Kotrola logu vyosek
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Kotrola logu vyosek
V půlce scanu se to zastaví a napíšemi to:Manual file scan-geting folder structure ...... .
Re: Kotrola logu vyosek
prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti) Opakujte sken, pokud se sekne, tak do spodniho okenka nic nevkladejte"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Zde je log z Exstras :
OTL Extras logfile created on: 30.3.2011 20:50:35 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\hnizdil\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{14B7A9EF-BB68-4529-9190-8CE164E0F548}" = ESET Smart Security
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A30D5C0-BD4A-4E65-AADF-20A457DE6D38}" = Windows Live Family Safety
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Povolání snů
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.3 - Czech
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX110_TX110 User’s Guide" = Epson Stylus SX110_TX110 Manual
"EPSON SX110 Series" = EPSON SX110 Series Printer Uninstall
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"HijackThis" = HijackThis 2.0.2
"InstallShield_{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"OpenAL" = OpenAL
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 20.3.2011 14:02:25 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 23.3.2011 4:54:34 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 23.3.2011 4:54:35 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 24.3.2011 10:31:49 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 24.3.2011 10:31:50 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 26.3.2011 3:50:21 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 27.3.2011 13:05:02 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 29.3.2011 11:12:22 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
[ System Events ]
Error - 1.2.2011 6:29:35 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393241
Description = Stínové kopie svazku C: byly smazány, protože úložiště stínové kopie
nebylo možné včas zvětšit. Zvažte možnost snížení vstupně-výstupního zatížení systému
nebo zvolte svazek úložiště stínové kopie, pro který není vytvářena stínová kopie.
Error - 1.2.2011 6:30:09 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 1.2.2011 8:34:50 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 9:49:58 | Computer Name = hnizdil-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:47:49, ?1.?2.?2011) bylo neočekávané.
Error - 3.2.2011 5:16:47 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 3.2.2011 9:48:15 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.
< End of report >
OTL Extras logfile created on: 30.3.2011 20:50:35 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\hnizdil\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{14B7A9EF-BB68-4529-9190-8CE164E0F548}" = ESET Smart Security
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A30D5C0-BD4A-4E65-AADF-20A457DE6D38}" = Windows Live Family Safety
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Povolání snů
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.3 - Czech
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX110_TX110 User’s Guide" = Epson Stylus SX110_TX110 Manual
"EPSON SX110 Series" = EPSON SX110 Series Printer Uninstall
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"HijackThis" = HijackThis 2.0.2
"InstallShield_{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"OpenAL" = OpenAL
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 20.3.2011 14:02:25 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 23.3.2011 4:54:34 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 23.3.2011 4:54:35 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 24.3.2011 10:31:49 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 24.3.2011 10:31:50 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 26.3.2011 3:50:21 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 27.3.2011 13:05:02 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 29.3.2011 11:12:22 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
[ System Events ]
Error - 1.2.2011 6:29:35 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393241
Description = Stínové kopie svazku C: byly smazány, protože úložiště stínové kopie
nebylo možné včas zvětšit. Zvažte možnost snížení vstupně-výstupního zatížení systému
nebo zvolte svazek úložiště stínové kopie, pro který není vytvářena stínová kopie.
Error - 1.2.2011 6:30:09 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 1.2.2011 8:34:50 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 9:49:58 | Computer Name = hnizdil-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:47:49, ?1.?2.?2011) bylo neočekávané.
Error - 3.2.2011 5:16:47 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 3.2.2011 9:48:15 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.
< End of report >
Re: Kotrola logu vyosek
zde je log z OTL.txt.
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
PRC - [2010.12.18 00:09:56 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (ICQ Service)
SRV - [2011.02.28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.09.17 16:47:58 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.08.29 21:55:06 | 003,739,080 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.07.25 18:49:47 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2007.01.11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
========== Driver Services (SafeList) ==========
DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3)
DRV - [2010.10.23 14:39:15 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.11.16 09:06:50 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009.11.16 09:06:44 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.06.19 08:10:40 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2007.02.05 09:10:34 | 001,122,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\P17.sys -- (P17)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0 ... 4FCDB5FC3A}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data]
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6
FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.2.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: plugin2@gameplaylabs.com:2.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.18 00:09:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.28 18:40:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.07.25 17:56:26 | 000,000,000 | ---D | M]
[2011.01.15 22:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Extensions
[2011.03.30 16:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions
[2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
[2010.11.25 07:54:20 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\engine@conduit.com
[2011.01.15 22:32:07 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\firefox@bandoo.com
[2011.03.28 17:11:04 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\plugin2@gameplaylabs.com
[2010.12.05 00:24:25 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\quickstores@quickstores.de
[2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml
[2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml
[2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml
[2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml
[2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml
[2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml
