Skype vir

Zpráva

lokem22 · #16 Příspěvek od **lokem22** » 18 Pro 2012 14:48

Dobrý den, píše mi to, že emailová adresa je neplatná..já sem sem to heslo zapomněl dát..heslo je qoobox.

#17 Příspěvek od **vyosek** » 18 Pro 2012 22:44

Jaka emailovka je neplatna? Ta moje, akorat tam misto (leklaryba) date @

Stahnete SytemLook http://jpshortstuff.247fixes.com/SystemLook.exe a ulozte jej na plochu

Do okna vlozte skript nize

Kód: Vybrat vše

:dir
c:\users\Martin\AppData\Roaming /sub

Kliknete na Look
Tlacitko Look se zmeni na Scanning a zsedne
Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

#18 Příspěvek od **vyosek** » 23 Pro 2012 23:12

Omlouvam se, uplne mi to zapadlo

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

Ulozte nejlepe na Plochu a rozbalte
Spustte kliknutim na mbanr
Nyni postupne kliknete na Next a Update
Po dokonceni update (aktualizace) databaze kliknete opet na Next
Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
PC bude restartovan
Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

lokem22 · #19 Příspěvek od **lokem22** » 24 Pro 2012 12:06

Zdravím

Malwarebytes Anti-Rootkit 1.01.0.1011
www.malwarebytes.org

Database version: v2012.12.24.03

Windows 7 x86 NTFS
Internet Explorer 8.0.7600.16385
Martin :: MARTIN-PC [administrator]

24.12.2012 12:04:54
mbar-log-2012-12-24 (12-04-54).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 36103
Time elapsed: 6 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

#20 Příspěvek od **vyosek** » 24 Pro 2012 21:35

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

lokem22 · #21 Příspěvek od **lokem22** » 25 Pro 2012 19:46

OTL logfile created on: 25.12.2012 19:10:57 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Martin\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,04 Gb Available Physical Memory | 34,58% Memory free
6,00 Gb Paging File | 3,38 Gb Available in Paging File | 56,45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68,26 Gb Total Space | 29,77 Gb Free Space | 43,61% Space Free | Partition Type: NTFS
Drive D: | 229,73 Gb Total Space | 23,44 Gb Free Space | 10,20% Space Free | Partition Type: NTFS
Drive G: | 2,39 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: MARTIN-PC | User Name: Martin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.12.25 19:05:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Martin\Desktop\OTL.exe
PRC - [2012.12.21 11:43:56 | 000,541,760 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe
PRC - [2012.12.12 16:54:36 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
PRC - [2012.12.04 11:53:02 | 001,354,736 | ---- | M] (Valve Corporation) -- D:\Hry\Steam\Steam.exe
PRC - [2012.12.02 20:19:38 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.11.21 22:56:07 | 000,135,170 | ---- | M] () -- C:\Program Files\AFLICS\AfterFLICS.exe
PRC - [2012.11.18 14:10:31 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ7M\ICQ.exe
PRC - [2012.09.21 14:13:16 | 001,044,816 | ---- | M] (Flexera Software, Inc.) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2012.08.28 14:52:56 | 003,671,904 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2012.08.20 12:22:52 | 000,896,400 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2012.07.28 03:10:10 | 000,469,504 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012.07.28 03:09:30 | 000,217,600 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.06.22 09:32:12 | 000,625,816 | ---- | M] (Pandora.TV) -- C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
PRC - [2012.03.07 10:57:20 | 009,108,320 | ---- | M] (Autodesk, Inc.) -- C:\Program Files\Autodesk\3ds Max 2013\3dsmax.exe
PRC - [2012.01.18 18:37:34 | 000,350,656 | ---- | M] (Autodesk, Inc.) -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
PRC - [2011.09.14 23:19:54 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe
PRC - [2009.07.14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.06.26 06:17:02 | 000,724,992 | ---- | M] () -- C:\Program Files\GIGABYTE\GHOST\Tilt.exe
PRC - [2009.03.12 16:36:24 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
PRC - [2008.07.19 15:38:34 | 000,078,008 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2008.07.19 15:38:28 | 000,147,640 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2008.07.19 15:38:04 | 000,250,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2008.07.19 15:34:56 | 000,348,344 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2008.07.19 15:25:06 | 000,016,056 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

========== Modules (No Company Name) ==========

MOD - [2012.12.21 11:44:00 | 000,647,168 | ---- | M] () -- D:\Hry\Steam\sdl.dll
MOD - [2012.12.21 11:43:55 | 020,320,240 | ---- | M] () -- D:\Hry\Steam\bin\libcef.dll
MOD - [2012.12.21 11:43:55 | 000,969,280 | ---- | M] () -- D:\Hry\Steam\bin\chromehtml.dll
MOD - [2012.12.21 11:43:55 | 000,124,416 | ---- | M] () -- D:\Hry\Steam\bin\avutil-51.dll
MOD - [2012.12.21 11:43:54 | 001,100,800 | ---- | M] () -- D:\Hry\Steam\bin\avcodec-53.dll
MOD - [2012.12.21 11:43:54 | 000,192,000 | ---- | M] () -- D:\Hry\Steam\bin\avformat-53.dll
MOD - [2012.12.12 16:54:36 | 014,586,296 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_135.dll
MOD - [2012.12.02 20:19:38 | 002,397,152 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012.09.02 18:30:26 | 000,247,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\2ade7e85654373a9c7bb9ce52402b8c6\WindowsFormsIntegration.ni.dll
MOD - [2012.09.02 18:29:41 | 002,452,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\83690797b64c0ad9a4673b7b6b2b0856\Microsoft.JScript.ni.dll
MOD - [2012.09.02 18:28:03 | 000,096,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\69e0779d48242f6256a12cbe0c6e4c53\UIAutomationProvider.ni.dll
MOD - [2012.09.02 18:27:38 | 001,637,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\3c7430a68f3a56dbbe91ba80fc45c035\PresentationUI.ni.dll
MOD - [2012.09.02 18:27:13 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\5a4de0d567696567ddd0ad7ddf4a9e0d\System.Xaml.ni.dll
MOD - [2012.09.02 18:27:06 | 000,044,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\1674f6fb3b91fa91c93a41b99029be4c\Accessibility.ni.dll
MOD - [2012.09.02 17:47:38 | 018,000,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\36deec24b4a6ba94f4cad9c3206abf2c\PresentationFramework.ni.dll
MOD - [2012.09.02 17:47:35 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\276f7b53f15e66e518278753c57b78b2\System.Configuration.ni.dll
MOD - [2012.09.02 17:47:32 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\717c6a68a2ad575e93bccc52a11f7c52\System.Xml.ni.dll
MOD - [2012.09.02 17:47:23 | 013,102,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\adeb9af3c309921ae1b7fb8a621ee243\System.Windows.Forms.ni.dll
MOD - [2012.09.02 17:47:23 | 006,811,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\9876f9c772d11cfc95c3ce57ed3e641d\System.Data.ni.dll
MOD - [2012.09.02 17:47:18 | 011,450,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\5daeba02f31cbc36d2c38b5d452c5378\PresentationCore.ni.dll
MOD - [2012.09.02 17:47:15 | 001,652,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5c5b46515e207b2025a474340de7ae15\System.Drawing.ni.dll
MOD - [2012.09.02 17:47:12 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\e09bc975f73e4bc24ab3eb7f6373288e\System.Core.ni.dll
MOD - [2012.09.02 17:47:09 | 003,857,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\53f3344ee53bc8692a3c8c6dfbadd66c\WindowsBase.ni.dll
MOD - [2012.09.02 17:47:06 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b56374e1f5605ecb6d2630fb2ef1eb53\PresentationFramework.Aero.ni.dll
MOD - [2012.09.02 17:47:05 | 009,086,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\68131da3061b5a1c048abf73c5bae11d\System.ni.dll
MOD - [2012.09.02 17:47:00 | 014,407,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ac9bfacce80c52220e4b4b3a814aaa3d\mscorlib.ni.dll
MOD - [2012.03.07 11:03:34 | 000,028,000 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\ThreadingTools.dll
MOD - [2012.03.07 11:01:18 | 000,038,752 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\stdplugs\Maxscript.Diagnostics.dlx
MOD - [2012.03.07 11:00:28 | 000,205,664 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\stdplugs\FbxFileLink.dfl
MOD - [2012.03.07 11:00:22 | 001,166,176 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\stdplugs\emproxymxs.dlx
MOD - [2012.03.07 10:58:48 | 000,041,824 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\pickonlygfx.drv
MOD - [2012.03.07 10:58:42 | 000,201,056 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\OgsExtWorld.dll
MOD - [2012.03.07 10:58:40 | 002,357,600 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\OgsExtRendering.dll
MOD - [2012.03.07 10:58:40 | 000,317,792 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\OgsExtEffect.dll
MOD - [2012.03.07 10:58:38 | 000,244,064 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\OgsExtDevice.dll
MOD - [2012.03.07 10:58:30 | 000,316,256 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\MetaSLCompiler.dll
MOD - [2012.03.07 10:58:22 | 000,012,640 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\MaxQtBridge.dll
MOD - [2012.03.07 10:58:14 | 000,083,808 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\MaxExplorerBindings.dll
MOD - [2012.03.07 10:58:02 | 000,088,928 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\GraphicsUtility.dll
MOD - [2012.03.07 10:58:00 | 000,018,272 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\gmiloader.dll
MOD - [2012.03.07 10:57:58 | 000,012,640 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\GlobalNormalDataGenerators.dll
MOD - [2012.03.07 10:57:36 | 000,124,768 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\CacheFilePackage.dll
MOD - [2012.03.07 10:57:30 | 000,054,112 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\bin\assemblies\ManagedNetworkUtilities.dll
MOD - [2012.03.07 10:57:24 | 000,065,888 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\assetmanagement.dll
MOD - [2012.03.07 08:29:52 | 014,775,808 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\bin\assemblies\Autodesk.Max.Wrappers.dll
MOD - [2012.03.07 06:54:30 | 000,547,840 | ---- | M] () -- c:\Program Files\Autodesk\3ds Max 2013\stdplugs\(MassFX)\ContentCoreShared.dll
MOD - [2012.03.07 06:54:20 | 000,030,208 | ---- | M] () -- c:\Program Files\Autodesk\3ds Max 2013\stdplugs\PhysX.dlm
MOD - [2012.03.07 06:54:12 | 001,713,664 | ---- | M] () -- c:\Program Files\Autodesk\3ds Max 2013\stdplugs\(MassFX)\Plugins\Main.dlmp
MOD - [2012.03.07 06:52:24 | 004,358,656 | ---- | M] () -- c:\Program Files\Autodesk\3ds Max 2013\stdplugs\(MassFX)\ContentCorePhysx2.dll
MOD - [2012.02.17 19:55:36 | 000,166,912 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2012.01.26 22:55:04 | 000,554,496 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\substance_sse2_blend.dll
MOD - [2012.01.10 23:23:26 | 000,197,632 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\substance_linker.dll
MOD - [2011.12.06 22:48:32 | 003,705,856 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\synHub.dll
MOD - [2011.11.15 22:45:00 | 000,757,760 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\gen_fx.dll
MOD - [2011.09.21 22:38:30 | 000,560,128 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\AshliFX.dll
MOD - [2011.09.07 10:27:28 | 000,037,824 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2013\QtSolutions_MFCMigrationFramework_Ad_2.dll
MOD - [2011.04.29 13:27:16 | 001,001,408 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\libxml2.dll
MOD - [2011.04.29 13:23:08 | 000,310,208 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axis2_engine.dll
MOD - [2011.04.29 13:23:08 | 000,121,280 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axiom.dll
MOD - [2011.04.29 13:23:08 | 000,104,896 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axutil.dll
MOD - [2011.04.29 13:23:08 | 000,086,976 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\neethi.dll
MOD - [2011.04.29 13:23:08 | 000,030,144 | ---- | M] () -- C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\axis2_parser.dll
MOD - [2009.06.26 06:17:02 | 000,724,992 | ---- | M] () -- C:\Program Files\GIGABYTE\GHOST\Tilt.exe

