] () -- H:\WINDOWS\System32\iacenc.dll
[2011.05.30 14:39:18 | 000,000,319 | ---- | C] () -- H:\WINDOWS\game.ini
[2011.05.16 19:47:08 | 000,041,396 | -H-- | C] () -- H:\WINDOWS\System32\mlfcache.dat
[2011.01.22 20:01:02 | 000,000,000 | ---- | C] () -- H:\WINDOWS\System32\Access.dat
[2011.01.22 13:25:50 | 000,000,000 | ---- | C] () -- H:\WINDOWS\ativpsrm.bin
[2010.12.20 14:14:50 | 000,001,324 | ---- | C] () -- H:\WINDOWS\System32\d3d9caps.dat
[2010.12.05 20:30:44 | 000,138,160 | ---- | C] () -- H:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010.12.05 20:30:17 | 000,835,440 | ---- | C] () -- H:\WINDOWS\System32\pbsvc.exe

========== ZeroAccess Check ==========

[2010.08.03 07:20:27 | 000,000,227 | RHS- | M] () -- H:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010.04.16 17:09:07 | 001,509,888 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = H:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 13:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = H:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 01:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.09.25 15:52:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.07.15 14:59:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ADDICT-THING
[2010.08.04 02:53:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Alwil Software
[2011.09.28 10:57:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Codemasters
[2010.08.26 07:39:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.06.29 20:14:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Easybits GO
[2012.12.03 13:35:12 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ICQ
[2010.08.23 02:29:40 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Installations
[2012.10.05 16:09:58 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\MetaQuotes
[2010.08.23 03:06:10 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Nokia
[2010.08.23 02:41:28 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2010.08.23 03:03:22 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PC Suite
[2011.08.27 22:40:21 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PMB Files
[2011.10.07 17:46:35 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Screaming Bee
[2012.07.15 15:04:04 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Sony
[2011.01.22 14:47:30 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Tunngle
[2011.12.24 21:44:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.10.07 16:24:26 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\.minecraft
[2012.11.25 20:16:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\BitTorrent
[2011.10.20 15:49:44 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\DDMSettings
[2011.10.16 12:04:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\LolClient
[2012.05.24 16:32:36 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\LolClient2
[2011.12.25 19:57:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\ManyCam
[2011.12.20 19:33:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Sony
[2011.12.25 19:29:37 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Thinstall
[2012.07.19 21:32:04 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\TS3Client
[2011.11.02 19:07:18 | 000,000,000 | ---D | M] -- H:\Documents and Settings\David\Application Data\Zoner
[2012.11.27 14:44:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\.minecraft
[2012.02.12 14:24:31 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\LolClient
[2012.10.20 13:57:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\TeamViewer
[2011.11.02 18:50:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kačka\Application Data\Zoner
[2011.09.26 18:38:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\.minecraft
[2010.08.26 07:46:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\DAEMON Tools Lite
[2011.08.05 11:28:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\go
[2011.03.12 01:38:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\LolClient
[2010.08.24 17:41:03 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Nokia
[2010.08.23 03:06:01 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\PC Suite
[2011.10.07 17:46:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Screaming Bee
[2011.08.10 23:03:39 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\SystemRequirementsLab
[2011.03.18 17:29:17 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\TS3Client
[2011.01.31 17:12:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Tunngle
[2010.10.11 08:29:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\olda\Application Data\Zoner

========== Purity Check ==========

========== Custom Scans ==========

< >
[2010.08.03 07:08:49 | 000,000,065 | RH-- | C] () -- H:\WINDOWS\Tasks\desktop.ini
[2010.08.03 07:19:25 | 000,000,006 | -H-- | C] () -- H:\WINDOWS\Tasks\SA.DAT
[2010.08.04 02:09:25 | 000,000,976 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2010.08.04 02:09:26 | 000,001,028 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2010.12.27 13:36:27 | 000,000,284 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2011.08.27 22:49:19 | 000,000,932 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2011.08.27 22:49:19 | 000,000,936 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2011.10.07 17:59:59 | 000,000,280 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
[2011.10.07 17:59:59 | 000,000,288 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2011.10.14 22:04:26 | 000,000,286 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2011.10.14 22:04:27 | 000,000,278 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2011.10.17 13:30:49 | 000,000,286 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2011.10.17 13:30:50 | 000,000,278 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2011.11.04 21:22:48 | 000,000,980 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2011.11.04 21:22:49 | 000,001,032 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2011.11.13 17:02:29 | 000,000,284 | ---- | C] () -- H:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2011.11.20 13:29:31 | 000,000,276 | ---- | C] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2011.11.21 16:54:59 | 000,000,984 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2011.11.21 16:55:00 | 000,001,036 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.04.09 11:35:55 | 000,000,914 | ---- | C] () -- H:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.07.30 12:23:43 | 000,000,318 | -H-- | C] () -- H:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.09.15 19:08:02 | 000,000,980 | ---- | C] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job

