Prosím o kontrolu - pomalý internet

Zpráva

trebor · #1 Příspěvek od **trebor** » 10 kvě 2013 19:35

Dobrý deň,
Prosím o kontrolu logu. Občas mi hrozne seká internet. Niekedy pomôže reštart compu inokedy musím reštartovať aj router. A dosť mi blbne Opera nekorektne zobrazuje stránky, nereaguje na kliknutie, proste neotvori odkaz. Google to nerobí uz som ju aj reinštaloval no nepomohlo to.

Vkladám log z HijackThis
Ďakujem pekne za pomoc.

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 19:40:39, on 10. 5. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)

FIREFOX: 20.0.1 (sk)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Rainmeter\Rainmeter.exe
C:\Program Files\Opera\opera.exe
C:\Windows\system32\taskeng.exe
C:\totalcmd\TOTALCMD.EXE
D:\Programy\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=10188&bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.searchcompletion.com?si=10188&bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.searchcompletion.com?si=10188&bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=10820&bab ... 13209f4d35
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=10188&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.searchcompletion.com?si=10188&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.searchcompletion.com?si=10188&bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.searchcompletion.com?si=10188&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.searchcompletion.com?si=10188&bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Robo\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2447112679-3197449902-53654966-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2447112679-3197449902-53654966-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout pomocí BitSpiritu - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{B828E388-CDE3-4718-9232-E804120C1EB3}: NameServer = 195.146.128.60,195.146.132.59
O17 - HKLM\System\CS1\Services\Tcpip\..\{B828E388-CDE3-4718-9232-E804120C1EB3}: NameServer = 195.146.128.60,195.146.132.59
O17 - HKLM\System\CS2\Services\Tcpip\..\{B828E388-CDE3-4718-9232-E804120C1EB3}: NameServer = 195.146.128.60,195.146.132.59
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 9615 bytes

#2 Příspěvek od **vyosek** » 10 kvě 2013 19:43

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Prohledat
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

trebor · #3 Příspěvek od **trebor** » 10 kvě 2013 20:24

Ďakujem a prikladám požadované logy:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Ultimate x86
Ran by Robo on pi 10. 05. 2013 at 21:07:59,52
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\complitly
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\complitly.dll
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\suggestmeyes.suggestmeyesbho
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\suggestmeyes.suggestmeyesbho.1
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5B291E6C-9A74-4034-971B-A4B007A0B315}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}

~~~ Files

Successfully deleted: [File] "C:\Windows\system32\turegopt.exe"

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\Users\Robo\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Robo\AppData\Roaming\complitly"
Successfully deleted: [Folder] "C:\Users\Robo\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Robo\AppData\Roaming\pdfforge"
Successfully deleted: [Folder] "C:\Users\Robo\appdata\local\babylon"
Successfully deleted: [Folder] "C:\Program Files\complitly"
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{01011FCD-8770-42F9-909E-40AA75BB2233}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{017CF2A8-996C-4F1D-8B36-18A87849C0C9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{020B93F5-970D-467C-98AA-478998950702}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{026EC608-B150-4C69-91EA-0DBE31EB1731}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0273D07F-C964-49E2-B163-13F116EA33E1}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{02A3FAA8-59B0-4463-9D87-267C7E095195}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{02C54B05-1E29-4E24-BAC0-5F52DE06C4BB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{03A9C06B-A13E-48B4-81AC-3BCFFDA07C6E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{03E7BF26-7592-44CE-8165-257DA6B5606E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{05BB30CA-931D-44B6-B005-B0A627DADA56}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{075F39A7-9ACA-415F-9049-E6B029EFA58A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0936DFDA-29EA-4477-9A3A-7AC2C7088D39}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0A5C10A5-06D9-41F4-9FFC-2E8BA5D6FDC9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0B9C4DF2-D048-4A75-AB00-5ACFC1D563A3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0C098D7C-012F-4716-AC95-B078E876467C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0C6AF0FC-655C-4157-9B00-77EE5A41009A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0CBF6E01-76EC-45FF-BAD8-541F3CA2EB51}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0CF41B0E-849B-42AE-BB52-AA90001D524D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0DE4C72A-7063-449D-83AB-ED83AB009BD5}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{0E577775-3B52-4F9E-BF6F-565675C86C20}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1046B094-E4B3-4395-8FAC-CFA731F75801}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{114A74D8-C467-422A-B531-BC850827CEDD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{11706C2C-ED0A-4DC9-951F-45A173E095D6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{11A595E0-BEDF-488B-B25A-D165343477C4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{11E5B6F6-1638-4FBD-8340-5191E7180BD2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{12BE62A1-9D02-4F8B-8960-4B56D63B267F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{12FAC3B8-EE88-4230-A6AC-E2044788914F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{146C05AC-DF73-4C09-8BE8-6C4F0C5A970E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{149802F8-198A-478F-85D8-338758FE1CEB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1539E7A8-CB85-4BB8-AEF7-2ECD00741F66}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{154656EE-D5EC-4EA3-99D4-8398D4BFDE1F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1600BB52-C8F5-488F-8448-BC29601C5EB8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1633089D-A94D-4EF4-9EB3-3988E35CB3E2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{17A06B81-F5EE-41AF-81B3-92E8F8A0F995}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{197BCEB3-1C33-43BC-BE4B-92E715776928}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{19C38D2F-B161-4A13-9FEC-B25CC9B28BF6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{19D1AB1F-1458-40BB-A6A6-4EA7977D3838}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1A6C44BC-291C-498F-BD94-3D56AEB1BEDF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1AB74434-D8E1-4698-9E7D-F81831D7EA9F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1B5B7BDF-F054-416D-9AEB-E2B0AF25AEB6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1D310DFE-C683-4DDD-99FA-191F942A99E6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1F3760BA-2703-40DB-8E95-87B5C0247BC3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{1FD93CCE-DF23-473D-828E-D2A8B1C955B5}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{20AEBAF7-D5F5-4C4C-BAB4-A34D02343DEF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{212CE47F-F7BF-4991-B6BF-58B7F08CA86A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{21E7FDCE-280C-4B84-99BB-0163C555FCEF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{23093C16-C1F6-4058-BDB3-94EEDF1E295E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{23B9C099-6C47-44A0-90C8-35E0F3B2AC61}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{26EEB3BA-B8E6-498C-90A1-E4E29E97AB99}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{27954198-8EF5-4A95-91BE-E5CBB738E71D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{279F8DEE-344C-466E-892E-317B99540ECD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2CF8D3CC-DC0E-48B7-8405-F6787116E5C4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2D3608C0-9A05-4E29-9232-9C4590633B3E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2DA1835C-E81A-4BC8-A10D-4265F7B8C093}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2DA65F74-ACB0-4D73-8E77-F2CF27787A56}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2DBDCE01-C7F4-4B1B-93C6-2F5118F3C76B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2F3E4996-A9BC-47AB-B504-EE5440C5BF9F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2F499155-94C0-48BC-ACC0-F0165AFA160B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2F552816-8453-4D9B-8BDD-94BFF11F3724}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{2F8F9445-3A34-49AD-91C8-8B92B5200620}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3000F671-E4AF-47D8-AFB8-8BCD9AC4C417}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3009F5F2-F3A8-4168-B30D-759B787B08A7}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{30A75FC0-F11B-4245-9522-1636EF4E5A77}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3209DA88-2D4F-4C73-A53D-6D1FD83B7A8A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{33698710-57BD-45F5-9A02-FF9BBABE83AE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{347B5B16-60D6-46B5-B10E-78A44E979D27}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{34C384AF-22E9-4708-81F1-CEA98C1C3651}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{34F18AB0-6802-4C1F-B4E1-9E5AAD73B989}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{361DAB00-103D-4DD1-BFC4-1BEC9C761708}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{36606A66-B494-4B48-AB96-0F4CBABD535B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{366654B6-1D91-4EB1-97CE-49BAAD9D35C4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{36E5FCF2-B4AC-485B-9322-ED37D265134C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{37DB2F62-9E3E-4941-931E-83C5C5FD15D5}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{381F7A30-991D-448C-946A-4BAB7E3A2EDE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{395B9441-BBDC-4267-B737-FE3F51103D1B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{395CE89B-5524-4FFD-B118-B8D67D87AC32}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{39E9FF12-DD39-44A6-B0EC-DFDFC9F36DC3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3A4F545E-5D52-4CD1-8C2A-B578329D2EA9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3EFF8FDE-1488-4F8C-A75C-2CB0FC831068}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{3F8B0354-7FEB-4CD4-8393-54C40A6FBE13}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{40821628-81AF-4641-8587-9A35FC82CA45}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{413C1D79-145D-4C88-9EEE-25AF82F977D9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{415A5E0D-2F91-4CF7-8B24-A6CE0F5B16CB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{41D788F7-E0DD-4B0D-98DD-40DD86F85AE3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{44E7A8AA-A026-43BD-9E95-AAE27FF59CD7}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{45BD81F3-9CD2-4841-AA21-0AF63996CE22}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4669BDCC-E049-4615-ABE3-8FD2F4B7E511}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{481ADF22-600A-4429-BA7D-7E8F0B2D9172}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{483F4215-85F7-4E39-88E2-D27243C953A9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{48FA0213-1155-465A-A55A-73D102DA9E37}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{492BC6E2-4530-4978-AFCB-49680034FEB3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4992F7E3-9623-4FC1-A2DC-819E6BCA4AAF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4A0AE0F7-B452-4498-AFBE-FBC4AC3E68CA}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4B196DA8-309A-4284-9D66-B704DA7F179E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4B71A77A-5C1D-4E6E-99D5-D126A93329D2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4C8AA3E4-DF8C-481F-BC8A-F6197625DA37}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4CC47E4E-D5A5-4479-A67D-4D7803736D1D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4D4825CE-815B-497F-A82A-B1F24F708322}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4D92FCB3-6420-4521-8883-48D02A5243BD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4E5B7F1E-8AC2-45DF-BCA3-41FF1F637953}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{4EE699E7-8F59-4AC2-A818-6C94B16A3423}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{518D0044-1499-4559-85BC-1D6B4176C238}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{526F39FA-F391-41F5-A236-CFA775FDB283}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5338BAFA-689A-47CA-9756-3238B242AC6D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5345BD5C-8193-4C65-9335-524A2D14837B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{551779A5-154A-448E-AC05-68F5E37649B0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{556A6D32-8D71-402D-B6CD-FC1E643A275A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{55D53E6D-81E4-43E4-B54E-2A94205429E8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{585BB72D-E7D2-407E-9A2D-59B8D779A529}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{59EA84F9-3792-42D8-8B30-D232FCC41CA9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5ACA1622-D7A7-4B5F-9547-785B5C796EB3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5C2C053B-24D2-4EDE-A65B-509C739FE4C1}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5D373B2F-2C1D-49A2-AD61-C19BF38C87AD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{5EE7CECC-C4BD-4384-B065-B9A686935FC0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6058958F-2E29-417B-8F57-70E2FF14E782}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{605A67DF-5A2F-4A25-8AE7-60E7B0F36C3C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{62017BD3-8C7E-42FF-BC20-9D7795265DDB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{63A3B520-24C7-4ABE-9DE0-786B6A7DDCEC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{653CF258-7097-4E48-8C2F-31AA3897A0B3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{655E27C6-1055-4902-9483-565967BC2039}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6585C870-AA7E-4FA7-A228-1576272BD5A3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{65ABAF3C-1AC3-4055-817D-14A9CCCD12CC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{65D9299B-0686-47D8-9670-31B5FAB1379A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{66A5BFA2-0F49-418D-9784-A94FDBECD98E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{66CB244F-AC0A-495F-98E2-E20008546865}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6789B985-7853-40F0-8F95-D688F687737F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{679B3A30-610E-4845-A3DB-C8A678404BA4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{682F776A-96D2-484E-8447-99BD405FDE92}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{68F91442-6859-48C0-8E4D-6760915B5D04}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{699CB586-64E4-4431-ACEA-B692C87DC1FC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6AA392AF-7AB5-46FF-81DA-B4EC3A3C5729}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6DAC66C4-D0A6-4F4F-A644-EA3FC44C36ED}