log - Prima

Zpráva

#16 Příspěvek od **Márty84** » 02 dub 2014 14:42

No to neni zrovna idealni reseni!

Zkusime to docistit, treba se to umoudri.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu a spustte.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

Otakar Stolařík

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Stolařík [Práva správce]
Mód : Kontrola -- Datum : 04/02/2014 16:01:32
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST3160815AS +++++
--- User ---
[MBR] 610c96260b03f6c901081060ff50f0e9
[BSP] 5d3d78107a1d502b336fe10621c868ce : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 152617 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_04022014_160132.txt >>

#18 Příspěvek od **Márty84** » 02 dub 2014 15:00

Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte ComboFix.
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

Otakar Stolařík

ComboFix 14-04-03.01 - Stolařík 03.04.2014 15:15:43.5.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1015.389 [GMT 2:00]
Spuštěný z: c:\documents and settings\Stolařík\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\AVAST Software\Avast\setup\49df4572-349c-40e2-b800-7ed093f638dc.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-03 do 2014-04-03 )))))))))))))))))))))))))))))))
.
.
2014-04-02 13:00 . 2014-04-02 13:00 -------- d-----w- c:\program files\Dropbox
2014-04-02 12:58 . 2014-04-02 13:01 -------- d-----w- c:\documents and settings\Stolařík\Data aplikací\Dropbox
2014-04-02 12:58 . 2014-04-02 12:58 -------- d-----w- c:\documents and settings\Stolařík\Data aplikací\AVAST Software
2014-04-02 12:55 . 2014-04-02 12:55 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-04-02 12:55 . 2014-04-02 12:55 180760 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-02 12:55 . 2014-04-02 12:55 776976 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-04-02 12:55 . 2014-04-02 12:55 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-04-02 12:55 . 2014-04-02 12:55 411552 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-04-02 12:55 . 2014-04-02 12:55 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-04-02 12:55 . 2014-04-02 12:55 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2014-04-02 12:55 . 2014-04-02 12:55 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-04-02 12:55 . 2014-04-02 12:55 271264 ----a-w- c:\windows\system32\aswBoot.exe
2014-04-02 12:55 . 2014-04-02 12:55 43152 ----a-w- c:\windows\avastSS.scr
2014-04-02 12:50 . 2014-04-02 12:50 -------- d-----w- c:\program files\AVAST Software
2014-03-29 13:49 . 2014-03-29 13:52 -------- dc----w- C:\AdwCleaner
2014-03-27 13:43 . 2014-04-02 13:58 26624 ----a-w- c:\windows\system32\TrueSight.sys
2014-03-27 13:17 . 2014-02-26 23:28 13312 -c----w- c:\windows\system32\dllcache\xp_eos.exe
2014-03-27 13:17 . 2014-02-26 23:28 13312 ------w- c:\windows\system32\xp_eos.exe
2014-03-24 13:11 . 2014-03-24 13:11 -------- d-----w- c:\program files\Mozilla Thunderbird
2014-03-23 14:05 . 2014-03-23 14:05 5777288 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2014-03-23 13:11 . 2014-03-23 13:11 -------- d-----w- c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-23 14:05 . 2012-03-31 15:08 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-23 14:05 . 2011-05-23 12:15 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-24 16:05 . 2006-03-02 12:00 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-24 11:35 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2014-02-24 11:35 . 2006-03-02 12:00 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-24 11:35 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2014-02-24 10:54 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2014-02-07 06:36 . 2006-03-02 12:00 1879040 ----a-w- c:\windows\system32\win32k.sys
2014-02-06 03:38 . 2006-03-02 12:00 920064 ----a-w- c:\windows\system32\wininet(4).dll
2014-02-06 03:38 . 2006-03-02 12:00 920064 ----a-w- c:\windows\system32\wininet(3).dll
2014-02-05 23:08 . 2006-03-02 12:00 1216000 ----a-w- c:\windows\system32\urlmon(4).dll
2014-02-05 23:08 . 2006-03-02 12:00 1216000 ----a-w- c:\windows\system32\urlmon(3).dll
2014-02-05 23:08 . 2006-03-02 12:00 105984 ----a-w- c:\windows\system32\url(4).dll
2014-02-05 23:08 . 2006-03-02 12:00 105984 ----a-w- c:\windows\system32\url(3).dll
2014-02-05 08:55 . 2006-03-02 12:00 563712 ----a-w- c:\windows\system32\qedit.dll
2014-01-04 03:12 . 2006-03-02 12:00 420864 ----a-w- c:\windows\system32\vbscript.dll
2010-08-26 13:21 . 2014-03-29 08:53 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-04-02 12:55 260976 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\documents and settings\Stolařík\Data aplikací\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\documents and settings\Stolařík\Data aplikací\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\documents and settings\Stolařík\Data aplikací\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\documents and settings\Stolařík\Data aplikací\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-01-15 5625624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]
"SMail"="c:\program files\Seznam\Postak\Postak.exe" [2006-05-18 450560]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-04-02 3854640]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2006-11-14 09:21 16270848 ------r- c:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"GeekBuddyRSP"=2 (0x2)
"Bonjour Service"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\InterVideo\\DVD5\\WinDVD.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\program files\Common Files\Comodo\GeekBuddyRSP.exe"= c:\program files\Common Files\Comodo\GeekBuddyRSP.exe:127.0.0.1/255.255.255.255:Enabled:GeekBuddy RSP
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\Stolařík\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2.4.2014 14:55 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2.4.2014 14:55 180760]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2.4.2014 14:55 26136]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2.4.2014 14:55 776976]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2.4.2014 14:55 411552]
R1 CFRMD;CFRMD;c:\windows\system32\drivers\CFRMD.sys [3.9.2012 9:20 36112]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 23:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [23.5.2013 22:11 119056]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2.4.2014 14:55 67824]
R2 CLPSLauncher;COMODO LPS Launcher;c:\program files\Common Files\COMODO\launcher_service.exe [17.4.2013 11:57 70344]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [9.10.2013 11:58 3275136]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [5.9.2013 10:34 171680]
S3 esgiguard;esgiguard;\??\c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys --> c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [?]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 PAC207;VideoCAM GE111;c:\windows\system32\drivers\PFC027.sys [8.4.2005 10:46 162176]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [3.3.2011 16:52 27064]
S4 GeekBuddyRSP;GeekBuddyRSP Service;c:\program files\Common Files\COMODO\GeekBuddyRSP.exe [17.4.2013 13:27 1851088]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-21 12:40 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 14:05]
.
2014-04-03 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02 12:55]
.
2014-03-28 c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-27 23:28]
.
2014-04-03 c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-27 23:28]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
TCP: DhcpNameServer = 10.0.0.1 10.0.0.10
FF - ProfilePath - c:\documents and settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://www.google.cz/#hl=cs&source=hp&q=
FF - ExtSQL: !HIDDEN! 2009-11-15 14:43; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-BitLord - c:\program files\BitLord\uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-04-03 15:25
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(168)
c:\documents and settings\Stolařík\Data aplikací\Dropbox\bin\DropboxExt.22.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\System32\PAStiSvc.exe
.
**************************************************************************
.
Celkový čas: 2014-04-03 15:30:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-04-03 13:29
.
Před spuštěním: Volných bajtů: 116 790 996 992
Po spuštění: Volných bajtů: 116 846 170 112
.
- - End Of File - - A02B0BDFCFB6A29EE6D418F2AEE2F953
413FC2A0C716421B3158746D63736515

#20 Příspěvek od **Márty84** » 03 dub 2014 18:30

Zajimave, mazal neco v nastaveni avastu

Zmenilo se neco?