< >

< MD5 for: ATAPI.SYS >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\drivers\atapi.sys
[2004.08.04 06:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- H:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.04 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- H:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 01:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- H:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 01:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- H:\WINDOWS\system32\autochk.exe
[2004.08.04 13:00:00 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- H:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- H:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- H:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- H:\WINDOWS\system32\dllcache\cdrom.sys
[2004.08.04 13:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- H:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- H:\WINDOWS\explorer.exe
[2008.04.14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- H:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.04 13:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- H:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.04 13:00:00 | 018,738,937 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2010.08.04 00:51:11 | 023,852,652 | ---- | M] () .cab file -- H:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- H:\WINDOWS\system32\HAL.DLL
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- H:\WINDOWS\ServicePackFiles\i386\hal.dll
[2005.09.29 00:35:25 | 000,134,272 | ---- | M] (Microsoft Corporation) MD5=A3961B9456DE472D2F152C9DE950FFA5 -- H:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.04 13:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- H:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 01:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- H:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 01:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- H:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.06 12:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- H:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2008.04.14 01:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- H:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 01:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- H:\WINDOWS\ServicePackFiles\i386\services.exe
[2009.02.06 11:22:21 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=4712531AB7A01B7EE059853CA17D39BD -- H:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\system32\dllcache\services.exe
[2009.02.06 12:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- H:\WINDOWS\system32\services.exe
[2004.08.04 13:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- H:\WINDOWS\$NtUninstallKB956572_0$\services.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 01:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- H:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 01:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- H:\WINDOWS\system32\svchost.exe
[2004.08.04 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- H:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2005.03.14 01:55:08 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=0E66B538096A6529D1AC66E78EB0D5C8 -- H:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- H:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2005.03.14 02:17:17 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=6129E70F3D2F1E60860C930EBEAF92C2 -- H:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- H:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- H:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- H:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- H:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- H:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- H:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2004.08.04 13:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- H:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008.04.14 01:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- H:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 01:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- H:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.04 13:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- H:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 01:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- H:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 01:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- H:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[22 H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 H:\WINDOWS\CSC\*.tmp files -> H:\WINDOWS\CSC\*.tmp -> ]
[11 H:\WINDOWS\Installer\*.tmp files -> H:\WINDOWS\Installer\*.tmp -> ]
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]
[1 H:\WINDOWS\system32\Com\*.tmp files -> H:\WINDOWS\system32\Com\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2012.09.25 15:52:34 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012.07.15 14:59:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ADDICT-THING
[2012.11.22 18:12:17 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Adobe
[2010.08.03 14:42:21 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Ahead
[2010.08.04 02:53:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Alwil Software
[2011.12.24 21:43:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Apple
[2011.12.24 21:43:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Apple Computer
[2011.07.08 14:36:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ATI
[2010.08.09 06:15:19 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Blizzard
[2011.09.28 10:57:47 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Codemasters
[2010.08.26 07:39:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.10.20 15:48:07 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\DivX
[2011.06.29 20:14:29 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Easybits GO
[2012.12.03 13:35:12 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\ICQ
[2010.08.23 02:29:40 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Installations
[2010.12.26 22:38:26 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\LogiShrd
[2010.12.26 22:45:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Logitech
[2010.08.04 14:33:24 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\McAfee
[2012.10.05 16:09:58 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\MetaQuotes
[2011.09.13 11:47:18 | 000,000,000 | --SD | M] -- H:\Documents and Settings\All Users\Application Data\Microsoft
[2012.11.16 01:22:08 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Microsoft Help
[2012.05.09 22:08:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Mozilla
[2010.08.23 03:06:10 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Nokia
[2010.08.23 02:41:28 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2010.12.31 19:06:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Norton
[2010.12.30 12:46:57 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NortonInstaller
[2010.08.04 16:40:14 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\NOS
[2010.08.23 03:03:22 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PC Suite

DavidNeva · #9 Příspěvek od **DavidNeva** » 03 pro 2012 15:42

[2011.08.27 22:40:21 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\PMB Files
[2012.10.20 16:00:05 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Real
[2011.10.07 17:46:35 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Screaming Bee
[2012.11.27 14:36:49 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Skype
[2011.06.28 06:15:38 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Skype Extras
[2012.07.15 15:04:04 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Sony
[2012.12.01 22:02:59 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010.12.13 21:32:09 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Sun
[2011.01.22 14:47:30 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Tunngle
[2010.08.04 00:08:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011.12.24 21:44:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