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6E01D1ED-D48B-4F05-86E3-4A6EE1A21D48}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{6F59468F-6A2A-4978-AD89-11627AB15DBB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7004D6DE-FB99-4639-AF4D-EAC562AD3995}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7061C689-2759-4F85-8F15-646EFB61FEEB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{71F41E85-5673-4AEE-8F0A-1370A90CF574}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{728F45B2-9C2B-4828-B207-F0CC21E8058F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{733928BD-CFE3-416F-9B81-63BCD6A4371C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7363DFEB-8975-44C1-9E20-9E2503E84470}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{73872D33-0F96-4973-8ACD-DACDA68CFDD0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{742A7DFE-1D07-45D4-A817-29877410E7BF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{74F2E35C-2621-418E-85AA-3ABBB07AD49F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{75F15D57-EEF6-49B4-8255-F1573706A08E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{768FC6B1-699F-48AC-B8F5-24F22B300699}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{77025CFE-05BE-40D1-8CB1-0E461C994E03}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7756C43C-0A91-459A-9953-8E289C625486}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{77B3B1B1-EC0B-43AD-85AE-BC0370E00235}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{77C2C6C7-4219-4694-83F6-E150B7C4A304}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{784ADD98-5B29-40FA-935F-9F8989BC6EF1}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{789AF407-1442-4418-A1C4-ED24DB2FAB0C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7A2C3FBE-8CCD-4CAA-A08A-72CD443A94AE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7A41689F-B5D2-4DD0-81ED-65576793CC01}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7B0EA212-0483-4E0C-BAA7-E9EAE1747F23}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7B4470C8-02BE-4A8C-81CB-E516C7DB0C20}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7B45A98A-0902-4A7A-A900-284926DA1027}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7D00D8C0-4704-4288-91EC-8003112DFC79}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{7F725D3B-EC80-41E4-8562-E789B1C1CFD8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{80BFCB72-B42D-4631-AD61-81CE78E0106B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{80D94A72-2D96-4998-99D0-799DFC296D6F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{812851BD-F3DF-40F1-B336-2D68F1F076F2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{819E9D39-8F84-454E-81FF-C9E3EEBB3BC5}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{84983698-85EC-41F6-8C8B-15FA4C03D82F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{84A508B7-3088-4FEB-A5F1-CA228F01A2B3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{87CB41D9-6AB5-429A-86D9-334F9C23E2FE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{89439B1F-2BCE-41C1-914B-738EA56CFBF2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{89B45570-FCF5-4B57-A339-50A6FDA20FBC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{89F37532-E276-4265-B5B9-F17A44AB1724}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8A47665F-5C1B-4BA4-8AF9-6553CAFEB550}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8A6AFC7A-9BB9-4E19-880C-7D82FC7ECF1D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8ABA6099-9C25-40B6-8A42-1C6ECB0B11AC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8B85EF91-426D-4B05-A9CD-F1B6FA7ECFAB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8BD30E6E-76DF-40C6-9FF7-80015DAC7808}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8C230DF6-EB91-4103-A17F-070DF85880C3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8C2DDAD5-D608-4B8C-A679-99EE5D8C8048}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8C2FBD4E-A02E-4E88-8DAD-621C65130C34}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8D1AB9DA-6B16-4453-B240-67B8A5778D0F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8DE34563-33C1-4052-80D9-F516F75060E0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8E559A97-3704-476D-8F3F-0C8D52AB549B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8E65DB70-8021-4B39-B07B-DC1A6EC96589}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{8F340A34-6006-4476-B1F8-A6677409B34D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9038B8AF-5103-4DE1-9D17-78BC512787C3}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{90C32402-E9AB-4CA1-882F-D7E07281FFF2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{90FE25E5-F6E3-4E38-A735-40206ABFD855}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{92071089-D609-4106-AC17-6B788CCFE3D2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{92317BC4-DDF4-4DB0-8D2D-436870D29C54}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{92ED632E-E29D-45EF-8C3B-4D1ECF8BDB44}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{931DEA09-7B01-4819-B9D5-49A9FF2F31AD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{933D8774-CA8D-45F6-971D-2A0D77CD3A52}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9483624D-DDDD-4878-B4F4-BA9C67B5F1E0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{94E3E024-C408-42FC-BC7F-1C779798B031}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{955D07B2-C8B3-4A0D-AE83-56EFC8AAAA3D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{965DE80F-5F01-4E31-BBB7-96CEB6D44AB0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{97ABAC5F-FE2E-4BE0-9939-C9C40BBEB085}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{980B17A7-8768-4F4C-BB0E-4210524984D8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{988C7895-A506-4B13-B70E-2B3E64AE9FEB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{996A1BE5-5678-43B0-8BE4-3AFE3555D08A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{999B3CE3-D035-4CF2-AC26-71EC740E423C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9AC6E94B-AB7B-4FEC-813C-4609B9310084}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9B2FBF71-93AF-4BBD-8A07-42F8D3C4973A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9B3BF524-28E2-41C8-803F-CDFE930F84C8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9BB6337A-667E-4210-936C-73A01EEABE9D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9BE4AE4E-FCE0-4B2F-A0F7-6B2F7913876A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9CE45705-351D-4B6A-AF65-218F89CF9672}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9DE8CFFE-4810-455D-9AC8-B5329EDC8C70}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{9EC8CB3B-9FEA-44A0-9DB6-11131DC106B0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A10BBC14-1263-4D5E-A096-4B87D2DCA65A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A1948C0F-5BA0-4A23-8E97-009CC912FE63}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A37BAF6C-7820-465E-B1CE-D22756C5677D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A3A3C22A-0325-4105-8351-8BEA01522919}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A479EFA9-3813-41AA-8C11-78297A39A80B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A4B74B5F-AABE-4F03-9AC4-9BC63F28D11A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A4B9098D-CAF8-4B40-8549-D82FA923610A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A4E622A2-1C7B-46C0-9ACF-9AE7F2F5A0A8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A613E788-B322-4AAB-87F4-5CC0E99470BA}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A7A99674-0CCF-4926-A2EF-FB086287474F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A837B6B3-FF9A-4268-82AE-CBFB1C84D9DC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A8464A7D-BC5C-4FDA-902A-930A2D4B147E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A8632FF0-E736-4A01-9A84-87742E4FBF3E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{A90AD161-7C1B-4C45-9600-9A04D85AA859}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{AA32D277-C0E5-47A2-A80C-A310FDADDAA2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{AD0BFBB8-D565-44A9-8E89-F965C974D00E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{AE75C269-4DA6-43DD-B2AE-FF9B4CABA54D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B09A7128-4420-4D18-BEEC-5853E68B770E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B0BFA0A2-5F13-485D-A79F-5743E4DCEBF4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B0ECB70A-F5C1-4361-8EA2-7F6FB50F752D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B0F0534C-FE6A-4ACB-9F3D-C44834F39629}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B23A996C-E1A3-4142-B7E4-8B3ABC9731D0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B3816808-ABE5-461A-8AC7-B074D3396FC9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B392E23D-709E-472B-8DC5-EC422A6429D4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B394CFA7-9492-45C9-A666-7FA1BF31335C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B3B7DCDF-5096-4395-97A6-F45E559ED93E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B3DF5D53-F947-4301-AC7D-358EE5031785}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B553B8CD-1887-48E6-AA6A-46F848CFC2F6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B56AE9A3-A12D-4CEB-A52E-E0E5C301E670}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B610D23E-74D8-47CB-A034-DB87B1A0C155}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B62C7E02-E677-4BFB-8D8B-A6D6BED670F8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B64C26F3-7C19-408A-8923-14CCEF71DBCF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B65AEF3F-F757-4F70-BE23-190AA10DC0AD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B6A133BA-9CE4-49AC-914C-E5D7565B0365}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B6C83B8F-C591-4B00-85C2-FF67F9DFB833}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{B87602D1-D71B-453F-9561-4C6124FA2137}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BA4FC5AF-98EA-4637-9FA6-BFAADED89A64}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BB8913AB-43C4-45F6-B758-F55111EF9BFE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BBF75C06-50BE-4E16-85C8-7903A8CBF2EC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BC49735E-BB03-482F-A039-8ABDCCA38626}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BED943FF-620C-4BD8-BA7E-6A2F2D5541F4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{BEFFB511-5182-436B-8E94-5F404C0F327F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C314AD13-0270-44DF-A267-FFA2050CA80F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C36DCAF6-05E3-4B23-B5C8-A1B579FC7C4E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C36F1752-CAAE-4BBE-97EF-7624C2465028}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C3BFF756-C0BE-4705-9A28-384AF7BF3B3E}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C441FD0D-4E67-4C67-91DE-505F8F548CDF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C4426A7A-746C-4FBB-98A4-EE05C40F438F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C4C3B1C4-5F29-416D-A9E1-B49EDC808397}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C5ED3CCD-CCF6-4CF6-BA6C-3B1DBE053F70}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C6358BB5-F78F-4DD2-8317-998F2A27514F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C9AF17C0-D287-4805-B84B-E82235E9AFE8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{C9D77610-A138-44EF-8480-B1E05AB3D4EA}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CB2D53D6-CCC9-4DE5-8F4A-BCDEDB8E4CAD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CB40B7FA-AEE5-4388-8097-32336385E2B4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CBA10CCE-0265-41B0-A714-10E03F183096}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CBB68E9C-D585-4772-AEA4-209028764F28}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CCA57C5C-BB1A-499C-B7E6-3E4C6ACBA502}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CD2D34E8-9D59-4DEB-976B-47AD5933543F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CE1A8E70-7F60-4A4B-BEA8-29D0C256AF9D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CF131A2D-CD80-4D4C-9550-C1AC5FA0B6D4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{CF41308C-405A-4663-90A6-0F79D5EC5943}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D0ADB5A7-7CA9-4F54-9B6E-740B27AF6C00}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D1702BCA-2DA2-4F28-9C0B-AFA137D2B998}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D175FC92-70E8-4AD1-9844-9DC95DF2C8ED}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D2A8DAC1-91C1-4246-8751-3234A702B3DF}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D3888137-FD57-4F90-A8B9-42FDCC7ECB35}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D4A081C0-B1A9-4599-9B4E-C579CDA33E57}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D4C33348-E439-4DB8-A71B-35AB5E072037}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D4DD7870-AC62-4894-B75F-191496584037}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D52D842C-D366-44DF-9D89-54BDB816B3E8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D661401A-3D0F-436E-AEF2-0A247AF91885}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D74028FF-DCE5-4927-9DEF-9A626B01DEF7}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D757DAE8-20FE-4C39-884F-BDE57C1140F9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D8CD07EA-E0AF-4D94-B962-FF2C1C2285B2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{D9AD2C9A-A999-4C31-9D98-4C6A70B152B8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{DB208858-0D76-4092-B28A-71A5196ADF3F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{DB294747-ED10-44AF-B36E-574A814237FD}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{DD379B43-FA35-4FE5-BE78-90FA159CBD60}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{DD4CCC73-B449-4FE7-8425-1824BE455C90}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{DFF29AEB-01A2-42D7-814C-E3649D59559F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E0410E47-4A7C-4303-9B79-3AF2A2005F3C}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E050CA2E-102B-40E1-89ED-ABC7053E08E5}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E0518E49-AD19-476E-891D-61E5E02274C2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E06D71FF-3267-45B7-BD15-DE207AA3AEF6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E1B936C1-9D8A-4C99-A83C-37BC11BB51F9}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E21D0EDC-841C-48A0-833F-16597F7018D2}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E3664ACD-1613-4CA2-AC26-DE2A5040705D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E4A728B0-87E2-426F-BA04-FCE0261E48EB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E5A2666B-EAB9-455C-9153-E242AF1FE1BB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E6160B8C-1944-401A-875D-52B47A421740}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E6746E4A-7ACE-4283-A46C-C0CD21BD75CA}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E724E195-2DD0-4B76-87B1-38B0EA376B65}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E78FC090-3AFC-429D-82B2-7244E1816B7D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E7E1F16B-3B4A-40F0-AA55-EF13FF21446F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{E9589DD8-16E6-4CCB-8DE5-977317400EE8}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EA64C503-ED6C-4133-8410-110683B67CCE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EA77D26A-7300-411A-87F2-38659997CBC6