Dejte novy log z RSIT

Otakar Stolařík

Ano, také jsem si toho všimnul, potom vyzkoušel, nešlo to,ale dnes už to jde - asi po restartu. Ten log pro jistotu dávám, zdá se mi, že to jde nějak pomalu. Snad je to vyřešené.
Logfile of random's system information tool 1.06 (written by random/random)
Run by Stolařík at 2014-04-04 10:05:02
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 111 GB (73%) free of 153 GB
Total RAM: 1015 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:05:14, on 4.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\COMODO\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Seznam\Postak\Postak.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\sol.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Documents and Settings\Stolařík\Plocha\Hijack.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Hijack\HijackThis\Stolařík.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SMail] "C:\Program Files\Seznam\Postak\Postak.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Program Files\Common Files\COMODO\launcher_service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 5088 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-30 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-02 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-30 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]
"SMail"=C:\Program Files\Seznam\Postak\Postak.exe [2006-05-18 450560]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-02 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-01-15 5625624]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2006-11-14 16270848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"GeekBuddyRSP"=2
"Bonjour Service"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-11-28 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2013-05-08 115440]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\InterVideo\DVD5\WinDVD.exe"="C:\Program Files\InterVideo\DVD5\WinDVD.exe:*:Disabled:WinDVD"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe"="C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe:127.0.0.1/255.255.255.255:Enabled:GeekBuddy RSP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2014-04-03 16:52:41 ----SHDC---- C:\RECYCLER
2014-04-03 15:30:04 ----AC---- C:\ComboFix.txt
2014-04-03 15:12:02 ----A---- C:\WINDOWS\zip.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWXCACLS.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWSC.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWREG.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\sed.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\PEV.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\NIRCMD.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\MBR.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\grep.exe
2014-04-02 16:17:10 ----DC---- C:\Qoobox
2014-04-02 15:00:40 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\DropboxMaster
2014-04-02 15:00:24 ----D---- C:\Program Files\Dropbox
2014-04-02 14:58:53 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox
2014-04-02 14:58:15 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\AVAST Software
2014-04-02 14:55:37 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-04-02 14:50:41 ----D---- C:\Program Files\AVAST Software
2014-03-31 15:50:37 ----A---- C:\WINDOWS\ntbtlog.txt
2014-03-29 15:49:26 ----DC---- C:\AdwCleaner
2014-03-29 10:52:59 ----D---- C:\Program Files\Mozilla Firefox
2014-03-27 15:25:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-27 15:17:38 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-03-24 15:11:27 ----D---- C:\Program Files\Mozilla Thunderbird
2014-03-23 16:05:10 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2014-03-23 11:40:02 ----A---- C:\WINDOWS\imsins.BAK
2014-03-14 10:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-14 10:43:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$

======List of files/folders modified in the last 1 months======

2014-04-04 10:05:14 ----D---- C:\WINDOWS\Prefetch
2014-04-04 10:01:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-04 09:56:53 ----D---- C:\WINDOWS\Temp
2014-04-03 17:13:35 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-03 15:30:08 ----D---- C:\WINDOWS\system32\drivers
2014-04-03 15:26:03 ----D---- C:\WINDOWS
2014-04-03 15:26:03 ----AC---- C:\WINDOWS\system.ini
2014-04-03 15:20:37 ----D---- C:\WINDOWS\system32
2014-04-03 15:20:37 ----D---- C:\WINDOWS\AppPatch
2014-04-03 15:20:32 ----D---- C:\Program Files\Common Files
2014-04-02 16:48:36 ----DC---- C:\Config.Msi
2014-04-02 16:44:16 ----SHD---- C:\WINDOWS\Installer
2014-04-02 16:41:04 ----D---- C:\WINDOWS\Tasks
2014-04-02 16:41:03 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Comodo
2014-04-02 16:16:28 ----D---- C:\WINDOWS\ERDNT
2014-04-02 15:00:24 ----RD---- C:\Program Files
2014-04-02 14:02:29 ----SD---- C:\WINDOWS\system32\Microsoft
2014-03-30 08:49:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-29 15:53:38 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-03-27 15:25:24 ----D---- C:\WINDOWS\inf
2014-03-27 15:25:16 ----DC---- C:\WINDOWS\system32\dllcache
2014-03-25 17:09:01 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\OpenOffice.org2
2014-03-24 11:23:38 ----D---- C:\Program Files\Internet Explorer
2014-03-24 11:21:04 ----D---- C:\WINDOWS\system32\MRT
2014-03-24 11:18:22 ----A---- C:\WINDOWS\system32\MRT.exe
2014-03-24 09:51:54 ----D---- C:\WINDOWS\system32\CatRoot
2014-03-23 16:05:19 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-23 15:11:38 ----D---- C:\WINDOWS\system32\config
2014-03-23 15:11:16 ----D---- C:\WINDOWS\system32\wbem
2014-03-23 15:11:16 ----D---- C:\WINDOWS\Registration
2014-03-23 11:35:21 ----D---- C:\WINDOWS\Debug
2014-03-22 11:15:02 ----D---- C:\WINDOWS\network diagnostic
2014-03-14 10:44:13 ----D---- C:\WINDOWS\ie8updates
2014-03-11 16:19:11 ----D---- C:\WINDOWS\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2014-04-02 26136]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-02 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-02 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-02 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-02 57672]
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2012-09-03 36112]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-02 67824]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-28 1353820]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 PAC207;VideoCAM GE111; C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-04-08 162176]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TrueSight;TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2013-05-23 119056]
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-02 50344]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files\Common Files\COMODO\launcher_service.exe [2013-04-17 70344]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-23 257928]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 GeekBuddyRSP;GeekBuddyRSP Service; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-04-17 1851088]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-04-24 73728]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#22 Příspěvek od **Márty84** » 04 dub 2014 09:10

Aktualizujem skener
Smazte RSIT a slozku C:\Program Files\trend micro , pokud ji najdete.
Pak stahnete nove RSIT http://images.malwareremoval.com/random/RSIT.exe a dejte log z nej.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Otakar Stolařík

Velice se omlouvám, ale jedná se o omyl. Nejde to. Vyzkoušel jsem vypnout štít Avastu a šlo to. Pak jsem jej zapnul a hned vyzkoušel a šlo to. Jenže asi za 2 min. jsem to vyzkoušel znovu a nejde. Nevím, asi nějaký doběh, či co. Mám tedy provést, co jste psal?

#24 Příspěvek od **Márty84** » 04 dub 2014 09:21

Otakar Stolařík píše:Mám tedy provést, co jste psal?

Ano.

Jinak pak je tu moznost zmenit antivir, pokud to cisteni nepomuze. Protoze pricina je nekde v nastaveni Avastu, kdyz vypnutim jeho stitu problem zmizi