< %ALLUSERSPROFILE%\Application Data\*.exe /s >
[2012.08.21 12:01:28 | 001,977,816 | ---- | M] (GEAR Software, Inc.) -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\GEARDIFx.exe
[2012.08.21 12:01:22 | 000,115,672 | ---- | M] (GEAR Software, Inc.) -- H:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DifXInst32.exe
[2012.01.03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- H:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\22625\AcrobatUpdater.exe
[2012.01.03 08:37:53 | 000,843,712 | ---- | M] (Adobe Systems Incorporated) -- H:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\22625\AdobeARM.exe
[2012.01.03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- H:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\22625\AdobeARMHelper.exe
[2012.01.03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- H:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\22625\ReaderUpdater.exe
[2012.01.03 18:46:15 | 000,345,520 | ---- | M] (Adobe Systems Incorporated) -- H:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-A95000000001}\Setup.exe
[2012.09.25 15:36:44 | 000,073,624 | ---- | M] (Apple Inc.) -- H:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.7.0.21\SetupAdmin.exe
[2011.10.20 15:46:17 | 000,056,969 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\ASPEncoder\Uninstaller.exe
[2011.09.18 09:38:22 | 000,057,591 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\ControlPanel\Uninstaller.exe
[2011.10.20 15:46:19 | 000,054,128 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\Converter\Uninstaller.exe
[2011.10.20 15:46:34 | 000,063,144 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\DesktopService\Uninstaller.exe
[2011.09.18 09:38:28 | 000,054,153 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\DFXPlugin\Uninstaller.exe
[2011.10.20 15:46:22 | 000,056,458 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\DivXDecoderShortcut\Uninstaller.exe
[2011.10.20 15:48:07 | 000,064,957 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\DivXPlusShortcuts\Uninstaller.exe
[2011.10.20 15:46:21 | 000,062,879 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\DSAACDecoder\Uninstaller.exe
[2011.10.20 15:46:25 | 000,057,275 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\DSASPDecoder\Uninstaller.exe
[2011.10.20 15:46:29 | 000,054,166 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\DSAVCDecoder\Uninstaller.exe
[2011.10.20 15:46:31 | 000,057,037 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\DSDesktopComponents\Uninstaller.exe
[2010.08.04 04:53:33 | 000,054,101 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\MPEG2Plugin\Uninstaller.exe
[2011.09.18 09:38:19 | 000,061,667 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\MSVC80CRTRedist\Uninstaller.exe
[2011.09.18 09:38:30 | 000,063,228 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\OVSHelper\Uninstaller.exe
[2011.10.20 15:47:32 | 000,065,928 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\Player\Uninstaller.exe
[2010.08.04 04:53:27 | 000,054,073 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\Qt4.5\Uninstaller.exe
[2010.09.02 12:33:27 | 000,144,696 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\DivX\RunAsUser\RUNASUSERPROCESS.exe
[2011.10.20 15:44:31 | 000,926,048 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\Setup\DivXSetup.exe
[2010.08.04 04:53:38 | 000,054,644 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\TranscodeEngine\Uninstaller.exe
[2011.09.18 09:38:35 | 000,084,038 | ---- | M] (DivX, Inc.) -- H:\Documents and Settings\All Users\Application Data\DivX\TransferWizard\Uninstaller.exe
[2011.09.18 09:39:19 | 000,061,792 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\Update\Uninstaller.exe
[2011.10.20 15:48:05 | 000,066,428 | ---- | M] (DivX, LLC) -- H:\Documents and Settings\All Users\Application Data\DivX\WebPlayer\Uninstaller.exe
[2011.05.28 17:05:12 | 000,423,296 | ---- | M] (EasyBits Software AS) -- H:\Documents and Settings\All Users\Application Data\Easybits GO\EasyBitsGO.exe
[2011.05.28 17:05:13 | 000,014,208 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\Easybits GO\ezShell64Run.exe
[2011.05.28 17:05:13 | 000,718,208 | ---- | M] (EasyBits Media) -- H:\Documents and Settings\All Users\Application Data\Easybits GO\Svc\GOUpdate.exe
[2010.08.22 23:38:54 | 036,684,048 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Nokia_PC_Suite_cze_web.exe
[2010.08.23 02:30:10 | 000,095,232 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\pcswpcsi.exe
[2010.08.23 02:30:10 | 000,008,192 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstCCD.exe
[2010.08.23 02:30:10 | 000,010,240 | ---- | M] (Nokia) -- H:\Documents and Settings\All Users\Application Data\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstPCS.exe
[2010.08.23 02:30:10 | 000,061,440 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
[2010.08.22 21:42:32 | 103,412,296 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer.exe
[2010.08.23 02:41:54 | 000,050,000 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\pcswpc.exe
[2010.08.23 02:41:54 | 000,077,824 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\Run_XML6_SP1.exe
[2010.08.23 02:41:54 | 000,038,912 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\WMF11Runx64.exe
[2010.08.23 02:41:54 | 000,038,912 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\WMF11Runx86.exe
[2010.08.23 02:41:58 | 013,930,312 | ---- | M] (Microsoft Corporation) -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\WMFDist11-WindowsXP-X64-ENU.exe
[2010.08.23 02:42:01 | 012,212,040 | ---- | M] (Microsoft Corporation) -- H:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\WMFDist11-WindowsXP-X86-ENU.exe
[2010.08.04 15:56:09 | 000,077,184 | ---- | M] (Adobe Systems Inc.) -- H:\Documents and Settings\All Users\Application Data\NOS\Adobe_Downloads\arh.exe
[2012.11.22 10:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) -- H:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
Invalid Environment Variable: APPDATA
Invalid Environment Variable: APPDATA

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.12.03 15:15:00 | 000,000,914 | ---- | M] () -- H:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.10.25 12:39:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2012.12.03 13:44:26 | 000,000,318 | -H-- | M] () -- H:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.12.03 13:44:27 | 000,000,932 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2012.12.03 15:13:00 | 000,000,936 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2012.12.02 17:06:01 | 000,000,976 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2012.12.03 15:06:00 | 000,001,028 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2012.12.02 20:13:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job
[2012.12.03 14:20:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2012.12.03 15:20:00 | 000,001,032 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2012.12.02 16:59:00 | 000,000,984 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2012.12.03 15:00:00 | 000,001,036 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.12.03 13:44:25 | 000,000,280 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
[2012.12.03 13:44:25 | 000,000,276 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.11.30 18:59:00 | 000,000,288 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2012.12.02 14:32:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.11.30 14:57:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.01 12:19:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.08.26 07:39:46 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- H:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2010.08.02 23:59:05 | 000,094,208 | ---- | M] () -- H:\WINDOWS\System32\config\default.sav
[2010.08.02 23:59:05 | 000,659,456 | ---- | M] () -- H:\WINDOWS\System32\config\software.sav
[2010.08.02 23:59:05 | 000,909,312 | ---- | M] () -- H:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.12.03 13:45:15 | 000,002,206 | ---- | M] () -- H:\WINDOWS\system32\wpa.dbl
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = H:\WINDOWS\system32\CTFMON.EXE -- [2008.04.14 01:12:16 | 000,015,360 | ---- | M] (Microsoft Corporation)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.10.26 19:57:25 | 000,917,984 | ---- | M] (Mozilla Corporation) MD5=9C376F42BDE37F18D0A39AF7415D9BE6 -- H:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2012.08.26 07:40:35 | 000,634,504 | ---- | M] (Microsoft Corporation) MD5=326B5461CCD7DB0CD6B126ADEB28667A -- H:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.12.03 15:01:25 | 000,000,512 | ---- | M] () MD5=A85596F02FD417EDE691187286F2AF59 -- H:\PhysicalMBR.bin
[1 H:\*.tmp files -> H:\*.tmp -> ]

