zpomaleny prohlizec

[LPerka]

OTL Extras logfile created on: 3/20/2014 6:53:09 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lucien\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.68 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 48.76% Memory free
7.36 Gb Paging File | 4.91 Gb Available in Paging File | 66.78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.99 Gb Total Space | 76.33 Gb Free Space | 26.78% Space Free | Partition Type: NTFS

Computer Name: LUCIEN-PC | User Name: Lucien | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\Free Media Player\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\Free Media Player\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\Free Media Player\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\Free Media Player\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0542A718-F783-4746-8A2C-A5D355A5F5D9}" = rport=137 | protocol=17 | dir=out | app=system |
"{09A86178-3A27-4C67-B4B2-A33E697DD2A5}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{0A3AA212-0B21-4D3F-8DB4-02212DE22C8E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0D89362D-7990-4E0F-80BD-ACA02F447032}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{1AEB8141-718A-4D8C-BA97-DC051536211E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2C92DC68-1FFC-47BF-B5C6-185A9EF82E25}" = lport=139 | protocol=6 | dir=in | app=system |
"{2CB0400A-1A38-4552-926E-EBA3716E805A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{323CC85C-A6DF-4880-83D7-BDE8D4DB450E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{35061496-80C7-4BC3-8CAD-66A3B63123BF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{383855C0-303E-40BB-928C-FA24154AC648}" = rport=2869 | protocol=6 | dir=out | app=system |
"{411F0075-3D70-4396-87CF-BB44C40A570D}" = rport=138 | protocol=17 | dir=out | app=system |
"{4A5A007B-C860-42B4-9813-FF1FA3BC28E1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5BA084E1-50A3-40AD-BD5F-FDF6416A0424}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{63F6D5FE-744A-4934-9CAB-5F45C5DF9BA5}" = rport=445 | protocol=6 | dir=out | app=system |
"{6BC76649-BCAC-491B-8815-D9335AD0E50A}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{6C6CA69A-3B3C-49E5-B58E-61BAB1256408}" = rport=139 | protocol=6 | dir=out | app=system |
"{6D8B7E0D-6B3C-4BC7-8E95-5EC460783C8E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{7B108A87-3A56-41EF-A3AE-6FAA1AEF01F9}" = rport=10243 | protocol=6 | dir=out | app=system |
"{878E7865-F792-4D70-882D-95C9FCFD6F53}" = lport=137 | protocol=17 | dir=in | app=system |
"{8A44AA6A-25A6-47B7-ADFA-2702C0F7F6D8}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8B0422D6-23F4-429B-8DE2-2DD2028F12D7}" = lport=2869 | protocol=6 | dir=in | app=system |
"{8B9F4364-7648-4201-A0A5-AFFA48910860}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{8F4BCC7A-5BC2-477B-B183-E2E585358F51}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{938FD567-373B-49E4-96D7-AB49846175A7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{9B34F794-D4BA-4E2A-9803-1303F04EC627}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{9C19B4BC-29A6-4E78-BCD1-41403BEB9989}" = lport=445 | protocol=6 | dir=in | app=system |
"{A3CFEB50-33C6-4ED3-B969-7A9D3FE7DEB7}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A3D9DB69-D445-4563-8F4F-2C0420FE1FB3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A4B488B0-E685-4F7D-A696-1340D1785478}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A8018668-9079-469B-9BDC-C50303D75CCA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A8FB5C47-1CDB-411B-91DA-001D3E66C690}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B3C92EB1-89F4-4CBB-A160-7C7CE16CAF9D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B4EEECC8-D679-47F1-8B3D-9EBF5FE5BD89}" = lport=138 | protocol=17 | dir=in | app=system |