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EAAB718A-CB9E-49F7-A206-AEBAE90176E6}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EB21DEED-805D-483B-A13A-74815113FECB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EBB015A2-82B6-4FF0-AECF-83FF74409883}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EC25C914-0A00-4B31-9CE4-0DD55373803B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{ECD8C551-232B-4623-B231-0C24F1138A16}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EE013F98-AC39-4B46-8339-0913635F97F7}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EEC99E93-4D0C-4307-A90A-6EDD1B26FABB}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EF0BDBAE-6627-453A-9B93-7DC34A358A27}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EF160BA4-2D66-44CF-A26B-763FE9454E64}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{EF6AEEB1-07C9-4AC9-B3DA-349466D1F036}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F0C30F91-20D9-4406-BBA5-171344CFC621}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F139E788-6960-40B0-8AA6-F5B5B6A16A54}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F15B8DDB-0F17-4E58-B729-6EA4680CBBCE}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F182D05F-240D-4C18-8D21-D6A7718F739A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F20CFB5B-0964-4E5C-BC69-75C2C3231D28}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F4D92C1C-5073-4D67-9BF8-390E96DC59E0}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F6209D11-8CE1-44F8-A8DB-4B6B52CA2AF4}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F6A1A6DF-DDCE-4CC6-A481-3EC0180F684A}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F745460D-4532-4F7E-AEEC-31C85DF5E67B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F7A9E3F4-ED7A-4EC0-BBEB-D849F5FF267F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F7E287EF-6BAD-4F7B-BA91-0FC535E2D06F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{F9736456-48CB-41BA-9045-DB41FBEDD99D}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FAFFB2D3-70AE-411E-A24C-D7036D4FD806}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FB5F8036-CCD6-4E40-AD86-B1B506E090FC}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FB74B089-EB88-45BD-A66F-96A9A3D3C20B}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FB969234-B632-4067-BC79-8BB52B1EC437}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FC71F136-0E5B-464E-8018-81EAC7C8512F}
Successfully deleted: [Empty Folder] C:\Users\Robo\appdata\local\{FDD5B373-440E-4FC5-BDFA-7EACF68EC8AA}

~~~ FireFox

Successfully deleted: [File] "C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml"
Successfully deleted: [File] "C:\Program Files\Mozilla Firefox\searchplugins\web search.xml"
Successfully deleted: [File] C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\user.js
Successfully deleted: [File] C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\searchplugins\web search.xml
Successfully deleted: [Folder] C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Successfully deleted the following from C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\prefs.js

user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaultengine", "Web Search");
user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
user_pref("browser.search.order.1", "Search the web (Babylon)");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=10820&babsrc=NT_ss&mntrId=9cb08c6e0000000000000013209f4d35");
user_pref("keyword.URL", "hxxp://search.babylon.com/?AF=10820&babsrc=adbartrp&mntrId=9cb08c6e0000000000000013209f4d35&q=");
Emptied folder: C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\minidumps [38 files]

~~~ Chrome

Successfully deleted: [Folder] C:\Users\Robo\appdata\local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on pi 10. 05. 2013 at 21:17:40,94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v2.300 - Log vytvorený 10/05/2013 o 21:25:15
# Aktualizované 28/04/2013 Xplode
# Operaený systém : Windows 7 Ultimate Service Pack 1 (32 bits)
# Uživateľ : Robo - DOMACE-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Robo\Desktop\AdwCleaner.exe
# Voľba [Prehľada?]

***** [Služby] *****

***** [Súbory / Adresáre] *****

Súbor Nájdené : C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Súbor Nájdené : C:\Windows\system32\Uninstall.exe

***** [Registre] *****

Kľúe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Kľúe Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Kľúe Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Kľúe Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Kľúe Nájdené : HKLM\Software\SimplyGen

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16537

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=%s
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=%s
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=

-\\ Mozilla Firefox v20.0.1 (sk)

Súbor : C:\Users\Robo\AppData\Roaming\Mozilla\Firefox\Profiles\vyw6vs4m.default\prefs.js

[OK] Súbor je eistý.

-\\ Google Chrome v26.0.1410.64

Súbor : C:\Users\Robo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

-\\ Opera v12.15.1748.0

Súbor : C:\Users\Robo\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [7468 octets] - [10/05/2013 20:19:02]
AdwCleaner[R2].txt - [4141 octets] - [10/05/2013 21:25:15]

########## EOF - C:\AdwCleaner[R2].txt - [4201 octets] ##########

#4 Příspěvek od **vyosek** » 10 kvě 2013 20:48

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Smazat
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

trebor · #5 Příspěvek od **trebor** » 10 kvě 2013 20:59

Vykonané prikladám log:

# AdwCleaner v2.300 - Log vytvorený 10/05/2013 o 21:56:15
# Aktualizované 28/04/2013 Xplode
# Operaený systém : Windows 7 Ultimate Service Pack 1 (32 bits)
# Uživateľ : Robo - DOMACE-PC
# Spustený systém : Normálny
# Spustené z : C:\Users\Robo\Desktop\AdwCleaner.exe
# Voľba [Vymaza?]

***** [Služby] *****

***** [Súbory / Adresáre] *****

Súbor Vymazané : C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Súbor Vymazané : C:\Windows\system32\Uninstall.exe

***** [Registre] *****

Kľúe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Kľúe Vymazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Kľúe Vymazané : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Kľúe Vymazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Kľúe Vymazané : HKLM\Software\SimplyGen

***** [Internetové prehliadaee] *****

-\\ Internet Explorer v10.0.9200.16537

Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=%s --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.searchcompletion.com?si=10188&bs=true&q=%s --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://www.searchcompletion.com?si=10188&home=true --> hxxp://www.google.com
Zamenené : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.searchcompletion.com?si=10188&bs=true&q= --> hxxp://www.google.com

-\\ Mozilla Firefox v20.0.1 (sk)

Súbor : C:\Users\Robo\AppData\Roaming\Mozilla\Firefox\Profiles\vyw6vs4m.default\prefs.js

[OK] Súbor je eistý.

-\\ Google Chrome v26.0.1410.64

Súbor : C:\Users\Robo\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Súbor je eistý.

-\\ Opera v12.15.1748.0

Súbor : C:\Users\Robo\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Súbor je eistý.

*************************

AdwCleaner[R1].txt - [7468 octets] - [10/05/2013 20:19:02]
AdwCleaner[R2].txt - [4270 octets] - [10/05/2013 21:25:15]
AdwCleaner[R3].txt - [4330 octets] - [10/05/2013 21:55:38]
AdwCleaner[S1].txt - [4900 octets] - [10/05/2013 21:56:15]

########## EOF - C:\AdwCleaner[S1].txt - [4960 octets] ##########

#6 Příspěvek od **vyosek** » 10 kvě 2013 21:02

Poprosim o oba logy (log.txt i info.txt) z RSIT http://forum.viry.cz/viewtopic.php?t=81939

Ta nejvyssi licence na W7 Ultimate je zakoupena

trebor · #7 Příspěvek od **trebor** » 10 kvě 2013 21:10

Vyhodilo nejaku chybu.
Licencia je z práce takže je zakúpená.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Robo at 2013-05-10 22:06:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 74 GB (47%) free of 157 GB
Total RAM: 2942 MB (59% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-12 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-12 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-05-14 2029640]
"Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-12-20 963976]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-02-28 18672232]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]

C:\Users\Robo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81efb21d-11b6-11df-ad58-0013209f4d35}]
shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\TNTPSCSI.exe

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-05-10 22:06:07 ----D---- C:\Program Files\trend micro
2013-05-10 22:06:06 ----D---- C:\rsit
2013-05-10 21:56:15 ----A---- C:\AdwCleaner[S1].txt
2013-05-10 21:55:38 ----A---- C:\AdwCleaner[R3].txt
2013-05-10 21:25:15 ----A---- C:\AdwCleaner[R2].txt
2013-05-10 21:07:54 ----D---- C:\Windows\ERUNT
2013-05-10 21:07:38 ----D---- C:\JRT
2013-05-10 20:19:02 ----A---- C:\AdwCleaner[R1].txt
2013-05-10 19:12:55 ----A---- C:\Windows\system32\jscript.dll
2013-05-10 19:12:51 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-10 19:12:51 ----A---- C:\Windows\system32\jscript9.dll
2013-05-10 19:12:50 ----A---- C:\Windows\system32\iesetup.dll
2013-05-10 19:12:44 ----A---- C:\Windows\system32\ieui.dll
2013-05-10 19:12:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-10 19:12:40 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-10 19:12:39 ----A---- C:\Windows\system32\iernonce.dll
2013-05-10 19:12:37 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-10 19:12:36 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-10 19:12:35 ----A---- C:\Windows\system32\urlmon.dll
2013-05-10 19:12:32 ----A---- C:\Windows\system32\iertutil.dll
2013-05-10 19:12:24 ----A---- C:\Windows\system32\wininet.dll
2013-05-10 19:12:02 ----A---- C:\Windows\system32\ieframe.dll
2013-05-10 19:11:50 ----A---- C:\Windows\system32\mshtml.dll
2013-05-10 18:45:23 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-10 18:45:23 ----A---- C:\Windows\system32\msls31.dll
2013-05-10 18:45:23 ----A---- C:\Windows\system32\elshyph.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\wextract.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\vbscript.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\occache.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\msrating.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\mshta.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\inseng.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\imgutil.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\iexpress.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-10 18:45:22 ----A---- C:\Windows\system32\iepeers.dll
2013-05-10 18:45:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\webcheck.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\url.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\icardie.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-10 18:45:21 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-10 18:43:46 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-10 18:43:46 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-10 18:43:45 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\XpsPrint.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\UIAnimation.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\FntCache.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\dxgi.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\DWrite.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d11.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10level9.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10core.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d3d10.dll
2013-05-10 18:43:45 ----A---- C:\Windows\system32\d2d1.dll
2013-05-01 12:22:47 ----D---- C:\Users\Robo\AppData\Roaming\Opera
2013-04-28 12:01:34 ----D---- C:\Users\Robo\AppData\Roaming\IDM
2013-04-28 12:01:34 ----D---- C:\Users\Robo\AppData\Roaming\DMCache
2013-04-28 12:01:34 ----D---- C:\ProgramData\IDM
2013-04-28 12:01:11 ----D---- C:\Program Files\Internet Download Manager
2013-04-28 12:00:38 ----A---- C:\Users\Robo\AppData\Roaming\idman615.exe
2013-04-20 21:23:14 ----D---- C:\Program Files\RocketDock
2013-04-20 19:26:25 ----D---- C:\TEMP
2013-04-19 19:22:59 ----D---- C:\Users\Robo\AppData\Roaming\Rainmeter
2013-04-19 19:21:41 ----D---- C:\Program Files\Rainmeter
2013-04-19 19:20:15 ----D---- C:\ProgramData\Package Cache

======List of files/folders modified in the last 1 months======

2013-05-10 22:07:00 ----D---- C:\Windows\Temp
2013-05-10 22:06:07 ----RD---- C:\Program Files
2013-05-10 22:01:01 ----D---- C:\Windows\system32\config
2013-05-10 21:58:57 ----D---- C:\Users\Robo\AppData\Roaming\Skype
2013-05-10 21:56:42 ----D---- C:\Windows\System32
2013-05-10 21:10:58 ----HD---- C:\ProgramData
2013-05-10 21:07:54 ----D---- C:\Windows
2013-05-10 19:16:16 ----D---- C:\Windows\winsxs
2013-05-10 19:16:16 ----D---- C:\Program Files\Internet Explorer
2013-05-10 19:13:57 ----D---- C:\Windows\system32\catroot
2013-05-10 19:13:52 ----D---- C:\Windows\system32\catroot2
2013-05-10 19:11:27 ----SHD---- C:\System Volume Information
2013-05-10 18:52:42 ----D---- C:\Windows\system32\sk-SK
2013-05-10 18:52:41 ----D---- C:\Windows\system32\migration
2013-05-10 18:52:41 ----D---- C:\Windows\system32\en-US
2013-05-10 18:52:41 ----D---- C:\Windows\PolicyDefinitions
2013-05-10 18:52:30 ----D---- C:\Windows\system32\zh-TW
2013-05-10 18:52:30 ----D---- C:\Windows\system32\zh-HK
2013-05-10 18:52:30 ----D---- C:\Windows\system32\tr-TR
2013-05-10 18:52:30 ----D---- C:\Windows\system32\sv-SE
2013-05-10 18:52:30 ----D---- C:\Windows\system32\pt-PT
2013-05-10 18:52:30 ----D---- C:\Windows\system32\pt-BR
2013-05-10 18:52:30 ----D---- C:\Windows\system32\pl-PL
2013-05-10 18:52:30 ----D---- C:\Windows\system32\nl-NL
2013-05-10 18:52:30 ----D---- C:\Windows\system32\ko-KR
2013-05-10 18:52:30 ----D---- C:\Windows\system32\it-IT
2013-05-10 18:52:30 ----D---- C:\Windows\system32\hu-HU
2013-05-10 18:52:30 ----D---- C:\Windows\system32\fr-FR
2013-05-10 18:52:30 ----D---- C:\Windows\system32\fi-FI
2013-05-10 18:52:30 ----D---- C:\Windows\system32\es-ES
2013-05-10 18:52:30 ----D---- C:\Windows\system32\el-GR
2013-05-10 18:52:29 ----D---- C:\Windows\system32\zh-CN
2013-05-10 18:52:29 ----D---- C:\Windows\system32\ru-RU
2013-05-10 18:52:29 ----D---- C:\Windows\system32\nb-NO
2013-05-10 18:52:29 ----D---- C:\Windows\system32\ja-JP
2013-05-10 18:52:29 ----D---- C:\Windows\system32\de-DE
2013-05-10 18:52:29 ----D---- C:\Windows\system32\da-DK
2013-05-10 18:52:29 ----D---- C:\Windows\system32\cs-CZ
2013-05-10 18:49:25 ----D---- C:\Windows\Logs
2013-05-02 02:06:08 ----N---- C:\Windows\system32\MpSigStub.exe
2013-05-01 19:51:53 ----D---- C:\Downloads
2013-05-01 12:22:41 ----D---- C:\Program Files\Opera
2013-04-30 16:55:28 ----D---- C:\Windows\system32\drivers
2013-04-29 21:19:41 ----D---- C:\Windows\inf
2013-04-29 21:19:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-19 19:21:40 ----SHD---- C:\Windows\Installer
2013-04-14 19:08:01 ----SD---- C:\ProgramData\Microsoft
2013-04-13 19:22:41 ----D---- C:\Windows\Prefetch
2013-04-13 14:30:33 ----D---- C:\Program Files\Mozilla Firefox

#8 Příspěvek od **vyosek** » 11 kvě 2013 04:23

Log neni cely a chybi mi jeste i druhy log...