========== Services (SafeList) ==========

SRV - [2012.12.21 11:43:56 | 000,541,760 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.12.12 16:54:36 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.12.02 20:19:38 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.11.21 22:56:07 | 000,135,170 | ---- | M] () [Auto | Running] -- C:\Program Files\AFLICS\AfterFLICS.exe -- (AfterFLICS v3)
SRV - [2012.09.21 14:13:16 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.07.28 03:09:30 | 000,217,600 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.22 09:32:12 | 000,625,816 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files\PANDORA.TV\PanService\PandoraService.exe -- (PanService)
SRV - [2011.09.14 23:19:54 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe -- (mi-raysat_3dsmax2013_32)
SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.03.12 16:36:24 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe -- (mi-raysat_3dsmax2010_32)
SRV - [2008.07.19 15:38:28 | 000,147,640 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2008.07.19 15:38:04 | 000,250,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2008.07.19 15:34:56 | 000,348,344 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2008.07.19 15:25:06 | 000,016,056 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martin\AppData\Local\Temp\CFcatchme.sys -- (CFcatchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martin\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2012.09.06 16:09:30 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012.07.28 05:06:48 | 008,758,784 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012.07.28 02:14:22 | 000,296,448 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012.05.14 07:12:28 | 000,086,656 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2009.07.14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009.07.14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009.07.14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009.07.14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009.07.13 23:02:53 | 000,657,408 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u)
DRV - [2009.07.13 23:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
DRV - [2008.07.19 15:37:42 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2008.07.19 15:36:03 | 000,051,280 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2008.07.19 15:35:18 | 000,078,416 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2008.07.19 15:33:42 | 000,023,152 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2008.07.19 15:32:36 | 000,042,912 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://www.google.com
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTer ... 1f1f8e1039
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: 2020Player_IKEA%402020Technologies.com:5.0.94.0
FF - prefs.js..extensions.enabledAddons: %7B64161300-e22b-11db-8314-0800200c9a66%7D:0.9.6.10
FF - prefs.js..extensions.enabledAddons: %7Bea614400-e918-4741-9a97-7a972ff7c30b%7D:2.5.6
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..keyword.URL: ""
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.12.02 20:19:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012.08.20 11:39:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Martin\AppData\Roaming\Mozilla\Extensions
[2012.10.24 20:30:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\0wym3m74.default\extensions
[2012.08.27 18:25:41 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\0wym3m74.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2012.09.08 10:54:13 | 000,000,000 | ---D | M] (20-20 3D Viewer - IKEA) -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\0wym3m74.default\extensions\2020Player_IKEA@2020Technologies.com
[2012.10.10 21:50:24 | 000,281,285 | ---- | M] () (No name found) -- C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\0wym3m74.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
[2012.12.02 20:19:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.12.02 20:19:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2012.12.02 20:19:32 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2012.12.02 20:19:38 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.07.14 03:30:04 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.07.14 03:30:04 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.07.14 03:30:05 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.07.14 03:30:05 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.07.14 03:30:05 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2012.12.16 20:38:24 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Tilt] C:\Program Files\GIGABYTE\GHOST\Tilt.exe ()
O4 - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O9 - Extra Button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A1F2417C-E1BF-4B1B-A3EA-F5385E8B1AFD}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.09.06 18:17:35 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012.09.24 22:05:27 | 000,000,000 | ---D | M] - D:\Autodesk Entertainment Creation Suite 2013 -- [ NTFS ]
O32 - AutoRun File - [2010.03.22 05:24:08 | 000,000,175 | R--- | M] () - G:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codec - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.tscc - C:\Windows\System32\tsccvid.dll (TechSmith Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.12.25 19:05:19 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Martin\Desktop\OTL.exe
[2012.12.24 11:57:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.12.24 11:57:07 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\mbar
[2012.12.22 15:08:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
[2012.12.19 17:51:27 | 000,000,000 | ---D | C] -- C:\Users\Martin\AppData\Roaming\TS3Client
[2012.12.19 17:51:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2012.12.19 17:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2012.12.19 15:05:49 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.12.16 20:38:22 | 000,000,000 | ---D | C] -- C:\Users\Martin\AppData\Local\temp
[2012.12.16 20:32:38 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.12.16 20:31:07 | 000,000,000 | --SD | C] -- C:\ComboFix
[2012.12.12 22:28:39 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.12.12 22:28:39 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.12.12 22:28:39 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.12.12 22:28:31 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.12.12 22:24:21 | 005,010,912 | R--- | C] (Swearware) -- C:\Users\Martin\Desktop\ComboFix.exe
[2012.12.12 21:44:09 | 000,000,000 | ---D | C] -- C:\rsit
[2012.12.10 20:36:39 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\Sešity
[2012.12.09 20:43:23 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\Elektrárna
[2012.12.09 14:13:22 | 000,000,000 | ---D | C] -- C:\Users\Martin\AppData\Roaming\Xilisoft
[2012.12.03 21:25:48 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\Most
[2012.12.02 20:19:31 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.12.01 16:06:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Výuka ZAV
[2012.12.01 16:06:36 | 000,000,000 | ---D | C] -- C:\Program Files\ZAV1
[2012.12.01 12:21:57 | 000,000,000 | ---D | C] -- C:\Users\Martin\Documents\Microsoft Hardware
[2012.12.01 11:30:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PANDORATV
[2012.11.30 14:33:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Keyboard
[2012.11.30 14:33:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliType Pro
[2012.11.29 23:31:49 | 000,000,000 | ---D | C] -- C:\Users\Martin\Documents\My Games
[2012.11.29 23:31:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Orbit
[2012.11.29 23:24:08 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\Nová složka (3)
[2012.11.29 23:21:23 | 000,000,000 | ---D | C] -- C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2012.11.28 19:59:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamePark
[2012.11.28 19:59:33 | 000,000,000 | ---D | C] -- C:\Program Files\GamePark
[2012.11.28 17:48:38 | 000,000,000 | ---D | C] -- C:\Users\Martin\Desktop\Alexmander 13
[2012.11.28 17:37:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision
[2012.10.09 12:49:56 | 002,174,976 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Program Files\Common Files\atimpenc.dll

========== Files - Modified Within 30 Days ==========

[2012.12.25 19:12:53 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.12.25 19:05:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Martin\Desktop\OTL.exe
[2012.12.25 13:13:39 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.25 13:13:39 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.25 13:05:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.25 13:05:21 | 2415,321,088 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.24 17:46:45 | 000,665,706 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.12.24 17:46:45 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.12.24 17:46:45 | 000,139,402 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.12.24 17:46:45 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.12.24 11:56:56 | 013,485,902 | ---- | M] () -- C:\Users\Martin\Desktop\mbar-1.01.0.1011.zip
[2012.12.23 22:26:56 | 000,139,048 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012.12.23 22:26:51 | 000,282,296 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2012.12.23 22:25:44 | 000,282,296 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2012.12.22 15:08:07 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\Hitman Absolution - Professional Edition.lnk
[2012.12.22 14:39:24 | 008,392,620 | ---- | M] () -- C:\Users\Martin\Desktop\Mika---We-Are-Golden.mp3
[2012.12.22 12:52:27 | 000,152,944 | ---- | M] () -- C:\Users\Martin\Desktop\Generator.FBX
[2012.12.22 12:52:07 | 000,638,976 | ---- | M] () -- C:\Users\Martin\Desktop\Generátor3.max
[2012.12.22 01:42:21 | 000,380,928 | ---- | M] () -- C:\Users\Martin\Desktop\Generátor2.max
[2012.12.22 01:27:37 | 000,221,184 | ---- | M] () -- C:\Users\Martin\Desktop\Generátor.max
[2012.12.20 13:46:37 | 003,811,232 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.12.19 17:51:15 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.12.16 20:38:24 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012.12.16 20:30:45 | 005,010,912 | R--- | M] (Swearware) -- C:\Users\Martin\Desktop\ComboFix.exe
[2012.12.13 22:39:20 | 000,017,967 | ---- | M] () -- C:\Windows\System32\drivers\etc\services
[2012.12.12 16:54:36 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.12.12 16:54:36 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.12.10 20:20:16 | 000,000,132 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
[2012.12.07 17:23:52 | 000,000,132 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\Filtr IIIExport Adobe CS6 – předvolby
[2012.12.01 21:58:27 | 000,000,912 | ---- | M] () -- C:\Users\Martin\Desktop\ZAV.exe.lnk
[2012.11.30 14:35:41 | 000,001,345 | ---- | M] () -- C:\Users\Martin\Desktop\arma2.exe.lnk
[2012.11.30 14:35:27 | 000,001,547 | ---- | M] () -- C:\Users\Martin\Desktop\ArmA2OA.exe.lnk
[2012.11.28 17:38:22 | 000,000,671 | ---- | M] () -- C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) Singleplayer.lnk
[2012.11.28 17:38:22 | 000,000,671 | ---- | M] () -- C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) Multiplayer.lnk
[2012.11.28 17:37:59 | 000,022,328 | ---- | M] () -- C:\Users\Martin\AppData\Roaming\PnkBstrK.sys
[2012.11.28 17:37:32 | 000,000,300 | ---- | M] () -- C:\Windows\game.ini