< >

< *crack* /s >
[2010.08.26 06:41:43 | 000,074,722 | ---- | M] () -- \Program Files\Warcraft3_Frozen throne CRACK\Crack_remove.exe

< *keygen* /s >

< *loader* /s >
[2012.10.20 15:59:43 | 000,012,512 | ---- | M] () -- \Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2012.10.20 15:59:43 | 000,000,319 | ---- | M] () -- \Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2012.02.29 07:49:32 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Application Data\Skype\Apps\login\images\loader.gif
[2012.02.29 07:49:32 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Application Data\Skype\Apps\login\images\loader.png
[2011.08.21 11:14:12 | 000,000,691 | ---- | M] () -- \Documents and Settings\David\Desktop\Minecraft beta 1.7.3\.minecraft\ModLoader.txt
[2011.07.15 05:58:10 | 000,000,147 | ---- | M] () -- \Documents and Settings\David\Desktop\Minecraft beta 1.7.3\.minecraft\config\ModLoader.cfg
[2012.11.26 15:53:01 | 000,005,505 | ---- | M] () -- \Documents and Settings\David\Local Settings\Temporary Internet Files\Content.IE5\M198F7M0\queryLoader[1].js
[2012.11.26 15:53:00 | 000,000,353 | ---- | M] () -- \Documents and Settings\David\Local Settings\Temporary Internet Files\Content.IE5\XQPHQE5S\queryLoader[1].css
[2011.11.04 18:12:50 | 000,286,064 | ---- | M] () -- \Documents and Settings\David\My Documents\Downloads\SoftonicDownloader_for_divx-plus.exe
[2 \Documents and Settings\David\My Documents\Downloads\*.tmp files -> \Documents and Settings\David\My Documents\Downloads\*.tmp -> ]
[2012.11.28 14:00:39 | 000,000,673 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid\2.3.17.1_0\Media\ajax-loader.gif
[2012.11.13 16:34:35 | 000,000,701 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\6I8U3DGC\fontLoader[1].swf
[2012.08.19 19:53:50 | 000,105,903 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\L8TZ5PTY\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012.05.13 15:11:39 | 000,010,519 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\L8TZ5PTY\AdLoader-aee74f28845638b42a47bb02dc06a7c6.min[1].js
[2012.02.12 16:43:06 | 000,000,353 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\L8TZ5PTY\queryLoader[1].css
[2012.11.28 13:57:55 | 000,000,753 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\PNTXRA5U\AdLoader[1].htm
[2012.02.12 16:43:05 | 000,005,505 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\PNTXRA5U\queryLoader[1].js
[2012.04.04 15:05:30 | 000,010,364 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\WC0N0GG6\AdLoader-31f86c1d55aec17be3f2a203a8e4fb19.min[1].js
[2012.11.19 16:05:25 | 000,000,753 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\WC0N0GG6\AdLoader[1].htm
[2012.11.11 12:11:23 | 000,000,753 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\WC0N0GG6\AdLoader[2].htm
[2012.11.13 16:34:35 | 000,000,177 | ---- | M] () -- \Documents and Settings\Kačka\Local Settings\Temporary Internet Files\Content.IE5\WC0N0GG6\loaderxml[1].swf
[2012.11.16 21:17:53 | 000,373,432 | ---- | M] () -- \Documents and Settings\Kačka\My Documents\Downloads\SoftonicDownloader_for_minecraft-server.exe
[2011.04.15 13:27:32 | 000,000,105 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\content.ll.neoedge.com\AdContentAdControllersControllerLoader.sol
[2010.09.28 17:07:16 | 000,000,054 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\intl.esperanto.mtvi.com\global\apps\player\flex\Loader.swf\loaderLogging.sol
[2010.09.28 16:40:21 | 000,000,054 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\media.mtvnservices.com\player\loader\loaderLogging.sol
[2011.04.26 20:28:04 | 000,000,103 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\service.cdn.videoplaza.com\com.videoplaza.bootloader.sol
[2010.11.24 23:14:30 | 000,000,060 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\webgames.cz\vanocejsoutady\825.swf\MiniclipLoaderAd.sol
[2010.12.09 15:49:18 | 000,000,060 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\www.miniclip.com\games\sudoku\en\sudoku.swf\MiniclipLoaderAd.sol
[2011.09.03 15:44:35 | 000,000,202 | ---- | M] () -- \Documents and Settings\olda\Application Data\Macromedia\Flash Player\#SharedObjects\UGFECNHK\www.webgames.cz\vanocejsoutady\4138.swf\shiploader_fun.sol
[2012.08.15 19:07:42 | 000,000,673 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid\2.3.15.10_0\Media\ajax-loader.gif
[2010.12.24 19:52:15 | 000,003,208 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\0IK1DGKX\ajax-loader[1].gif
[2011.08.28 08:58:09 | 000,003,043 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\KE4SBKHO\downloader_en_eu[1].htm
[2011.11.13 20:30:36 | 000,000,353 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\L91MQ981\queryLoader[1].css
[2011.12.04 12:02:51 | 000,003,043 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\O2KFAP7X\downloader_en_eu[1].htm
[2011.12.12 21:57:48 | 000,003,655 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\O2KFAP7X\loader[1].htm
[2011.11.13 20:30:36 | 000,005,505 | ---- | M] () -- \Documents and Settings\olda\Local Settings\Temporary Internet Files\Content.IE5\O2KFAP7X\queryLoader[1].js
[2012.08.02 22:22:05 | 734,576,640 | ---- | M] () -- \Filmy\Vykoupeni z veznice shawshank-1994.DVDRip.CZ.by.Salud.of.PowerUploaders.avi
[2011.12.23 20:04:50 | 1543,260,160 | ---- | M] () -- \Filmy\Zrozeni Planety opic (2011) DVDRip.CZ.by.Salud.of.PowerUploaders (1).avi
[2012.08.27 20:33:18 | 000,008,827 | ---- | M] () -- \Program Files\Common Files\Apple\Apple Application Support\WebKit.resources\inspector\HeapSnapshotLoader.js
[2006.10.26 21:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 21:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2003.09.15 14:02:00 | 000,169,384 | ---- | M] () -- \Program Files\cstrike\models\qloader.mdl
[2001.08.27 18:55:24 | 000,002,830 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader.properties
[2001.08.27 18:55:24 | 000,003,014 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader_de.properties
[2001.08.27 18:55:24 | 000,002,996 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader_es.properties
[2001.08.27 18:55:24 | 000,003,208 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader_fr.properties
[2001.08.27 18:55:24 | 000,003,033 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader_it.properties
[2001.08.27 18:55:24 | 000,004,782 | ---- | M] () -- \Program Files\Hewlett-Packard\Update\com\hp\photosmart\share\ResUploader_ja.properties
[2009.05.31 02:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2003.09.15 13:55:50 | 000,352,548 | ---- | M] () -- \Program Files\valve\models\loader.mdl
[2003.09.15 13:56:04 | 000,012,764 | ---- | M] () -- \Program Files\valve\sound\ambience\loader_hydra1.wav
[2003.09.15 13:56:04 | 000,012,164 | ---- | M] () -- \Program Files\valve\sound\ambience\loader_step1.wav
[2010.03.15 19:28:24 | 000,045,056 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2011.03.08 17:10:08 | 000,670,208 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Facebook\ZPSPluginLoader.exe
[2011.05.31 09:46:24 | 000,685,568 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Flickr\ZPSPluginLoader.exe
[2011.03.08 17:09:04 | 000,194,048 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Picasa\ZPSPluginLoader.exe
[2011.06.08 14:20:02 | 000,102,792 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Program32\8bfLoader.exe
[2011.06.08 14:20:16 | 000,019,336 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Program32\WICLoader.exe
[2010.11.02 12:36:12 | 000,000,404 | ---- | M] () -- \Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.193\deploy\assets\storeImages\layout\small_loader.gif
[2012.08.23 13:28:00 | 000,000,404 | ---- | M] () -- \Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.223\deploy\assets\storeImages\layout\small_loader.gif
[2004.08.04 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2010.08.08 18:06:58 | 000,082,784 | ---- | M] () -- \WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2001.10.24 21:13:50 | 000,009,728 | ---- | M] () -- \WINDOWS\mui\FALLBACK\0405\osloader.exe.mui
[2008.04.14 01:11:52 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 19:31:43 | 000,230,400 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 19:31:44 | 000,278,016 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 01:11:52 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[12 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2012.07.05 08:21:22 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2010.10.22 12:46:42 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr

DavidNeva · #10 Příspěvek od **DavidNeva** » 03 pro 2012 15:46

OTL Extras logfile created on: 3.12.2012 14:58:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = H:\Documents and Settings\David\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Czech Republic | Language: CSY | Date Format: d.M.yyyy

1022,42 Mb Total Physical Memory | 390,35 Mb Available Physical Memory | 38,18% Memory free
2,40 Gb Paging File | 1,67 Gb Available in Paging File | 69,50% Paging File free
Paging file location(s): H:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
Drive H: | 465,75 Gb Total Space | 293,45 Gb Free Space | 63,01% Space Free | Partition Type: NTFS

Computer Name: PCO | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- H:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML.RV2D6JQFXILQ3TYG3M5RXJVLTE] -- H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "H:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "H:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "H:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "H:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"57196:TCP" = 57196:TCP:*:Enabled:Pando Media Booster
"57196:UDP" = 57196:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"57196:TCP" = 57196:TCP:*:Enabled:Pando Media Booster
"57196:UDP" = 57196:UDP:*:Enabled:Pando Media Booster
"8396:TCP" = 8396:TCP:*:Enabled:League of Legends Launcher
"8396:UDP" = 8396:UDP:*:Enabled:League of Legends Launcher
"6978:TCP" = 6978:TCP:*:Enabled:League of Legends Launcher
"6978:UDP" = 6978:UDP:*:Enabled:League of Legends Launcher
"6942:TCP" = 6942:TCP:*:Enabled:League of Legends Launcher
"6942:UDP" = 6942:UDP:*:Enabled:League of Legends Launcher
"6947:TCP" = 6947:TCP:*:Enabled:League of Legends Launcher
"6947:UDP" = 6947:UDP:*:Enabled:League of Legends Launcher
"6972:TCP" = 6972:TCP:*:Enabled:League of Legends Launcher
"6972:UDP" = 6972:UDP:*:Enabled:League of Legends Launcher
"8397:TCP" = 8397:TCP:*:Enabled:League of Legends Launcher
"8397:UDP" = 8397:UDP:*:Enabled:League of Legends Launcher
"6963:TCP" = 6963:TCP:*:Enabled:League of Legends Launcher
"6963:UDP" = 6963:UDP:*:Enabled:League of Legends Launcher
"6936:TCP" = 6936:TCP:*:Enabled:League of Legends Launcher
"6936:UDP" = 6936:UDP:*:Enabled:League of Legends Launcher
"6929:TCP" = 6929:TCP:*:Enabled:League of Legends Launcher
"6929:UDP" = 6929:UDP:*:Enabled:League of Legends Launcher
"6961:TCP" = 6961:TCP:*:Enabled:League of Legends Launcher
"6961:UDP" = 6961:UDP:*:Enabled:League of Legends Launcher
"8398:TCP" = 8398:TCP:*:Enabled:League of Legends Launcher
"8398:UDP" = 8398:UDP:*:Enabled:League of Legends Launcher
"8393:TCP" = 8393:TCP:*:Enabled:League of Legends Lobby
"8393:UDP" = 8393:UDP:*:Enabled:League of Legends Lobby
"8390:TCP" = 8390:TCP:*:Enabled:League of Legends Game Client
"8390:UDP" = 8390:UDP:*:Enabled:League of Legends Game Client