Pokud se nic vic nevygenerovalo, tak jej spustte v nouzovem rezimu...

A PC je pracovni nebo vas osobni?

trebor · #9 Příspěvek od **trebor** » 11 kvě 2013 08:01

Comp je momentálne môj osobný predtým bol pracovný.
Stale to pri spusteni RISIT vyhadzuje tu istu chybu aj v safe mode:

Line - 1:
Error: Variable used without being declared

#10 Příspěvek od **vyosek** » 11 kvě 2013 11:59

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

trebor · #11 Příspěvek od **trebor** » 11 kvě 2013 14:40

Prevedené:
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

2,87 Gb Total Physical Memory | 1,31 Gb Available Physical Memory | 45,58% Memory free
5,74 Gb Paging File | 4,16 Gb Available in Paging File | 72,38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 153,29 Gb Total Space | 70,50 Gb Free Space | 45,99% Space Free | Partition Type: NTFS
Drive D: | 111,75 Gb Total Space | 92,26 Gb Free Space | 82,55% Space Free | Partition Type: FAT32

Computer Name: DOMACE-PC | User Name: Robo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)

[HKEY_USERS\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{159ED0D8-B59A-4C32-8C0E-6FB12F18F389}" = lport=10243 | protocol=6 | dir=in | app=system |
"{2B559427-7E80-4267-B42C-62E2F62DF37D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{32EC34B0-8F83-48BC-BEC2-32DA21471136}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{39FC984B-B796-4147-8E5E-6F333B1811F6}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{462191E9-F7A0-4959-BFFB-8CF8C8F00644}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{483EA94D-38B8-4F40-BA9B-4F6588451D47}" = lport=138 | protocol=17 | dir=in | app=system |
"{49620E2A-42FC-46A8-9464-99C142D2486B}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4EC3288D-D6EE-4EAF-BF03-55595870476D}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{50159F50-4AE7-48C9-BD27-7862FA393C0E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5A61E7BF-0A66-48EE-9EC0-A8FA0BA20618}" = lport=139 | protocol=6 | dir=in | app=system |
"{63B6140A-7B8F-453C-888A-1E7DD4561F66}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{747221C2-C73A-4A8E-8CA7-9351B32BCA43}" = rport=139 | protocol=6 | dir=out | app=system |
"{8706FA71-70AF-4B42-B791-210F39CAA8EF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{8B124A5F-58B5-43A9-9899-65890B1C2596}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9C7D0578-41AB-441A-9FA3-2A5AF4D6068A}" = rport=138 | protocol=17 | dir=out | app=system |
"{A74A210B-A879-43FB-949E-B7CBE87CD9C3}" = lport=137 | protocol=17 | dir=in | app=system |
"{BEDEDC78-C21B-4D60-93B8-180F295E4BA3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C8E525B9-A7B5-4777-B5CD-6DDBA782E181}" = lport=445 | protocol=6 | dir=in | app=system |
"{CEF0F356-B1A5-40AC-B66C-57F9EAD4A5AC}" = rport=137 | protocol=17 | dir=out | app=system |
"{D0E48AC2-5A85-484A-AE5E-3B56985D47E3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D238495E-0D77-4ED8-89DF-CABB75A73169}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DC02BB1A-1CFC-4380-AF6A-263C0AA81F94}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DFF18069-0E3B-464D-AC29-711F2EE44FD4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E2E6BEC8-2244-4819-8071-0093C5A113C3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{ED85F247-3BFA-4B2E-A485-11296B0511C8}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{EE3924B0-689F-4CEA-9D28-619D190C45B8}" = rport=445 | protocol=6 | dir=out | app=system |
"{F0D9256A-AA90-4F0B-A8BE-51363B6A971F}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F56C8C92-AB5A-407C-A559-E66C2EADE675}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0724B413-8D2C-4E82-9F24-4ACC0B878F77}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{127CDEA1-6ABD-4C3C-8501-2960BCBF81BA}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{17E78709-24DA-43F1-8AD7-94976ABB8E8A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2979229D-87EF-4336-A375-5A4680E6BF54}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{4391C60E-44ED-4D1A-A700-186B72A124C8}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{462E26BB-FAB3-40AD-8896-642A76438A57}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{47BD6F32-D1D2-47D5-AA2B-8AFCDBC5483C}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{59B559F7-379D-4C75-B835-72C2374650B7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{619975F1-98D6-45BC-88D1-7858A828BE0C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{6B90814B-5129-4811-9EAA-B633F908E3D2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6F45E4BC-630C-46E7-9B63-2ECE1AC9741D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8070D863-2C23-46DC-AA68-88D193DCA788}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{86BE36E0-A7F0-49BB-B41B-59F9A2F4C0CB}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{87581875-EB8E-4C62-8CA0-1810FE0704B1}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{978FDE14-FC6C-4F71-9BDD-0201AF17B02E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B4B58697-D53B-4EB4-A211-FAB6C57CCA9E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B88ABCF8-39F6-4E1E-9A3B-DC85692820A5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BCD8CF4E-C193-4A8C-B2DF-30C1D34E4DF1}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D13A777A-4520-45D9-9234-6A59F9C6510F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E080E9A5-84EB-46A4-A47E-912E0CB89273}" = protocol=6 | dir=out | app=system |
"{E76D9170-B994-46A3-A11B-8A758549567D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E861DD49-19D0-4E30-B438-EE54C082531F}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{F5846658-CA57-4B5E-B9B3-D98351D30430}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FB984CB5-5822-466E-9A22-68DF9190A2CE}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{FE7E88EE-DA15-418A-88EE-5DF71E9F61FD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{13B33FA0-7536-4BF7-B944-79F559A6C959}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe |
"TCP Query User{3FD98DCF-711B-4B94-AB13-1874E63BA91C}C:\program files\bitspirit\bitspirit.exe" = protocol=6 | dir=in | app=c:\program files\bitspirit\bitspirit.exe |
"TCP Query User{59909AB5-C8AB-4E48-94A0-E3FF300D1571}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{E3E0C9C0-3AEA-4148-BC3C-5EAF4A3B11F8}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"UDP Query User{4D9DFE34-9440-46F5-B432-5BC88D109147}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{53942826-BD84-4495-AA2E-AD2165B34CB2}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"UDP Query User{8A16A432-5F60-480C-B915-F101A1FD0D55}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"UDP Query User{E0C4E560-F508-4D1E-B3F9-A5B5DF805D1F}C:\program files\bitspirit\bitspirit.exe" = protocol=17 | dir=in | app=c:\program files\bitspirit\bitspirit.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{25BD99C3-F0C8-436F-AC2F-4F1B00A518AC}" = Windows Live Family Safety
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2AF5EC17-7977-44A6-9D6B-6D21A3E8C67B}_is1" = Universal Share Downloader v1.3.5.1
"{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{41E4FA4B-9376-4C32-AA46-65FCC0087CD5}" = Windows Live Remote Service Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{66F94F05-52D0-475D-8E35-D6F3ABD813BE}" = ESET Smart Security
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
"{6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8}" = Doplnok programu Messenger
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7A3FFA58-876F-489C-B6CF-0503916224DF}" = HTC Sync
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{90120000-0015-041B-0000-0000000FF1CE}" = Microsoft Office Access MUI (Slovak) 2007
"{90120000-0015-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-041B-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Slovak) 2007
"{90120000-0019-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Slovak) 2007
"{90120000-001A-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_ENTERPRISE_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-041B-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_ENTERPRISE_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-041B-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Slovak) 2007
"{90120000-00A1-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-041B-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Slovak) 2007
"{90120000-00BA-041B-0000-0000000FF1CE}_ENTERPRISE_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3389C72-1782-4BB4-BBAA-33345DE52E3F}" = Windows Live Messenger
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Czech
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafický ovládač 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizácie NVIDIA 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B536CA63-8BB3-4027-A495-84DD9FED17EC}" = Windows Live Sync
"{B8B4D43C-EAA0-4EEC-B93E-D4D012316286}" = Free DWG Viewer 7.0
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}" = Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DB0A8A2A-4EA7-4FE3-802E-8A6DEE32696C}_is1" = Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.3.313
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E031338C-839D-4EDD-9537-99B653C39D81}" = Autodesk MapGuide(R) Viewer ActiveX Control Release 6.5
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1629C45-9CEF-498E-83CD-D6A09CADA176}" = Windows Live Remote Client Resources
"{E2C00C8C-3D0C-40DF-BC67-44321C9E1051}" = Nero 8
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Ashampoo WinOptimizer 4_is1" = Ashampoo WinOptimizer 4.41
"BitSpirit_is1" = BitSpirit v3.5.0.256 Stable
"BSPlayerp" = BS.Player PRO
"CoreAVC Professional Edition" = CoreAVC Professional Edition (remove only)
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Freemake Audio Converter_is1" = Freemake Audio Converter verzia 1.1.0
"Google Chrome" = Google Chrome
"HF Designer_is1" = HF Designer
"IrfanView" = IrfanView (remove only)
"KC Softwares VideoInspector_is1" = KC Softwares VideoInspector
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.6.0 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 20.0.1 (x86 sk)" = Mozilla Firefox 20.0.1 (x86 sk)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"Opera 12.15.1748" = Opera 12.15
"Rainmeter" = Rainmeter
"RatingsMigration" = Windows Media Player 9 Series Power Toy - Ratings Migration
"RocketDock_is1" = RocketDock 1.3.5
"Totalcmd" = Total Commander (Remove or Repair)
"TuneUp Utilities" = TuneUp Utilities
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR archivátor

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 10. 5. 2013 15:38:05 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

Error - 10. 5. 2013 15:57:16 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

Error - 11. 5. 2013 2:34:47 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

Error - 11. 5. 2013 2:54:29 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

Error - 11. 5. 2013 5:47:52 | Computer Name = Domace-PC | Source = Application Error | ID = 1000
Description = Názov chybovej aplikácie: OUTLOOK.EXE, verzia: 12.0.6668.5000, časová
značka: 0x508314b2 Názov chybového modulu: OUTLOOK.EXE, verzia: 12.0.6668.5000,
časová značka: 0x508314b2 Kód výnimky: 0xc0000005 Odstup chyby: 0x00a7a3f9 Identifikácia
chybného procesu: 0xd00 Čas spustenia chybnej aplikácie: 0x01ce4e2c898a88cb Cesta
chybnej aplikácie: C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE Cesta
chybného modulu: C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE Identifikácia
hlásenia: d848662e-ba1f-11e2-84b0-0013209f4d35

Error - 11. 5. 2013 6:36:36 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

Error - 11. 5. 2013 6:41:28 | Computer Name = Domace-PC | Source = Winlogon | ID = 4103
Description = Aktivácia licencie systému Windows zlyhala. Chyba: 0x80070005.