========== Files Created - No Company Name ==========

[2012.12.25 19:12:53 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.12.24 11:56:22 | 013,485,902 | ---- | C] () -- C:\Users\Martin\Desktop\mbar-1.01.0.1011.zip
[2012.12.22 15:08:07 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\Hitman Absolution - Professional Edition.lnk
[2012.12.22 14:38:55 | 008,392,620 | ---- | C] () -- C:\Users\Martin\Desktop\Mika---We-Are-Golden.mp3
[2012.12.22 12:52:27 | 000,152,944 | ---- | C] () -- C:\Users\Martin\Desktop\Generator.FBX
[2012.12.22 12:40:43 | 000,638,976 | ---- | C] () -- C:\Users\Martin\Desktop\Generátor3.max
[2012.12.22 01:42:21 | 000,380,928 | ---- | C] () -- C:\Users\Martin\Desktop\Generátor2.max
[2012.12.22 01:27:37 | 000,221,184 | ---- | C] () -- C:\Users\Martin\Desktop\Generátor.max
[2012.12.21 12:07:45 | 000,139,048 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012.12.21 12:07:24 | 000,282,296 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012.12.21 12:07:19 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012.12.19 17:51:15 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.12.12 22:28:39 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.12.12 22:28:39 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.12.12 22:28:39 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.12.12 22:28:39 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.12.12 22:28:39 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.12.07 17:23:52 | 000,000,132 | ---- | C] () -- C:\Users\Martin\AppData\Roaming\Filtr IIIExport Adobe CS6 – předvolby
[2012.12.01 21:58:27 | 000,000,912 | ---- | C] () -- C:\Users\Martin\Desktop\ZAV.exe.lnk
[2012.11.30 14:35:43 | 000,001,345 | ---- | C] () -- C:\Users\Martin\Desktop\arma2.exe.lnk
[2012.11.30 14:35:33 | 000,001,547 | ---- | C] () -- C:\Users\Martin\Desktop\ArmA2OA.exe.lnk
[2012.11.28 17:38:22 | 000,000,671 | ---- | C] () -- C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) Singleplayer.lnk
[2012.11.28 17:38:22 | 000,000,671 | ---- | C] () -- C:\Users\Public\Desktop\Call of Duty(R) 4 - Modern Warfare(TM) Multiplayer.lnk
[2012.11.28 17:37:31 | 000,000,300 | ---- | C] () -- C:\Windows\game.ini
[2012.10.29 17:00:45 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe
[2012.09.17 15:32:36 | 000,000,132 | ---- | C] () -- C:\Users\Martin\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
[2012.08.25 20:50:50 | 000,000,132 | ---- | C] () -- C:\Users\Martin\AppData\Roaming\Adobe Formát GIF CS6 – předvolby
[2012.08.20 20:49:15 | 000,022,328 | ---- | C] () -- C:\Users\Martin\AppData\Roaming\PnkBstrK.sys
[2012.08.20 11:31:56 | 000,000,161 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2012.08.20 11:05:33 | 000,001,024 | ---- | C] () -- C:\Users\Martin\.rnd
[2012.08.20 10:49:42 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.07.28 02:30:54 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012.07.28 02:30:54 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2012.07.27 21:47:36 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.06.21 08:06:04 | 003,233,712 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2012.04.12 20:30:10 | 000,637,743 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012.02.27 22:07:20 | 000,057,344 | R--- | C] () -- C:\Windows\System32\XSIChooser.exe
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat

========== ZeroAccess Check ==========

[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009.07.14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.10.01 17:16:54 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\AnvSoft
[2012.12.13 22:46:16 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Autodesk
[2012.11.04 11:37:59 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\CrystalIdea Software
[2012.10.25 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
[2012.12.25 17:40:14 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\ICQ
[2012.08.20 14:07:55 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\ImTOO
[2012.10.01 16:26:45 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\MAXON
[2012.08.20 14:46:26 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Publish Providers
[2012.09.29 15:20:43 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Sony
[2012.11.05 18:47:16 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Sony Creative Software Inc
[2012.08.23 12:08:05 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012.09.29 15:46:59 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\systweak
[2012.11.20 23:28:51 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Theta
[2012.12.20 15:40:57 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\TS3Client
[2012.09.25 13:36:09 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Ubisoft
[2012.12.25 19:14:30 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\uTorrent
[2012.12.09 19:50:17 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Xilisoft
[2012.10.21 15:17:07 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Youtube Downloader HD

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 05:53:46 | 000,032,594 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\erdnt\cache\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\System32\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\drivers\cdrom.sys
[2009.07.14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_db87d184bc84f910\cdrom.sys
[2009.07.14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\erdnt\cache\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\System32\hal.dll
[2009.07.14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\erdnt\cache\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\erdnt\cache\services.exe
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\erdnt\cache\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2009.07.14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\erdnt\cache\tcpip.sys
[2009.07.14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\System32\drivers\tcpip.sys
[2009.07.14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys

< MD5 for: USERINIT.EXE >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\erdnt\cache\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\erdnt\cache\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\System32\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< >

< %systemroot%*.* /U /s >
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[13 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.10.03 22:57:53 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Adobe
[2012.10.01 17:16:54 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\AnvSoft
[2012.09.08 20:42:32 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Apple Computer
[2012.12.13 22:46:16 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Autodesk
[2012.11.04 11:37:59 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\CrystalIdea Software
[2012.10.25 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
[2012.12.25 17:40:14 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\ICQ
[2012.08.20 10:27:41 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Identities
[2012.08.20 14:07:55 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\ImTOO
[2012.08.20 11:14:00 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Macromedia
[2012.10.01 16:26:45 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\MAXON
[2009.07.14 10:20:06 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Media Center Programs
[2012.12.19 15:10:13 | 000,000,000 | --SD | M] -- C:\Users\Martin\AppData\Roaming\Microsoft
[2012.08.20 11:39:59 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Mozilla
[2012.08.20 11:07:46 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Nero
[2012.08.20 14:46:26 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Publish Providers
[2012.12.25 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Skype
[2012.09.29 15:20:43 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Sony
[2012.11.05 18:47:16 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Sony Creative Software Inc
[2012.08.23 12:08:05 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012.09.29 15:46:59 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\systweak
[2012.11.20 23:28:51 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Theta
[2012.12.20 15:40:57 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\TS3Client
[2012.09.25 13:36:09 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Ubisoft
[2012.12.25 19:20:29 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\uTorrent
[2012.08.20 11:00:50 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\WinRAR
[2012.12.09 19:50:17 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Xilisoft
[2012.10.21 15:17:07 | 000,000,000 | ---D | M] -- C:\Users\Martin\AppData\Roaming\Youtube Downloader HD

< %APPDATA%\*.exe /s >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >
[2012.12.23 22:26:56 | 000,139,048 | ---- | M] () -- C:\Windows\system32\drivers\PnkBstrK.sys

< %systemroot%\system32\*.* /3 >
[2012.12.25 13:13:39 | 000,014,016 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.25 13:13:39 | 000,014,016 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.24 17:46:45 | 000,139,402 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2012.12.24 17:46:45 | 000,120,382 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2012.12.24 17:46:45 | 000,665,706 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2012.12.24 17:46:45 | 000,651,450 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2012.12.24 17:46:45 | 001,575,230 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2012.12.23 22:25:44 | 000,282,296 | ---- | M] () -- C:\Windows\system32\PnkBstrB.ex0
[2012.12.23 22:26:51 | 000,282,296 | ---- | M] () -- C:\Windows\system32\PnkBstrB.exe
[2012.12.23 22:26:51 | 000,282,296 | ---- | M] () -- C:\Windows\system32\PnkBstrB.xtr

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"uTorrent" = "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED -- [2012.08.20 12:22:52 | 000,896,400 | ---- | M] (BitTorrent, Inc.)
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2012.08.28 14:52:56 | 003,671,904 | ---- | M] (DT Soft Ltd)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.12.02 20:19:38 | 000,916,960 | ---- | M] (Mozilla Corporation) MD5=5744FFF8E72D105C138DAE9E17BB29FE -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.07.14 02:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.12.25 19:12:53 | 000,000,512 | ---- | M] () MD5=85B8329A5681BBB0B7A0866FEFA823DE -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2008.08.07 10:28:04 | 001,159,409 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS4\Support Files\Presets\Image - Special Effects\Cracked Tiles.ffx
[2001.08.14 12:31:08 | 000,030,054 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\Inventor Server\Textures\surfaces\Cracks.bmp
[2011.09.14 22:27:36 | 000,008,428 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\maps\Substance\textures\Cracked_Plaster.sbsar
[2011.05.06 11:30:44 | 002,267,256 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\stamps\rgb_crackedFun1.tif
[2011.05.06 11:30:46 | 001,539,420 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\stamps\rgb_mudCracks.tif
[2011.05.06 11:30:52 | 000,023,048 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\stamps\thumbnails\rgb_crackedFun1.tif
[2011.05.06 11:30:54 | 000,031,528 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\stamps\thumbnails\rgb_mudCracks.tif
[2001.08.14 14:31:08 | 000,030,054 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\DirectConnect2013\bin\Aruba\Inventor Server\Textures\surfaces\Cracks.bmp
[2012.12.13 22:33:22 | 000,000,308 | ---- | M] () -- \Users\Martin\AppData\Roaming\Microsoft\Windows\Recent\Crack.lnk
[2012.11.19 18:09:49 | 000,039,653 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.1.torrent
[2012.11.19 18:09:49 | 000,039,653 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.torrent
[2012.08.20 20:54:14 | 000,010,617 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\Battlefield.3.CRACK.ONLY-RELOADED.rar.torrent
[2012.09.24 22:16:12 | 000,005,688 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\Exkluzivní obsah + crack.rar.torrent
[2012.10.25 10:00:13 | 000,012,960 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\Medal of Honor Warfighter crack only-FLT + update-FLT.torrent
[2009.12.02 10:58:30 | 002,267,256 | ---- | M] () -- \Users\Martin\Documents\Mudbox\2010\data\Stamps\rgb_crackedFun1.tif
[2009.12.02 10:58:36 | 001,539,420 | ---- | M] () -- \Users\Martin\Documents\Mudbox\2010\data\Stamps\rgb_mudCracks.tif
[2009.12.02 10:58:54 | 000,023,048 | ---- | M] () -- \Users\Martin\Documents\Mudbox\2010\data\Stamps\thumbnails\rgb_crackedFun1.tif
[2009.12.02 10:58:58 | 000,031,528 | ---- | M] () -- \Users\Martin\Documents\Mudbox\2010\data\Stamps\thumbnails\rgb_mudCracks.tif

< *keygen* /s >
[2012.07.27 23:31:56 | 002,000,896 | ---- | M] () -- \Program Files\Sony\Vegas Pro 11.0\Keygen.exe
[2012.11.14 22:54:08 | 000,000,838 | ---- | M] () -- \Users\Martin\AppData\Roaming\uTorrent\ADOBE.CS6.0.MASTER.COLLECTION.WIN.KEYGEN-XFORCE.torrent