"{B54E77D5-4D12-424A-8667-E2B2C8037E5D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B7D33BD1-FE3C-4BC4-A3FD-A494B91FCAD1}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{BC3A521F-547B-47B3-81AD-1D4F881D7AC9}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{C54A1A9D-86A6-4AA1-B696-5ABB9CBCC5F8}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CB3202B2-9E0F-4259-A2DF-853BAE4D4F9A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{CBE1773B-BFE1-455B-B817-A2CC06C3C0DB}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E2F00C55-C789-40B7-9B6F-6832FFA3FA2C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F3C99958-0B5F-41B6-8E9C-393DE95789C4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F749DDCF-91C0-4D37-9C7A-6EF65AC845B5}" = lport=10243 | protocol=6 | dir=in | app=system |
"{FCC42689-6517-4305-94BB-50A5194FA940}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00E68AF5-E430-442D-BB68-2F446ED34E63}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{0351BA81-DD2A-4BC5-9883-AE204A3ED8F2}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe |
"{055B3A1C-FAFF-48EF-8B39-0F2E67B048EB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{072CC858-8BE5-4948-961B-DF260996B6E6}" = protocol=6 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\backupsvc.exe |
"{074C5194-3EB2-4756-9EB6-4F04AC9142E2}" = protocol=6 | dir=in | app=c:\program files (x86)\easy downloads\easydownloads.exe |
"{0C8C4A8E-BC27-4003-B002-A19C9A8C69BD}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe |
"{0DA4FF94-D843-43AB-A39A-61F52675A492}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{166C51AD-DD7A-405D-899C-AD2F55EF4525}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{1A87962A-7C4E-45F4-9472-F5AF6DDDC571}" = protocol=17 | dir=in | app=c:\program files (x86)\easy downloads\easydownloads.exe |
"{26FFE5C8-190B-4202-9080-B7EAAE2822D7}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{2A537A53-4473-4D66-BBB0-1FB1B104A8E5}" = protocol=17 | dir=in | app=c:\program files (x86)\expressfiles\expressdl.exe |
"{2CA016EB-04DC-4D5D-9C5E-DD664AF14D64}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{2F4E4C67-343E-4B8C-B87E-62A785257F0B}" = protocol=6 | dir=in | app=c:\program files (x86)\expressfiles\expressfiles.exe |
"{3660AF28-F12F-4F3E-8C6B-2A113E60DED5}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3EFE0D51-804F-4C6F-A9BD-987BA7C59150}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{40B7C05D-167E-4F89-9BF3-C9B306819AE6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{473E67BF-F4F3-40CF-BD3C-CD2888B24029}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{4975CEC1-F225-47B8-81B5-A949AA29F85F}" = protocol=6 | dir=out | app=system |
"{504BA9E4-545E-4934-8F13-46ECB2BF2340}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{5F971D18-EED6-4C7F-A2F1-AE74881BFE07}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{6366F0CA-21DF-479C-B74A-D25031CB2AED}" = protocol=17 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\backupsvc.exe |
"{660FC5BF-40F8-4AA6-AD71-D71A3844B2D2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{692FDB02-CFFC-415F-B310-C9E84644BB1B}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{6E6DD874-C536-4DCB-90A7-A8AA761D90EA}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{71C4611A-F9A3-459D-97AE-826CF4E7B6F0}" = protocol=17 | dir=in | app=c:\program files (x86)\easy downloads\easydl.exe |
"{7C536992-BA41-4D1C-AF4B-6D8E3A33C9AE}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7C820FD4-EE93-49E8-990E-8F049B6CD40A}" = protocol=6 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{809232B5-369C-40C3-9D5A-F7D68A49000B}" = protocol=17 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{83C51711-9F31-4278-9294-93050B9E9FEE}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{8760B308-94DB-43D7-9210-40C1A4816425}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8A7D4788-2D51-4B3A-80DD-98562879D4A1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8E472D23-B511-4B30-A76E-B970D6A54A18}" = protocol=17 | dir=in | app=c:\program files (x86)\expressfiles\expressfiles.exe |
"{9200BD9D-464B-4983-A0F1-A22BA93E49F2}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe |
"{9BF16E97-60FE-44EC-BDBA-4A752D505BF7}" = dir=in | app=c:\users\lucien\appdata\local\viber\viber.exe |
"{9F5A366E-CAE8-4237-A997-93764425B0DF}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{A10E2E38-A22D-4446-B102-4F7E53408ED4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A35B767E-1057-4848-A3A7-A6FB995D85AC}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe |
"{A863012C-E3FF-4DB0-AFA1-B8CE57A021D6}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{B2FC0823-A319-46C1-81EC-5E2C67F64F06}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B40F38EF-B99A-41F5-8545-61495CA724B8}" = protocol=6 | dir=in | app=c:\program files (x86)\easy downloads\easydl.exe |
"{B6C7643C-74E2-429C-B6B7-D229ADE099C6}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{B957EBED-25FF-4FC9-A4D1-6BF60C090AD8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BB93F219-C0A6-4B76-BBD7-EDEB0508DE7E}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{BD9F1274-408E-47DA-96CC-17A6EB0B54E2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C1257193-AD2A-42AF-829F-EA2E05D9EDF1}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{C2388962-CCF7-4CD6-AC3A-AECFA8100AB5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C7A67E06-6393-4694-89DA-83AB23AC3D6B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CAC1A16F-4BE4-41C5-AA50-6CB6491CC800}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{CD408236-A0AD-4622-9231-0D51533E0F3D}" = protocol=6 | dir=in | app=c:\program files (x86)\movies toolbar\safetynut\srtool~1\ie\dtuser.exe |
"{D13749E8-2ED3-4949-994D-275439E7EAC8}" = dir=in | app=c:\program files (x86)\acer\acer vcm\vc.exe |
"{DA63A456-572A-49F0-B4ED-83AF2DFAAE3E}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{DBDDAC7C-9C4A-4F75-BE0D-430D93EAF5F5}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{DD5DD852-E9C7-4C25-9169-07D60ED442B3}" = dir=in | app=c:\program files (x86)\acer\acer vcm\rs_service.exe |
"{DDC1D116-7A48-4F0E-A9F7-5D8C4183B815}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E216E623-9617-428C-841B-87ED36FD8A13}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E3C0E6D1-487E-4945-838A-386D10E1481C}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{E481971F-F00E-4C40-9E63-6CF8FF797B33}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{EA5DE757-B0AF-4F4D-BD86-D38012F8DDAB}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{EC33E320-6D20-4A5F-A64C-DE59C26484B9}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{EC7F8528-DFE6-4D53-ADCC-ACEB4125E8FD}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{ED2F39CC-3D21-4981-B8B0-DFB250D03376}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F19AFB45-661F-4575-8BBB-7623E4559471}" = protocol=17 | dir=in | app=c:\program files (x86)\movies toolbar\safetynut\srtool~1\ie\dtuser.exe |
"{F483C63E-7FBF-497F-8E70-D3F86F27D691}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{F49C73AD-6019-4D4D-8030-2453D6B184C4}" = protocol=6 | dir=in | app=c:\program files (x86)\expressfiles\expressdl.exe |
"{F661B6DF-6482-4A9D-AF90-89759B2094E4}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"TCP Query User{035C33DB-9167-48B7-9A51-11A80303F457}C:\users\lucien\desktop\hry\call of duty 2 cz\setup\data\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\users\lucien\desktop\hry\call of duty 2 cz\setup\data\cod2mp_s.exe |
"TCP Query User{0EB497E4-8994-49B5-9907-3F6AD834959D}C:\users\lucien\appdata\local\temp\rar$ex64.304\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex64.304\survivers_beta_3.exe |
"TCP Query User{363A9E32-7039-455F-8701-177E4DD0454E}C:\users\lucien\appdata\local\temp\rar$ex83.928\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex83.928\survivers_beta_3.exe |
"TCP Query User{53A37E8B-1B6C-460B-AFF4-AD0C46E32A35}C:\users\lucien\appdata\local\temp\rar$ex98.304\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex98.304\survivers_beta_3.exe |
"TCP Query User{7421925A-9FDB-4147-8B1C-079A31D451F6}C:\users\lucien\appdata\local\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\google\chrome\application\chrome.exe |