[ OSession Events ]
Error - 1. 8. 2012 8:25:45 | Computer Name = Domace-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 10
seconds with 0 seconds of active time. This session ended with a crash.

Error - 6. 8. 2012 2:39:19 | Computer Name = Domace-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 12
seconds with 0 seconds of active time. This session ended with a crash.

Error - 17. 8. 2012 3:06:15 | Computer Name = Domace-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 24
seconds with 0 seconds of active time. This session ended with a crash.

Error - 11. 5. 2013 5:47:51 | Computer Name = Domace-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 27
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 11. 5. 2013 2:47:30 | Computer Name = Domace-PC | Source = Service Control Manager | ID = 7001
Description = Spustenie služby Network Location Awareness, od ktorej závisí služba
Network List Service, zlyhalo kvôli nasledujúcej chybe: %%1068

Error - 11. 5. 2013 2:47:30 | Computer Name = Domace-PC | Source = Service Control Manager | ID = 7001
Description = Spustenie služby Network Location Awareness, od ktorej závisí služba
Network List Service, zlyhalo kvôli nasledujúcej chybe: %%1068

Error - 11. 5. 2013 2:47:30 | Computer Name = Domace-PC | Source = Service Control Manager | ID = 7001
Description = Spustenie služby Network Location Awareness, od ktorej závisí služba
Network List Service, zlyhalo kvôli nasledujúcej chybe: %%1068

Error - 11. 5. 2013 2:48:02 | Computer Name = Domace-PC | Source = Service Control Manager | ID = 7001
Description = Spustenie služby Network Location Awareness, od ktorej závisí služba
Network List Service, zlyhalo kvôli nasledujúcej chybe: %%1068

Error - 11. 5. 2013 2:48:12 | Computer Name = Domace-PC | Source = Service Control Manager | ID = 7001
Description = Spustenie služby Network Location Awareness, od ktorej závisí služba
Network List Service, zlyhalo kvôli nasledujúcej chybe: %%1068

Error - 11. 5. 2013 3:35:57 | Computer Name = Domace-PC | Source = DCOM | ID = 10001
Description =

Error - 11. 5. 2013 6:37:24 | Computer Name = Domace-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 11. 5. 2013 6:38:10 | Computer Name = Domace-PC | Source = DCOM | ID = 10001
Description =

Error - 11. 5. 2013 6:42:19 | Computer Name = Domace-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 11. 5. 2013 7:30:03 | Computer Name = Domace-PC | Source = DCOM | ID = 10001
Description =

[ TuneUp Events ]
Error - 7. 1. 2013 13:56:57 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 18. 1. 2013 5:56:22 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 8. 2. 2013 15:05:54 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 14. 3. 2013 11:20:05 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 28. 3. 2013 10:13:43 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 28. 3. 2013 10:13:44 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 20. 4. 2013 10:35:04 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 20. 4. 2013 10:35:05 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 22. 4. 2013 12:41:35 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

Error - 22. 4. 2013 12:41:38 | Computer Name = Domace-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =

< End of report >

trebor · #12 Příspěvek od **trebor** » 11 kvě 2013 14:47

Dryhy log - prvá časť:

OTL logfile created on: 11. 5. 2013 13:45:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Robo\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

2,87 Gb Total Physical Memory | 1,31 Gb Available Physical Memory | 45,58% Memory free
5,74 Gb Paging File | 4,16 Gb Available in Paging File | 72,38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 153,29 Gb Total Space | 70,50 Gb Free Space | 45,99% Space Free | Partition Type: NTFS
Drive D: | 111,75 Gb Total Space | 92,26 Gb Free Space | 82,55% Space Free | Partition Type: FAT32

Computer Name: DOMACE-PC | User Name: Robo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013/05/11 13:41:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Robo\Desktop\OTL.exe
PRC - [2013/05/11 12:47:02 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2013/03/24 16:40:16 | 000,035,512 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.exe
PRC - [2013/02/19 21:32:08 | 001,259,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013/01/31 11:01:06 | 000,865,056 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012/12/28 11:40:08 | 000,101,376 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
PRC - [2012/12/18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/11/23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 14:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2009/12/18 01:14:00 | 000,713,544 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2009/12/18 01:12:10 | 001,044,808 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2009/09/09 08:50:00 | 003,514,112 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2009/05/14 16:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009/05/14 16:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2007/09/02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2007/05/28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2006/11/03 12:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\Windows\PixArt\Pac207\Monitor.exe

========== Modules (No Company Name) ==========

MOD - [2013/05/11 12:47:06 | 000,835,584 | ---- | M] () -- C:\Program Files\Opera\gstreamer\gstreamer.dll
MOD - [2013/05/11 12:47:06 | 000,312,832 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll
MOD - [2013/05/11 12:47:06 | 000,158,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
MOD - [2013/05/11 12:47:06 | 000,101,888 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll
MOD - [2013/05/11 12:47:06 | 000,096,256 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll
MOD - [2013/05/11 12:47:06 | 000,094,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll
MOD - [2013/05/11 12:47:06 | 000,093,696 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll
MOD - [2013/05/11 12:47:06 | 000,073,728 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll
MOD - [2013/05/11 12:47:06 | 000,067,072 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll
MOD - [2013/05/11 12:47:06 | 000,062,976 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll
MOD - [2013/05/11 12:47:06 | 000,057,344 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll
MOD - [2013/05/11 12:47:06 | 000,038,912 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll
MOD - [2013/03/24 16:40:16 | 000,035,512 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.exe
MOD - [2013/03/24 16:40:14 | 000,620,216 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.dll
MOD - [2013/03/24 16:36:38 | 000,015,872 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\AdvancedCPU.dll
MOD - [2013/03/24 16:36:24 | 000,010,752 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\RecycleManager.dll
MOD - [2013/03/24 16:36:24 | 000,010,752 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
MOD - [2013/03/24 16:36:22 | 000,021,504 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\QuotePlugin.dll
MOD - [2013/03/24 16:36:20 | 000,052,736 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\WebParser.dll
MOD - [2013/03/24 16:36:20 | 000,009,728 | ---- | M] () -- C:\Program Files\Rainmeter\Plugins\SpeedFanPlugin.dll
MOD - [2013/03/13 20:29:38 | 014,717,144 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2009/08/16 18:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2007/09/02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
MOD - [2007/09/02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
MOD - [2007/08/31 13:41:58 | 000,443,232 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 4\ContextHandler.dll

========== Services (SafeList) ==========

SRV - [2013/03/13 20:29:47 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/28 20:09:08 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/02/19 21:32:08 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/12/28 11:40:08 | 000,101,376 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
SRV - [2012/12/18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011/06/23 14:24:51 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/02/04 14:50:03 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/01/13 13:49:25 | 000,435,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2009/12/18 01:12:10 | 001,044,808 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009/12/18 01:08:54 | 000,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/05/14 16:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009/05/14 16:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2007/05/28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a2bridf4)
DRV - [2013/02/19 21:32:54 | 010,919,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/11/20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/06/23 11:24:58 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2010/01/13 14:00:24 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2009/10/27 00:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2009/10/14 08:24:44 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009/05/14 16:49:32 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009/05/14 16:49:26 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009/05/14 16:49:22 | 000,133,000 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2009/05/14 16:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009/05/14 16:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2006/12/05 12:34:42 | 000,507,136 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5D 54 C4 06 B3 93 CA 01 [binary data]
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=IEFM1&q ... rer:source?}
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-2447112679-3197449902-53654966-1003\..\SearchScopes,DefaultScope =

========== FireFox ==========

FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=IEFM1&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: %7B46551EC9-40F0-4e47-8E18-8E5CF550CFB8%7D:1.3.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:3.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.74
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.6.0.8442
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/10 21:56:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/03/13 20:07:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010/01/12 18:53:29 | 000,000,000 | ---D | M]

[2010/01/13 13:01:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robo\AppData\Roaming\mozilla\Extensions
[2013/05/10 21:16:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robo\AppData\Roaming\mozilla\Firefox\Profiles\vyw6vs4m.default\extensions
[2012/11/30 19:32:56 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Robo\AppData\Roaming\mozilla\Firefox\Profiles\vyw6vs4m.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2013/04/18 16:59:50 | 000,282,569 | ---- | M] () (No name found) -- C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
[2013/05/09 15:06:15 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012/11/29 19:30:19 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2010/02/17 20:02:14 | 000,002,171 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\mozilla\firefox\profiles\vyw6vs4m.default\searchplugins\bing.xml
[2013/03/15 18:54:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/04/13 14:30:31 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/03/12 18:36:33 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/12/09 22:49:54 | 000,001,583 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\atlas-sk.xml
[2012/12/09 22:49:54 | 000,001,380 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\azet-sk.xml
[2012/12/09 22:49:54 | 000,001,479 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\dunaj-sk.xml
[2012/12/09 22:49:54 | 000,001,473 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slovnik-sk.xml
[2012/12/09 22:49:54 | 000,001,104 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-sk.xml
[2012/12/09 22:49:54 | 000,000,830 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\zoznam-sk.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2010/02/04 21:31:43 | 000,000,988 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 serial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 www.alcohol-soft.com
O1 - Hosts: 127.0.0.1 images.alcohol-soft.com
O1 - Hosts: 127.0.0.1 trial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 alcohol-soft.com
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2447112679-3197449902-53654966-1000\..\Toolbar\WebBrowser: (no name) - {5B291E6C-9A74-4034-971B-A4B007A0B315} - No CLSID value found.