[2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif
[2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src
[2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml
[2011.03.30 16:45:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.01.07 14:52:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.09.16 19:35:40 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
[2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
[2010.07.23 02:28:35 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.07.23 02:28:35 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010.07.23 02:28:35 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.07.23 02:28:35 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.07.23 02:28:35 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.01.08 11:14:14 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (GamePlayLabsBHO Class) - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin\BHO.dll (GamePlayLabs)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [EEventManager] c:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [egui] c:\program files\eset\eset smart security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - File not found
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.03.30 19:35:40 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2011.03.28 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin
[2011.03.28 14:45:53 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\Documents\ICQ
[2011.03.28 13:11:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
[2011.03.28 13:10:40 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2011.03.28 13:09:51 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2011.03.28 13:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2011.03.28 11:57:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.03.28 11:56:52 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.03.28 11:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.03.30 20:47:24 | 000,634,994 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2011.03.30 20:47:24 | 000,619,952 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.03.30 20:47:24 | 000,123,768 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2011.03.30 20:47:24 | 000,108,134 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.03.30 20:40:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.03.30 20:40:55 | 804,954,112 | -HS- | M] () -- C:\hiberfil.sys
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 19:35:40 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011.03.30 19:35:40 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2011.03.28 18:40:58 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.03.28 11:58:23 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011.03.28 11:58:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys
[2011.01.08 11:02:13 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.01.08 11:02:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.01.08 11:02:13 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011.01.08 11:02:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.01.08 11:02:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.12.03 20:48:37 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.11 01:14:21 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010.10.14 02:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.09.15 21:50:07 | 000,007,605 | ---- | C] () -- C:\Users\hnizdil\AppData\Local\Resmon.ResmonCfg
[2010.08.14 21:16:50 | 000,303,104 | ---- | C] () -- C:\Windows\System32\FXStudioDLL.dll
[2010.08.14 21:16:48 | 000,235,532 | ---- | C] () -- C:\Windows\System32\loadimage.dll
[2010.08.14 21:16:48 | 000,131,072 | ---- | C] () -- C:\Windows\System32\RapBoxDSP.dll
[2010.08.14 21:16:48 | 000,126,976 | ---- | C] () -- C:\Windows\System32\NewWaveAnzeige.dll
[2010.08.14 21:16:48 | 000,081,920 | ---- | C] () -- C:\Windows\System32\eJ_Tool.dll
[2010.08.14 21:16:48 | 000,045,056 | ---- | C] () -- C:\Windows\System32\fader.dll
[2010.08.14 21:16:46 | 000,307,200 | ---- | C] () -- C:\Windows\System32\fxstudio.dll
[2010.08.14 21:16:46 | 000,032,768 | ---- | C] () -- C:\Windows\System32\WndRgn.dll
[2010.08.14 21:16:45 | 000,075,976 | ---- | C] () -- C:\Windows\System32\Bassdec.dll
[2010.08.14 21:16:44 | 000,360,448 | ---- | C] () -- C:\Windows\System32\pxd32d5.dll
[2010.08.14 21:16:44 | 000,029,696 | ---- | C] () -- C:\Windows\System32\pthread.dll
[2010.08.14 21:16:43 | 000,147,456 | ---- | C] () -- C:\Windows\System32\lttls13n.dll
[2010.08.14 21:16:42 | 000,796,672 | ---- | C] () -- C:\Windows\System32\LTRTN13n.DLL
[2010.08.14 21:16:38 | 000,708,608 | ---- | C] () -- C:\Windows\System32\ltcry13n.dll
[2010.08.14 21:16:36 | 000,031,744 | ---- | C] () -- C:\Windows\System32\lfvec13n.dll
[2010.08.14 21:16:35 | 000,118,784 | ---- | C] () -- C:\Windows\System32\lfkodak.dll
[2010.08.14 21:16:34 | 000,338,944 | ---- | C] () -- C:\Windows\System32\lffpx7.dll
[2010.07.25 20:40:46 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010.07.25 20:40:45 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2010.07.25 20:40:45 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2010.07.25 20:40:45 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2010.07.25 20:40:45 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2010.07.25 20:40:45 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2010.07.25 20:40:45 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2010.07.25 20:40:45 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2010.07.25 20:40:45 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2010.07.25 20:40:45 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2010.07.25 20:40:45 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2010.07.25 20:40:45 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2010.07.25 20:40:45 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2010.07.25 20:40:45 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2010.07.25 20:40:45 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.07.14 10:44:22 | 000,634,994 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2009.07.14 10:44:22 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2009.07.14 10:44:22 | 000,123,768 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2009.07.14 10:44:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 06:33:53 | 000,265,880 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 04:05:48 | 000,619,952 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 04:05:48 | 000,108,134 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\Windows\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
========== LOP Check ==========
[2011.02.20 18:33:24 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Atari
[2011.01.15 22:32:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Bandoo
[2011.01.22 14:41:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\CasualForge
[2010.08.06 14:00:33 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\DAEMON Tools Lite
[2011.03.19 16:59:37 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Epson
[2010.07.25 17:57:20 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ESET
[2011.03.29 21:59:38 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2010.07.26 08:40:57 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Leadertech
[2010.09.19 19:34:21 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\QuickStoresToolbar
[2010.08.27 11:04:15 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\uTorrent