"TCP Query User{7B71F3E4-AF9B-4E6D-981B-34D5F09E2251}C:\users\lucien\appdata\local\temp\rar$ex02.784\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex02.784\survivers_beta_3.exe |
"TCP Query User{80DEFC98-1C0D-4F89-8828-8930E9BEF7A7}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty 2\cod2mp_s.exe |
"TCP Query User{9142A627-AF97-4AB3-BBF4-00AFC8681847}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"TCP Query User{9508F049-2CDF-4570-8454-4CB5CEF5F5F1}C:\squid\sbin\squid.exe" = protocol=6 | dir=in | app=c:\squid\sbin\squid.exe |
"TCP Query User{AAF18BB4-34D8-4BC1-B698-A678ADA5F850}C:\users\lucien\appdata\local\temp\rar$ex38.968\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex38.968\survivers_beta_3.exe |
"TCP Query User{B1D1225D-0D72-45F4-A9B8-45CCB30C47ED}C:\program files (x86)\garena plus\room\garena_room.exe" = protocol=6 | dir=in | app=c:\program files (x86)\garena plus\room\garena_room.exe |
"TCP Query User{B7FAFC4C-F599-4EF5-8170-2A604997E425}C:\program files (x86)\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files (x86)\limewire\limewire.exe |
"TCP Query User{EEACA07F-5325-4249-8629-074D3C1B902C}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{FBA894B7-6FF2-41E5-B5D4-884BB63E41D7}C:\users\lucien\appdata\local\temp\rar$ex81.672\survivers_beta_3.exe" = protocol=6 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex81.672\survivers_beta_3.exe |
"TCP Query User{FCA1C32D-5F08-4D3D-A871-A58C5C6D983C}C:\program files (x86)\metin2\metin2client.bin" = protocol=6 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin |
"UDP Query User{1152E6A6-8979-40D3-A782-612F6B4983F4}C:\users\lucien\desktop\hry\call of duty 2 cz\setup\data\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\users\lucien\desktop\hry\call of duty 2 cz\setup\data\cod2mp_s.exe |
"UDP Query User{13D95F8F-6020-4705-87C6-83C330337A24}C:\program files (x86)\garena plus\room\garena_room.exe" = protocol=17 | dir=in | app=c:\program files (x86)\garena plus\room\garena_room.exe |
"UDP Query User{48E418DD-FC0F-401E-A59D-AC362DECEBB0}C:\squid\sbin\squid.exe" = protocol=17 | dir=in | app=c:\squid\sbin\squid.exe |
"UDP Query User{5362F80A-8D7F-4C99-8BBC-D52AAA4B0927}C:\program files (x86)\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files (x86)\limewire\limewire.exe |
"UDP Query User{5F691418-02DF-4E39-AD4D-6DAE700D6D2F}C:\users\lucien\appdata\local\temp\rar$ex64.304\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex64.304\survivers_beta_3.exe |
"UDP Query User{75FD6943-A4BA-4DD9-A19B-9549839E4F9A}C:\users\lucien\appdata\local\temp\rar$ex83.928\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex83.928\survivers_beta_3.exe |
"UDP Query User{770BAD74-E3FB-454D-AF16-AFB6F68AADBF}C:\users\lucien\appdata\local\temp\rar$ex02.784\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex02.784\survivers_beta_3.exe |
"UDP Query User{80B0B243-50FD-43B4-83FC-F7A4D1CAF32D}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{87B0B67C-52A6-4F43-8BBD-1D2E971DDE02}C:\users\lucien\appdata\local\temp\rar$ex81.672\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex81.672\survivers_beta_3.exe |
"UDP Query User{93A729C9-9A43-4CF5-A0A1-F96056AA5A7F}C:\users\lucien\appdata\local\temp\rar$ex38.968\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex38.968\survivers_beta_3.exe |
"UDP Query User{BA3CDFAA-ADBF-41CD-82B6-AB33DFF1B028}C:\program files (x86)\metin2\metin2client.bin" = protocol=17 | dir=in | app=c:\program files (x86)\metin2\metin2client.bin |
"UDP Query User{C05A4AC8-276A-4298-A4CC-B7B3BFFBD04F}C:\program files (x86)\activision\call of duty 2\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty 2\cod2mp_s.exe |
"UDP Query User{DB6FE69F-490C-4C04-B36B-D299DF39BC76}C:\users\lucien\appdata\local\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\google\chrome\application\chrome.exe |
"UDP Query User{DD08848B-07D8-4CF2-9187-AA11EC0E7810}C:\users\lucien\appdata\local\temp\rar$ex98.304\survivers_beta_3.exe" = protocol=17 | dir=in | app=c:\users\lucien\appdata\local\temp\rar$ex98.304\survivers_beta_3.exe |