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKU\S-1-5-21-2447112679-3197449902-53654966-1000..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2447112679-3197449902-53654966-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Robo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: ÓĂ±ČĚŘľ«ÁéĎÂÔŘ(&B) - Reg Error: Value error. File not found
O8 - Extra context menu item: Stáhnout pomocí BitSpiritu - C:\Program Files\BitSpirit\bsurl.htm ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.146.128.60 195.146.132.59
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B828E388-CDE3-4718-9232-E804120C1EB3}: DhcpNameServer = 195.146.128.60 195.146.132.59
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B828E388-CDE3-4718-9232-E804120C1EB3}: NameServer = 195.146.128.60,195.146.132.59
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{81efb21d-11b6-11df-ad58-0013209f4d35}\Shell - "" = AutoRun
O33 - MountPoints2\{81efb21d-11b6-11df-ad58-0013209f4d35}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\TNTPSCSI.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013/05/11 13:40:51 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Robo\Desktop\OTL.exe
[2013/05/11 12:47:23 | 000,000,000 | ---D | C] -- C:\Users\Robo\AppData\Roaming\Opera
[2013/05/11 12:47:23 | 000,000,000 | ---D | C] -- C:\Users\Robo\AppData\Local\Opera
[2013/05/11 12:47:01 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2013/05/11 10:21:53 | 000,000,000 | ---D | C] -- C:\Users\Robo\AppData\Local\{394F22B6-9DF3-4E79-A1C6-5EE5216D1FE9}
[2013/05/10 22:06:07 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013/05/10 22:06:06 | 000,000,000 | ---D | C] -- C:\rsit
[2013/05/10 21:07:54 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/05/10 21:07:38 | 000,000,000 | ---D | C] -- C:\JRT
[2013/05/10 19:12:57 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013/05/10 19:12:51 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013/05/10 19:12:51 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013/05/10 19:12:50 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013/05/10 19:12:44 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013/05/10 19:12:40 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013/05/10 19:12:40 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013/05/10 19:12:39 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013/05/10 19:12:37 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013/05/10 19:12:36 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013/05/10 18:45:23 | 000,745,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013/05/10 18:45:23 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013/05/10 18:45:23 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013/05/10 18:45:22 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013/05/10 18:45:22 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013/05/10 18:45:22 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013/05/10 18:45:22 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013/05/10 18:45:22 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013/05/10 18:45:22 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013/05/10 18:45:22 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013/05/10 18:45:22 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013/05/10 18:45:22 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013/05/10 18:45:22 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013/05/10 18:45:22 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013/05/10 18:45:22 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013/05/10 18:45:22 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013/05/10 18:45:21 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013/05/10 18:45:21 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013/05/10 18:45:21 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013/05/10 18:45:21 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013/05/10 18:45:21 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013/05/10 18:45:21 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013/05/10 18:45:21 | 000,242,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013/05/10 18:45:21 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/05/10 18:45:21 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013/05/10 18:45:21 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013/05/10 18:43:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/10 18:43:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/10 18:43:45 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013/05/10 18:43:45 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/05/10 18:43:45 | 001,988,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013/05/10 18:43:45 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/05/10 18:43:45 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/05/10 18:43:45 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/05/10 18:43:45 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/05/10 18:43:45 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/05/10 18:43:45 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/05/10 18:43:45 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/05/10 18:43:45 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/05/10 18:43:45 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/05/10 18:43:45 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/05/10 18:43:45 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/05/10 18:43:45 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/05/10 18:43:45 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/05/10 18:43:45 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/10 18:43:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/04/28 12:00:38 | 006,712,125 | ---- | C] (Tonec Inc. & IP-Predator ) -- C:\Users\Robo\AppData\Roaming\idman615.exe
[2010/01/13 16:55:29 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Robo\AppData\Roaming\pcouffin.sys
[1 C:\Users\Robo\Desktop\*.tmp files -> C:\Users\Robo\Desktop\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2013/05/11 13:58:22 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/05/11 13:48:41 | 000,000,920 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/11 13:41:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Robo\Desktop\OTL.exe
[2013/05/11 13:35:02 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/05/11 12:42:17 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/11 12:41:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/05/11 12:41:08 | 2313,523,200 | -HS- | M] () -- C:\hiberfil.sys
[2013/05/11 12:35:34 | 000,025,936 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/05/11 12:35:34 | 000,025,936 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/05/11 11:27:09 | 000,304,160 | ---- | M] () -- C:\PA207.DAT
[2013/05/10 21:23:40 | 000,000,848 | ---- | M] () -- C:\Users\Robo\Desktop\AdwCleaner - odkaz.lnk
[2013/05/10 20:18:08 | 000,628,743 | ---- | M] () -- C:\Users\Robo\Desktop\AdwCleaner.exe
[2013/05/10 18:45:23 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2013/05/10 18:45:23 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013/05/10 18:45:23 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013/05/10 18:45:22 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013/05/10 18:45:22 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013/05/10 18:45:22 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013/05/10 18:45:22 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013/05/10 18:45:22 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013/05/10 18:45:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013/05/10 18:45:22 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013/05/10 18:45:22 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013/05/10 18:45:22 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013/05/10 18:45:22 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013/05/10 18:45:22 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013/05/10 18:45:22 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013/05/10 18:45:22 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013/05/10 18:45:21 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013/05/10 18:45:21 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013/05/10 18:45:21 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2013/05/10 18:45:21 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013/05/10 18:45:21 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013/05/10 18:45:21 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013/05/10 18:45:21 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013/05/10 18:45:21 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/05/10 18:45:21 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013/05/10 18:45:21 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013/05/10 18:45:21 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013/05/10 18:43:46 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/10 18:43:46 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/10 18:43:45 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013/05/10 18:43:45 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/05/10 18:43:45 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013/05/10 18:43:45 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/05/10 18:43:45 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/05/10 18:43:45 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/05/10 18:43:45 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/05/10 18:43:45 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/05/10 18:43:45 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/05/10 18:43:45 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/05/10 18:43:45 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/05/10 18:43:45 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/05/10 18:43:45 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/05/10 18:43:45 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/05/10 18:43:45 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/05/10 18:43:45 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/05/10 18:43:45 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/10 18:43:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/07 21:44:56 | 000,001,192 | ---- | M] () -- C:\Users\Robo\AppData\Local\SRDownloader.nast
[1 C:\Users\Robo\Desktop\*.tmp files -> C:\Users\Robo\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/05/11 13:58:22 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/05/11 12:47:06 | 000,001,824 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2013/05/10 21:23:53 | 000,628,743 | ---- | C] () -- C:\Users\Robo\Desktop\AdwCleaner.exe
[2013/05/10 21:23:46 | 000,000,848 | ---- | C] () -- C:\Users\Robo\Desktop\AdwCleaner - odkaz.lnk
[2013/05/10 18:45:21 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013/04/15 20:13:07 | 000,000,017 | ---- | C] () -- C:\Users\Robo\AppData\Local\resmon.resmoncfg
[2012/04/23 16:33:06 | 000,029,215 | ---- | C] () -- C:\Users\Robo\AppData\Local\SRDownloader.err
[2012/04/23 16:31:36 | 000,001,192 | ---- | C] () -- C:\Users\Robo\AppData\Local\SRDownloader.nast
[2011/10/25 19:07:04 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{0F033B84-E8AC-4644-BAC0-A5B5CFB3BB08}
[2011/10/07 19:21:30 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{70A9E9EE-59E9-4BEC-BD6B-DB17A8FB1C9D}
[2011/10/07 19:19:38 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{4E140426-5592-4218-91F5-795041A3D6C6}
[2011/07/22 09:18:05 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{AAEE3C5E-5F75-406F-B606-91794CF77FDC}
[2011/07/22 09:16:25 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{2A66AEB7-E583-4455-8135-62A971C742AE}
[2011/07/20 17:45:34 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{E393D613-E573-4A10-8255-1074CCB1D70A}
[2011/07/20 17:43:56 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{0E2D39B6-DBD8-4FED-BB76-22FD204AF59A}
[2011/06/23 13:48:42 | 001,481,728 | ---- | C] () -- C:\Windows\System32\LegitCheckControl.dll
[2011/06/23 13:48:42 | 000,323,072 | ---- | C] () -- C:\Windows\System32\WgaTray.exe
[2011/06/23 13:48:42 | 000,190,976 | ---- | C] () -- C:\Windows\System32\WgaLogon.dll
[2011/06/15 14:52:42 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011/06/15 14:52:38 | 000,006,144 | ---- | C] () -- C:\Users\Robo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/07 12:12:13 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011/06/07 12:04:02 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/06/06 08:27:02 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{880A5B0B-F976-4E61-89DC-26233A6A78B9}
[2011/06/06 08:25:14 | 000,000,000 | ---- | C] () -- C:\Users\Robo\AppData\Local\{2E183F4D-4113-4C49-B4DB-6ACCF905E6EE}
[2010/03/29 14:59:13 | 000,004,096 | -H-- | C] () -- C:\Users\Robo\AppData\Local\keyfile3.drm
[2010/03/22 13:10:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2010/03/03 14:26:10 | 000,000,917 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\coreavc.ini
[2010/02/03 19:09:57 | 000,020,904 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\mdbu.bin
[2010/01/13 16:57:48 | 000,001,041 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\vso_ts_preview.xml
[2010/01/13 16:55:29 | 000,087,608 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\inst.exe
[2010/01/13 16:55:29 | 000,007,887 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\pcouffin.cat
[2010/01/13 16:55:29 | 000,001,144 | ---- | C] () -- C:\Users\Robo\AppData\Roaming\pcouffin.inf
[2010/01/13 12:31:00 | 000,001,024 | ---- | C] () -- C:\Users\Robo\.rnd
[2010/01/12 20:35:07 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

========== ZeroAccess Check ==========

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2011/10/24 11:56:34 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\ESET
[2011/10/24 12:00:02 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\TuneUp Software
[2010/03/11 13:08:26 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\BitSpirit
[2012/07/17 20:07:25 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\BSplayer PRO
[2010/01/13 17:19:35 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DAEMON Tools Pro
[2013/04/30 16:43:53 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DMCache
[2011/12/18 21:55:28 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DriverFinder
[2010/01/12 18:54:26 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\ESET
[2011/02/16 13:32:59 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\GARMIN
[2010/06/30 14:34:05 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\GHISLER
[2012/02/06 17:50:03 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\HTC
[2012/01/18 19:56:48 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2013/05/01 08:11:49 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IDM
[2011/03/07 13:46:33 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IGC
[2012/01/19 20:06:16 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IrfanView
[2012/03/20 20:05:27 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\KC Softwares
[2013/03/15 19:01:30 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia
[2011/05/02 18:17:31 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia Multimedia Player
[2013/03/15 19:01:30 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia Ovi Suite
[2011/05/02 18:34:56 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\NSeries
[2013/05/11 12:47:23 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Opera
[2012/01/18 20:05:13 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Outlook
[2011/05/02 18:35:47 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\PC Suite