[2011.01.05 18:12:18 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Windows Live Writer
[2011.01.23 06:08:37 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
PRC - [2010.12.18 00:09:56 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (ICQ Service)
SRV - [2011.02.28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.09.17 16:47:58 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.08.29 21:55:06 | 003,739,080 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.07.25 18:49:47 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2007.01.11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
========== Driver Services (SafeList) ==========
DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3)
DRV - [2010.10.23 14:39:15 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.11.16 09:06:50 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009.11.16 09:06:44 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.06.19 08:10:40 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2007.02.05 09:10:34 | 001,122,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\P17.sys -- (P17)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0 ... 4FCDB5FC3A}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data]
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6
FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.2.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: plugin2@gameplaylabs.com:2.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.18 00:09:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.28 18:40:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.07.25 17:56:26 | 000,000,000 | ---D | M]
[2011.01.15 22:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Extensions
[2011.03.30 16:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions
[2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
[2010.11.25 07:54:20 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\engine@conduit.com
[2011.01.15 22:32:07 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\firefox@bandoo.com
[2011.03.28 17:11:04 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\plugin2@gameplaylabs.com
[2010.12.05 00:24:25 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\quickstores@quickstores.de
[2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml
[2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml
[2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml
[2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml
[2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml
[2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml
[2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif
[2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src
[2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml
[2011.03.30 16:45:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.01.07 14:52:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.09.16 19:35:40 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
[2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
[2010.07.23 02:28:35 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.07.23 02:28:35 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010.07.23 02:28:35 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.07.23 02:28:35 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.07.23 02:28:35 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.01.08 11:14:14 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (GamePlayLabsBHO Class) - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin\BHO.dll (GamePlayLabs)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [EEventManager] c:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [egui] c:\program files\eset\eset smart security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - File not found
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.03.30 19:35:40 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2011.03.28 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin
[2011.03.28 14:45:53 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\Documents\ICQ
[2011.03.28 13:11:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
[2011.03.28 13:10:40 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2011.03.28 13:09:51 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2011.03.28 13:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2011.03.28 11:57:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.03.28 11:56:52 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.03.28 11:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.03.30 20:47:24 | 000,634,994 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2011.03.30 20:47:24 | 000,619,952 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.03.30 20:47:24 | 000,123,768 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2011.03.30 20:47:24 | 000,108,134 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.03.30 20:40:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.03.30 20:40:55 | 804,954,112 | -HS- | M] () -- C:\hiberfil.sys
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 19:35:40 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011.03.30 19:35:40 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2011.03.28 18:40:58 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.03.28 11:58:23 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011.03.28 11:58:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys
[2011.01.08 11:02:13 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.01.08 11:02:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.01.08 11:02:13 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011.01.08 11:02:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.01.08 11:02:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.12.03 20:48:37 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.11 01:14:21 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010.10.14 02:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.09.15 21:50:07 | 000,007,605 | ---- | C] () -- C:\Users\hnizdil\AppData\Local\Resmon.ResmonCfg
[2010.08.14 21:16:50 | 000,303,104 | ---- | C] () -- C:\Windows\System32\FXStudioDLL.dll
[2010.08.14 21:16:48 | 000,235,532 | ---- | C] () -- C:\Windows\System32\loadimage.dll
[2010.08.14 21:16:48 | 000,131,072 | ---- | C] () -- C:\Windows\System32\RapBoxDSP.dll
[2010.08.14 21:16:48 | 000,126,976 | ---- | C] () -- C:\Windows\System32\NewWaveAnzeige.dll
[2010.08.14 21:16:48 | 000,081,920 | ---- | C] () -- C:\Windows\System32\eJ_Tool.dll
[2010.08.14 21:16:48 | 000,045,056 | ---- | C] () -- C:\Windows\System32\fader.dll
[2010.08.14 21:16:46 | 000,307,200 | ---- | C] () -- C:\Windows\System32\fxstudio.dll
[2010.08.14 21:16:46 | 000,032,768 | ---- | C] () -- C:\Windows\System32\WndRgn.dll
[2010.08.14 21:16:45 | 000,075,976 | ---- | C] () -- C:\Windows\System32\Bassdec.dll
[2010.08.14 21:16:44 | 000,360,448 | ---- | C] () -- C:\Windows\System32\pxd32d5.dll
[2010.08.14 21:16:44 | 000,029,696 | ---- | C] () -- C:\Windows\System32\pthread.dll
[2010.08.14 21:16:43 | 000,147,456 | ---- | C] () -- C:\Windows\System32\lttls13n.dll
[2010.08.14 21:16:42 | 000,796,672 | ---- | C] () -- C:\Windows\System32\LTRTN13n.DLL
[2010.08.14 21:16:38 | 000,708,608 | ---- | C] () -- C:\Windows\System32\ltcry13n.dll
[2010.08.14 21:16:36 | 000,031,744 | ---- | C] () -- C:\Windows\System32\lfvec13n.dll
[2010.08.14 21:16:35 | 000,118,784 | ---- | C] () -- C:\Windows\System32\lfkodak.dll