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"H:\Program Files\Pando Networks\Media Booster\PMB.exe" = H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"H:\Program Files\Skype\Plugin Manager\skypePM.exe" = H:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"H:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = H:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"H:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" = H:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2
"H:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe" = H:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process
"H:\Program Files\Garena\Garena.exe" = H:\Program Files\Garena\Garena.exe:*:Disabled:Garena
"H:\WINDOWS\system32\PnkBstrA.exe" = H:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"H:\WINDOWS\system32\PnkBstrB.exe" = H:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"H:\Files\Repair.exe" = H:\Files\Repair.exe:*:Enabled:Blizzard Repair Utility
"H:\Documents and Settings\olda\My Documents\Stažené soubory\.minecraft\MinecraftSP.exe" = H:\Documents and Settings\olda\My Documents\Stažené soubory\.minecraft\MinecraftSP.exe:*:Enabled:MinecraftSP
"H:\Documents and Settings\olda\My Documents\Stažené soubory\ChmatJabko.exe" = H:\Documents and Settings\olda\My Documents\Stažené soubory\ChmatJabko.exe:*:Enabled:ChmatJabko
"H:\Program Files\Pando Networks\Media Booster\PMB.exe" = H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"H:\Riot Games\League of Legends\air\LolClient.exe" = H:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby
"H:\Riot Games\League of Legends\game\League of Legends.exe" = H:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client
"H:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe" = H:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC
"H:\Riot Games\League of Legends\lol.launcher.exe" = H:\Riot Games\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher -- ()
"H:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = H:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"H:\Program Files\Steam\Steam.exe" = H:\Program Files\Steam\Steam.exe:*:Enabled:Steam
"H:\Program Files\Steam\steamapps\neverysak\team fortress 2\hl2.exe" = H:\Program Files\Steam\steamapps\neverysak\team fortress 2\hl2.exe:*:Enabled:hl2
"H:\Program Files\Google\Google Earth\plugin\geplugin.exe" = H:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth -- (Google)
"H:\Program Files\SimBin\STCC The Game 2\Race_Steam.exe" = H:\Program Files\SimBin\STCC The Game 2\Race_Steam.exe:*:Enabled:RACE 07
"H:\WINDOWS\system32\dpvsetup.exe" = H:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"H:\Program Files\csko.exe" = H:\Program Files\csko.exe:*:Enabled:Half-Life Launcher -- (Valve)
"H:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe" = H:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe:*:Enabled:DTX broker
"H:\Program Files\BitTorrent\BitTorrent.exe" = H:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"H:\WINDOWS\system32\javaw.exe" = H:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"H:\Program Files\Skype\Phone\Skype.exe" = H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"H:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = H:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"H:\Program Files\Bonjour\mDNSResponder.exe" = H:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service -- (Apple Inc.)
"H:\Program Files\iTunes\iTunes.exe" = H:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"H:\Documents and Settings\David\Desktop\ChmatJabko.exe" = H:\Documents and Settings\David\Desktop\ChmatJabko.exe:*:Enabled:ChmatJabko
"H:\Documents and Settings\Kačka\Local Settings\Temp\TeamViewer\Version7\TeamViewer.exe" = H:\Documents and Settings\Kačka\Local Settings\Temp\TeamViewer\Version7\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application -- (TeamViewer GmbH)
"H:\Program Files\Java\jre6\bin\javaw.exe" = H:\Program Files\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 37
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{29F563F4-8807-4496-8463-441EAA0E96AB}" = PC Connectivity Solution
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2
"{434D0820-3AA6-493A-80B9-301000028502}" = DiRT2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{748F4870-8350-11D3-B0BF-080009FB4A19}" = HP Share-to-Web
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{878D2EB2-2D55-42A9-955E-1E08F28529FD}" = Sony Media Manager 2.2
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISER_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISER_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISER_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISER_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISER_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{94A65759-6B3F-4AF8-944A-66F3FABDEFDE}_is1" = zavvyuka
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}" = Logitech GamePanel Software 3.06.109
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.2
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}" = System Requirements Lab for Intel
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game
"{D4DDFAA1-EC37-4529-AD5B-A433ADE68662}" = Apple Mobile Device Support
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AFD653D92C0CA9E8F375124D6A0B19FFBA89B1D2" = Windows Driver Package - Razer (Razerlow) HIDClass (03/07/2007 1.0.0.2)
"All ATI Software" = Softarová utilita ATI - Odinstalovat
"ATI Display Driver" = ATI Display Driver
"avast" = avast! Free Antivirus
"BitTorrent" = BitTorrent
"BOSSAFX" = BOSSAFX
"CCleaner" = CCleaner
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DivX Setup" = DivX Setup
"DriverAgent.exe" = DriverAgent by eSupport.com
"ENTERPRISER" = Microsoft Office Enterprise 2007
"GameParkClient_is1" = GamePark
"HP Photo Printing Software" = HP Photo Printing Software
"hp psc 900 series 1280843808" = hp psc 900 series
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"ManyCam" = ManyCam 2.6.65 (remove only)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 15.0.1 (x86 cs)" = Mozilla Firefox 15.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"OpenAL" = OpenAL
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 15.0" = RealPlayer
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player 1.1.11
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"ZonerPhotoStudio13_CZ_is1" = Zoner Photo Studio 13