< *loader* /s >
[2008.09.03 01:14:34 | 000,217,088 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS4\Support Files\MXF_SDK_MetaMetadata_BinaryLoader_r.4.1.1.223.dll
[2008.08.28 18:34:20 | 004,965,736 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\Photodownloader.exe
[2008.08.28 15:42:12 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\de_de\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\en_us\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\es_es\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\it_it\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\no_no\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,308 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2008.08.28 15:42:16 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2008.08.26 00:32:24 | 000,217,088 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS4\MXF_SDK_MetaMetadata_BinaryLoader_r.4.1.1.223.dll
[2009.02.03 18:33:52 | 000,028,008 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2010\AecLoader.arx
[2009.03.12 18:11:02 | 000,023,040 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2010\stdplugs\ParserLoader.gup
[2009.03.12 18:22:50 | 000,046,592 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2010\stdplugs\SceneEffectLoader.dlu
[2012.02.20 10:31:00 | 000,023,464 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\AecLoader.arx
[2012.03.07 10:57:22 | 000,018,784 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\AssemblyLoader.dll
[2012.01.09 01:39:56 | 000,009,791 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\AssemblyLoader.xml
[2012.03.07 10:58:00 | 000,018,272 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\gmiloader.dll
[2011.12.13 07:27:16 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\de-DE\gmiloader.dll.mui
[2011.09.14 23:55:40 | 000,001,024 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\en-US\gmiloader.dll.mui
[2012.01.20 22:54:02 | 000,036,864 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\ExternalPlugins\CS4\Windows\Autodesk.Plugins.Adobe.AfterFX.SceneIO.Loader.aex
[2012.01.20 22:54:02 | 000,039,936 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\ExternalPlugins\CS5\Windows\Autodesk.Plugins.Adobe.AfterFX.SceneIO.Loader.aex
[2012.03.07 10:56:42 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\fr-FR\gmiloader.dll.mui
[2012.01.10 18:00:14 | 000,061,088 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\Inventor Server\Bin\ClrAddinLoader.dll
[2011.12.13 07:32:18 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\ja-JP\gmiloader.dll.mui
[2011.12.13 07:34:56 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\ko-KR\gmiloader.dll.mui
[2012.03.07 11:01:54 | 000,031,072 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\ParserLoader.gup
[2012.03.07 11:02:40 | 000,055,136 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\SceneEffectLoader.dlu
[2012.01.30 22:39:04 | 000,058,880 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\(MassFX)\PhysX_2.8.5\PHYSX4DCC_PhysXLoader.dll
[2012.01.30 22:39:06 | 000,064,000 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\(MassFX)\PhysX_2.8.5\PHYSX4DCC_PhysXUpdateLoader.dll
[2012.02.22 13:55:32 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\de-DE\ParserLoader.gup.mui
[2012.02.07 04:36:50 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\de-DE\SceneEffectLoader.dlu.mui
[2011.09.15 00:05:06 | 000,002,048 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\en-US\ParserLoader.gup.mui
[2011.09.15 00:15:04 | 000,002,560 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\en-US\SceneEffectLoader.dlu.mui
[2012.02.23 14:34:50 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\fr-FR\ParserLoader.gup.mui
[2012.02.07 04:37:06 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\fr-FR\SceneEffectLoader.dlu.mui
[2012.02.26 04:06:08 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\ja-JP\ParserLoader.gup.mui
[2012.02.07 04:37:20 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\ja-JP\SceneEffectLoader.dlu.mui
[2012.02.22 13:55:46 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\ko-KR\ParserLoader.gup.mui
[2012.02.07 04:37:34 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\ko-KR\SceneEffectLoader.dlu.mui
[2011.11.28 22:58:34 | 000,002,027 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\stdscripts\(MassFX)\px_loader.ms
[2012.02.22 13:55:50 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\zh-CN\ParserLoader.gup.mui
[2012.02.07 04:37:40 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\stdplugs\zh-CN\SceneEffectLoader.dlu.mui
[2011.12.18 04:33:16 | 000,012,288 | ---- | M] () -- \Program Files\Autodesk\3ds Max 2013\zh-CN\gmiloader.dll.mui
[2011.05.06 11:50:56 | 000,013,312 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\plugins\EnvironmentMapLoader.mp
[2011.05.06 11:32:04 | 000,000,028 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\SDK\include\QtCore\QPluginLoader
[2011.05.06 11:32:04 | 000,003,243 | ---- | M] () -- \Program Files\Autodesk\Mudbox 2012\SDK\include\QtCore\qpluginloader.h
[2012.02.22 22:11:56 | 000,078,336 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012.02.22 22:11:56 | 000,155,136 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012.02.22 22:11:56 | 000,117,248 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2012.10.11 21:56:32 | 000,008,827 | ---- | M] () -- \Program Files\Common Files\Apple\Apple Application Support\WebKit.resources\inspector\HeapSnapshotLoader.js
[2012.01.10 18:00:14 | 000,061,088 | ---- | M] () -- \Program Files\Common Files\Autodesk Shared\DirectConnect2013\bin\Aruba\Inventor Server\Bin\ClrAddinLoader.dll
[2008.02.28 12:26:06 | 000,111,912 | ---- | M] () -- \Program Files\Common Files\Nero\Shared\NSCLoader.dll
[2012.11.18 14:10:29 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7M\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2012.11.18 14:10:29 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7M\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2012.11.18 14:10:29 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7M\imApp\theme\MUICoreLib\xtraLoader.swf
[2012.11.18 14:10:42 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7M\Xtraz\icq\content\profile_lightboxs\preloader.html
[2011.02.16 17:39:14 | 000,055,808 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX for Maya\Maya 2012\plug-ins\PhysX_2.8.4\PhysXLoader.dll
[2011.02.14 16:55:58 | 000,041,472 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX for Maya\Maya 2012\plug-ins\PhysX_2.8.4\PhysXUpdateLoader.dll
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2012.10.26 18:04:12 | 000,329,056 | ---- | M] () -- \Program Files\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2012.10.26 18:01:02 | 000,293,376 | ---- | M] () -- \Program Files\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2012.05.03 23:03:14 | 000,370,070 | ---- | M] () -- \Program Files\Youtube Downloader HD\downloader-hd.ico
[2012.09.17 17:30:12 | 005,106,176 | ---- | M] () -- \Program Files\Youtube Downloader HD\YouTubeDownloaderHD.exe
[2012.10.21 15:10:14 | 000,000,061 | ---- | M] () -- \Program Files\Youtube Downloader HD\YoutubeDownloaderHD.url
[2012.10.21 15:10:14 | 000,001,139 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD\Youtube Downloader HD.lnk
[2008.02.04 10:32:50 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012.06.18 11:39:40 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.06.18 11:39:40 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.10.21 15:10:14 | 000,001,139 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD\Youtube Downloader HD.lnk
[2008.02.04 10:32:50 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012.06.18 11:39:40 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.06.18 11:39:40 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012.12.16 20:46:40 | 000,105,903 | ---- | M] () -- \Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O9RT6OMG\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012.12.25 13:07:55 | 000,000,753 | ---- | M] () -- \Users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O9RT6OMG\AdLoader[1].htm
[2012.10.21 15:10:14 | 000,001,121 | ---- | M] () -- \Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Youtube Downloader HD.lnk
[2012.12.03 11:08:20 | 000,000,042 | ---- | M] () -- \Users\Martin\AppData\Roaming\Youtube Downloader HD\YouTubeDownloaderHD.ini
[2009.07.14 13:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 05:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009.07.14 09:43:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 09:43:57 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2009.07.14 09:43:57 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2009.07.14 03:17:55 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.07.14 03:17:55 | 000,507,568 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9_winload.exe_75835076
[2009.07.14 03:17:55 | 000,442,920 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9_winresume.exe_85cd1215
[2009.07.14 03:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.14 09:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 02:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.07.14 02:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 173 bytes -> C:\ProgramData\TEMP:BF3D62E7
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:A1EDB939