[2010.08.14 21:16:34 | 000,338,944 | ---- | C] () -- C:\Windows\System32\lffpx7.dll
[2010.07.25 20:40:46 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010.07.25 20:40:45 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2010.07.25 20:40:45 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2010.07.25 20:40:45 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2010.07.25 20:40:45 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2010.07.25 20:40:45 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2010.07.25 20:40:45 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2010.07.25 20:40:45 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2010.07.25 20:40:45 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2010.07.25 20:40:45 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2010.07.25 20:40:45 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2010.07.25 20:40:45 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2010.07.25 20:40:45 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2010.07.25 20:40:45 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2010.07.25 20:40:45 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.07.14 10:44:22 | 000,634,994 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2009.07.14 10:44:22 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2009.07.14 10:44:22 | 000,123,768 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2009.07.14 10:44:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 06:33:53 | 000,265,880 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 04:05:48 | 000,619,952 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 04:05:48 | 000,108,134 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\Windows\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
========== LOP Check ==========
[2011.02.20 18:33:24 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Atari
[2011.01.15 22:32:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Bandoo
[2011.01.22 14:41:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\CasualForge
[2010.08.06 14:00:33 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\DAEMON Tools Lite
[2011.03.19 16:59:37 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Epson
[2010.07.25 17:57:20 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ESET
[2011.03.29 21:59:38 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2010.07.26 08:40:57 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Leadertech
[2010.09.19 19:34:21 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\QuickStoresToolbar
[2010.08.27 11:04:15 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\uTorrent
[2011.01.05 18:12:18 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Windows Live Writer
[2011.01.23 06:08:37 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
Re: Kotrola logu vyosek
Spustte znovu OTL
- Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
- Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
Kód: Vybrat vše
:otl SRV - File not found [Auto | Stopped] -- -- (ICQ Service) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0FDBD8EF-C132-4534-9AF8-F54FCDB5FC3A} IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data] IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832595&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Web Search" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" [2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} [2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} [2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml [2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml [2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml [2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml [2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml [2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml [2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif [2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src [2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml [2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml [2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml [2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found [1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ] [2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3) :reg [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Malwarebytes Anti-Malware (reboot)"=- "Malwarebytes' Anti-Malware (reboot)"=- "Adobe Reader Speed Launcher"=- "Adobe ARM"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=- :files %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp /s :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH]- Nasledne kliknete na Opravit
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
All processes killed
========== OTL ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "InnoGames EN Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "Web Search" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" removed from keyword.URL
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\searchplugin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\lib folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DeleteDir[0F8 not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Users\hnizdil\AppData\Local\GLF8B17.tmp deleted successfully.
C:\Windows\System32\drivers\ute3mjk3.sys moved successfully.
Service ute3mjk3 stopped successfully!
Service ute3mjk3 deleted successfully!
File C:\Windows\System32\drivers\ute3mjk3.sys not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\Installer\MSI5D9B.tmp moved successfully.
C:\Windows\temp\CabC013.tmp moved successfully.
C:\Windows\temp\CabD2F0.tmp moved successfully.
C:\Windows\temp\CabDCF2.tmp moved successfully.
C:\Windows\temp\NOD663B.tmp moved successfully.
C:\Windows\temp\NOD664C.tmp moved successfully.
C:\Windows\temp\NOD664D.tmp moved successfully.
C:\Windows\temp\NOD664E.tmp moved successfully.
C:\Windows\temp\NOD664F.tmp moved successfully.
C:\Windows\temp\NOD6660.tmp moved successfully.
C:\Windows\temp\NOD6661.tmp moved successfully.
C:\Windows\temp\NOD6662.tmp moved successfully.
C:\Windows\temp\NOD6663.tmp moved successfully.
C:\Windows\temp\NOD6664.tmp moved successfully.
C:\Windows\temp\NOD6665.tmp moved successfully.
C:\Windows\temp\NOD6666.tmp moved successfully.
C:\Windows\temp\NOD6667.tmp moved successfully.
C:\Windows\temp\NOD6668.tmp moved successfully.
C:\Windows\temp\NOD6669.tmp moved successfully.
C:\Windows\temp\NOD6679.tmp moved successfully.
C:\Windows\temp\NOD667A.tmp moved successfully.
C:\Windows\temp\NOD667B.tmp moved successfully.
C:\Windows\temp\NOD667C.tmp moved successfully.
C:\Windows\temp\NOD667D.tmp moved successfully.
C:\Windows\temp\NOD667E.tmp moved successfully.
C:\Windows\temp\NOD667F.tmp moved successfully.
C:\Windows\temp\NOD6680.tmp moved successfully.
C:\Windows\temp\NOD6681.tmp moved successfully.
C:\Windows\temp\NOD6682.tmp moved successfully.
C:\Windows\temp\NOD6683.tmp moved successfully.
C:\Windows\temp\NOD6684.tmp moved successfully.
C:\Windows\temp\NOD6695.tmp moved successfully.
C:\Windows\temp\NOD6696.tmp moved successfully.
C:\Windows\temp\NOD6697.tmp moved successfully.
C:\Windows\temp\NOD6698.tmp moved successfully.
C:\Windows\temp\NOD6699.tmp moved successfully.
C:\Windows\temp\NOD669A.tmp moved successfully.
C:\Windows\temp\NOD669B.tmp moved successfully.
C:\Windows\temp\NOD669C.tmp moved successfully.
C:\Windows\temp\NOD669D.tmp moved successfully.
C:\Windows\temp\NOD669E.tmp moved successfully.