Otakar Stolařík

Logfile of random's system information tool 1.09 (written by random/random)
Run by Stolařík at 2014-04-04 10:41:32
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 111 GB (73%) free of 153 GB
Total RAM: 1015 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:41:40, on 4.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\COMODO\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Seznam\Postak\Postak.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\sol.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Stolařík\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Stolařík.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SMail] "C:\Program Files\Seznam\Postak\Postak.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Program Files\Common Files\COMODO\launcher_service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 5328 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "keyword.URL" - "http://www.google.cz/#hl=cs&source=hp&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"1vffxtbr@SmileyCentral_1v.com"=C:\Program Files\SmileyCentral_1v\bar\1.bin
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1205146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=13]
"Description"=Google Updater
"Path"=C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0]
"Description"=Rhapsody Control
"Path"=C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SmileyCentral_1v.com/Plugin]
"Description"=SmileyCentral Plugin
"Path"=C:\Program Files\SmileyCentral_1v\bar\1.bin\NP1vStub.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files\Mozilla Firefox\components\
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
install.js
install.rdf
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions\
cs@dictionaries.addons.mozilla.org
{20a82645-c095-46ed-80e3-08825760534b}
{e001c731-5e37-4538-a5cb-8168736a2360}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\
icqplugin-100.xml
icqplugin-101.xml
icqplugin-102.xml
icqplugin-26.xml
icqplugin-27.xml
icqplugin-28.xml
icqplugin-29.xml
icqplugin-30.xml
icqplugin-31.xml
icqplugin-32.xml
icqplugin-33.xml
icqplugin-34.xml
icqplugin-35.xml
icqplugin-36.xml
icqplugin-37.xml
icqplugin-38.xml
icqplugin-39.xml
icqplugin-40.xml
icqplugin-41.xml
icqplugin-42.xml
icqplugin-43.xml
icqplugin-44.xml
icqplugin-45.xml
icqplugin-46.xml
icqplugin-47.xml
icqplugin-48.xml
icqplugin-49.xml
icqplugin-50.xml
icqplugin-51.xml
icqplugin-52.xml
icqplugin-53.xml
icqplugin-54.xml
icqplugin-55.xml
icqplugin-56.xml
icqplugin-57.xml
icqplugin-58.xml
icqplugin-59.xml
icqplugin-60.xml
icqplugin-61.xml
icqplugin-62.xml
icqplugin-63.xml
icqplugin-64.xml
icqplugin-65.xml
icqplugin-66.xml
icqplugin-67.xml
icqplugin-68.xml
icqplugin-69.xml
icqplugin-70.xml
icqplugin-71.xml
icqplugin-72.xml
icqplugin-73.xml
icqplugin-74.xml
icqplugin-75.xml
icqplugin-76.xml
icqplugin-77.xml
icqplugin-78.xml
icqplugin-79.xml
icqplugin-80.xml
icqplugin-81.xml
icqplugin-82.xml
icqplugin-83.xml
icqplugin-84.xml
icqplugin-85.xml
icqplugin-86.xml
icqplugin-87.xml
icqplugin-88.xml
icqplugin-89.xml
icqplugin-90.xml
icqplugin-91.xml
icqplugin-92.xml
icqplugin-93.xml
icqplugin-94.xml
icqplugin-95.xml
icqplugin-96.xml
icqplugin-97.xml
icqplugin-98.xml
icqplugin-99.xml
SmileyCentral_1v.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-30 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-02 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-30 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]
"SMail"=C:\Program Files\Seznam\Postak\Postak.exe [2006-05-18 450560]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-02 3854640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-01-15 5625624]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2006-11-14 16270848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"GeekBuddyRSP"=2
"Bonjour Service"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-11-28 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2013-05-08 115440]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\InterVideo\DVD5\WinDVD.exe"="C:\Program Files\InterVideo\DVD5\WinDVD.exe:*:Disabled:WinDVD"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe"="C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe:127.0.0.1/255.255.255.255:Enabled:GeekBuddy RSP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 1 month======

2014-04-04 10:41:32 ----D---- C:\Program Files\trend micro
2014-04-03 16:52:41 ----SHDC---- C:\RECYCLER
2014-04-03 15:30:04 ----AC---- C:\ComboFix.txt
2014-04-03 15:12:02 ----A---- C:\WINDOWS\zip.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWXCACLS.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWSC.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\SWREG.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\sed.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\PEV.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\NIRCMD.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\MBR.exe
2014-04-03 15:12:02 ----A---- C:\WINDOWS\grep.exe
2014-04-02 16:17:10 ----DC---- C:\Qoobox
2014-04-02 15:00:40 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\DropboxMaster
2014-04-02 15:00:24 ----D---- C:\Program Files\Dropbox
2014-04-02 14:58:53 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox
2014-04-02 14:58:15 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\AVAST Software
2014-04-02 14:55:41 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-04-02 14:55:41 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2014-04-02 14:55:40 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-04-02 14:55:40 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-04-02 14:55:40 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-04-02 14:55:39 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2014-04-02 14:55:39 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-04-02 14:55:38 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2014-04-02 14:55:37 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-04-02 14:55:33 ----A---- C:\WINDOWS\avastSS.scr
2014-04-02 14:50:41 ----D---- C:\Program Files\AVAST Software
2014-03-31 15:52:33 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2014-03-31 15:50:37 ----A---- C:\WINDOWS\ntbtlog.txt
2014-03-29 15:49:26 ----DC---- C:\AdwCleaner
2014-03-29 10:52:59 ----D---- C:\Program Files\Mozilla Firefox
2014-03-27 15:43:03 ----A---- C:\WINDOWS\system32\TrueSight.sys
2014-03-27 15:25:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-27 15:17:38 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-03-24 15:11:27 ----D---- C:\Program Files\Mozilla Thunderbird
2014-03-23 16:05:10 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2014-03-23 11:40:02 ----A---- C:\WINDOWS\imsins.BAK
2014-03-14 10:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-14 10:43:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$

======List of files/folders modified in the last 1 month======

2014-04-04 10:41:40 ----D---- C:\WINDOWS\Prefetch
2014-04-04 10:41:32 ----RD---- C:\Program Files
2014-04-04 10:05:18 ----D---- C:\WINDOWS\Temp
2014-04-04 10:01:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-03 17:13:35 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-03 15:30:08 ----D---- C:\WINDOWS\system32\drivers
2014-04-03 15:26:03 ----D---- C:\WINDOWS
2014-04-03 15:26:03 ----AC---- C:\WINDOWS\system.ini
2014-04-03 15:25:11 ----D---- C:\WINDOWS\system32\drivers\etc
2014-04-03 15:20:37 ----D---- C:\WINDOWS\system32
2014-04-03 15:20:37 ----D---- C:\WINDOWS\AppPatch
2014-04-03 15:20:32 ----D---- C:\Program Files\Common Files
2014-04-02 16:48:36 ----DC---- C:\Config.Msi
2014-04-02 16:44:16 ----SHD---- C:\WINDOWS\Installer
2014-04-02 16:41:04 ----D---- C:\WINDOWS\Tasks
2014-04-02 16:41:03 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Comodo
2014-04-02 16:16:28 ----D---- C:\WINDOWS\ERDNT
2014-04-02 14:02:29 ----SD---- C:\WINDOWS\system32\Microsoft
2014-03-30 08:49:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-29 15:53:38 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-03-27 15:25:24 ----D---- C:\WINDOWS\inf
2014-03-27 15:25:16 ----DC---- C:\WINDOWS\system32\dllcache
2014-03-25 17:09:01 ----D---- C:\Documents and Settings\Stolařík\Data aplikací\OpenOffice.org2
2014-03-24 11:23:38 ----D---- C:\Program Files\Internet Explorer
2014-03-24 11:21:04 ----D---- C:\WINDOWS\system32\MRT
2014-03-24 11:18:22 ----A---- C:\WINDOWS\system32\MRT.exe
2014-03-24 09:51:54 ----D---- C:\WINDOWS\system32\CatRoot
2014-03-23 16:05:19 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-23 15:11:38 ----D---- C:\WINDOWS\system32\config
2014-03-23 15:11:16 ----D---- C:\WINDOWS\system32\wbem
2014-03-23 15:11:16 ----D---- C:\WINDOWS\Registration
2014-03-23 11:35:21 ----D---- C:\WINDOWS\Debug
2014-03-22 11:15:02 ----D---- C:\WINDOWS\network diagnostic
2014-03-14 10:44:13 ----D---- C:\WINDOWS\ie8updates
2014-03-11 16:19:11 ----D---- C:\WINDOWS\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-02 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-02 180760]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2014-04-02 26136]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-04-02 54832]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-02 776976]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-02 411552]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-04-02 57672]
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2012-09-03 36112]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-02 67824]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-28 1353820]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 PAC207;VideoCAM GE111; C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-04-08 162176]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt []
S3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TrueSight;TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2013-05-23 119056]
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-02 50344]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files\Common Files\COMODO\launcher_service.exe [2013-04-17 70344]
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-23 257928]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 GeekBuddyRSP;GeekBuddyRSP Service; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-04-17 1851088]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-04-24 73728]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Otakar Stolařík