< End of report >

lokem22 · #22 Příspěvek od **lokem22** » 25 Pro 2012 19:47

OTL Extras logfile created on: 25.12.2012 19:10:57 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Martin\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,04 Gb Available Physical Memory | 34,58% Memory free
6,00 Gb Paging File | 3,38 Gb Available in Paging File | 56,45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68,26 Gb Total Space | 29,77 Gb Free Space | 43,61% Space Free | Partition Type: NTFS
Drive D: | 229,73 Gb Total Space | 23,44 Gb Free Space | 10,20% Space Free | Partition Type: NTFS
Drive G: | 2,39 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: MARTIN-PC | User Name: Martin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- D:\Programy\Nainstalovaný software\Adobe Photoshop CS6\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D1637A8-414C-4201-A096-46DDCDECBC4E}" = lport=138 | protocol=17 | dir=in | app=system |
"{12273BD2-C8E7-45DF-B6D9-79678DCDB6A4}" = lport=139 | protocol=6 | dir=in | app=system |
"{34A09BF5-2036-4C58-B6D1-F3BE41538F6E}" = lport=10243 | protocol=6 | dir=in | app=system |
"{47A25C21-AD09-4B3B-A307-80F703390A55}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4B4904DF-A69F-4D4B-831C-35952F346107}" = lport=137 | protocol=17 | dir=in | app=system |
"{4F7BE261-7E89-4812-9D34-822A004ED5BE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{502F8B9B-7439-4A0C-9C03-9C6C7187D7E0}" = lport=2869 | protocol=6 | dir=in | app=system |
"{77CC6529-76EF-416A-ADBF-362EF3BF7525}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7E4B2443-30F3-4201-8471-0A7B6CA5C44D}" = rport=137 | protocol=17 | dir=out | app=system |
"{86E59E78-CA20-45AE-A023-387B359D456E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{914E44BE-E67A-4D42-8293-A4838416AAE5}" = rport=139 | protocol=6 | dir=out | app=system |
"{969783EB-7D35-4EBD-A3A9-378D911A60DB}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A3E8A729-6F17-410F-8EBB-B76A3A3E7D07}" = rport=138 | protocol=17 | dir=out | app=system |
"{A9B43EC0-E516-4382-9DD6-487463C83061}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C3D3F500-5EBD-4AA6-8F38-AEFB4C3631DD}" = rport=445 | protocol=6 | dir=out | app=system |
"{CD51A62E-0785-476D-8EC3-D04A0F414C00}" = lport=445 | protocol=6 | dir=in | app=system |
"{D2CA90F6-0E2D-4A4E-B4F3-D17AD64137F7}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DE45CD6A-1CA3-4954-8FA8-5393C2A2B0EC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{ECEF60AD-AFE4-4916-BED9-2D314F2BF2D1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F3C6D3F4-0441-40D4-A6A0-12B3CFDF9ACF}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FCC7EA19-126B-4E53-B9DD-E4A7350F99E4}" = rport=10243 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0074822D-FD9A-4BFF-BF52-361CFED2B314}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{00C1033F-36AA-44EB-BC40-FB429EB4D3D6}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{014C6475-7785-4D95-8873-A98664A4C30E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{03D48100-53F4-45C7-AE86-7D22F133F982}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{03FC95B1-4B63-4468-91C9-D21EB8535D89}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{0613457C-C0E4-4AB8-9A64-A4E0965E3518}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"{06456874-FFE5-4299-A3D4-C6A41D98160D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0F52F524-3AAD-4B8E-A15C-BBE575E445BF}" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"{178E2022-971C-41A6-99D7-4B84E1F71327}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{1A6968BF-DB71-4555-BA64-4F31399AC0F1}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1B230BF5-E39D-4A31-8B07-4339E96ACEBC}" = protocol=6 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2updater.exe |
"{2511BA6B-CBA0-463C-B219-FE221A6E9D07}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe |
"{28F33330-B202-4705-88D1-9390049CC36E}" = protocol=6 | dir=in | app=d:\hry\call of duty 4 modern warfare.rar\iw3mp.exe |
"{2B0A32BB-E122-42FD-B320-55C695933C72}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{2DD6790F-23E2-4DC7-9BB5-3231C889305D}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32.exe |
"{3428340A-50F0-405B-9745-637D00AAA1C6}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\3dsmax.exe |
"{35750EAA-4BDA-466C-BBF5-D184A634EE77}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{3A07AB29-F27E-4CF6-BEAA-F0E9A437FA23}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{3A0CDEFA-0F5C-495D-8ACD-BCC6C7A93EA0}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\3dsmax.exe |
"{3B089B5F-24C8-4099-9919-E76B728EF9C1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4990871E-AF2B-4967-82EB-97A3E9924F67}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{4FD04693-707E-4940-9BBF-073447819574}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{534A26A9-F25D-4F47-8C05-BD7C806BA2E4}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2\arma2.exe |
"{54B8BD0A-5B25-4482-9DFC-40EC6226DBCD}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{55EBB1F4-729D-44B1-9C2D-A165C7C45207}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5754C548-8D0E-4C69-8544-F13A9EC90056}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{5A5E4C3B-68B2-4EB5-8560-C4C4117F1482}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5C95B15B-5A1A-4A8E-B991-71A288502A1A}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{5F813537-43DE-4C9C-A2B2-4CBEA5DC082B}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32.exe |
"{622D1B8F-DB63-4DC3-AD27-8331E663524A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{63EA427E-78B1-43A4-B5D3-2F801B0AFF7D}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{655150C3-D445-4127-ACC0-90E6EBAD6380}" = protocol=17 | dir=in | app=d:\hry\call of duty 4 modern warfare.rar\iw3mp.exe |
"{6E3F8795-742F-47C1-92D7-3F446714B171}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{72173598-3FA5-4A9D-B5C0-E0B8B863CC2D}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{74C27530-F0D7-4A44-856B-741CE382094F}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{75E1B5B0-B28C-4527-BEB6-4C1A8DC302E6}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32server.exe |
"{7BA67F0E-DB0E-439B-AF14-FDF114836F4C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7D296C32-F226-45AA-AF60-513A40E2BCBF}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{7E63B389-625D-4252-9133-0FDE97E400E9}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe |
"{7ED469A4-A3EF-45FD-8E3A-7D90250E618B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{80623E1D-1C53-4C13-8CCC-5C9643D9B1BC}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32server.exe |
"{8258B845-5BD0-46F7-A74E-876C6B844C3B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{83D8C25A-0233-4C16-A255-3E3752DA821F}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2\arma2.exe |
"{8A63EEDB-9D8C-44C9-B326-63B80F91C1A4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8B3980FD-4352-47EE-8C93-781D024B1697}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{8D29077C-EE48-4416-8AD5-B05E54DDD374}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{8F24E8BC-F813-45F8-91FD-DD4D7F98F8CA}" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"{90FAEB71-3A0E-4FE1-999A-CED8170FA537}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{943C27F9-035B-4C0F-A622-39DE0D3E4E03}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{956A0772-16C4-44A1-AC5A-5F18F9E0E563}" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"{988E8AB3-9EBE-473A-9F75-32AC1F5F2C8F}" = protocol=6 | dir=out | app=system |
"{9ADC3DFC-A735-4E6A-88D2-ED95FBADC21F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9FEC5699-4A43-4ABC-9350-AEB1CEBE4595}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A0671A34-DFCD-4F8B-A038-A20ACA080DEB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A966C4ED-9C36-426E-908F-2F438D9A1F07}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\3dsmax.exe |
"{ACD30AB9-B344-489E-AE9F-C6D31330A0A6}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{B3CECCF5-1563-4426-94B5-4958D428385D}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe |
"{B93B4DDD-E5CE-49C6-8722-26A14F7FECDB}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{BEFD48E9-C981-4007-9660-555D9F404209}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{C358DE27-409B-4EA4-A2BA-57239DDB3A83}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C55DBC36-0F6A-4297-8558-4B27C2B6E194}" = protocol=17 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2updater.exe |
"{CC378F91-2780-49CB-A79A-0C866F23CE07}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{D63DDE86-FEF4-495D-BE60-1365DCB93798}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{D92B4984-C29F-431E-9B18-7B78CCA7453F}" = protocol=6 | dir=in | app=d:\hry\steam\steam.exe |
"{DBAC728A-FDE3-4327-AF26-070E45C5FACB}" = protocol=17 | dir=in | app=d:\hry\steam\steam.exe |
"{E27F0C46-0B86-4F67-9DF5-4AF50133597F}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe |
"{E2C53513-A601-460A-8D71-4239340F0C59}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{E9929F8A-8050-48DE-9C89-F6FA8B459FF5}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{ED5BA858-2D21-4EFA-9C78-FCDD8DC6DE26}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\3dsmax.exe |
"{F43F44AC-16E6-4BA5-9723-BF6258295D0F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F74BBD4E-2DF3-4B23-B109-748144BF4D35}" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"{FB73951D-B3C4-404C-A159-446A66389C99}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"TCP Query User{0133E4EE-589C-458F-8F81-DA8069716A16}C:\program files\icq7m\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"TCP Query User{022FAB5D-B33A-4AED-9904-5D2A2A32626C}D:\hry\battlefield bad company 2\bfbc2game.exe" = protocol=6 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2game.exe |
"TCP Query User{3C9B0326-90DC-4981-9A81-71458C4CEF9B}C:\users\martin\desktop\nightfallbuild\nightfall.exe" = protocol=6 | dir=in | app=c:\users\martin\desktop\nightfallbuild\nightfall.exe |
"TCP Query User{4994F135-F21C-4077-93FE-23CB152A7C6D}D:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe" = protocol=6 | dir=in | app=d:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe |
"TCP Query User{6011CD14-75B6-4B91-B82B-72523C884FB2}D:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe" = protocol=6 | dir=in | app=d:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe |
"TCP Query User{8B1129FD-605D-45F9-A897-2C1C33228F25}C:\users\martin\desktop\nightfall_build\nightfall.exe" = protocol=6 | dir=in | app=c:\users\martin\desktop\nightfall_build\nightfall.exe |
"TCP Query User{E6B8EA11-F7C6-436F-959B-47C061D24999}D:\hry\assassins creed iii\assassins creed iii\ac3sp.exe" = protocol=6 | dir=in | app=d:\hry\assassins creed iii\assassins creed iii\ac3sp.exe |
"UDP Query User{02CBEB13-94FE-4F76-A6C4-DB4EFC5BE5E0}C:\program files\icq7m\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"UDP Query User{0EA8D341-37DA-48E3-827B-94B6AC97797B}D:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe" = protocol=17 | dir=in | app=d:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe |
"UDP Query User{422F6096-DD5E-4EC1-AF65-1954262015FF}D:\hry\assassins creed iii\assassins creed iii\ac3sp.exe" = protocol=17 | dir=in | app=d:\hry\assassins creed iii\assassins creed iii\ac3sp.exe |
"UDP Query User{48C11BFF-265C-4D7D-9BC7-8AF5558BC4B1}C:\users\martin\desktop\nightfall_build\nightfall.exe" = protocol=17 | dir=in | app=c:\users\martin\desktop\nightfall_build\nightfall.exe |
"UDP Query User{4CA99C5C-005A-4826-8669-E338DA9CEF22}D:\hry\battlefield bad company 2\bfbc2game.exe" = protocol=17 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2game.exe |
"UDP Query User{63C03EE0-E1C6-4495-A30A-7C2460A401AB}C:\users\martin\desktop\nightfallbuild\nightfall.exe" = protocol=17 | dir=in | app=c:\users\martin\desktop\nightfallbuild\nightfall.exe |
"UDP Query User{8347D42F-6D5A-42BA-9DE3-0F45CEB821B5}D:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe" = protocol=17 | dir=in | app=d:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{06E18300-BB64-1632-8E6A-2593FC67BB74}" = Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 32-bit
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0F414901-5ED4-11E1-86F3-F04DA23A5C58}" = Vegas Pro 11.0
"{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}" = Autodesk Material Library 2013
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{1585EBE4-2F65-2DE6-A531-301DFAB68B5E}" = AMD Drag and Drop Transcoding
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{317AC0C7-FEBF-0409-87A3-4FC70D0ED900}" = Autodesk 3ds Max 2010 32-bit
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3BCD05CE-8CDE-9503-8794-D8CDB9FA8562}" = Catalyst Control Center InstallProxy
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2013.0.0
"{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}" = Adobe Setup
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C70E8D3-78D4-493E-A4CF-1BE881E2DA99}" = FumeFX 3.0.1 R2013 32-bit
"{5061ACBA-7A0A-42FE-93FF-403B2099D200}" = Autodesk Essential Skills Movies for 3ds Max 2013 32-bit
"{531AC43D-0010-1033-B544-B674C4C0B4BA}" = Autodesk Mudbox 2012 32-bit - English
"{531AC43D-EF8F-404C-B544-B674C4C0B4BA}" = Autodesk Mudbox 2012 32-bit - English
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58760EEC-8B6A-43F4-81AA-696E381DFADD}" = Autodesk Material Library Medium Resolution Image Library 2013
"{606E12B9-641F-4644-A22A-FF38AE980AFD}" = Autodesk Material Library Base Resolution Image Library 2013
"{60A08432-00DD-0409-AC2C-143C75460878}" = Autodesk 3ds Max 2010 32-bit Components
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{6232599C-A2B0-416F-8BFA-22016F4CC22F}" = OMP Index Reference Increment
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{696BB53C-28E6-1632-974E-D42FFF5B8E04}" = Autodesk Inventor Server Engine for 3ds Max 2013 32-bit
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74AD1757-8887-D3F0-23C4-1E16B77A6ABC}" = AMD Media Foundation Decoders
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}" = ICQ7M
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79130390-599A-0409-93EB-B6A759E2ABB0}" = Autodesk 3ds Max 2013 32-bit
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{92203FA0-7C43-429F-857C-0AE197D8199C}" = Composite 2013
"{9255C64F-906F-4E19-900F-8DB2E63D87D3}" = Autodesk MotionBuilder 2013 32-bit
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD2DD45-8763-4F12-BDC6-958FCFEF0FCB}" = Microsoft IntelliType Pro 8.2
"{A04F8183-B0AC-44B1-9947-DC8AFD1194DD}" = Autodesk MatchMover 2013 32-bit
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A675D66E-0CBD-4A8F-0068-82B774DD4C9E}" = Autodesk Mudbox 2013 32-bit
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Czech
"{AC968B0F-024A-4323-BD6B-C2A85D183F34}" = GHOST
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BBDAC608-4458-4ef1-BC04-C1C9B39A7F69}" = Suites Exclusives Standard 2013 32-bit
"{BBDAC608-4458-4ef1-BC04-C1C9B39A7F70}" = Turtle for Maya 2013 32-bit
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{BF9D2E61-64C4-64EA-6AF7-29EB5A110C26}" = AMD Catalyst Install Manager
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D6D5CB84-0E6E-4E69-B300-C690B6911029}" = Nero 8
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E551D82D-4D56-4AF7-A2C9-8897D7A0CB00}" = Autodesk 3ds Max 2010 Tutorials Files
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"{F63F15F6-2505-4B57-91AA-7EBD75C5477C}" = Autodesk DirectConnect 2013 32-bit
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FEC02973-0781-49C7-9F04-28DA9BAF0372}" = Composite 2012
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"«Hitman Absolution - Professional Edition»_is1" = «Hitman Absolution - Professional Edition» v.1.0.433.1
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_3dcb365ab9e01871fb8c6f27b0ea079" = Adobe After Effects CS4
"Autodesk 3ds Max 2013 32-bit" = Autodesk 3ds Max 2013 32-bit
"Autodesk DirectConnect 2013 32-bit" = Autodesk DirectConnect 2013 32-bit
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010
"Autodesk FBX Plug-in 2013.1 - 3ds Max 2013" = Autodesk FBX Plug-in 2013.1 - 3ds Max 2013
"Autodesk MotionBuilder 2013 32-bit" = Autodesk MotionBuilder 2013 32-bit
"Autodesk Mudbox 2013 32-bit" = Autodesk Mudbox 2013 32-bit
"avast!" = avast! Antivirus
"BattlEye for OA" = BattlEye for OA Uninstall
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"GameParkClient_is1" = GamePark
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"Mozilla Firefox 17.0.1 (x86 cs)" = Mozilla Firefox 17.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Steam App 33910" = ARMA 2
"Steam App 33930" = ARMA 2: Operation Arrowhead
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"The KMPlayer" = The KMPlayer (remove only)
"Uplay" = Uplay
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"Youtube Downloader HD_is1" = Youtube Downloader HD v. 2.9.5
"ZAV1_is1" = ZAV 4.48 (32bit)

