Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kotrola logu vyosek
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Kotrola logu vyosek
V půlce scanu se to zastaví a napíšemi to:Manual file scan-geting folder structure ...... .
Re: Kotrola logu vyosek
prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti) Opakujte sken, pokud se sekne, tak do spodniho okenka nic nevkladejte"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Zde je log z Exstras :
OTL Extras logfile created on: 30.3.2011 20:50:35 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\hnizdil\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{14B7A9EF-BB68-4529-9190-8CE164E0F548}" = ESET Smart Security
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A30D5C0-BD4A-4E65-AADF-20A457DE6D38}" = Windows Live Family Safety
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Povolání snů
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.3 - Czech
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX110_TX110 User’s Guide" = Epson Stylus SX110_TX110 Manual
"EPSON SX110 Series" = EPSON SX110 Series Printer Uninstall
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"HijackThis" = HijackThis 2.0.2
"InstallShield_{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"OpenAL" = OpenAL
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 20.3.2011 14:02:25 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 23.3.2011 4:54:34 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 23.3.2011 4:54:35 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 24.3.2011 10:31:49 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 24.3.2011 10:31:50 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 26.3.2011 3:50:21 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 27.3.2011 13:05:02 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 29.3.2011 11:12:22 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
[ System Events ]
Error - 1.2.2011 6:29:35 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393241
Description = Stínové kopie svazku C: byly smazány, protože úložiště stínové kopie
nebylo možné včas zvětšit. Zvažte možnost snížení vstupně-výstupního zatížení systému
nebo zvolte svazek úložiště stínové kopie, pro který není vytvářena stínová kopie.
Error - 1.2.2011 6:30:09 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 1.2.2011 8:34:50 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 9:49:58 | Computer Name = hnizdil-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:47:49, ?1.?2.?2011) bylo neočekávané.
Error - 3.2.2011 5:16:47 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 3.2.2011 9:48:15 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.
< End of report >
OTL Extras logfile created on: 30.3.2011 20:50:35 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\hnizdil\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
"{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{14B7A9EF-BB68-4529-9190-8CE164E0F548}" = ESET Smart Security
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A30D5C0-BD4A-4E65-AADF-20A457DE6D38}" = Windows Live Family Safety
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Povolání snů
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.3 - Czech
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX110_TX110 User’s Guide" = Epson Stylus SX110_TX110 Manual
"EPSON SX110 Series" = EPSON SX110 Series Printer Uninstall
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"HijackThis" = HijackThis 2.0.2
"InstallShield_{529DF2F0-3BA0-49DA-B3E1-3C8DE8685BEF}" = CodeRED - The Martian Chronicles
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"MozBackup" = MozBackup 1.4.10
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"OpenAL" = OpenAL
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 20.3.2011 14:02:25 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 23.3.2011 4:54:34 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 23.3.2011 4:54:35 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 24.3.2011 10:31:49 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 24.3.2011 10:31:50 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842811
Description = Generování kontextu aktivace pro c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll se nezdařilo. Chyba v souboru
manifestu nebo zásady c:\program files\microsoft\search enhancement pack\search
box extension\SrchBxEx.dll na řádku 2. Neplatná syntaxe XML.
Error - 25.3.2011 6:25:05 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 26.3.2011 3:50:21 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
Error - 27.3.2011 13:05:02 | Computer Name = hnizdil-PC | Source = Windows Backup | ID = 4104
Description =
Error - 29.3.2011 11:12:22 | Computer Name = hnizdil-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro c:\program files\mozbackup\dll\DelZip179.dll
se nezdařilo. Chyba v souboru manifestu nebo zásady c:\program files\mozbackup\dll\DelZip179.dll
na řádku 8. Hodnota * atributu language v prvku assemblyIdentity je neplatná.
[ System Events ]
Error - 1.2.2011 6:29:35 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393241
Description = Stínové kopie svazku C: byly smazány, protože úložiště stínové kopie
nebylo možné včas zvětšit. Zvažte možnost snížení vstupně-výstupního zatížení systému
nebo zvolte svazek úložiště stínové kopie, pro který není vytvářena stínová kopie.
Error - 1.2.2011 6:30:09 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 1.2.2011 8:34:50 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:51 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 8:34:52 | Computer Name = hnizdil-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.
Error - 1.2.2011 9:49:58 | Computer Name = hnizdil-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:47:49, ?1.?2.?2011) bylo neočekávané.
Error - 3.2.2011 5:16:47 | Computer Name = hnizdil-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 3.2.2011 9:48:15 | Computer Name = hnizdil-PC | Source = volsnap | ID = 393252
Description = Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného
uživatelem se nepodařilo zvětšit úložiště stínové kopie.
< End of report >
Re: Kotrola logu vyosek
zde je log z OTL.txt.