OTL logfile created on: 4.4.2014 10:45:35 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Stolařík\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,48 Mb Total Physical Memory | 276,93 Mb Available Physical Memory | 27,27% Memory free
2,39 Gb Paging File | 1,63 Gb Available in Paging File | 68,49% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 108,77 Gb Free Space | 72,98% Space Free | Partition Type: NTFS

Computer Name: P07172 | User Name: Stolařík | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.04.04 10:42:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Stolařík\Plocha\OTL.exe
PRC - [2014.04.02 14:55:30 | 003,854,640 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014.04.02 14:55:30 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014.03.29 10:53:26 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2014.03.16 23:41:54 | 000,390,256 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2014.01.15 10:00:49 | 005,625,624 | ---- | M] (SUPERAntiSpyware) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
PRC - [2013.10.09 11:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2013.05.23 22:11:42 | 000,119,056 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2013.04.17 11:57:08 | 000,070,344 | ---- | M] (Comodo Security Solutions Inc.) -- C:\Program Files\Common Files\COMODO\launcher_service.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.05.18 14:36:14 | 000,450,560 | ---- | M] (Seznam.cz a.s.) -- C:\Program Files\Seznam\Postak\Postak.exe
PRC - [2006.03.02 14:00:00 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\sol.exe
PRC - [2005.01.14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe

========== Modules (No Company Name) ==========

MOD - [2014.04.04 09:57:24 | 002,189,312 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14040301\algo.dll
MOD - [2014.04.03 15:02:02 | 002,189,312 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14040300\algo.dll
MOD - [2014.04.02 14:55:33 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.03.29 10:53:24 | 003,642,480 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014.03.23 16:05:18 | 016,276,872 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll
MOD - [2014.03.16 23:41:38 | 000,023,152 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird\nsldappr32v60.dll
MOD - [2014.03.16 23:41:37 | 000,158,832 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird\nsldap32v60.dll
MOD - [2014.03.16 23:41:33 | 003,018,864 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird\mozjs.dll
MOD - [2008.09.16 21:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2005.01.14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe

========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2014.04.02 14:55:30 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014.03.29 10:53:25 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014.03.23 16:05:21 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.10.09 11:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013.09.05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.05.23 22:11:42 | 000,119,056 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2013.04.17 13:27:24 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
SRV - [2013.04.17 11:57:08 | 000,070,344 | ---- | M] (Comodo Security Solutions Inc.) [Auto | Running] -- C:\Program Files\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
SRV - [2010.03.29 08:53:22 | 000,068,000 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)
SRV - [2005.01.14 09:32:38 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PAStiSvc.exe -- (STI Simulator)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014.04.02 15:58:44 | 000,026,624 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\TrueSight.sys -- (TrueSight)
DRV - [2014.04.02 14:55:33 | 000,776,976 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014.04.02 14:55:33 | 000,411,552 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2014.04.02 14:55:33 | 000,180,760 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014.04.02 14:55:33 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014.04.02 14:55:33 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014.04.02 14:55:33 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014.04.02 14:55:33 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014.04.02 14:55:28 | 000,026,136 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2012.09.03 09:20:00 | 000,036,112 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\CFRMD.sys -- (CFRMD)
DRV - [2011.07.22 18:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011.07.12 23:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009.12.30 13:20:54 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)
DRV - [2006.12.14 10:44:06 | 000,085,120 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006.11.15 08:34:00 | 004,225,920 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService)
DRV - [2005.08.18 00:00:00 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt -- (EverestDriver)
DRV - [2005.04.08 10:46:18 | 000,162,176 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PFC027.sys -- (PAC207)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo.com/search?p={searchTerms}
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz"
FF - prefs.js..extensions.enabledAddons: %7Be001c731-5e37-4538-a5cb-8168736a2360%7D:0.9.9.119
FF - prefs.js..extensions.enabledAddons: %7Bea614400-e918-4741-9a97-7a972ff7c30b%7D:2.5.15
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0
FF - prefs.js..keyword.URL: "http://www.google.cz/#hl=cs&source=hp&q="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll File not found
FF - HKLM\Software\MozillaPlugins\@SmileyCentral_1v.com/Plugin: C:\Program Files\SmileyCentral_1v\bar\1.bin\NP1vStub.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKCU\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\1vffxtbr@SmileyCentral_1v.com: C:\Program Files\SmileyCentral_1v\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.04.02 14:55:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014.03.29 10:53:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014.03.29 10:53:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.4.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.4.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009.12.12 16:48:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Extensions
[2009.12.12 16:48:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2014.03.24 10:46:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions
[2010.04.28 17:26:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.07.04 09:47:01 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2013.03.30 15:43:37 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2013.03.02 16:01:17 | 000,000,000 | ---D | M] (ÄŚeskĂ˝ slovnĂk pro kontrolu pravopisu) -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\extensions\cs@dictionaries.addons.mozilla.org
[2013.05.25 09:00:11 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-100.xml
[2013.08.08 10:11:08 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-101.xml
[2013.08.18 09:20:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-102.xml
[2008.06.21 20:19:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-26.xml
[2008.06.21 20:27:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-27.xml
[2008.06.22 09:27:35 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-28.xml
[2008.06.22 09:27:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-29.xml
[2008.06.22 09:28:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-30.xml
[2008.06.22 09:29:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-31.xml
[2008.06.22 09:36:40 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-32.xml
[2008.06.22 09:40:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-33.xml
[2008.06.22 09:52:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-34.xml
[2008.06.22 10:06:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-35.xml
[2008.06.22 10:13:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-36.xml
[2008.06.22 10:28:31 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-37.xml
[2008.06.22 16:14:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-38.xml
[2008.06.22 18:04:07 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-39.xml
[2008.06.22 19:54:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-40.xml
[2008.06.23 09:31:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-41.xml
[2008.06.23 16:50:21 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-42.xml
[2008.06.24 15:38:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-43.xml
[2008.06.24 16:34:13 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-44.xml
[2008.06.24 17:20:04 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-45.xml
[2008.06.24 18:09:28 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-46.xml
[2008.06.25 16:40:09 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-47.xml
[2008.06.25 16:55:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-48.xml
[2008.06.25 20:24:06 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-49.xml
[2008.07.27 18:21:04 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-50.xml
[2008.07.28 17:11:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-51.xml
[2008.07.29 17:21:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-52.xml
[2008.07.30 14:21:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-53.xml
[2008.08.29 14:06:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-54.xml
[2008.08.29 14:58:43 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-55.xml
[2008.09.26 08:34:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-56.xml
[2008.09.29 17:18:09 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-57.xml
[2008.11.14 10:20:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-58.xml
[2008.12.18 09:42:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-59.xml
[2009.02.05 15:15:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-60.xml
[2009.03.06 10:31:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-61.xml
[2009.03.29 14:20:21 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-62.xml
[2009.04.23 13:25:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-63.xml
[2009.04.29 10:07:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-64.xml
[2009.06.13 09:01:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-65.xml
[2009.07.23 16:05:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-66.xml
[2009.07.24 08:39:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-67.xml
[2009.08.06 18:58:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-68.xml
[2009.09.10 16:49:06 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-69.xml
[2009.10.28 15:55:11 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-70.xml
[2009.11.07 17:04:05 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-71.xml
[2009.11.26 15:51:29 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-72.xml
[2010.01.08 10:50:43 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-73.xml
[2010.02.19 10:36:11 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-74.xml
[2010.02.19 10:40:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-75.xml
[2010.03.25 14:58:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-76.xml
[2010.04.03 09:21:33 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-77.xml
[2010.06.24 08:44:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-78.xml
[2010.06.28 14:24:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-79.xml
[2010.07.24 09:24:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-80.xml
[2010.07.26 13:08:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-81.xml
[2010.08.27 10:02:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-82.xml
[2010.09.09 17:04:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-83.xml
[2010.09.19 09:50:17 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-84.xml
[2010.10.05 14:54:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-85.xml
[2010.10.30 09:39:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-86.xml
[2010.12.16 10:52:07 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-87.xml
[2011.03.09 11:12:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-88.xml
[2011.03.23 15:14:37 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-89.xml
[2011.05.05 09:03:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-90.xml
[2011.06.22 14:12:43 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-91.xml
[2011.09.30 17:33:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-92.xml
[2011.10.29 13:25:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-93.xml
[2011.12.05 17:49:08 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-94.xml
[2012.02.02 10:40:47 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-95.xml
[2012.05.24 08:46:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-96.xml
[2013.03.01 09:43:29 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-97.xml
[2013.03.08 14:23:40 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-98.xml
[2013.04.13 08:43:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-99.xml
[2010.10.05 12:48:52 | 000,010,039 | ---- | M] () -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\SmileyCentral_1v.xml
[2014.03.29 10:53:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014.03.29 10:53:04 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014.03.29 10:53:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014.03.29 10:53:01 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014.03.29 10:53:26 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014.03.29 10:53:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2014.03.29 10:53:02 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\STOLAĹ™ĂK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\4N61J733.DEFAULT\EXTENSIONS\{E001C731-5E37-4538-A5CB-8168736A2360}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\STOLAĹ™ĂK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\4N61J733.DEFAULT\EXTENSIONS\{EA614400-E918-4741-9A97-7A972FF7C30B}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.116\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.116\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: avast! Online Security = C:\Documents and Settings\Stolařík\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2013.75_0\
CHR - Extension: avast! Online Security = C:\Documents and Settings\Stolařík\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2016.82_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\Stolařík\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0\