========== Last 20 Event Log Errors ==========

[ Antivirus Events ]
Error - 4.12.2012 18:35:58 | Computer Name = Martin-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Users\Martin\AppData\Roaming\Skype\martin.tlusty95\bistats.db-journal failed,
00000005.

[ Application Events ]
Error - 12.12.2012 18:56:15 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro D:\Autodesk Entertainment Creation
Suite 2013\Composite 2013\python\lib\distutils\command\wininst-8_d.exe se nezdařilo.
Závislé
sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.12.2012 18:57:56 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Autodesk\Composite
2012\python\lib\distutils\command\wininst-8_d.exe se nezdařilo. Závislé sestavení
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.12.2012 18:58:55 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku 3. Hodnota
MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu version
v prvku assemblyIdentity je neplatná.

Error - 19.12.2012 9:02:43 | Computer Name = Martin-PC | Source = PandoraService.exe | ID = 0
Description =

Error - 20.12.2012 14:44:11 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro D:\Autodesk Entertainment Creation
Suite 2013\Composite 2013\python\lib\distutils\command\wininst-8_d.exe se nezdařilo.
Závislé
sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 20.12.2012 14:47:02 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Autodesk\Composite
2012\python\lib\distutils\command\wininst-8_d.exe se nezdařilo. Závislé sestavení
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 20.12.2012 14:49:17 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku 3. Hodnota
MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu version
v prvku assemblyIdentity je neplatná.

Error - 20.12.2012 16:23:59 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: iw3mp.exe, verze: 0.0.0.0, časové razítko:
0x4859a219 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000005 Posun chyby: 0x00000000 ID chybujícího procesu: 0x9bc Čas spuštění
chybující aplikace: 0x01cddeefdc0ce110 Cesta k chybující aplikaci: D:\Hry\Call of
duty 4 modern warfare.rar\iw3mp.exe Cesta k chybujícímu modulu: unknown ID zprávy:
2f5ce180-4ae3-11e2-b6e5-6c626d0ff836

Error - 22.12.2012 11:48:50 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: WSCommCntr4.exe, verze: 3.5.19.0, časové
razítko: 0x4f175a2a Název chybujícího modulu: ntdll.dll, verze: 6.1.7600.16385,
časové razítko: 0x4a5bdadb Kód výjimky: 0xc0000005 Posun chyby: 0x0002fc47 ID chybujícího
procesu: 0x16e4 Čas spuštění chybující aplikace: 0x01cde05bd56b5f90 Cesta k chybující
aplikaci: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Cesta
k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll ID zprávy: 141df860-4c4f-11e2-b3f5-6c626d0ff836

Error - 23.12.2012 11:57:37 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: WSCommCntr4.exe, verze: 3.5.19.0, časové
razítko: 0x4f175a2a Název chybujícího modulu: ntdll.dll, verze: 6.1.7600.16385,
časové razítko: 0x4a5bdadb Kód výjimky: 0xc0000005 Posun chyby: 0x0002fc47 ID chybujícího
procesu: 0x15b8 Čas spuštění chybující aplikace: 0x01cde1263995d520 Cesta k chybující
aplikaci: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Cesta
k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll ID zprávy: 78ad9860-4d19-11e2-b220-6c626d0ff836

[ System Events ]
Error - 12.12.2012 17:35:51 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 13.12.2012 11:43:54 | Computer Name = Martin-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba AfterFLICS v3 byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit
byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba mental ray 3.10 Satellite for Autodesk 3ds Max 2013 32-bit
byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error - 16.12.2012 15:32:04 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 16.12.2012 15:35:51 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 16.12.2012 15:39:11 | Computer Name = Martin-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (20:38:08, ?16.?12.?2012) bylo neočekávané.

Error - 21.12.2012 6:44:02 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Steam Client Service bylo dosaženo
časového limitu (30000 ms).

Error - 21.12.2012 6:44:02 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7000
Description = Služba Steam Client Service neuspěla při spuštění v důsledku následující
chyby: %%1053