"UDP Query User{EFC57F19-8A40-4311-9669-F258D0BF44AB}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel(R) Turbo Boost Technology Monitor
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{701D8EE6-6A5A-4509-9740-35F551193CE0}" = Windows Live Family Safety
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-006D-0405-1000-0000000FF1CE}" = Microsoft Office Klikni a spusť 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A84DB02B-9C2B-4272-9D2D-A80E00A56513}" = Broadcom Gigabit NetLink Controller
"{D600D357-5CB9-4DE9-8FD4-14E208BD1970}" = Nero Backup Drivers
"{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}" = iTunes
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
"{068B46A0-8858-4CEB-80BC-A4AE787A05FC}" = Windows Live Sync
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
"{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
"{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 51
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{30075A70-B5D2-440B-AFA3-FB2021740121}" = Backup Manager Advance
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{46395060-B733-4964-A6F8-253FB1F8B2C4}" = Office XP Web Services Toolkit 2.0
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}" = InterVideo WinDVD 8
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7760D94E-B1B5-40A0-9AA0-ABF942108755}" = Acer Crystal Eye Webcam
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.14
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140011-0066-0405-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - čeština
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-00AF-0409-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A302C3E1-A26A-4141-BC1E-2C4F90D2153F}" = Bing Bar
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.1 MUI
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{BB285C9F-C821-4770-8970-56C4AB52C87E}" = Skype Click to Call
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E121A4FE-009B-385B-BB0D-B934E2A88288}" = Google Talk Plugin
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{Horske dobrodruzstvi - ztraceni v zavejich}_is1" = Horské dobrodružství - ztraceni v závějích 1.0
"3D Driving-School" = 3D Driving-School
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"Acer Registration" = Acer Registration
"Acer Screensaver" = Acer ScreenSaver
"Acer Welcome Center" = Welcome Center
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Audacity_is1" = Audacity 2.0.5
"avast" = avast! Free Antivirus
"AVI ReComp" = AVI ReComp 1.5.3
"Avisynth" = AviSynth 2.5
"CoD 2 čeština_is1" = CoD 2 čeština
"DAEMON Tools Lite" = DAEMON Tools Lite
"Emilka Holubová - Montezumův poklad" = Emilka Holubová - Montezumův poklad
"Fraps" = Fraps
"Free Media Player" = Free Media Player 2.0.7
"Freecorder5.05" = Freecorder 5
"Identity Card" = Identity Card
"InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
"InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
"InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}" = Acer Backup Manager
"InstallShield_{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}" = InterVideo WinDVD 8
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"LManager" = Launch Manager
"Metin2_is1" = Metin2
"Office14.Click2Run" = Microsoft Office Klikni a spusť 2010
"Registry Mechanic_is1" = PC Tools Registry Mechanic 11.0
"RollerCoaster Tycoon 3_is1" = RollerCoaster Tycoon 3
"RollerCoaster Tycoon Setup" = Roll
"somotomoviestoolbar1CR" = Movies Toolbar for Chrome (Dist. by Somoto Ltd.)
"somotomoviestoolbar1IE" = Movies Toolbar for Internet Explorer (Dist. by Somoto Ltd.)
"The KMPlayer" = The KMPlayer
"Totalcmd" = Total Commander (Remove or Repair)
"Tunngle beta_is1" = Tunngle beta
"uTorrent" = µTorrent
"VobSub" = VobSub 2.23
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-bit)
"Xvid_is1" = Xvid 1.3.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"PhotoFiltre 7" = PhotoFiltre 7
"PhotoFiltre Studio X" = PhotoFiltre Studio X
"Viber" = Viber