C:\Windows\temp\NOD669F.tmp moved successfully.
C:\Windows\temp\NOD66A0.tmp moved successfully.
C:\Windows\temp\NOD66B0.tmp moved successfully.
C:\Windows\temp\NOD66B1.tmp moved successfully.
C:\Windows\temp\NOD66B2.tmp moved successfully.
C:\Windows\temp\NOD66B3.tmp moved successfully.
C:\Windows\temp\NOD66B4.tmp moved successfully.
C:\Windows\temp\NOD66B5.tmp moved successfully.
C:\Windows\temp\NOD66B6.tmp moved successfully.
C:\Windows\temp\NOD66B7.tmp moved successfully.
C:\Windows\temp\NOD66B8.tmp moved successfully.
C:\Windows\temp\NOD66B9.tmp moved successfully.
C:\Windows\temp\NOD66BA.tmp moved successfully.
C:\Windows\temp\NOD66BB.tmp moved successfully.
C:\Windows\temp\NOD66BC.tmp moved successfully.
C:\Windows\temp\NOD66BD.tmp moved successfully.
C:\Windows\temp\NOD66BE.tmp moved successfully.
C:\Windows\temp\NOD66BF.tmp moved successfully.
C:\Windows\temp\NOD66C0.tmp moved successfully.
C:\Windows\temp\NOD66D1.tmp moved successfully.
C:\Windows\temp\NOD66D2.tmp moved successfully.
C:\Windows\temp\NOD66D3.tmp moved successfully.
C:\Windows\temp\NOD66D4.tmp moved successfully.
C:\Windows\temp\NOD66D5.tmp moved successfully.
C:\Windows\temp\NOD66D6.tmp moved successfully.
C:\Windows\temp\NOD66D7.tmp moved successfully.
C:\Windows\temp\NOD66D8.tmp moved successfully.
C:\Windows\temp\NOD66D9.tmp moved successfully.
C:\Windows\temp\NOD66DA.tmp moved successfully.
C:\Windows\temp\NOD66DB.tmp moved successfully.
C:\Windows\temp\NOD66DC.tmp moved successfully.
C:\Windows\temp\NOD66DD.tmp moved successfully.
C:\Windows\temp\NOD66DE.tmp moved successfully.
C:\Windows\temp\NOD66EF.tmp moved successfully.
C:\Windows\temp\NOD66F0.tmp moved successfully.
C:\Windows\temp\NOD66F1.tmp moved successfully.
C:\Windows\temp\NOD66F2.tmp moved successfully.
C:\Windows\temp\NOD66F3.tmp moved successfully.
C:\Windows\temp\NOD66F4.tmp moved successfully.
C:\Windows\temp\NOD66F5.tmp moved successfully.
C:\Windows\temp\NOD66F6.tmp moved successfully.
C:\Windows\temp\NOD66F7.tmp moved successfully.
C:\Windows\temp\NOD66F8.tmp moved successfully.
C:\Windows\temp\NOD66F9.tmp moved successfully.
C:\Windows\temp\NOD66FA.tmp moved successfully.
C:\Windows\temp\NOD66FB.tmp moved successfully.
C:\Windows\temp\NOD670B.tmp moved successfully.
C:\Windows\temp\NOD670C.tmp moved successfully.
C:\Windows\temp\NOD670D.tmp moved successfully.
C:\Windows\temp\NOD670E.tmp moved successfully.
C:\Windows\temp\NOD670F.tmp moved successfully.
C:\Windows\temp\NOD6710.tmp moved successfully.
C:\Windows\temp\NOD6711.tmp moved successfully.
C:\Windows\temp\NOD6712.tmp moved successfully.
C:\Windows\temp\NOD6713.tmp moved successfully.
C:\Windows\temp\NOD6714.tmp moved successfully.
C:\Windows\temp\NOD6715.tmp moved successfully.
C:\Windows\temp\NOD6726.tmp moved successfully.
C:\Windows\temp\NOD6727.tmp moved successfully.
C:\Windows\temp\NOD6728.tmp moved successfully.
C:\Windows\temp\NOD6729.tmp moved successfully.
C:\Windows\temp\NOD672A.tmp moved successfully.
C:\Windows\temp\NOD672B.tmp moved successfully.
C:\Windows\temp\NOD672C.tmp moved successfully.
C:\Windows\temp\NOD672D.tmp moved successfully.
C:\Windows\temp\NOD672E.tmp moved successfully.
C:\Windows\temp\NOD672F.tmp moved successfully.
C:\Windows\temp\NOD6730.tmp moved successfully.
C:\Windows\temp\NOD6731.tmp moved successfully.
C:\Windows\temp\NOD6742.tmp moved successfully.
C:\Windows\temp\NOD6743.tmp moved successfully.
C:\Windows\temp\NOD6744.tmp moved successfully.
C:\Windows\temp\NOD6745.tmp moved successfully.
C:\Windows\temp\NOD6746.tmp moved successfully.
C:\Windows\temp\NOD6747.tmp moved successfully.
C:\Windows\temp\NOD6748.tmp moved successfully.
C:\Windows\temp\NOD6749.tmp moved successfully.