< End of report >

lokem22 · #23 Příspěvek od **lokem22** » 25 Pro 2012 19:52

OTL Extras logfile created on: 25.12.2012 19:10:57 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Martin\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 1,04 Gb Available Physical Memory | 34,58% Memory free
6,00 Gb Paging File | 3,38 Gb Available in Paging File | 56,45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68,26 Gb Total Space | 29,77 Gb Free Space | 43,61% Space Free | Partition Type: NTFS
Drive D: | 229,73 Gb Total Space | 23,44 Gb Free Space | 10,20% Space Free | Partition Type: NTFS
Drive G: | 2,39 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: MARTIN-PC | User Name: Martin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- D:\Programy\Nainstalovaný software\Adobe Photoshop CS6\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D1637A8-414C-4201-A096-46DDCDECBC4E}" = lport=138 | protocol=17 | dir=in | app=system |
"{12273BD2-C8E7-45DF-B6D9-79678DCDB6A4}" = lport=139 | protocol=6 | dir=in | app=system |
"{34A09BF5-2036-4C58-B6D1-F3BE41538F6E}" = lport=10243 | protocol=6 | dir=in | app=system |
"{47A25C21-AD09-4B3B-A307-80F703390A55}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4B4904DF-A69F-4D4B-831C-35952F346107}" = lport=137 | protocol=17 | dir=in | app=system |
"{4F7BE261-7E89-4812-9D34-822A004ED5BE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{502F8B9B-7439-4A0C-9C03-9C6C7187D7E0}" = lport=2869 | protocol=6 | dir=in | app=system |
"{77CC6529-76EF-416A-ADBF-362EF3BF7525}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7E4B2443-30F3-4201-8471-0A7B6CA5C44D}" = rport=137 | protocol=17 | dir=out | app=system |
"{86E59E78-CA20-45AE-A023-387B359D456E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{914E44BE-E67A-4D42-8293-A4838416AAE5}" = rport=139 | protocol=6 | dir=out | app=system |
"{969783EB-7D35-4EBD-A3A9-378D911A60DB}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A3E8A729-6F17-410F-8EBB-B76A3A3E7D07}" = rport=138 | protocol=17 | dir=out | app=system |
"{A9B43EC0-E516-4382-9DD6-487463C83061}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C3D3F500-5EBD-4AA6-8F38-AEFB4C3631DD}" = rport=445 | protocol=6 | dir=out | app=system |
"{CD51A62E-0785-476D-8EC3-D04A0F414C00}" = lport=445 | protocol=6 | dir=in | app=system |
"{D2CA90F6-0E2D-4A4E-B4F3-D17AD64137F7}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DE45CD6A-1CA3-4954-8FA8-5393C2A2B0EC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{ECEF60AD-AFE4-4916-BED9-2D314F2BF2D1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F3C6D3F4-0441-40D4-A6A0-12B3CFDF9ACF}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FCC7EA19-126B-4E53-B9DD-E4A7350F99E4}" = rport=10243 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0074822D-FD9A-4BFF-BF52-361CFED2B314}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{00C1033F-36AA-44EB-BC40-FB429EB4D3D6}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{014C6475-7785-4D95-8873-A98664A4C30E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{03D48100-53F4-45C7-AE86-7D22F133F982}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{03FC95B1-4B63-4468-91C9-D21EB8535D89}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{0613457C-C0E4-4AB8-9A64-A4E0965E3518}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"{06456874-FFE5-4299-A3D4-C6A41D98160D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0F52F524-3AAD-4B8E-A15C-BBE575E445BF}" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"{178E2022-971C-41A6-99D7-4B84E1F71327}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{1A6968BF-DB71-4555-BA64-4F31399AC0F1}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1B230BF5-E39D-4A31-8B07-4339E96ACEBC}" = protocol=6 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2updater.exe |
"{2511BA6B-CBA0-463C-B219-FE221A6E9D07}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe |
"{28F33330-B202-4705-88D1-9390049CC36E}" = protocol=6 | dir=in | app=d:\hry\call of duty 4 modern warfare.rar\iw3mp.exe |
"{2B0A32BB-E122-42FD-B320-55C695933C72}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{2DD6790F-23E2-4DC7-9BB5-3231C889305D}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32.exe |
"{3428340A-50F0-405B-9745-637D00AAA1C6}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\3dsmax.exe |
"{35750EAA-4BDA-466C-BBF5-D184A634EE77}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{3A07AB29-F27E-4CF6-BEAA-F0E9A437FA23}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{3A0CDEFA-0F5C-495D-8ACD-BCC6C7A93EA0}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\3dsmax.exe |
"{3B089B5F-24C8-4099-9919-E76B728EF9C1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4990871E-AF2B-4967-82EB-97A3E9924F67}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{4FD04693-707E-4940-9BBF-073447819574}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{534A26A9-F25D-4F47-8C05-BD7C806BA2E4}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2\arma2.exe |
"{54B8BD0A-5B25-4482-9DFC-40EC6226DBCD}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{55EBB1F4-729D-44B1-9C2D-A165C7C45207}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5754C548-8D0E-4C69-8544-F13A9EC90056}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{5A5E4C3B-68B2-4EB5-8560-C4C4117F1482}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5C95B15B-5A1A-4A8E-B991-71A288502A1A}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{5F813537-43DE-4C9C-A2B2-4CBEA5DC082B}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32.exe |
"{622D1B8F-DB63-4DC3-AD27-8331E663524A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{63EA427E-78B1-43A4-B5D3-2F801B0AFF7D}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{655150C3-D445-4127-ACC0-90E6EBAD6380}" = protocol=17 | dir=in | app=d:\hry\call of duty 4 modern warfare.rar\iw3mp.exe |
"{6E3F8795-742F-47C1-92D7-3F446714B171}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{72173598-3FA5-4A9D-B5C0-E0B8B863CC2D}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{74C27530-F0D7-4A44-856B-741CE382094F}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{75E1B5B0-B28C-4527-BEB6-4C1A8DC302E6}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32server.exe |
"{7BA67F0E-DB0E-439B-AF14-FDF114836F4C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7D296C32-F226-45AA-AF60-513A40E2BCBF}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{7E63B389-625D-4252-9133-0FDE97E400E9}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32server.exe |
"{7ED469A4-A3EF-45FD-8E3A-7D90250E618B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{80623E1D-1C53-4C13-8CCC-5C9643D9B1BC}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2013\nvidia\raysat_3dsmax2013_32server.exe |
"{8258B845-5BD0-46F7-A74E-876C6B844C3B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{83D8C25A-0233-4C16-A255-3E3752DA821F}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2\arma2.exe |
"{8A63EEDB-9D8C-44C9-B326-63B80F91C1A4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8B3980FD-4352-47EE-8C93-781D024B1697}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{8D29077C-EE48-4416-8AD5-B05E54DDD374}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{8F24E8BC-F813-45F8-91FD-DD4D7F98F8CA}" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"{90FAEB71-3A0E-4FE1-999A-CED8170FA537}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{943C27F9-035B-4C0F-A622-39DE0D3E4E03}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{956A0772-16C4-44A1-AC5A-5F18F9E0E563}" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"{988E8AB3-9EBE-473A-9F75-32AC1F5F2C8F}" = protocol=6 | dir=out | app=system |
"{9ADC3DFC-A735-4E6A-88D2-ED95FBADC21F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9FEC5699-4A43-4ABC-9350-AEB1CEBE4595}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A0671A34-DFCD-4F8B-A038-A20ACA080DEB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A966C4ED-9C36-426E-908F-2F438D9A1F07}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\3dsmax.exe |
"{ACD30AB9-B344-489E-AE9F-C6D31330A0A6}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{B3CECCF5-1563-4426-94B5-4958D428385D}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe |
"{B93B4DDD-E5CE-49C6-8722-26A14F7FECDB}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{BEFD48E9-C981-4007-9660-555D9F404209}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{C358DE27-409B-4EA4-A2BA-57239DDB3A83}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C55DBC36-0F6A-4297-8558-4B27C2B6E194}" = protocol=17 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2updater.exe |
"{CC378F91-2780-49CB-A79A-0C866F23CE07}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{D63DDE86-FEF4-495D-BE60-1365DCB93798}" = protocol=6 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{D92B4984-C29F-431E-9B18-7B78CCA7453F}" = protocol=6 | dir=in | app=d:\hry\steam\steam.exe |
"{DBAC728A-FDE3-4327-AF26-070E45C5FACB}" = protocol=17 | dir=in | app=d:\hry\steam\steam.exe |
"{E27F0C46-0B86-4F67-9DF5-4AF50133597F}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2012\mentalimages\satellite\raysat_3dsmax2012_32.exe |
"{E2C53513-A601-460A-8D71-4239340F0C59}" = protocol=17 | dir=in | app=d:\hry\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{E9929F8A-8050-48DE-9C89-F6FA8B459FF5}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{ED5BA858-2D21-4EFA-9C78-FCDD8DC6DE26}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2012\3dsmax.exe |
"{F43F44AC-16E6-4BA5-9723-BF6258295D0F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F74BBD4E-2DF3-4B23-B109-748144BF4D35}" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"{FB73951D-B3C4-404C-A159-446A66389C99}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"TCP Query User{0133E4EE-589C-458F-8F81-DA8069716A16}C:\program files\icq7m\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7m\icq.exe |
"TCP Query User{022FAB5D-B33A-4AED-9904-5D2A2A32626C}D:\hry\battlefield bad company 2\bfbc2game.exe" = protocol=6 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2game.exe |
"TCP Query User{3C9B0326-90DC-4981-9A81-71458C4CEF9B}C:\users\martin\desktop\nightfallbuild\nightfall.exe" = protocol=6 | dir=in | app=c:\users\martin\desktop\nightfallbuild\nightfall.exe |
"TCP Query User{4994F135-F21C-4077-93FE-23CB152A7C6D}D:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe" = protocol=6 | dir=in | app=d:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe |
"TCP Query User{6011CD14-75B6-4B91-B82B-72523C884FB2}D:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe" = protocol=6 | dir=in | app=d:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe |
"TCP Query User{8B1129FD-605D-45F9-A897-2C1C33228F25}C:\users\martin\desktop\nightfall_build\nightfall.exe" = protocol=6 | dir=in | app=c:\users\martin\desktop\nightfall_build\nightfall.exe |
"TCP Query User{E6B8EA11-F7C6-436F-959B-47C061D24999}D:\hry\assassins creed iii\assassins creed iii\ac3sp.exe" = protocol=6 | dir=in | app=d:\hry\assassins creed iii\assassins creed iii\ac3sp.exe |
"UDP Query User{02CBEB13-94FE-4F76-A6C4-DB4EFC5BE5E0}C:\program files\icq7m\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7m\icq.exe |
"UDP Query User{0EA8D341-37DA-48E3-827B-94B6AC97797B}D:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe" = protocol=17 | dir=in | app=d:\hry\assassin's creed ii cz (v1.01)\fifa 13\game\fifa13.exe |
"UDP Query User{422F6096-DD5E-4EC1-AF65-1954262015FF}D:\hry\assassins creed iii\assassins creed iii\ac3sp.exe" = protocol=17 | dir=in | app=d:\hry\assassins creed iii\assassins creed iii\ac3sp.exe |
"UDP Query User{48C11BFF-265C-4D7D-9BC7-8AF5558BC4B1}C:\users\martin\desktop\nightfall_build\nightfall.exe" = protocol=17 | dir=in | app=c:\users\martin\desktop\nightfall_build\nightfall.exe |
"UDP Query User{4CA99C5C-005A-4826-8669-E338DA9CEF22}D:\hry\battlefield bad company 2\bfbc2game.exe" = protocol=17 | dir=in | app=d:\hry\battlefield bad company 2\bfbc2game.exe |
"UDP Query User{63C03EE0-E1C6-4495-A30A-7C2460A401AB}C:\users\martin\desktop\nightfallbuild\nightfall.exe" = protocol=17 | dir=in | app=c:\users\martin\desktop\nightfallbuild\nightfall.exe |
"UDP Query User{8347D42F-6D5A-42BA-9DE3-0F45CEB821B5}D:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe" = protocol=17 | dir=in | app=d:\autodesk entertainment creation suite 2013\motionbuilder danko (32-bit)\bin\win32\motionbuilder.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{06E18300-BB64-1632-8E6A-2593FC67BB74}" = Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 32-bit
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0F414901-5ED4-11E1-86F3-F04DA23A5C58}" = Vegas Pro 11.0
"{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}" = Autodesk Material Library 2013
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{1585EBE4-2F65-2DE6-A531-301DFAB68B5E}" = AMD Drag and Drop Transcoding
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{317AC0C7-FEBF-0409-87A3-4FC70D0ED900}" = Autodesk 3ds Max 2010 32-bit
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3BCD05CE-8CDE-9503-8794-D8CDB9FA8562}" = Catalyst Control Center InstallProxy
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2013.0.0
"{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}" = Adobe Setup
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C70E8D3-78D4-493E-A4CF-1BE881E2DA99}" = FumeFX 3.0.1 R2013 32-bit
"{5061ACBA-7A0A-42FE-93FF-403B2099D200}" = Autodesk Essential Skills Movies for 3ds Max 2013 32-bit
"{531AC43D-0010-1033-B544-B674C4C0B4BA}" = Autodesk Mudbox 2012 32-bit - English
"{531AC43D-EF8F-404C-B544-B674C4C0B4BA}" = Autodesk Mudbox 2012 32-bit - English
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58760EEC-8B6A-43F4-81AA-696E381DFADD}" = Autodesk Material Library Medium Resolution Image Library 2013
"{606E12B9-641F-4644-A22A-FF38AE980AFD}" = Autodesk Material Library Base Resolution Image Library 2013
"{60A08432-00DD-0409-AC2C-143C75460878}" = Autodesk 3ds Max 2010 32-bit Components
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{6232599C-A2B0-416F-8BFA-22016F4CC22F}" = OMP Index Reference Increment
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{696BB53C-28E6-1632-974E-D42FFF5B8E04}" = Autodesk Inventor Server Engine for 3ds Max 2013 32-bit
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74AD1757-8887-D3F0-23C4-1E16B77A6ABC}" = AMD Media Foundation Decoders
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}" = ICQ7M
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79130390-599A-0409-93EB-B6A759E2ABB0}" = Autodesk 3ds Max 2013 32-bit
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{92203FA0-7C43-429F-857C-0AE197D8199C}" = Composite 2013
"{9255C64F-906F-4E19-900F-8DB2E63D87D3}" = Autodesk MotionBuilder 2013 32-bit
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD2DD45-8763-4F12-BDC6-958FCFEF0FCB}" = Microsoft IntelliType Pro 8.2
"{A04F8183-B0AC-44B1-9947-DC8AFD1194DD}" = Autodesk MatchMover 2013 32-bit
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A675D66E-0CBD-4A8F-0068-82B774DD4C9E}" = Autodesk Mudbox 2013 32-bit
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Czech
"{AC968B0F-024A-4323-BD6B-C2A85D183F34}" = GHOST
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BBDAC608-4458-4ef1-BC04-C1C9B39A7F69}" = Suites Exclusives Standard 2013 32-bit
"{BBDAC608-4458-4ef1-BC04-C1C9B39A7F70}" = Turtle for Maya 2013 32-bit
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{BF9D2E61-64C4-64EA-6AF7-29EB5A110C26}" = AMD Catalyst Install Manager
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D6D5CB84-0E6E-4E69-B300-C690B6911029}" = Nero 8
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E551D82D-4D56-4AF7-A2C9-8897D7A0CB00}" = Autodesk 3ds Max 2010 Tutorials Files
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"{F63F15F6-2505-4B57-91AA-7EBD75C5477C}" = Autodesk DirectConnect 2013 32-bit
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FEC02973-0781-49C7-9F04-28DA9BAF0372}" = Composite 2012
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"«Hitman Absolution - Professional Edition»_is1" = «Hitman Absolution - Professional Edition» v.1.0.433.1
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_3dcb365ab9e01871fb8c6f27b0ea079" = Adobe After Effects CS4
"Autodesk 3ds Max 2013 32-bit" = Autodesk 3ds Max 2013 32-bit
"Autodesk DirectConnect 2013 32-bit" = Autodesk DirectConnect 2013 32-bit
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010
"Autodesk FBX Plug-in 2013.1 - 3ds Max 2013" = Autodesk FBX Plug-in 2013.1 - 3ds Max 2013
"Autodesk MotionBuilder 2013 32-bit" = Autodesk MotionBuilder 2013 32-bit
"Autodesk Mudbox 2013 32-bit" = Autodesk Mudbox 2013 32-bit
"avast!" = avast! Antivirus
"BattlEye for OA" = BattlEye for OA Uninstall
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"GameParkClient_is1" = GamePark
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"Mozilla Firefox 17.0.1 (x86 cs)" = Mozilla Firefox 17.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Steam App 33910" = ARMA 2
"Steam App 33930" = ARMA 2: Operation Arrowhead
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"The KMPlayer" = The KMPlayer (remove only)
"Uplay" = Uplay
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR 4.11 (32-bit)
"Youtube Downloader HD_is1" = Youtube Downloader HD v. 2.9.5
"ZAV1_is1" = ZAV 4.48 (32bit)