O1 HOSTS File: ([2014.04.03 15:25:11 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {B71B15CF-3093-459C-B764-AEB2486F2273} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [SMail] C:\Program Files\Seznam\Postak\Postak.exe (Seznam.cz a.s.)
O4 - HKU\S-1-5-21-776561741-1844237615-725345543-1004..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 10.0.0.10
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AB95CADD-9539-44C3-AD57-C6B939AD0D73}: DhcpNameServer = 10.0.0.1 10.0.0.10
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Stolařík\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Stolařík\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.12.09 16:26:30 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.04.04 10:42:55 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Stolařík\Plocha\OTL.exe
[2014.04.04 10:41:32 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.04.03 16:52:41 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2014.04.03 15:12:02 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2014.04.03 15:12:02 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2014.04.03 15:12:02 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2014.04.03 15:12:02 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2014.04.02 16:17:10 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014.04.02 15:00:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Data aplikací\DropboxMaster
[2014.04.02 15:00:24 | 000,000,000 | ---D | C] -- C:\Program Files\Dropbox
[2014.04.02 15:00:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Nabídka Start\Programy\Dropbox
[2014.04.02 14:58:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox
[2014.04.02 14:58:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Data aplikací\AVAST Software
[2014.04.02 14:57:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
[2014.04.02 14:55:41 | 000,057,672 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.04.02 14:55:40 | 000,776,976 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.04.02 14:55:40 | 000,411,552 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.04.02 14:55:39 | 000,067,824 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.04.02 14:55:39 | 000,054,832 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.04.02 14:55:38 | 000,026,136 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswKbd.sys
[2014.04.02 14:55:37 | 000,271,264 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.04.02 14:55:33 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.04.02 14:50:41 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2014.03.31 09:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Plocha\NESTIHLI jste si zapsat recept LÁDI HRUŠKY Včetně výborných knedlíků a kakaových sušenek - tn.cz_soubory
[2014.03.29 15:49:26 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.03.29 10:52:59 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014.03.27 15:17:38 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xp_eos.exe
[2014.03.27 15:17:38 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xp_eos.exe
[2014.03.25 10:23:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Plocha\Vepřové ragú s fazolemi Kuchyne Lidlu_soubory
[2014.03.24 15:11:27 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2014.03.24 10:46:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Stolařík\Recent
[2014.03.23 16:05:10 | 005,777,288 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2014.03.21 10:34:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Stolařík\Plocha\ŽENY s.r.o. CZ » Uvař » Meteník_soubory

========== Files - Modified Within 30 Days ==========

[2014.04.04 10:48:32 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.04.04 10:42:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Stolařík\Plocha\OTL.exe
[2014.04.04 10:41:20 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\RSIT.exe
[2014.04.04 10:05:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.04.04 10:01:00 | 000,000,368 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.04.04 09:56:51 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014.04.04 09:56:14 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.04.04 09:56:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.04.03 15:25:11 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2014.04.02 15:58:44 | 000,026,624 | ---- | M] () -- C:\WINDOWS\System32\TrueSight.sys
[2014.04.02 14:57:48 | 000,001,791 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! SafeZone.lnk
[2014.04.02 14:55:33 | 000,776,976 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.04.02 14:55:33 | 000,411,552 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.04.02 14:55:33 | 000,271,264 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.04.02 14:55:33 | 000,180,760 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.04.02 14:55:33 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.04.02 14:55:33 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.04.02 14:55:33 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.04.02 14:55:33 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.04.02 14:55:33 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.04.02 14:55:28 | 000,026,136 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswKbd.sys
[2014.03.31 15:52:36 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014.03.31 13:55:12 | 000,089,181 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\IMG0014A.jpg
[2014.03.31 09:25:11 | 000,188,554 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\NESTIHLI jste si zapsat recept LÁDI HRUŠKY Včetně výborných knedlíků a kakaových sušenek - tn.cz.htm
[2014.03.30 08:49:05 | 000,432,982 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.03.30 08:49:05 | 000,429,508 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.03.30 08:49:05 | 000,078,520 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.03.30 08:49:05 | 000,067,938 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.03.28 11:36:45 | 000,000,222 | ---- | M] () -- C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.28 11:10:58 | 000,000,783 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\Zástupce - chrome.exe.lnk
[2014.03.25 10:23:04 | 000,056,119 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\Vepřové ragú s fazolemi Kuchyne Lidlu.htm
[2014.03.24 15:11:35 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Thunderbird.lnk
[2014.03.24 14:44:24 | 000,001,917 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2014.03.24 14:37:03 | 000,124,520 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.03.23 16:05:19 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014.03.23 16:05:19 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014.03.23 16:05:10 | 005,777,288 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2014.03.21 10:34:32 | 000,033,781 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\ŽENY s.r.o. CZ » Uvař » Meteník.htm
[2014.03.17 10:36:48 | 000,193,033 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\filda.jpg
[2014.03.05 15:08:07 | 004,671,611 | ---- | M] () -- C:\Documents and Settings\Stolařík\Plocha\katalog-tokoz-pro(1).pdf