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
PRC - [2010.12.18 00:09:56 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (ICQ Service)
SRV - [2011.02.28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.09.17 16:47:58 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.08.29 21:55:06 | 003,739,080 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.07.25 18:49:47 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2007.01.11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
========== Driver Services (SafeList) ==========
DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3)
DRV - [2010.10.23 14:39:15 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.11.16 09:06:50 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009.11.16 09:06:44 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.06.19 08:10:40 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2007.02.05 09:10:34 | 001,122,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\P17.sys -- (P17)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0 ... 4FCDB5FC3A}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data]
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6
FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.2.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: plugin2@gameplaylabs.com:2.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.18 00:09:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.28 18:40:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.07.25 17:56:26 | 000,000,000 | ---D | M]
[2011.01.15 22:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Extensions
[2011.03.30 16:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions
[2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
[2010.11.25 07:54:20 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\engine@conduit.com
[2011.01.15 22:32:07 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\firefox@bandoo.com
[2011.03.28 17:11:04 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\plugin2@gameplaylabs.com
[2010.12.05 00:24:25 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\quickstores@quickstores.de
[2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml
[2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml
[2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml
[2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml
[2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml
[2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml
[2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif
[2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src
[2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml
[2011.03.30 16:45:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.01.07 14:52:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.09.16 19:35:40 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
[2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
[2010.07.23 02:28:35 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.07.23 02:28:35 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010.07.23 02:28:35 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.07.23 02:28:35 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.07.23 02:28:35 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.01.08 11:14:14 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (GamePlayLabsBHO Class) - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin\BHO.dll (GamePlayLabs)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [EEventManager] c:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [egui] c:\program files\eset\eset smart security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - File not found
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.03.30 19:35:40 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2011.03.28 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin
[2011.03.28 14:45:53 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\Documents\ICQ
[2011.03.28 13:11:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
[2011.03.28 13:10:40 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2011.03.28 13:09:51 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2011.03.28 13:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2011.03.28 11:57:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.03.28 11:56:52 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.03.28 11:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.03.30 20:47:24 | 000,634,994 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2011.03.30 20:47:24 | 000,619,952 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.03.30 20:47:24 | 000,123,768 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2011.03.30 20:47:24 | 000,108,134 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.03.30 20:40:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.03.30 20:40:55 | 804,954,112 | -HS- | M] () -- C:\hiberfil.sys
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 19:35:40 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011.03.30 19:35:40 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2011.03.28 18:40:58 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.03.28 11:58:23 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011.03.28 11:58:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys
[2011.01.08 11:02:13 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.01.08 11:02:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.01.08 11:02:13 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011.01.08 11:02:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.01.08 11:02:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.12.03 20:48:37 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.11 01:14:21 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010.10.14 02:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.09.15 21:50:07 | 000,007,605 | ---- | C] () -- C:\Users\hnizdil\AppData\Local\Resmon.ResmonCfg
[2010.08.14 21:16:50 | 000,303,104 | ---- | C] () -- C:\Windows\System32\FXStudioDLL.dll
[2010.08.14 21:16:48 | 000,235,532 | ---- | C] () -- C:\Windows\System32\loadimage.dll
[2010.08.14 21:16:48 | 000,131,072 | ---- | C] () -- C:\Windows\System32\RapBoxDSP.dll
[2010.08.14 21:16:48 | 000,126,976 | ---- | C] () -- C:\Windows\System32\NewWaveAnzeige.dll
[2010.08.14 21:16:48 | 000,081,920 | ---- | C] () -- C:\Windows\System32\eJ_Tool.dll
[2010.08.14 21:16:48 | 000,045,056 | ---- | C] () -- C:\Windows\System32\fader.dll
[2010.08.14 21:16:46 | 000,307,200 | ---- | C] () -- C:\Windows\System32\fxstudio.dll
[2010.08.14 21:16:46 | 000,032,768 | ---- | C] () -- C:\Windows\System32\WndRgn.dll
[2010.08.14 21:16:45 | 000,075,976 | ---- | C] () -- C:\Windows\System32\Bassdec.dll
[2010.08.14 21:16:44 | 000,360,448 | ---- | C] () -- C:\Windows\System32\pxd32d5.dll
[2010.08.14 21:16:44 | 000,029,696 | ---- | C] () -- C:\Windows\System32\pthread.dll
[2010.08.14 21:16:43 | 000,147,456 | ---- | C] () -- C:\Windows\System32\lttls13n.dll
[2010.08.14 21:16:42 | 000,796,672 | ---- | C] () -- C:\Windows\System32\LTRTN13n.DLL
[2010.08.14 21:16:38 | 000,708,608 | ---- | C] () -- C:\Windows\System32\ltcry13n.dll
[2010.08.14 21:16:36 | 000,031,744 | ---- | C] () -- C:\Windows\System32\lfvec13n.dll
[2010.08.14 21:16:35 | 000,118,784 | ---- | C] () -- C:\Windows\System32\lfkodak.dll
[2010.08.14 21:16:34 | 000,338,944 | ---- | C] () -- C:\Windows\System32\lffpx7.dll
[2010.07.25 20:40:46 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010.07.25 20:40:45 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2010.07.25 20:40:45 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2010.07.25 20:40:45 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2010.07.25 20:40:45 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2010.07.25 20:40:45 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2010.07.25 20:40:45 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2010.07.25 20:40:45 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2010.07.25 20:40:45 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2010.07.25 20:40:45 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2010.07.25 20:40:45 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2010.07.25 20:40:45 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2010.07.25 20:40:45 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2010.07.25 20:40:45 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2010.07.25 20:40:45 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.07.14 10:44:22 | 000,634,994 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2009.07.14 10:44:22 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2009.07.14 10:44:22 | 000,123,768 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2009.07.14 10:44:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 06:33:53 | 000,265,880 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 04:05:48 | 000,619,952 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 04:05:48 | 000,108,134 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\Windows\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