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 3/20/2014 1:16:18 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 9266

Error - 3/20/2014 1:46:01 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/20/2014 1:46:01 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1792701

Error - 3/20/2014 1:46:01 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1792701

Error - 3/20/2014 1:46:02 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/20/2014 1:46:02 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1793715

Error - 3/20/2014 1:46:02 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1793715

Error - 3/20/2014 1:46:04 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/20/2014 1:46:04 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1795337

Error - 3/20/2014 1:46:04 PM | Computer Name = Lucien-pc | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1795337

[ Media Center Events ]
Error - 1/8/2014 8:47:14 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 0:47:14 - Chyba při připojování k Internetu 0:47:14 - Nelze kontaktovat
server..

Error - 1/8/2014 8:47:23 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 0:47:19 - Chyba při připojování k Internetu 0:47:19 - Nelze kontaktovat
server..

Error - 1/8/2014 9:47:30 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 1:47:30 - Chyba při připojování k Internetu 1:47:30 - Nelze kontaktovat
server..

Error - 1/8/2014 9:47:37 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 1:47:35 - Chyba při připojování k Internetu 1:47:35 - Nelze kontaktovat
server..

Error - 1/10/2014 1:43:57 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 17:43:49 - Chyba při připojování k Internetu 17:43:56 - Nelze kontaktovat
server..

Error - 1/10/2014 1:44:16 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 17:44:02 - Chyba při připojování k Internetu 17:44:02 - Nelze kontaktovat
server..

Error - 2/4/2014 6:16:32 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 22:16:32 - Chyba při připojování k Internetu 22:16:32 - Nelze kontaktovat
server..

Error - 2/4/2014 6:17:05 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 22:17:01 - Chyba při připojování k Internetu 22:17:01 - Nelze kontaktovat
server..

Error - 2/4/2014 7:17:55 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 23:17:55 - Chyba při připojování k Internetu 23:17:55 - Nelze kontaktovat
server..

Error - 2/4/2014 7:18:25 PM | Computer Name = Lucien-pc | Source = MCUpdate | ID = 0
Description = 23:18:24 - Chyba při připojování k Internetu 23:18:24 - Nelze kontaktovat
server..

[ System Events ]
Error - 3/13/2014 6:35:07 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:35:22 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:35:29 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:35:30 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:35:44 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:35:52 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/13/2014 6:36:14 PM | Computer Name = Lucien-pc | Source = Schannel | ID = 36888
Description = Byla vygenerována následující výstraha o závažné chybě: 10. Stav interní
chyby: 10

Error - 3/19/2014 7:14:07 AM | Computer Name = Lucien-pc | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby wuauserv bylo dosaženo časového
limitu (30000 ms).

Error - 3/19/2014 5:56:02 PM | Computer Name = Lucien-pc | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (21:44:28, ?19.?3.?2014) bylo neočekávané.

Error - 3/20/2014 8:06:37 AM | Computer Name = Lucien-pc | Source = NetBT | ID = 4321
Description = Název WORKGROUP :1d nelze zaregistrovat v rozhraní s IP adresou
192.168.0.97. Počítač s IP adresou 192.168.0.61 nepovolil získání názvu tímto počítačem.