========== Files Created - No Company Name ==========

[2014.04.04 10:48:32 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.04.04 10:41:15 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\RSIT.exe
[2014.04.03 15:12:02 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2014.04.03 15:12:02 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2014.04.03 15:12:02 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2014.04.03 15:12:02 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2014.04.03 15:12:02 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2014.04.02 14:57:48 | 000,001,791 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avast! SafeZone.lnk
[2014.04.02 14:57:23 | 000,000,368 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.04.02 14:55:41 | 000,180,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.04.02 14:55:40 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.03.31 15:52:33 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014.03.31 14:06:55 | 000,089,181 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\IMG0014A.jpg
[2014.03.31 09:25:09 | 000,188,554 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\NESTIHLI jste si zapsat recept LÁDI HRUŠKY Včetně výborných knedlíků a kakaových sušenek - tn.cz.htm
[2014.03.28 11:10:58 | 000,000,783 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\Zástupce - chrome.exe.lnk
[2014.03.28 10:22:43 | 000,000,228 | ---- | C] () -- C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.28 10:22:42 | 000,000,222 | ---- | C] () -- C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.27 15:43:03 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\TrueSight.sys
[2014.03.25 10:23:03 | 000,056,119 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\Vepřové ragú s fazolemi Kuchyne Lidlu.htm
[2014.03.24 15:11:35 | 000,001,674 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Thunderbird.lnk
[2014.03.24 15:11:35 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Thunderbird.lnk
[2014.03.23 11:40:02 | 000,001,917 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2014.03.21 10:34:30 | 000,033,781 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\ŽENY s.r.o. CZ » Uvař » Meteník.htm
[2014.03.17 10:36:47 | 000,193,033 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\filda.jpg
[2014.03.05 15:08:02 | 004,671,611 | ---- | C] () -- C:\Documents and Settings\Stolařík\Plocha\katalog-tokoz-pro(1).pdf
[2008.03.09 15:18:37 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
[2007.07.03 14:01:04 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Stolařík\kklll

========== ZeroAccess Check ==========

[2009.11.15 11:43:41 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 05:21:55 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 05:22:05 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.12.03 10:19:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.08.16 19:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2010.03.06 15:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GameXzone
[2007.08.21 17:23:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LangSoft
[2011.03.05 16:01:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NETGATE
[2010.07.26 16:15:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SPW-M
[2009.04.02 13:22:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2007.07.03 15:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\UDL
[2009.11.06 15:10:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.11.09 15:59:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
[2012.08.16 19:07:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\TightVNC
[2014.04.02 14:58:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\AVAST Software
[2008.12.07 19:25:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2014.04.02 15:01:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox
[2014.04.02 15:01:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\DropboxMaster
[2007.10.07 14:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\EPSON
[2008.08.16 20:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\ICQ
[2007.08.04 10:22:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\ICQ Toolbar
[2007.07.03 14:49:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\InterVideo
[2008.12.26 10:14:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\IObit
[2011.06.27 10:13:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\KvetinkaProzeny
[2007.08.21 17:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\LangSoft
[2008.09.04 13:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\MyMahj
[2008.06.22 16:54:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Opera
[2010.05.25 10:22:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Pamela
[2013.08.10 14:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\QuickScan
[2008.07.27 17:38:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Smart PC Solutions
[2008.12.14 10:59:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Thinstall
[2009.12.12 16:48:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Thunderbird

========== Purity Check ==========

========== Custom Scans ==========

< >
[2007.07.03 13:55:56 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2007.07.03 14:00:23 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2013.07.20 09:00:24 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2014.03.28 10:22:42 | 000,000,222 | ---- | C] () -- C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.28 10:22:43 | 000,000,228 | ---- | C] () -- C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.04.02 14:57:23 | 000,000,368 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job

< >

< MD5 for: AGP440.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2006.03.02 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2006.03.02 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2006.03.02 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2006.03.02 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2006.03.02 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007.06.13 15:23:39 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=ED7B460B142A32097B8A8F6ECC941815 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2006.03.02 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.10.10 08:45:54 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.24 11:44:12 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2006.03.02 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2006.03.02 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.03.02 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2006.03.02 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2006.03.02 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2006.03.02 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 16:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2006.04.20 13:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2007.10.30 19:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2006.03.02 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2006.03.02 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2006.03.02 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[1 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.07.03 16:12:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Adobe
[2007.07.06 16:58:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\AdobeUM
[2010.01.16 15:51:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Apple Computer
[2014.04.02 14:58:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\AVAST Software
[2008.12.07 19:25:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2014.04.02 15:01:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox
[2014.04.02 15:01:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\DropboxMaster
[2007.10.07 14:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\EPSON
[2008.03.02 18:08:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Google
[2008.08.16 20:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\ICQ
[2007.08.04 10:22:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\ICQ Toolbar
[2007.07.03 14:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Identities
[2007.07.03 14:06:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\InstallShield
[2007.07.03 14:49:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\InterVideo
[2008.12.26 10:14:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\IObit
[2011.06.27 10:13:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\KvetinkaProzeny
[2007.08.21 17:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\LangSoft
[2007.07.04 08:52:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Macromedia
[2008.12.14 17:27:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Malwarebytes
[2011.07.03 16:12:43 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Microsoft
[2008.06.18 10:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Mozilla
[2008.09.04 13:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\MyMahj
[2014.03.25 17:09:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\OpenOffice.org2
[2008.06.22 16:54:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Opera
[2010.05.25 10:22:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Pamela
[2013.08.10 14:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\QuickScan
[2008.12.14 11:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Real
[2013.11.26 17:03:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Skype
[2009.03.31 16:58:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\skypePM
[2008.07.27 17:38:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Smart PC Solutions
[2007.07.03 18:46:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Sun
[2013.10.25 09:25:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\SUPERAntiSpyware.com
[2008.01.31 16:37:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Talkback
[2008.12.14 10:59:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Thinstall
[2009.12.12 16:48:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Thunderbird
[2007.10.08 16:49:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\WinRAR
[2007.11.19 15:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Yahoo!

< %APPDATA%\*.exe /s >
[2014.03.19 14:17:02 | 032,667,896 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe
[2014.03.19 14:18:14 | 000,244,648 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\DropboxUninstaller.exe
[2014.03.19 14:17:06 | 000,143,616 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\DropboxUpdateHelper.exe
[2013.06.22 03:58:27 | 000,903,080 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Stolařík\Data aplikací\Sun\Java\JRERunOnce.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2007.07.03 15:45:36 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2007.07.03 15:45:36 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2007.07.03 15:45:36 | 000,454,656 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >
[2014.04.02 14:55:28 | 000,026,136 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswKbd.sys
[2014.04.02 14:55:33 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswMonFlt.sys
[2014.04.02 14:55:33 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys
[2014.04.02 14:55:33 | 000,049,944 | ---- | M] () -- C:\WINDOWS\system32\drivers\aswRvrt.sys
[2014.04.02 14:55:33 | 000,776,976 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSnx.sys
[2014.04.02 14:55:33 | 000,411,552 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSP.sys
[2014.04.02 14:55:33 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys
[2014.04.02 14:55:33 | 000,180,760 | ---- | M] () -- C:\WINDOWS\system32\drivers\aswVmm.sys

< %systemroot%\system32\*.* /3 >
[2014.04.02 14:55:33 | 000,271,264 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\aswBoot.exe
[2014.04.02 15:58:44 | 000,026,624 | ---- | M] () -- C:\WINDOWS\system32\TrueSight.sys
[2014.04.04 09:56:51 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"SUPERAntiSpyware" = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -- [2014.01.15 10:00:49 | 005,625,624 | ---- | M] (SUPERAntiSpyware)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=3
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.04.04 10:48:32 | 000,000,512 | ---- | M] () MD5=610C96260B03F6C901081060FF50F0E9 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2008.12.13 11:09:06 | 000,014,127 | ---- | M] () -- \AdwCleaner\Quarantine\C\Program Files\BitLord\Torrents\Portable Microsoft Word 2007 portable-pre-cracked.rar.torrent.vir
[2008.12.13 23:46:48 | 000,001,765 | ---- | M] () -- \AdwCleaner\Quarantine\C\Program Files\BitLord\Torrents\Portable Microsoft Word 2007 portable-pre-cracked.rar.xml.vir
[2003.12.05 14:52:40 | 000,000,796 | ---- | M] () -- \Program Files\Rockstar Games\GTA San Andreas\data\Decision\Craig\crack1.ped