[2013/04/19 19:23:01 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Rainmeter
[2010/01/13 13:48:20 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\TuneUp Software
[2012/12/02 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Ulozto File Manager
[2011/08/14 19:35:35 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Vso
[2010/11/08 13:17:03 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Windows Live Writer

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009/07/14 06:53:46 | 000,032,542 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/07/14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2011/01/09 21:09:42 | 000,000,916 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2011/01/09 21:09:43 | 000,000,920 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012/04/16 16:25:50 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

trebor · #13 Příspěvek od **trebor** » 11 kvě 2013 14:49

Druhý log - druhá časť:

color=#A23BEC]< MD5 for: HAL.DLL >[/color]
[2010/11/20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010/11/20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009/07/14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SERVICES.EXE >
[2009/07/14 03:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe
[2009/07/14 03:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011/04/25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011/06/21 07:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011/09/29 18:02:44 | 001,301,872 | ---- | M] (Microsoft Corporation) MD5=22F7E7CBCA308DEE3428B097D4F8A61C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_b38e8546e0cbe4a1\tcpip.sys
[2012/08/22 19:05:21 | 001,306,992 | ---- | M] (Microsoft Corporation) MD5=23790A44D9A6B67F8690C34D4F516446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_b55b785ade04500f\tcpip.sys
[2011/04/25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009/07/14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2013/01/03 07:01:49 | 001,303,912 | ---- | M] (Microsoft Corporation) MD5=34AE5CC0C7417AB701C2AA8A7BC75417 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_b3c99dece09ecc3b\tcpip.sys
[2010/11/20 14:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011/09/29 18:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2013/01/04 06:56:23 | 001,308,504 | ---- | M] (Microsoft Corporation) MD5=4A95845C5F33A4DDEB6AEF6367FB6520 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_b5becc06ddb98192\tcpip.sys
[2012/03/30 12:29:05 | 001,287,024 | ---- | M] (Microsoft Corporation) MD5=55E9965552741F3850CB22CBBA9671ED -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_b2f57423c7b8dea8\tcpip.sys
[2011/09/29 17:43:37 | 001,285,488 | ---- | M] (Microsoft Corporation) MD5=56C198AC82EFA622DD93E9E43575F79C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_b2f8731bc7b62d86\tcpip.sys
[2011/09/29 18:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011/04/25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2013/01/03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\System32\drivers\tcpip.sys
[2013/01/03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_b502eb9fc4c2a304\tcpip.sys
[2012/03/30 12:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2011/04/25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2012/03/30 11:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2011/06/21 07:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2010/06/14 08:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2012/08/22 19:16:54 | 001,292,144 | ---- | M] (Microsoft Corporation) MD5=A5EBB8F648000E88B7D9390B514976BF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_b514e56fc4b40532\tcpip.sys
[2010/06/14 08:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
[2013/01/04 06:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_b34bcf71c7782cb0\tcpip.sys
[2011/06/21 07:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2012/10/03 18:44:01 | 001,308,040 | ---- | M] (Microsoft Corporation) MD5=D490DD0A91B4EAC3B4EE08D11EE37C31 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_b5a428d6ddce3d9a\tcpip.sys
[2011/06/21 08:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys
[2012/10/03 18:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_b4ef7439c4d0da52\tcpip.sys
[2012/03/30 12:08:19 | 001,303,408 | ---- | M] (Microsoft Corporation) MD5=E47C2844A1605A44178F4281E4D58B3D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_b38bb990e0ccc871\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009/10/28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< >

< %systemroot%*.* /U /s >
[27 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4754fd4283538315b765e9ec16f7872b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4754fd4283538315b765e9ec16f7872b\*.tmp -> ]
[3 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012/10/10 17:56:37 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Adobe
[2011/04/10 14:07:44 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Ahead
[2011/11/18 12:14:24 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Apple Computer
[2010/03/11 13:08:26 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\BitSpirit
[2012/07/17 20:07:25 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\BSplayer PRO
[2010/01/13 17:19:35 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DAEMON Tools Pro
[2013/04/30 16:43:53 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DMCache
[2011/12/18 21:55:28 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\DriverFinder
[2010/01/12 18:54:26 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\ESET
[2011/02/16 13:32:59 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\GARMIN
[2010/06/30 14:34:05 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\GHISLER
[2012/02/06 17:50:03 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\HTC
[2012/01/18 19:56:48 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2010/01/12 17:10:31 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Identities
[2013/05/01 08:11:49 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IDM
[2011/03/07 13:46:33 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IGC
[2012/01/19 20:06:16 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\IrfanView
[2012/03/20 20:05:27 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\KC Softwares
[2010/01/12 20:45:30 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Macromedia
[2011/01/19 14:11:54 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Malwarebytes
[2009/07/14 09:50:20 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Media Center Programs
[2010/01/13 13:27:14 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Media Player Classic
[2013/02/23 14:41:54 | 000,000,000 | --SD | M] -- C:\Users\Robo\AppData\Roaming\Microsoft
[2010/01/13 13:01:48 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Mozilla
[2010/01/13 12:36:44 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nero
[2013/03/15 19:01:30 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia
[2011/05/02 18:17:31 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia Multimedia Player
[2013/03/15 19:01:30 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Nokia Ovi Suite
[2011/05/02 18:34:56 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\NSeries
[2013/05/11 12:47:23 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Opera
[2012/01/18 20:05:13 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Outlook
[2011/05/02 18:35:47 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\PC Suite
[2013/04/19 19:23:01 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Rainmeter
[2013/05/11 15:09:49 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Skype
[2012/01/07 13:02:44 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\skypePM
[2010/01/13 13:48:20 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\TuneUp Software
[2012/12/02 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Ulozto File Manager
[2011/08/14 19:35:35 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Vso
[2010/11/08 13:17:03 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\Windows Live Writer
[2010/01/12 17:54:13 | 000,000,000 | ---D | M] -- C:\Users\Robo\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2013/04/28 12:32:44 | 006,712,125 | ---- | M] (Tonec Inc. & IP-Predator ) -- C:\Users\Robo\AppData\Roaming\idman615.exe
[2011/06/23 11:27:34 | 000,087,608 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\inst.exe
[2007/08/18 10:54:02 | 000,020,480 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\AC3 Filter\ac3config.exe
[2007/08/18 10:53:50 | 000,016,384 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\AC3 Filter\dialog_patch.exe
[2008/04/13 18:26:54 | 000,036,396 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\AC3 Filter\uninstall.exe
[2008/04/01 12:51:06 | 000,691,717 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\FFDShow\unins000.exe
[2008/03/29 18:42:00 | 000,103,424 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\Haali media splitter\dsmux.exe
[2008/03/29 18:42:02 | 000,335,872 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\Haali media splitter\gdsmux.exe
[2008/03/29 18:41:54 | 000,135,168 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\Haali media splitter\mkv2vfr.exe
[2008/06/10 10:11:02 | 000,041,412 | ---- | M] () -- C:\Users\Robo\AppData\Roaming\BSplayer PRO\Haali media splitter\uninstall.exe
[2013/04/28 12:04:37 | 005,041,848 | ---- | M] (Tonec Inc.) -- C:\Users\Robo\AppData\Roaming\IDM\idmupdt.exe
[2012/01/18 19:49:01 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Robo\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2010/03/25 15:19:35 | 000,010,134 | R--- | M] () -- C:\Users\Robo\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2013/04/19 19:23:01 | 000,003,584 | -H-- | M] () -- C:\Users\Robo\AppData\Roaming\Rainmeter\Rainmeter.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2013/05/10 18:45:22 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll

< %systemroot%\Tasks\*.job >
[2013/05/11 14:35:42 | 000,000,830 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013/05/11 15:01:16 | 000,000,916 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013/05/11 15:02:01 | 000,000,920 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010/01/13 14:00:24 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2013/05/10 18:45:22 | 000,117,248 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\iepeers.dll

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013/05/11 12:35:34 | 000,025,936 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/05/11 12:35:34 | 000,025,936 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/05/10 18:43:45 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/10 18:43:45 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/10 18:43:45 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/10 18:43:45 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/10 18:43:46 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/10 18:43:46 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/10 18:43:45 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d2d1.dll
[2013/05/10 18:43:45 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10.dll
[2013/05/10 18:43:45 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10core.dll
[2013/05/10 18:43:45 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10level9.dll
[2013/05/10 18:43:45 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10warp.dll
[2013/05/10 18:43:45 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10_1.dll
[2013/05/10 18:43:45 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10_1core.dll
[2013/05/10 18:43:45 | 001,504,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d11.dll
[2013/05/10 18:43:45 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\DWrite.dll
[2013/05/10 18:43:45 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxgi.dll
[2013/05/10 18:45:21 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtmsft.dll
[2013/05/10 18:45:21 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtrans.dll
[2013/05/10 18:45:23 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\elshyph.dll
[2013/05/10 18:43:45 | 000,906,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\FntCache.dll
[2013/05/10 18:45:21 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\html.iec
[2013/05/10 18:45:21 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\icardie.dll
[2013/05/10 18:45:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\IEAdvpack.dll
[2013/05/10 18:45:21 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dat
[2013/05/10 18:45:21 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dll
[2013/05/10 18:45:21 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iedkcs32.dll
[2013/05/10 18:45:22 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iepeers.dll
[2013/05/10 18:45:21 | 000,025,185 | ---- | M] () -- C:\Windows\system32\ieuinit.inf
[2013/05/10 18:45:22 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieUnatt.exe
[2013/05/10 18:45:22 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iexpress.exe
[2013/05/10 18:45:22 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\imgutil.dll
[2013/05/10 18:45:21 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inetcpl.cpl
[2013/05/10 18:45:22 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inseng.dll
[2013/05/10 18:45:21 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\licmgr10.dll
[2013/05/10 18:45:22 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedsbs.dll
[2013/05/10 18:45:22 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedssync.exe
[2013/05/10 18:45:22 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshta.exe
[2013/05/10 18:45:22 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmled.dll
[2013/05/10 18:45:22 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmler.dll
[2013/05/10 18:45:21 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmlmedia.dll
[2013/05/10 18:45:23 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msls31.dll
[2013/05/10 18:43:45 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msmpeg2vdec.dll
[2013/05/10 18:45:22 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msrating.dll
[2013/05/10 18:45:23 | 000,745,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\MsSpellCheckingFacility.exe
[2013/05/10 18:45:22 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\occache.dll
[2013/05/10 18:45:22 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\pngfilt.dll
[2013/05/10 18:45:22 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\SetIEInstalledDate.exe
[2013/05/10 18:45:22 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\tdc.ocx
[2013/05/10 18:43:45 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\UIAnimation.dll
[2013/05/10 18:45:21 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\url.dll
[2013/05/10 18:45:22 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\vbscript.dll
[2013/05/10 18:45:21 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\webcheck.dll
[2013/05/10 18:45:22 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wextract.exe
[2013/05/10 18:43:45 | 001,230,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WindowsCodecs.dll
[2013/05/10 18:43:45 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WindowsCodecsExt.dll
[2013/05/10 18:43:45 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WMPhoto.dll
[2013/05/10 18:43:45 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\XpsGdiConverter.dll
[2013/05/10 18:43:45 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\XpsPrint.dll

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2013/02/28 20:13:32 | 018,672,232 | R--- | M] (Skype Technologies S.A.)