C:\Windows\temp\NOD674A.tmp moved successfully.
C:\Windows\temp\NOD674B.tmp moved successfully.
C:\Windows\temp\NOD674C.tmp moved successfully.
C:\Windows\temp\NOD674D.tmp moved successfully.
C:\Windows\temp\NOD675D.tmp moved successfully.
C:\Windows\temp\NOD675E.tmp moved successfully.
C:\Windows\temp\NOD675F.tmp moved successfully.
C:\Windows\temp\NOD6760.tmp moved successfully.
C:\Windows\temp\NOD6761.tmp moved successfully.
C:\Windows\temp\NOD6762.tmp moved successfully.
C:\Windows\temp\NOD6763.tmp moved successfully.
C:\Windows\temp\NOD6764.tmp moved successfully.
C:\Windows\temp\NOD6765.tmp moved successfully.
C:\Windows\temp\NOD6766.tmp moved successfully.
C:\Windows\temp\NOD6767.tmp moved successfully.
C:\Windows\temp\NOD6768.tmp moved successfully.
C:\Windows\temp\NOD6769.tmp moved successfully.
C:\Windows\temp\NOD676A.tmp moved successfully.
C:\Windows\temp\NOD677B.tmp moved successfully.
C:\Windows\temp\NOD677C.tmp moved successfully.
C:\Windows\temp\NOD677D.tmp moved successfully.
C:\Windows\temp\NOD677E.tmp moved successfully.
C:\Windows\temp\NOD677F.tmp moved successfully.
C:\Windows\temp\NOD6780.tmp moved successfully.
C:\Windows\temp\NOD6781.tmp moved successfully.
C:\Windows\temp\NOD6782.tmp moved successfully.
C:\Windows\temp\NOD943D.tmp moved successfully.
C:\Windows\temp\NOD944E.tmp moved successfully.
C:\Windows\temp\NOD944F.tmp moved successfully.
C:\Windows\temp\NODB392.tmp moved successfully.
C:\Windows\temp\TarC014.tmp moved successfully.
C:\Windows\temp\TarD2F1.tmp moved successfully.
C:\Windows\temp\TarDCF3.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: hnizdil
->Temp folder emptied: 57600760 bytes
->Temporary Internet Files folder emptied: 5432936 bytes
->FireFox cache emptied: 113176931 bytes
->Flash cache emptied: 1892 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 168,00 mb
[EMPTYFLASH]
User: All Users
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: hnizdil
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.22.3 log created on 03312011_142425
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
========== OTL ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "InnoGames EN Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "Web Search" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" removed from keyword.URL
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\searchplugin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\lib folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DeleteDir[0F8 not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Users\hnizdil\AppData\Local\GLF8B17.tmp deleted successfully.
C:\Windows\System32\drivers\ute3mjk3.sys moved successfully.
Service ute3mjk3 stopped successfully!
Service ute3mjk3 deleted successfully!
File C:\Windows\System32\drivers\ute3mjk3.sys not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\Installer\MSI5D9B.tmp moved successfully.
C:\Windows\temp\CabC013.tmp moved successfully.
C:\Windows\temp\CabD2F0.tmp moved successfully.
C:\Windows\temp\CabDCF2.tmp moved successfully.
C:\Windows\temp\NOD663B.tmp moved successfully.
C:\Windows\temp\NOD664C.tmp moved successfully.
C:\Windows\temp\NOD664D.tmp moved successfully.
C:\Windows\temp\NOD664E.tmp moved successfully.
C:\Windows\temp\NOD664F.tmp moved successfully.
C:\Windows\temp\NOD6660.tmp moved successfully.
C:\Windows\temp\NOD6661.tmp moved successfully.
C:\Windows\temp\NOD6662.tmp moved successfully.
C:\Windows\temp\NOD6663.tmp moved successfully.
C:\Windows\temp\NOD6664.tmp moved successfully.
C:\Windows\temp\NOD6665.tmp moved successfully.
C:\Windows\temp\NOD6666.tmp moved successfully.
C:\Windows\temp\NOD6667.tmp moved successfully.
C:\Windows\temp\NOD6668.tmp moved successfully.
C:\Windows\temp\NOD6669.tmp moved successfully.
C:\Windows\temp\NOD6679.tmp moved successfully.
C:\Windows\temp\NOD667A.tmp moved successfully.
C:\Windows\temp\NOD667B.tmp moved successfully.
C:\Windows\temp\NOD667C.tmp moved successfully.
C:\Windows\temp\NOD667D.tmp moved successfully.
C:\Windows\temp\NOD667E.tmp moved successfully.
C:\Windows\temp\NOD667F.tmp moved successfully.
C:\Windows\temp\NOD6680.tmp moved successfully.
C:\Windows\temp\NOD6681.tmp moved successfully.
C:\Windows\temp\NOD6682.tmp moved successfully.
C:\Windows\temp\NOD6683.tmp moved successfully.
C:\Windows\temp\NOD6684.tmp moved successfully.
C:\Windows\temp\NOD6695.tmp moved successfully.
C:\Windows\temp\NOD6696.tmp moved successfully.
C:\Windows\temp\NOD6697.tmp moved successfully.