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2012.12.04 18:00:50 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2012.12.04 18:00:50 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2013.11.11 15:39:40 | 000,006,012 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.11.11 15:39:40 | 000,021,956 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_30fps.gif
[2012.12.04 18:00:50 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2007.11.22 18:27:44 | 000,000,696 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy\Recovery\ZlobDownloadervcd.zip
[2013.03.22 15:35:08 | 000,009,427 | ---- | M] () -- \Documents and Settings\Stolařík\Dokumenty\Nájem\daně\Daň z pronájmu bytu - Diskuse - eMimino.cz_soubory\ajax-loader.gif
[2010.03.02 11:28:45 | 000,000,408 | ---- | M] () -- \Documents and Settings\Stolařík\Dokumenty\Tržní odhad ceny rodinného domu zdarma www.odhadonline.cz_soubory\ajax_preloader.js
[2011.12.06 16:26:21 | 000,002,785 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\30188-souboj-receptu-veprove-na-houbach_soubory\loader.js
[2010.02.17 11:21:35 | 000,018,672 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\chleba\Můj třetí chleba v životě _ Cuketka.cz_soubory\client_restserver_data\FeatureLoader.js
[2014.03.14 14:39:40 | 000,018,672 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\chleba\Můj třetí chleba v životě _ Cuketka.cz_soubory\client_restserver_data_002\FeatureLoader.js
[2013.05.18 15:22:55 | 000,009,427 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\knedlíky\Houskové knedlíky, co se zaručeně povedou recept - Labužník.cz_soubory\ajax-loader.gif
[2010.02.18 11:07:42 | 000,018,672 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\knedlíky\Search Results knedlíky _ Cuketka.cz_soubory\client_restserver_data\FeatureLoader.js
[2009.09.27 18:27:42 | 000,001,621 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\pečenáče\Chytej.cz - Pečenáče tety Mary_soubory\ajax_loader.js
[2013.08.20 10:08:52 | 000,009,427 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\Vepřový perkelt recept - Labužník.cz_soubory\ajax-loader.gif
[2010.01.20 14:09:39 | 000,021,069 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\zelé\Kysané zelí doma _ Cuketka.cz_soubory\client_restserver_data\FeatureLoader.js
[2014.03.25 10:23:03 | 000,003,208 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\Vepřové ragú s fazolemi Kuchyne Lidlu_soubory\ajax-loader-01.gif
[2014.04.02 14:55:30 | 000,072,480 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
[2004.04.21 17:09:00 | 000,069,632 | ---- | M] () -- \Program Files\epson\Creativity Suite\Easy Photo Print\EpAPFLoader.dll
[2005.04.07 17:42:00 | 000,057,344 | ---- | M] () -- \Program Files\epson\Creativity Suite\Easy Photo Print\EpAPFLoader2005.dll
[2007.12.19 15:08:13 | 000,005,795 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\IMAGES\XtraPreloader\loader.jpg
[2008.09.22 12:43:29 | 000,004,089 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\IMAGES\XtraPreloader\loader.swf
[2007.12.19 15:08:14 | 000,005,520 | ---- | M] () -- \Program Files\ICQ6\services\icqApp\ver1\theme\MUICoreLib\xtraLoader.swf
[2008.08.16 20:40:02 | 000,003,479 | ---- | M] () -- \Program Files\ICQ6\services\icqXtraz\ver1\content\coreg\preloader04.swf
[2008.03.12 09:18:29 | 000,552,798 | ---- | M] () -- \Program Files\ICQ6\services\icqXtraz\ver1\theme\game_center\loaderBkg.png
[2007.12.19 17:33:32 | 000,022,528 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\javaloader.uno.dll
[2008.05.29 21:15:46 | 000,006,528 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\pythonloader.py
[2007.12.19 18:05:26 | 000,015,872 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\pythonloader.uno.dll
[2008.05.29 22:44:18 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\pythonloader.uno.ini
[2008.02.07 15:19:02 | 000,004,065 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\classes\unoloader.jar
[2008.06.20 20:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2006.03.02 14:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2014.04.04 09:59:22 | 000,016,006 | ---- | M] () -- \WINDOWS\Prefetch\ASWWRCIELOADER32.EXE-3301B618.pf
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 20:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 20:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2013.10.24 13:21:48 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2008.01.03 18:43:12 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2008.09.06 16:31:59 | 000,000,836 | ---- | M] () -- \AdwCleaner\Quarantine\C\Program Files\BitLord\Torrents\nod32+serial.v2.50.25.rar.torrent.vir
[2004.08.17 16:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2009.09.11 13:33:12 | 000,001,341 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\červená řepa\cervena-repa-se-zelim-7984_soubory\novy-serial-ct-vypravej-24.jpg
[2009.09.11 13:32:16 | 000,001,341 | ---- | M] () -- \Documents and Settings\Stolařík\Plocha\recepty\červená řepa\cervena-repa-ve-sladkokyselem-nalevu-92085_soubory\novy-serial-ct-vypravej-24.jpg
[2007.07.03 14:18:54 | 000,000,050 | ---- | M] () -- \Install\Nero\SerialNo.txt
[2006.08.14 17:33:28 | 000,188,993 | ---- | M] () -- \Program Files\OpenOffice.org 2.4\program\classes\serializer.jar
[2012.09.27 01:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2006.03.02 14:00:00 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2014.02.13 09:39:24 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.01.10 11:30:34 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.02.13 09:37:03 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\6c29ee2bedfe88dcd66993f1af135ad8\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.13 09:34:33 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9860da66bf0219612908e7412b0a6e2e\System.Runtime.Serialization.ni.dll
[2008.07.25 08:08:04 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012.09.27 01:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2008.04.14 04:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2006.03.02 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2006.03.02 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:D1B5B4F1
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2

< End of report >

Otakar Stolařík

OTL Extras logfile created on: 4.4.2014 10:45:35 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Stolařík\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,48 Mb Total Physical Memory | 276,93 Mb Available Physical Memory | 27,27% Memory free
2,39 Gb Paging File | 1,63 Gb Available in Paging File | 68,49% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 108,77 Gb Free Space | 72,98% Space Free | Partition Type: NTFS

Computer Name: P07172 | User Name: Stolařík | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Value error.
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\InterVideo\DVD5\WinDVD.exe" = C:\Program Files\InterVideo\DVD5\WinDVD.exe:*:Disabled:WinDVD -- (InterVideo Inc.)
"C:\Program Files\ICQ6\ICQ.exe" = C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, Inc.)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe" = C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe:127.0.0.1/255.255.255.255:Enabled:GeekBuddy RSP -- (Comodo Security Solutions, Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\Stolařík\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03602767-5C44-4A31-A545-E819783A1D42}_is1" = Quadrax V
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{088B7BF8-AC95-4348-B77B-619AEB3A74A5}" = VideoCAM GE111
"{1B399A41-C1D0-40A2-9E4F-095868EFAF01}" = InterVideo WinDVD Platinum 5
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 24
"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21
"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe 1.4.89.1
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2CD2C0DB-81C3-416B-9FA6-589B9235359B}" = OpenOffice.org 2.4
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java(TM) 6 Update 4
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{43C69A09-CA51-4ABD-9803-0FBD2F546125}_is1" = Quadrax IV
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.2.0
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A47642B2-4CB5-4325-8093-C88D4747953F}" = GeekBuddy
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.9) - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B90450DF-E781-46FD-B1F1-0C86DA40E443}" = PIF DESIGNER
"{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}" = EPSON Easy Photo Print
"{BCB873D5-94BD-4ADC-B80A-A3B381D7E8FA}" = ITEDO IsoView 5
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}" = getPlus(R) for Adobe
"{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}" = iTunes
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE}_is1" = NOD32 FiX v2.1
"{E86BC406-944E-41F6-ADE6-2C136734C96B}" = EPSON File Manager
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.0
"Avast" = avast! Pro Antivirus
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"EPSON Printer and Utilities" = Software tiskárny EPSON
"EPSON Scanner" = EPSON Scan
"ESDX4000_4050_CX3900" = ESDX4000_4050_CX3900
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Google Desktop" = Google Desktop
"Google Chrome" = Google Chrome
"Google Updater" = Google Updater
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{088B7BF8-AC95-4348-B77B-619AEB3A74A5}" = VideoCAM GE111
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft.Net.Client.3.5" = Microsoft .NET Framework Client Profile
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox 28.0 (x86 cs)" = Mozilla Firefox 28.0 (x86 cs)
"Mozilla Thunderbird 24.4.0 (x86 cs)" = Mozilla Thunderbird 24.4.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Online Service Tool" = Online Service Tool
"PC Translator 2007 DEMO" = PC Translator 2007 DEMO
"Revo Uninstaller" = Revo Uninstaller 1.88
"SMail" = Seznam Pošťák
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 23.3.2014 9:23:09 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 23.3.2014 9:31:15 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 23.3.2014 9:31:55 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 23.3.2014 9:32:29 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
, verze 0.0.0.0, adresa chyby 0x00000000.