========== Last 20 Event Log Errors ==========

[ Antivirus Events ]
Error - 4.12.2012 18:35:58 | Computer Name = Martin-PC | Source = avast! | ID = 33554522
Description = AAVM - chyba při testování: x_AavmCheckFileDirectEx: avfilesScanReal
of C:\Users\Martin\AppData\Roaming\Skype\martin.tlusty95\bistats.db-journal failed,
00000005.

[ Application Events ]
Error - 12.12.2012 18:56:15 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro D:\Autodesk Entertainment Creation
Suite 2013\Composite 2013\python\lib\distutils\command\wininst-8_d.exe se nezdařilo.
Závislé
sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.12.2012 18:57:56 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Autodesk\Composite
2012\python\lib\distutils\command\wininst-8_d.exe se nezdařilo. Závislé sestavení
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 12.12.2012 18:58:55 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku 3. Hodnota
MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu version
v prvku assemblyIdentity je neplatná.

Error - 19.12.2012 9:02:43 | Computer Name = Martin-PC | Source = PandoraService.exe | ID = 0
Description =

Error - 20.12.2012 14:44:11 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro D:\Autodesk Entertainment Creation
Suite 2013\Composite 2013\python\lib\distutils\command\wininst-8_d.exe se nezdařilo.
Závislé
sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 20.12.2012 14:47:02 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Autodesk\Composite
2012\python\lib\distutils\command\wininst-8_d.exe se nezdařilo. Závislé sestavení
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 20.12.2012 14:49:17 | Computer Name = Martin-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku 3. Hodnota
MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu version
v prvku assemblyIdentity je neplatná.

Error - 20.12.2012 16:23:59 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: iw3mp.exe, verze: 0.0.0.0, časové razítko:
0x4859a219 Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód
výjimky: 0xc0000005 Posun chyby: 0x00000000 ID chybujícího procesu: 0x9bc Čas spuštění
chybující aplikace: 0x01cddeefdc0ce110 Cesta k chybující aplikaci: D:\Hry\Call of
duty 4 modern warfare.rar\iw3mp.exe Cesta k chybujícímu modulu: unknown ID zprávy:
2f5ce180-4ae3-11e2-b6e5-6c626d0ff836

Error - 22.12.2012 11:48:50 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: WSCommCntr4.exe, verze: 3.5.19.0, časové
razítko: 0x4f175a2a Název chybujícího modulu: ntdll.dll, verze: 6.1.7600.16385,
časové razítko: 0x4a5bdadb Kód výjimky: 0xc0000005 Posun chyby: 0x0002fc47 ID chybujícího
procesu: 0x16e4 Čas spuštění chybující aplikace: 0x01cde05bd56b5f90 Cesta k chybující
aplikaci: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Cesta
k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll ID zprávy: 141df860-4c4f-11e2-b3f5-6c626d0ff836

Error - 23.12.2012 11:57:37 | Computer Name = Martin-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: WSCommCntr4.exe, verze: 3.5.19.0, časové
razítko: 0x4f175a2a Název chybujícího modulu: ntdll.dll, verze: 6.1.7600.16385,
časové razítko: 0x4a5bdadb Kód výjimky: 0xc0000005 Posun chyby: 0x0002fc47 ID chybujícího
procesu: 0x15b8 Čas spuštění chybující aplikace: 0x01cde1263995d520 Cesta k chybující
aplikaci: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Cesta
k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll ID zprávy: 78ad9860-4d19-11e2-b220-6c626d0ff836

[ System Events ]
Error - 12.12.2012 17:35:51 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 13.12.2012 11:43:54 | Computer Name = Martin-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba AfterFLICS v3 byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit
byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error - 16.12.2012 15:32:01 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7034
Description = Služba mental ray 3.10 Satellite for Autodesk 3ds Max 2013 32-bit
byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error - 16.12.2012 15:32:04 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 16.12.2012 15:35:51 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 16.12.2012 15:39:11 | Computer Name = Martin-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (20:38:08, ?16.?12.?2012) bylo neočekávané.

Error - 21.12.2012 6:44:02 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Steam Client Service bylo dosaženo
časového limitu (30000 ms).

Error - 21.12.2012 6:44:02 | Computer Name = Martin-PC | Source = Service Control Manager | ID = 7000
Description = Služba Steam Client Service neuspěla při spuštění v důsledku následující
chyby: %%1053

< End of report >

#24 Příspěvek od **vyosek** » 25 Pro 2012 20:18

Na office jste licenci koupenuo nemel, predpokladam ze na ty Windows Ultimate tez ne ze

lokem22 · #25 Příspěvek od **lokem22** » 26 Pro 2012 13:33

No..já nevim. Počítač jsem dostal a už tam všechno bylo nainstalovany.

#26 Příspěvek od **vyosek** » 27 Pro 2012 02:33

Tak vas nekdo tzv ojebal, je tam crack na ne..Tentokrate dodelame rozdelanou praci ale priste bude pomoc odmitnuta

Nehlede na to spoustu cracku\keygenu

Spustte znovu OTL

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:otl
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martin\AppData\Local\Temp\CFcatchme.sys -- (CFcatchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martin\AppData\Local\Temp\catchme.sys -- (catchme)
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2514172838-1309040562-4224439681-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=111304&tt=270912_7a_3912_6&babsrc=SP_ss&mntrId=c42b09d4000000000000001f1f8e1039
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[13 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]
@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 173 bytes -> C:\ProgramData\TEMP:BF3D62E7
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:A1EDB939

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=-
"DAEMON Tools Lite"=-
"ICQ"=-
"Klrory"=-

:files
C:\Users\Martin\AppData\Roaming\????.exe
c:\Users\Martin\AppData\Roaming\uTorrent\*crack*.*
c:\Program Files\Sony\Vegas Pro 11.0\Keygen.exe
c:\Users\Martin\AppData\Roaming\uTorrent\ADOBE.CS6.0.MASTER.COLLECTION.WIN.KEYGEN-XFORCE.torrent
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

lokem22 · #27 Příspěvek od **lokem22** » 28 Pro 2012 16:22

Ok..děkuju..takže abyste mi tu příště zase pomohli, tak musim mít v počítači všechno origo?

All processes killed
========== OTL ==========
Service CFcatchme stopped successfully!
Service CFcatchme deleted successfully!
File C:\Users\Martin\AppData\Local\Temp\CFcatchme.sys not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\Users\Martin\AppData\Local\Temp\catchme.sys not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-2514172838-1309040562-4224439681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE4.tmp folder deleted successfully.
C:\Windows\temp\~679A.tmp deleted successfully.
C:\Windows\temp\~6C99.tmp deleted successfully.
C:\Windows\temp\~6E9C.tmp deleted successfully.
C:\Windows\temp\~72EF.tmp deleted successfully.
C:\Windows\temp\~73CA.tmp deleted successfully.
C:\Windows\temp\~7511.tmp deleted successfully.
C:\Windows\temp\~7743.tmp deleted successfully.
C:\Windows\temp\~77B0.tmp deleted successfully.
C:\Windows\temp\~7926.tmp deleted successfully.
C:\Windows\temp\~7FFA.tmp deleted successfully.
C:\Windows\temp\~88A1.tmp deleted successfully.
C:\Windows\temp\~977F.tmp deleted successfully.
C:\Windows\temp\~9B95.tmp deleted successfully.
C:\Windows\temp\~C3DC.tmp deleted successfully.
C:\Windows\temp\~DAF5.tmp deleted successfully.
C:\Windows\temp\~E551.tmp deleted successfully.
ADS C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT deleted successfully.
ADS C:\ProgramData\TEMP:BF3D62E7 deleted successfully.
ADS C:\ProgramData\TEMP:A1EDB939 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Klrory not found.
========== FILES ==========
File\Folder C:\Users\Martin\AppData\Roaming\????.exe not found.
c:\Users\Martin\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.1.torrent moved successfully.
c:\Users\Martin\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.torrent moved successfully.
c:\Users\Martin\AppData\Roaming\uTorrent\Battlefield.3.CRACK.ONLY-RELOADED.rar.torrent moved successfully.
c:\Users\Martin\AppData\Roaming\uTorrent\Exkluzivní obsah + crack.rar.torrent moved successfully.
c:\Users\Martin\AppData\Roaming\uTorrent\Medal of Honor Warfighter crack only-FLT + update-FLT.torrent moved successfully.
c:\Program Files\Sony\Vegas Pro 11.0\Keygen.exe moved successfully.
c:\Users\Martin\AppData\Roaming\uTorrent\ADOBE.CS6.0.MASTER.COLLECTION.WIN.KEYGEN-XFORCE.torrent moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Martin
->Temp folder emptied: 30726493 bytes
->Temporary Internet Files folder emptied: 18323930 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 206599418 bytes
->Flash cache emptied: 1950 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8778 bytes
RecycleBin emptied: 17981277592 bytes

Total Files Cleaned = 17 392,00 mb

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Martin
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Martin
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 12282012_160944

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#28 Příspěvek od **vyosek** » 28 Pro 2012 16:25

Musime mit co zadaji pravidla fora - system a zabezpeceni. Ale samozrejme tu nebude resit PC, ktere je neustale zaliskane vlastni blbosti crackama apod...

Jak se chova PC

lokem22 · #29 Příspěvek od **lokem22** » 28 Pro 2012 16:28

Ok..je mi to jasny. PC už vypadá v pohodě..už se nic neposílá a skype nepadá.

#30 Příspěvek od **vyosek** » 28 Pro 2012 16:29

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir

Re: Skype vir