C:\Windows\temp\NOD6698.tmp moved successfully.
C:\Windows\temp\NOD6699.tmp moved successfully.
C:\Windows\temp\NOD669A.tmp moved successfully.
C:\Windows\temp\NOD669B.tmp moved successfully.
C:\Windows\temp\NOD669C.tmp moved successfully.
C:\Windows\temp\NOD669D.tmp moved successfully.
C:\Windows\temp\NOD669E.tmp moved successfully.
C:\Windows\temp\NOD669F.tmp moved successfully.
C:\Windows\temp\NOD66A0.tmp moved successfully.
C:\Windows\temp\NOD66B0.tmp moved successfully.
C:\Windows\temp\NOD66B1.tmp moved successfully.
C:\Windows\temp\NOD66B2.tmp moved successfully.
C:\Windows\temp\NOD66B3.tmp moved successfully.
C:\Windows\temp\NOD66B4.tmp moved successfully.
C:\Windows\temp\NOD66B5.tmp moved successfully.
C:\Windows\temp\NOD66B6.tmp moved successfully.
C:\Windows\temp\NOD66B7.tmp moved successfully.
C:\Windows\temp\NOD66B8.tmp moved successfully.
C:\Windows\temp\NOD66B9.tmp moved successfully.
C:\Windows\temp\NOD66BA.tmp moved successfully.
C:\Windows\temp\NOD66BB.tmp moved successfully.
C:\Windows\temp\NOD66BC.tmp moved successfully.
C:\Windows\temp\NOD66BD.tmp moved successfully.
C:\Windows\temp\NOD66BE.tmp moved successfully.
C:\Windows\temp\NOD66BF.tmp moved successfully.
C:\Windows\temp\NOD66C0.tmp moved successfully.
C:\Windows\temp\NOD66D1.tmp moved successfully.
C:\Windows\temp\NOD66D2.tmp moved successfully.
C:\Windows\temp\NOD66D3.tmp moved successfully.
C:\Windows\temp\NOD66D4.tmp moved successfully.
C:\Windows\temp\NOD66D5.tmp moved successfully.
C:\Windows\temp\NOD66D6.tmp moved successfully.
C:\Windows\temp\NOD66D7.tmp moved successfully.
C:\Windows\temp\NOD66D8.tmp moved successfully.
C:\Windows\temp\NOD66D9.tmp moved successfully.
C:\Windows\temp\NOD66DA.tmp moved successfully.
C:\Windows\temp\NOD66DB.tmp moved successfully.
C:\Windows\temp\NOD66DC.tmp moved successfully.
C:\Windows\temp\NOD66DD.tmp moved successfully.
C:\Windows\temp\NOD66DE.tmp moved successfully.
C:\Windows\temp\NOD66EF.tmp moved successfully.
C:\Windows\temp\NOD66F0.tmp moved successfully.
C:\Windows\temp\NOD66F1.tmp moved successfully.
C:\Windows\temp\NOD66F2.tmp moved successfully.
C:\Windows\temp\NOD66F3.tmp moved successfully.
C:\Windows\temp\NOD66F4.tmp moved successfully.
C:\Windows\temp\NOD66F5.tmp moved successfully.
C:\Windows\temp\NOD66F6.tmp moved successfully.
C:\Windows\temp\NOD66F7.tmp moved successfully.
C:\Windows\temp\NOD66F8.tmp moved successfully.
C:\Windows\temp\NOD66F9.tmp moved successfully.
C:\Windows\temp\NOD66FA.tmp moved successfully.
C:\Windows\temp\NOD66FB.tmp moved successfully.
C:\Windows\temp\NOD670B.tmp moved successfully.
C:\Windows\temp\NOD670C.tmp moved successfully.
C:\Windows\temp\NOD670D.tmp moved successfully.
C:\Windows\temp\NOD670E.tmp moved successfully.
C:\Windows\temp\NOD670F.tmp moved successfully.
C:\Windows\temp\NOD6710.tmp moved successfully.
C:\Windows\temp\NOD6711.tmp moved successfully.
C:\Windows\temp\NOD6712.tmp moved successfully.
C:\Windows\temp\NOD6713.tmp moved successfully.
C:\Windows\temp\NOD6714.tmp moved successfully.
C:\Windows\temp\NOD6715.tmp moved successfully.
C:\Windows\temp\NOD6726.tmp moved successfully.
C:\Windows\temp\NOD6727.tmp moved successfully.
C:\Windows\temp\NOD6728.tmp moved successfully.
C:\Windows\temp\NOD6729.tmp moved successfully.
C:\Windows\temp\NOD672A.tmp moved successfully.
C:\Windows\temp\NOD672B.tmp moved successfully.
C:\Windows\temp\NOD672C.tmp moved successfully.
C:\Windows\temp\NOD672D.tmp moved successfully.
C:\Windows\temp\NOD672E.tmp moved successfully.
C:\Windows\temp\NOD672F.tmp moved successfully.
C:\Windows\temp\NOD6730.tmp moved successfully.
C:\Windows\temp\NOD6731.tmp moved successfully.
C:\Windows\temp\NOD6742.tmp moved successfully.
C:\Windows\temp\NOD6743.tmp moved successfully.