< End of report >

[Márty84]

Napiste mi velikost tohoto adresare C:\Users\Lucien\Desktop


Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
c2cautoupdatesvc
c2cpnrsvc
PanService
BBUpdate
BBSvc
gupdate
SkypeUpdate
AdobeFlashPlayerUpdateSvc
gupdatem
gusvc

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-703649365-112987376-1756050751-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-703649365-112987376-1756050751-1000UA.job

:otl
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
IE - HKU\S-1-5-21-703649365-112987376-1756050751-1000\..\SearchScopes,DefaultScope = {6DCB8F8E-A0AC-49CB-AFF0-181C1B985C41}
IE - HKU\S-1-5-21-703649365-112987376-1756050751-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-703649365-112987376-1756050751-1000\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
IE - HKU\S-1-5-21-703649365-112987376-1756050751-1000\..\SearchScopes\{6344A639-6FA9-4DEB-BBA9-06C0F0C43C2D}: "URL" = http://websearch.ask.com/custom/java/re ... src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
IE - HKU\S-1-5-21-703649365-112987376-1756050751-1000\..\SearchScopes\{6DCB8F8E-A0AC-49CB-AFF0-181C1B985C41}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3065462
[2014/02/11 19:56:08 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
CHR - plugin: McAfee Security Scanner + (Enabled) = C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\.DEFAULT..\Run: [SearchProtect] \SearchProtect\bin\cltmng.exe File not found
O4 - HKU\S-1-5-18..\Run: [SearchProtect] \SearchProtect\bin\cltmng.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[1 C:\Users\Lucien\Desktop\*.tmp files -> C:\Users\Lucien\Desktop\*.tmp -> ]
[10 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[20 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[10 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp files -> C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8852d3aa41ce9a5989acc0cef4d0e551\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8852d3aa41ce9a5989acc0cef4d0e551\*.tmp -> ]
[17 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
@Alternate Data Stream - 64 bytes -> \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.3.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.2.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.1.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV
@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D1B5B4F1

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
"{eec0f710-38b5-4aba-99bf-ec87564a4e13}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
"{eec0f710-38b5-4aba-99bf-ec87564a4e13}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
"uTorrent"=-
"swg"=-
"Skype"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NortonOnlineBackupReminder"=-
"Adobe Reader Speed Launcher"=-
"QuickTime Task"=-
"Freecorder FLV Service"=-
"SunJavaUpdateSched"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

[LPerka]

disk C - 134 GB (144 792 156 483 bajtů)