"RocketDock" = "C:\Program Files\RocketDock\RocketDock.exe" -- [2007/09/02 13:58:52 | 000,495,616 | ---- | M] ()
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2013/04/13 14:30:31 | 000,920,472 | ---- | M] (Mozilla Corporation) MD5=6F5386A655598F71BAAB2D6B63A69D6A -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2013/02/21 13:28:11 | 000,770,608 | ---- | M] (Microsoft Corporation) MD5=E4F6125ED5185F8FA37CC4F449B85526 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >
[2013/05/11 12:47:02 | 000,879,456 | ---- | M] (Opera Software) MD5=C5520FEB7AD5F6E3692B6DE41F6A1A27 -- C:\Program Files\Opera\opera.exe

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2013/04/09 10:57:09 | 001,312,720 | ---- | M] (Google Inc.) MD5=4E9592BB2C100E571F82640E59E9ECD5 -- C:\Program Files\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013/05/11 13:58:22 | 000,000,512 | ---- | M] () MD5=A213AF4F3D3AE90F7772842C5D8158FD -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2011/01/24 14:16:41 | 000,102,438 | ---- | M] () -- \Program Files\BitSpirit\Torrent\Readable\Ratchet.and.Clank.A.Crack.in.Time.EUR.JB.PS3-SPLiT.torrent

< *keygen* /s >

< *loader* /s >
[2010/01/12 17:33:56 | 000,000,003 | ---- | M] () -- \7Loader.TAG
[2012/12/02 15:42:06 | 002,168,761 | ---- | M] () -- \Downloads\Uloz.to_Uploader-setup.exe
[2013/01/19 19:16:30 | 000,905,728 | ---- | M] () -- \Downloads\Plocha\SRDownloader.exe
[2007/03/14 20:21:36 | 004,937,904 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\Photodownloader.exe
[2007/03/14 18:07:28 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\de_de\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\en_us\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\es_es\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\it_it\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\no_no\Photodownloader.ini
[2007/03/14 18:07:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2007/03/14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2007/03/14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2007/03/14 18:07:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS3\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2007/03/14 18:10:18 | 000,088,333 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ar_AE\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:20 | 000,025,188 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\cs_CZ\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:26 | 000,032,022 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\da_DK\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:28 | 000,032,216 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\de_DE\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:30 | 000,027,655 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\el_GR\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:36 | 000,030,891 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\en_US\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:38 | 000,032,399 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\es_ES\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:42 | 000,032,333 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\fi_FI\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:42 | 000,032,393 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\fr_FR\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:46 | 000,022,871 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\he_IL\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:48 | 000,025,272 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\hu_HU\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:50 | 000,032,109 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\it_IT\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:50 | 000,032,441 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ja_JP\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:52 | 000,032,499 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ko_KR\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:54 | 000,032,074 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\nb_NO\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:56 | 000,032,110 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\nl_NL\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:10:58 | 000,024,996 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\pl_PL\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:00 | 000,031,772 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\pt_BR\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:02 | 000,024,463 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ro_RO\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:04 | 000,025,054 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\ru_RU\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:06 | 000,032,171 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\sv_SE\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:06 | 000,024,411 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\tr_TR\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:08 | 000,025,525 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\uk_UA\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:10 | 000,032,741 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\zh_CN\Bridge\2.0\images\br_photo_downloader.png
[2007/03/14 18:11:10 | 000,032,833 | ---- | M] () -- \Program Files\Common Files\Adobe\Help\zh_TW\Bridge\2.0\images\br_photo_downloader.png
[2007/03/08 17:35:32 | 000,004,239 | ---- | M] () -- \Program Files\Common Files\Adobe\Startup Scripts CS3\Adobe Version Cue\VersionCueSDKLoader.jsx
[2006/10/26 14:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 14:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2007/12/13 23:25:38 | 000,111,912 | ---- | M] () -- \Program Files\Common Files\Nero\Shared\NSCLoader.dll
[2012/09/11 13:45:40 | 000,015,511 | ---- | M] () -- \Program Files\Freemake\Freemake Audio Converter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/09/13 21:52:54 | 000,064,651 | ---- | M] () -- \Program Files\Freemake\Freemake Audio Converter\FMCommon\FreemakeCommon\Resources\VideoDownloader.png
[2012/09/13 21:52:54 | 000,064,719 | ---- | M] () -- \Program Files\Freemake\Freemake Audio Converter\FMCommon\FreemakeCommon\Resources\VideoDownloaderOn.png
[2009/07/03 11:15:16 | 000,001,315 | ---- | M] () -- \Program Files\HappyFoto\HF Designer\Loader.elf
[2009/04/15 17:46:10 | 000,308,224 | ---- | M] () -- \Program Files\HappyFoto\HF Designer\Loader.exe
[2011/12/20 14:32:00 | 000,634,880 | ---- | M] () -- \Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
[2011/12/20 14:32:00 | 000,000,151 | ---- | M] () -- \Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.ini
[2009/09/25 15:00:00 | 000,001,849 | ---- | M] () -- \Program Files\TuneUp Utilities 2010\data\TuneUpUtilities.gadget\images\loader.gif
[2008/07/08 00:56:32 | 000,531,456 | ---- | M] () -- \Program Files\USD_WarXtreme\USDownloader.exe
[2008/07/29 13:20:14 | 000,002,762 | ---- | M] () -- \Program Files\USD_WarXtreme\USDownloader.ini
[2007/06/18 22:03:32 | 000,015,648 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ara.lng
[2008/07/08 00:56:38 | 000,017,611 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.bul.lng
[2007/06/13 21:02:10 | 000,018,268 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.cat.lng
[2008/07/08 00:56:40 | 000,013,608 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.chs.lng
[2008/01/20 19:50:40 | 000,016,996 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.cze.lng
[2007/12/21 17:59:42 | 000,017,386 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.de.lng
[2008/07/08 00:56:40 | 000,017,786 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.du.lng
[2007/06/13 21:03:14 | 000,017,427 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ell.lng
[2008/07/08 00:56:40 | 000,016,557 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.eng.lng
[2008/04/19 08:05:08 | 000,019,089 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.fre.lng
[2008/07/08 00:56:42 | 000,019,156 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.hu.lng
[2007/06/18 20:48:14 | 000,017,335 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.it.lng
[2008/07/08 00:56:42 | 000,016,525 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.lit.lng
[2007/12/15 11:50:52 | 000,016,839 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.nor.lng
[2008/03/12 22:46:26 | 000,016,695 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.pl.lng
[2007/06/18 05:11:58 | 000,017,909 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ptbr.lng
[2008/07/18 00:30:54 | 000,017,768 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ro.lng
[2007/07/25 19:58:28 | 000,013,780 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.rus.lng
[2008/07/18 00:30:54 | 000,016,918 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ser.lng
[2008/07/29 13:20:10 | 000,016,760 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.sk.lng
[2007/06/17 20:14:50 | 000,018,063 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.spa.lng
[2007/07/09 00:41:56 | 000,016,202 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.swe.lng
[2008/07/08 00:56:44 | 000,017,726 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.tr.lng
[2008/07/08 00:56:44 | 000,013,624 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.tw.lng
[2007/06/13 21:05:38 | 000,017,043 | ---- | M] () -- \Program Files\USD_WarXtreme\Langs\USDownloader.ukr.lng
[2009/09/25 15:00:00 | 000,001,849 | ---- | M] () -- \Program Files\Windows Sidebar\Shared Gadgets\TuneUpUtilities.gadget\images\loader.gif
[2009/06/02 02:16:57 | 000,114,688 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2012/09/11 13:45:40 | 000,015,511 | ---- | M] () -- \ProgramData\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/09/13 21:52:54 | 000,064,651 | ---- | M] () -- \ProgramData\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Resources\VideoDownloader.png
[2012/09/13 21:52:54 | 000,064,719 | ---- | M] () -- \ProgramData\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Resources\VideoDownloaderOn.png
[2007/12/11 17:33:20 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013/02/20 17:28:38 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013/02/20 17:28:38 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013/02/20 17:28:38 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2012/09/11 13:45:40 | 000,015,511 | ---- | M] () -- \Users\All Users\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Profiles\FmDownloaderProfiles.xml
[2012/09/13 21:52:54 | 000,064,651 | ---- | M] () -- \Users\All Users\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Resources\VideoDownloader.png
[2012/09/13 21:52:54 | 000,064,719 | ---- | M] () -- \Users\All Users\Freemake\FreemakeUtilsService\ErrorReporter\FMCommon\FreemakeCommon\Resources\VideoDownloaderOn.png
[2007/12/11 17:33:20 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013/02/20 17:28:38 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013/02/20 17:28:38 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013/02/20 17:28:38 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013/04/30 17:13:28 | 000,029,215 | ---- | M] () -- \Users\Robo\AppData\Local\SRDownloader.err
[2013/05/07 21:44:56 | 000,001,192 | ---- | M] () -- \Users\Robo\AppData\Local\SRDownloader.nast
[2010/09/22 13:16:48 | 000,005,273 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Toolbar\Applications\loader.xap
[2012/03/20 20:46:05 | 000,007,900 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\bundleloader[1].js
[2012/03/20 20:46:10 | 000,000,723 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\downloaderror[1].js
[2012/03/20 20:06:07 | 000,000,177 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\downloader[1].htm
[2012/03/20 20:46:10 | 000,001,174 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\downloader[1].js
[220 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14JSXPDL\*.tmp -> ]
[2012/05/12 08:01:40 | 000,010,519 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\AdLoader-aee74f28845638b42a47bb02dc06a7c6.min[1].js
[2012/08/09 22:02:36 | 000,000,753 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\AdLoader[1].htm
[2012/09/10 18:45:31 | 000,003,784 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\bundleloader[1].js
[2012/03/20 20:35:21 | 000,000,177 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\downloader[1].htm
[215 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NDJ1P8N\*.tmp -> ]
[2012/03/27 07:54:11 | 000,010,364 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EO78F7GO\AdLoader-31f86c1d55aec17be3f2a203a8e4fb19.min[1].js
[2012/09/17 16:39:26 | 000,003,784 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EO78F7GO\bundleloader[1].js
[253 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EO78F7GO\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EO78F7GO\*.tmp -> ]
[2013/05/10 20:03:38 | 000,105,903 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I8KNBMN3\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[5 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I8KNBMN3\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I8KNBMN3\*.tmp -> ]
[2012/08/09 22:02:37 | 000,105,903 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JRF62SHA\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012/09/17 16:39:32 | 000,000,723 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JRF62SHA\downloaderror[1].js
[2012/09/17 16:39:32 | 000,001,174 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JRF62SHA\downloader[1].js
[333 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JRF62SHA\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JRF62SHA\*.tmp -> ]
[2013/05/10 20:03:38 | 000,000,753 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NE2VOU01\AdLoader[1].htm
[23 \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NE2VOU01\*.tmp files -> \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NE2VOU01\*.tmp -> ]
[2012/06/10 12:23:11 | 000,004,178 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FRBXXKMS\dsq-loader-dark[1].gif
[2013/05/02 08:52:02 | 000,008,581 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\JJFNBK4Y\bx_loader[1].gif
[2011/12/28 18:34:07 | 000,000,673 | ---- | M] () -- \Users\Robo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XJUN0XO0\loader.white[1].gif
[2010/01/13 13:30:14 | 000,000,506 | -HS- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.exe.manifest
[2011/01/10 20:40:02 | 000,002,784 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.ini
[2011/01/10 15:44:51 | 002,693,973 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.log
[2011/01/10 20:40:03 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst
[2011/01/10 15:44:52 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst1.bak
[2011/01/10 09:43:30 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst2.bak
[2011/01/04 17:22:39 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst3.bak
[2010/12/31 22:33:02 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst4.bak
[2010/12/17 19:42:20 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst5.bak
[2010/12/17 14:14:38 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst6.bak
[2010/12/17 14:01:26 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst7.bak
[2010/12/02 20:39:32 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst8.bak
[2010/11/09 13:41:27 | 000,000,515 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\USDownloader.lst9.bak
[2011/01/10 15:44:51 | 000,016,760 | ---- | M] () -- \Users\Robo\AppData\Local\VirtualStore\Program Files\USD_WarXtreme\Langs\USDownloader.sk.lng
[2013/04/21 14:30:00 | 000,000,781 | ---- | M] () -- \Users\Robo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SRDownloader.lnk
[2010/01/13 20:43:26 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2013/04/13 20:37:56 | 000,137,124 | ---- | M] () -- \Windows\Prefetch\SRDOWNLOADER.EXE-3262ABEA.pf
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2012/02/06 17:49:47 | 000,003,590 | ---- | M] () -- \Windows\System32\Tasks\Launch HTC Sync Loader
[2009/07/14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009/07/14 09:42:17 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4.manifest
[2009/07/14 09:42:17 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4_winload.exe.mui_3bc5b827
[2009/07/14 09:42:17 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4_winresume.exe.mui_ff8b5358
[2011/06/23 09:27:50 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2011/06/23 09:27:50 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2011/06/23 09:27:51 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009/07/14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009/07/14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009/07/14 09:41:36 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766f102945576be4.manifest
[2009/07/14 03:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009/08/19 09:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009/08/19 09:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2010/11/20 05:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009/07/14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/05/14 08:22:35 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_0ad4ff55dce9d030\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/06/02 07:45:50 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_0ac72e8bdcf4a01c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:19:58 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/18 13:09:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_0ae0ab79dce0fb26\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:53 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/06/03 07:50:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:42:56 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_0b6949e0f5ff7ec0\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/05/14 08:13:36 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/06/03 07:47:28 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_0caf8c25da193eb6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/05/14 09:15:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/06/03 08:56:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_0d3159e2f33c4676\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/20 19:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT

< End of report >

#14 Příspěvek od **vyosek** » 11 kvě 2013 18:55

Nasledujici soubory otestujte na VirusTotalu https://www.virustotal.com/cs/

C:\Windows\system32\iepeers.dll
Kliknete na Choose file
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Scan It
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

trebor · #15 Příspěvek od **trebor** » 11 kvě 2013 19:18

Tu to je:

https://www.virustotal.com/cs/file/e4ee ... 368296200/

VIRY.CZ

Prosím o kontrolu - pomalý internet

Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet

Re: Prosím o kontrolu - pomalý internet