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Counter-Strike 1.6_is1" = Counter-Strike 1.6 v42
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6000

Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6000

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 7953

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 7953

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 28562344

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 28562344

Error - 30.9.2012 12:35:44 | Computer Name = PCO | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace chrome.exe, verze 22.0.1229.79, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

[ Application Events ]
Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6000

Error - 29.9.2012 21:36:09 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6000

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 7953

Error - 29.9.2012 21:36:11 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 7953

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 28562344

Error - 30.9.2012 5:32:06 | Computer Name = PCO | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 28562344

Error - 30.9.2012 12:35:44 | Computer Name = PCO | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace chrome.exe, verze 22.0.1229.79, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

[ OSession Events ]
Error - 5.5.2012 15:45:26 | Computer Name = PCO | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 370
seconds with 240 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 3.12.2012 2:02:10 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:12 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:14 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:16 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:17 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:21 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:23 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:27 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:30 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 3.12.2012 2:02:35 | Computer Name = PCO | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

< End of report >

snad je to vše

#11 Příspěvek od **vyosek** » 04 pro 2012 00:01

Spustte znovu OTL

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:otl
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- H:\Program Files\Garena\plugins\UI\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (amanggak)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2790392
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-220523388-926492609-839522115-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
[2012.12.03 13:34:43 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Administrator\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150050}
[1 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[22 H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 H:\WINDOWS\CSC\*.tmp files -> H:\WINDOWS\CSC\*.tmp -> ]
[11 H:\WINDOWS\Installer\*.tmp files -> H:\WINDOWS\Installer\*.tmp -> ]
[12 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]
[1 H:\WINDOWS\system32\Com\*.tmp files -> H:\WINDOWS\system32\Com\*.tmp -> ]
[2012.12.03 15:15:00 | 000,000,914 | ---- | M] () -- H:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.10.25 12:39:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2012.12.03 13:44:26 | 000,000,318 | -H-- | M] () -- H:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.12.03 13:44:27 | 000,000,932 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2012.12.03 15:13:00 | 000,000,936 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2012.12.02 17:06:01 | 000,000,976 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job
[2012.12.03 15:06:00 | 000,001,028 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job
[2012.12.02 20:13:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job
[2012.12.03 14:20:00 | 000,000,980 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job
[2012.12.03 15:20:00 | 000,001,032 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job
[2012.12.02 16:59:00 | 000,000,984 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job
[2012.12.03 15:00:00 | 000,001,036 | ---- | M] () -- H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job
[2012.12.03 13:44:25 | 000,000,280 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
[2012.12.03 13:44:25 | 000,000,276 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.03 13:44:25 | 000,000,278 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job
[2012.11.30 18:59:00 | 000,000,288 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
[2012.12.02 14:32:00 | 000,000,284 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job
[2012.11.30 14:57:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job
[2012.12.01 12:19:00 | 000,000,286 | ---- | M] () -- H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"DivXUpdate"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"DATAMNGR"=-
"QuickTime Task"=-
"iTunesHelper"=-
"TkBellExe"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=-
"Clownfish"=-
"QuickTime Task"=-
"Google Update"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