All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Lucien
->Temp folder emptied: 33683470 bytes
->Temporary Internet Files folder emptied: 90606674 bytes
->Java cache emptied: 517975 bytes
->Google Chrome cache emptied: 359203372 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 152771 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 28448287 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 39634658 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 755 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 18248918 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 544.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Lucien
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service c2cautoupdatesvc stopped successfully!
Service c2cautoupdatesvc deleted successfully!
Service c2cpnrsvc stopped successfully!
Service c2cpnrsvc deleted successfully!
Service PanService stopped successfully!
Service PanService deleted successfully!
Service BBUpdate stopped successfully!
Service BBUpdate deleted successfully!
Service BBSvc stopped successfully!
Service BBSvc deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service gusvc stopped successfully!
Service gusvc deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-703649365-112987376-1756050751-1000Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-703649365-112987376-1756050751-1000UA.job moved successfully.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52db1893-8a90-4192-aede-08e00b8f8473}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52db1893-8a90-4192-aede-08e00b8f8473}\ not found.
HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\Software\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52db1893-8a90-4192-aede-08e00b8f8473}\ not found.
Registry key HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6344A639-6FA9-4DEB-BBA9-06C0F0C43C2D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6344A639-6FA9-4DEB-BBA9-06C0F0C43C2D}\ not found.
Registry key HKEY_USERS\S-1-5-21-703649365-112987376-1756050751-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6DCB8F8E-A0AC-49CB-AFF0-181C1B985C41}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6DCB8F8E-A0AC-49CB-AFF0-181C1B985C41}\ not found.
C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF folder moved successfully.
C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences folder moved successfully.
C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults folder moved successfully.
C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome folder moved successfully.
Folder move failed. C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} scheduled to be moved on reboot.
File C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtect deleted successfully.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtect not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll moved successfully.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll not found.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ not found.
File C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Users\Lucien\Desktop\~WRL0003.tmp deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1769.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4829.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP64CD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP69D9.tmp\mcstore.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP69D9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6A2A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP73EA.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7FDC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB55B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEB1C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP15B4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP19DC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1E0F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP22CC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2AB6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5CB.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6AB4.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6BBD.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP7532.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP914F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP9FE7.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPBB5A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPCE2A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD1E1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE488.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE60A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF04D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPFBBC.tmp folder deleted successfully.
C:\Windows\Installer\MSI2002.tmp deleted successfully.
C:\Windows\Installer\MSI4B7.tmp deleted successfully.
C:\Windows\Installer\MSI5B30.tmp deleted successfully.
C:\Windows\Installer\MSI5ED1.tmp deleted successfully.
C:\Windows\Installer\MSI845D.tmp deleted successfully.
C:\Windows\Installer\MSI8FB9.tmp deleted successfully.
C:\Windows\Installer\MSIB9EF.tmp deleted successfully.
C:\Windows\Installer\MSIBB3E.tmp deleted successfully.
C:\Windows\Installer\MSIE174.tmp deleted successfully.
C:\Windows\Installer\MSIE84E.tmp deleted successfully.
C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\wlt6058.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\8852d3aa41ce9a5989acc0cef4d0e551\BIT2F3C.tmp deleted successfully.
ADS \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.3.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV deleted successfully.
ADS \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.2.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV deleted successfully.
ADS \Users\Lucien\Desktop\Serialy\Zdenek.Pohlreich.Pokrmy.k.rodinnemu.stolu.krok.za.krokem.1.2010.DVDRip.CZ.by.Colly.of.PowerUploaders.avi:TOC.WMV deleted successfully.
ADS C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT deleted successfully.
ADS C:\ProgramData\TEMP:D1B5B4F1 deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{eec0f710-38b5-4aba-99bf-ec87564a4e13} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eec0f710-38b5-4aba-99bf-ec87564a4e13}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar\\{eec0f710-38b5-4aba-99bf-ec87564a4e13} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eec0f710-38b5-4aba-99bf-ec87564a4e13}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\NortonOnlineBackupReminder deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Freecorder FLV Service deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 03212014_233102

Files\Folders moved on Reboot...
C:\Users\Lucien\AppData\Local\Temp\Low\JavaDeployReg.log moved successfully.
C:\Users\Lucien\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7BND03LR\google_co_uk[1].htm moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YQIVMHHL\bg-registred-expiring-r-cs[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YQIVMHHL\button-flex-blue2[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YQIVMHHL\tick-blue[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RR9U3F0D\background-banner-middle-v9[1].jpg moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RR9U3F0D\top-yellow-130-small[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HHEZ14XE\api[1].htm moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HHEZ14XE\background_banner_8_cs-2014[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HHEZ14XE\nag-btn-green-middle[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LJU18A0\background-banner-right-v9[1].jpg moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LJU18A0\nag-btn-grey-small[1].png moved successfully.
C:\Users\Lucien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LJU18A0\tooltip-arrow[1].png moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
C:\Windows\temp\Low\SkypeClickToCall\Logs\AutoUpdateSvc.log moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
C:\Users\Lucien\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} folder moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[Márty84]

disk C - 134 GB (144 792 156 483 bajtů)

Takhle velka je slozka C:\Users\Lucien\Desktop (plocha)?
Plocha by nemela mit vic nez 200 - 300 MB. Cim vetsi je, tim pomalejsi je pc, hlavne start.



Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.piriform.com/ccleaner/download/slim a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, jak je na tom pc.




12.4. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975