C:\Windows\temp\NOD6744.tmp moved successfully.
C:\Windows\temp\NOD6745.tmp moved successfully.
C:\Windows\temp\NOD6746.tmp moved successfully.
C:\Windows\temp\NOD6747.tmp moved successfully.
C:\Windows\temp\NOD6748.tmp moved successfully.
C:\Windows\temp\NOD6749.tmp moved successfully.
C:\Windows\temp\NOD674A.tmp moved successfully.
C:\Windows\temp\NOD674B.tmp moved successfully.
C:\Windows\temp\NOD674C.tmp moved successfully.
C:\Windows\temp\NOD674D.tmp moved successfully.
C:\Windows\temp\NOD675D.tmp moved successfully.
C:\Windows\temp\NOD675E.tmp moved successfully.
C:\Windows\temp\NOD675F.tmp moved successfully.
C:\Windows\temp\NOD6760.tmp moved successfully.
C:\Windows\temp\NOD6761.tmp moved successfully.
C:\Windows\temp\NOD6762.tmp moved successfully.
C:\Windows\temp\NOD6763.tmp moved successfully.
C:\Windows\temp\NOD6764.tmp moved successfully.
C:\Windows\temp\NOD6765.tmp moved successfully.
C:\Windows\temp\NOD6766.tmp moved successfully.
C:\Windows\temp\NOD6767.tmp moved successfully.
C:\Windows\temp\NOD6768.tmp moved successfully.
C:\Windows\temp\NOD6769.tmp moved successfully.
C:\Windows\temp\NOD676A.tmp moved successfully.
C:\Windows\temp\NOD677B.tmp moved successfully.
C:\Windows\temp\NOD677C.tmp moved successfully.
C:\Windows\temp\NOD677D.tmp moved successfully.
C:\Windows\temp\NOD677E.tmp moved successfully.
C:\Windows\temp\NOD677F.tmp moved successfully.
C:\Windows\temp\NOD6780.tmp moved successfully.
C:\Windows\temp\NOD6781.tmp moved successfully.
C:\Windows\temp\NOD6782.tmp moved successfully.
C:\Windows\temp\NOD943D.tmp moved successfully.
C:\Windows\temp\NOD944E.tmp moved successfully.
C:\Windows\temp\NOD944F.tmp moved successfully.
C:\Windows\temp\NODB392.tmp moved successfully.
C:\Windows\temp\TarC014.tmp moved successfully.
C:\Windows\temp\TarD2F1.tmp moved successfully.
C:\Windows\temp\TarDCF3.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: hnizdil
->Temp folder emptied: 57600760 bytes
->Temporary Internet Files folder emptied: 5432936 bytes
->FireFox cache emptied: 113176931 bytes
->Flash cache emptied: 1892 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 168,00 mb
[EMPTYFLASH]
User: All Users
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: hnizdil
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.22.3 log created on 03312011_142425
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
Re: Kotrola logu vyosek
Jak se chova PC 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Už se mi zdá o něco rychlejší,akorád mi nejde zázálohovat disk furt mi to píše málo místa na disku,i když tam místa mám hodně .
Re: Kotrola logu vyosek
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner (viz muj podpis)Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Doporucuji provest defragmentaci disku
- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace
Pres co provadite tu zalohu "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Přes disk D: a má se zálohovat bitová kopie systému a všichni uživatelé.
Re: Kotrola logu vyosek
Myslel jsem pres jaky programek 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
přes Acronis True Image Home 2010 .
Re: Kotrola logu vyosek
Zkuste kontaktovat jejich tech. podporu proc Vam to takto "blbne" - oni budou nejlepe vedet co s tim...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Dobrý den,na obou počítačích po testu MBAM mám 9 infekcí zde je předkládám logi z obou PC.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Verze databáze: 6325
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.4.2011 19:16:01
mbam-log-2011-04-10 (19-15-55).txt
Typ kontroly: Rychlý test
Testované objekty: 158800
Uplynulý čas: 7 minut, 29 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\documents and settings\tomáš hnízdil\local settings\data aplikací\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
Po posouzení napište jestli mohu tyto infekce smáznout díky
.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Verze databáze: 6325
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.4.2011 19:16:01
mbam-log-2011-04-10 (19-15-55).txt
Typ kontroly: Rychlý test
Testované objekty: 158800
Uplynulý čas: 7 minut, 29 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\documents and settings\tomáš hnízdil\local settings\data aplikací\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
Po posouzení napište jestli mohu tyto infekce smáznout díky
.Re: Kotrola logu vyosek
Druhý log :
Typ kontroly: Rychlý test
Testované objekty: 154479
Uplynulý čas: 17 minut, 10 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\Users\hnizdil\AppData\Local\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
c:\Users\hnizdil\downloads\mediapluginsetup.exe (Spyware.GamePlayLabs) -> No action taken.
Typ kontroly: Rychlý test
Testované objekty: 154479
Uplynulý čas: 17 minut, 10 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\Users\hnizdil\AppData\Local\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
c:\Users\hnizdil\downloads\mediapluginsetup.exe (Spyware.GamePlayLabs) -> No action taken.
Přispějete na provoz fóra?