DavidNeva · #12 Příspěvek od **DavidNeva** » 04 pro 2012 07:37

All processes killed
========== OTL ==========
Service WDICA stopped successfully!
Service WDICA deleted successfully!
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
Service Changer stopped successfully!
Service Changer deleted successfully!
Service GGSAFERDriver stopped successfully!
Service GGSAFERDriver deleted successfully!
File H:\Program Files\Garena\plugins\UI\safedrv.sys not found.
Error: No service named amanggak was found to stop!
Service\Driver key amanggak not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ not found.
HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-21-220523388-926492609-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKEY_USERS\S-1-5-21-220523388-926492609-839522115-500\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-500\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\S-1-5-21-220523388-926492609-839522115-1005\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
H:\Documents and Settings\Administrator\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150050} folder moved successfully.
H:\WINDOWS\msdownld.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP14B.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1EF.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP22B.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP24E.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP258.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP261.tmp\Microsoft.Build.Utilities.v3.5.dll deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP261.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP26D.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2CE.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2F3.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP310.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP35.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP37.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3B.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3C7.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3CB.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3E1.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3EC.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP401.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP431.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4F7.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP655.tmp\UIAutomationTypes.dll deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP655.tmp folder deleted successfully.
H:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8C1.tmp folder deleted successfully.
H:\WINDOWS\CSC\csc1.tmp deleted successfully.
H:\WINDOWS\Installer\MSI159.tmp deleted successfully.
H:\WINDOWS\Installer\MSI1C9.tmp deleted successfully.
H:\WINDOWS\Installer\MSI1D3.tmp deleted successfully.
H:\WINDOWS\Installer\MSI1DD.tmp deleted successfully.
H:\WINDOWS\Installer\MSI278.tmp deleted successfully.
H:\WINDOWS\Installer\MSI290.tmp deleted successfully.
H:\WINDOWS\Installer\MSI32.tmp deleted successfully.
H:\WINDOWS\Installer\MSI38A.tmp deleted successfully.
H:\WINDOWS\Installer\MSI394.tmp deleted successfully.
H:\WINDOWS\Installer\MSI3BB.tmp deleted successfully.
H:\WINDOWS\Installer\MSIC8.tmp deleted successfully.
H:\WINDOWS\system32\SET2A8.tmp deleted successfully.
H:\WINDOWS\system32\SETDB.tmp deleted successfully.
H:\WINDOWS\system32\SETDF.tmp deleted successfully.
H:\WINDOWS\system32\SETE7.tmp deleted successfully.
H:\WINDOWS\system32\tmp337.tmp deleted successfully.
H:\WINDOWS\system32\tmp338.tmp deleted successfully.
H:\WINDOWS\system32\tmp34F.tmp deleted successfully.
H:\WINDOWS\system32\tmp350.tmp deleted successfully.
H:\WINDOWS\system32\tmp437.tmp deleted successfully.
H:\WINDOWS\system32\tmp438.tmp deleted successfully.
H:\WINDOWS\system32\tmp4D2.tmp deleted successfully.
H:\WINDOWS\system32\tmp4D3.tmp deleted successfully.
H:\WINDOWS\system32\Com\COM3A3.tmp deleted successfully.
H:\WINDOWS\Tasks\Adobe Flash Player Updater.job moved successfully.
H:\WINDOWS\Tasks\AppleSoftwareUpdate.job moved successfully.
H:\WINDOWS\Tasks\avast! Emergency Update.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003Core.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1003UA.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1005Core1cd936dc090b10.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006Core.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1006UA.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007Core.job moved successfully.
H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-220523388-926492609-839522115-1007UA.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1003.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1005.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-926492609-839522115-1006.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1003.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1005.job moved successfully.
H:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-926492609-839522115-1006.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DATAMNGR not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ctfmon.exe deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Clownfish not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLs"|"" /E : value set successfully!
========== FILES ==========
File/Folder H:\WINDOWS\system32\*.tmp.dll not found.
File/Folder H:\WINDOWS\system32\SET*.tmp not found.
File/Folder H:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
H:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 475419 bytes
->Temporary Internet Files folder emptied: 33175 bytes
->Flash cache emptied: 56504 bytes

User: All Users

User: David
->Temp folder emptied: 2798134 bytes
->Temporary Internet Files folder emptied: 12522432 bytes
->Java cache emptied: 4688814 bytes
->FireFox cache emptied: 62612942 bytes
->Google Chrome cache emptied: 374470311 bytes
->Flash cache emptied: 58144 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: kackaa
->Temp folder emptied: 149412 bytes
->Temporary Internet Files folder emptied: 151482 bytes
->Flash cache emptied: 56504 bytes

User: Kačka
->Temp folder emptied: 267161804 bytes
->Temporary Internet Files folder emptied: 51443243 bytes
->Java cache emptied: 1988134 bytes
->FireFox cache emptied: 610544237 bytes
->Google Chrome cache emptied: 432717676 bytes
->Flash cache emptied: 117512 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 343 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: olda
->Temp folder emptied: 98821802 bytes
->Temporary Internet Files folder emptied: 194680818 bytes
->Java cache emptied: 2936121 bytes
->FireFox cache emptied: 80164922 bytes
->Google Chrome cache emptied: 397858265 bytes
->Flash cache emptied: 306796 bytes

%systemdrive% .tmp files removed: 81100334 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 10564067 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 459830950 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 3 003,00 mb

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: David
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: kackaa
->Flash cache emptied: 0 bytes

User: Kačka
->Flash cache emptied: 0 bytes

User: LocalService
->Flash cache emptied: 0 bytes

User: NetworkService

User: olda
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

[EMPTYJAVA]

User: Administrator

User: All Users

User: David
->Java cache emptied: 0 bytes

User: Default User

User: kackaa

User: Kačka
->Java cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: olda
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 12042012_072035

Files\Folders moved on Reboot...
File\Folder H:\Documents and Settings\David\Local Settings\Temp\etilqs_AIv39fQHdCnbLgl not found!
File\Folder H:\Documents and Settings\David\Local Settings\Temp\etilqs_sabgtxCIAtaqXGo not found!
File\Folder H:\Documents and Settings\David\Local Settings\Temp\etilqs_ueI9qXIL9K8yQAX not found!
H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\data_0 moved successfully.
H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\data_1 moved successfully.
H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\data_2 moved successfully.
H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\data_3 moved successfully.
H:\Documents and Settings\David\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\index moved successfully.
File move failed. H:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#13 Příspěvek od **vyosek** » 04 pro 2012 08:09

Fajn, OTL udelalo co melo, jak se chova PC

DavidNeva · #14 Příspěvek od **DavidNeva** » 04 pro 2012 08:12

Znatelně rychleji, zatím to vypadá že to vyřešilo i tu blbost s tím FB, ale uvidí se časem.

Samozřejmě děkuji a vážím si práce co pro nás děláte

EDIT: ..tak ta sránka znovu nejde

.. je možný, že je problém na druhé straně a né u mě?

#15 Příspěvek od **vyosek** » 04 pro 2012 08:16

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

Jaka stranka presneji nejde?

Dejte novy log z RSIT a napiste co PC

VIRY.CZ

Preventivka, Děkuji:)

Preventivka, Děkuji:)

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: preventivka

Re: Preventivka, Děkuji:)

Re: Preventivka, Děkuji:)

Re: Preventivka, Děkuji:)

Re: Preventivka, Děkuji:)

Re: Preventivka, Děkuji:)