Error - 23.3.2014 10:04:34 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 23.3.2014 10:48:57 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 24.3.2014 3:51:58 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 24.3.2014 4:57:39 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 24.3.2014 8:39:31 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

Error - 24.3.2014 9:04:07 | Computer Name = P07172 | Source = Application Error | ID = 1000
Description = Chybující aplikace thunderbird.exe, verze 24.3.0.5144, chybující modul
msvcr100.dll, verze 10.0.30319.1, adresa chyby 0x0008ae6e.

[ System Events ]
Error - 31.3.2014 9:52:20 | Computer Name = P07172 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 31.3.2014 9:52:26 | Computer Name = P07172 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: aswRvrt aswSnx aswSP aswTdi aswVmm CFRMD cmdGuard Fips intelppm SASDIFSV SASKUTIL

Error - 31.3.2014 9:53:25 | Computer Name = P07172 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 2.4.2014 4:01:58 | Computer Name = P07172 | Source = Service Control Manager | ID = 7009
Description = Vypršel časový limit (30000 milisekund) čekání na připojení služby
Služba brány aplikačního rozhraní.

Error - 2.4.2014 4:01:58 | Computer Name = P07172 | Source = Service Control Manager | ID = 7000
Description = Služba Služba brány aplikačního rozhraní neuspěla při spuštění v důsledku
následující chyby: %%1053

Error - 2.4.2014 4:04:27 | Computer Name = P07172 | Source = sr | ID = 1
Description = Filtr nástroje Obnovení systému zjistil neočekávanou chybu 0xC0000001
při zpracování souboru na svazku HarddiskVolume1. Sledování svazku bylo ukončeno.

Error - 2.4.2014 8:50:06 | Computer Name = P07172 | Source = Service Control Manager | ID = 7000
Description = Služba ujyxsjhj neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 2.4.2014 10:16:33 | Computer Name = P07172 | Source = Service Control Manager | ID = 7034
Description = Služba Skype C2C Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 2.4.2014 10:53:44 | Computer Name = P07172 | Source = Service Control Manager | ID = 7034
Description = Služba Skype C2C Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 3.4.2014 9:11:39 | Computer Name = P07172 | Source = Service Control Manager | ID = 7034
Description = Služba Skype C2C Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.

< End of report >

#28 Příspěvek od **Márty84** » 04 dub 2014 20:00

Pouzivate Comodo?

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Znovu spustte OTL
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
[Purity]
[CreateRestorePoint]

:services
esgiguard
Skype C2C Service
SkypeUpdate
AdobeFlashPlayerUpdateSvc

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin*.xml

:otl
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo.com/search?p={searchTerms}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files\Yahoo!\Common\npyaxmpb.dll
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {B71B15CF-3093-459C-B764-AEB2486F2273} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O15 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-776561741-1844237615-725345543-1004\..Trusted Ranges: GD ([http] in Local intranet)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
[2007.08.04 10:22:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\ICQ Toolbar
[2008.12.26 10:14:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\IObit
[1 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[2007.11.19 15:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stolařík\Data aplikací\Yahoo!
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:D1B5B4F1
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"Adobe ARM"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Otakar Stolařík

Comodo jsem měl, ale minule mi dělal problémy, jak jsem plnil dané úkoly, tak jsem ho vyhodil. Počítám, že ho zase nainstaluji. Zde log -
All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 15389779 bytes
->Flash cache emptied: 492 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57472 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Stolařík
->Temp folder emptied: 31243 bytes
->Temporary Internet Files folder emptied: 629581 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 117909479 bytes
->Google Chrome cache emptied: 6460181 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 62451 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 140038614 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 15245235 bytes

Total Files Cleaned = 282,00 mb

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Stolařík
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service esgiguard stopped successfully!
Service esgiguard deleted successfully!
Service Skype C2C Service stopped successfully!
Service Skype C2C Service deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-100.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-101.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-102.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-26.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-27.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-28.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-29.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-30.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-31.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-32.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-33.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-34.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-35.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-36.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-37.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-38.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-39.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-40.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-41.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-42.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-43.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-44.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-45.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-46.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-47.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-48.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-49.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-50.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-51.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-52.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-53.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-54.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-55.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-56.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-57.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-58.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-59.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-60.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-61.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-62.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-63.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-64.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-65.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-66.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-67.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-68.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-69.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-70.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-71.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-72.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-73.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-74.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-75.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-76.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-77.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-78.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-79.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-80.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-81.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-82.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-83.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-84.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-85.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-86.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-87.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-88.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-89.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-90.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-91.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-92.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-93.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-94.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-95.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-96.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-97.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-98.xml moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Mozilla\Firefox\Profiles\4n61j733.default\searchplugins\icqplugin-99.xml moved successfully.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DECA3892-BA8F-44b8-A993-A466AD694AE4}\ not found.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com deleted successfully.
File C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird not found.
C:\Program Files\Yahoo!\Common\npyaxmpb.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B71B15CF-3093-459C-B764-AEB2486F2273} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B71B15CF-3093-459C-B764-AEB2486F2273}\ not found.
Registry value HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE5D279F-081B-4404-994D-C6B60AAEBA6D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE5D279F-081B-4404-994D-C6B60AAEBA6D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll moved successfully.
Registry key HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-776561741-1844237615-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\GD\\http deleted successfully.
File C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
File C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll not found.
C:\Documents and Settings\Stolařík\Data aplikací\ICQ Toolbar folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\IObit\Advanced SystemCare\Backup\Registry folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\IObit\Advanced SystemCare\Backup folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\IObit\Advanced SystemCare folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\IObit folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17E.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI352.tmp deleted successfully.
C:\WINDOWS\Installer\MSI353.tmp deleted successfully.
C:\WINDOWS\Installer\MSI354.tmp deleted successfully.
C:\WINDOWS\Installer\MSI355.tmp deleted successfully.
C:\WINDOWS\Installer\MSI356.tmp deleted successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Yahoo!\Companion\Buttons folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Yahoo!\Companion folder moved successfully.
C:\Documents and Settings\Stolařík\Data aplikací\Yahoo! folder moved successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:D1B5B4F1 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task\ deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 04052014_095419

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#30 Příspěvek od **Márty84** » 05 dub 2014 17:28

Bohuzel Comodo tam stale bezi, tedy nejake jeho soucasti. I to muze delat potize.

Takze jeste jednou spustte OTL s timto skriptem a dejte Opravit

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
GeekBuddyRSP
CLPSLauncher

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Program Files\Common Files\COMODO

VIRY.CZ

log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima

Re: log - Prima