========== LOP Check ==========
[2011.02.20 18:33:24 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Atari
[2011.01.15 22:32:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Bandoo
[2011.01.22 14:41:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\CasualForge
[2010.08.06 14:00:33 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\DAEMON Tools Lite
[2011.03.19 16:59:37 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Epson
[2010.07.25 17:57:20 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ESET
[2011.03.29 21:59:38 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2010.07.26 08:40:57 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Leadertech
[2010.09.19 19:34:21 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\QuickStoresToolbar
[2010.08.27 11:04:15 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\uTorrent
[2011.01.05 18:12:18 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Windows Live Writer
[2011.01.23 06:08:37 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1 024,00 Mb Total Physical Memory | 521,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 13,71 Gb Free Space | 14,03% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 51,09 Gb Free Space | 25,49% Space Free | Partition Type: NTFS
Computer Name: HNIZDIL-PC | User Name: hnizdil | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
PRC - [2010.12.18 00:09:56 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.03.29 12:40:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\hnizdil\Downloads\OTL.exe
MOD - [2010.08.21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (ICQ Service)
SRV - [2011.02.28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.09.17 16:47:58 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.08.29 21:55:06 | 003,739,080 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.07.25 18:49:47 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.11.16 09:12:54 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 000,735,960 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.17 23:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2007.01.11 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Stopped] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
========== Driver Services (SafeList) ==========
DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3)
DRV - [2010.10.23 14:39:15 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.11.16 09:06:50 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009.11.16 09:06:44 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2009.11.16 09:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.06.19 08:10:40 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009.04.29 15:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2007.02.05 09:10:34 | 001,122,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\P17.sys -- (P17)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0 ... 4FCDB5FC3A}
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data]
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6
FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.2.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: plugin2@gameplaylabs.com:2.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.18 00:09:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.03.28 18:40:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.07.25 17:56:26 | 000,000,000 | ---D | M]
[2011.01.15 22:32:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Extensions
[2011.03.30 16:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions
[2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
[2010.11.25 07:54:20 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\engine@conduit.com
[2011.01.15 22:32:07 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\firefox@bandoo.com
[2011.03.28 17:11:04 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\plugin2@gameplaylabs.com
[2010.12.05 00:24:25 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\quickstores@quickstores.de
[2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml
[2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml
[2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml
[2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml
[2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml
[2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml
[2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif
[2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src
[2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml
[2011.03.30 16:45:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.01.07 14:52:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.09.16 19:35:40 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
[2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
[2010.07.23 02:28:35 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.07.23 02:28:35 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010.07.23 02:28:35 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.07.23 02:28:35 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.07.23 02:28:35 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.01.08 11:14:14 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (GamePlayLabsBHO Class) - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin\BHO.dll (GamePlayLabs)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [EEventManager] c:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [egui] c:\program files\eset\eset smart security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - File not found
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.03.30 19:35:40 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2011.03.28 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Local\GamePlayLabs Plugin
[2011.03.28 14:45:53 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\Documents\ICQ
[2011.03.28 13:11:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
[2011.03.28 13:10:40 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2011.03.28 13:09:51 | 000,000,000 | ---D | C] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2011.03.28 13:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.4
[2011.03.28 11:57:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.03.28 11:56:52 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.03.28 11:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.03.30 20:47:24 | 000,634,994 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2011.03.30 20:47:24 | 000,619,952 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.03.30 20:47:24 | 000,123,768 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2011.03.30 20:47:24 | 000,108,134 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.03.30 20:40:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.03.30 20:40:55 | 804,954,112 | -HS- | M] () -- C:\hiberfil.sys
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 20:21:41 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.03.30 19:35:40 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011.03.30 19:35:40 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2011.03.28 18:40:58 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.03.28 11:58:23 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011.03.28 11:58:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys
[2011.01.08 11:02:13 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.01.08 11:02:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.01.08 11:02:13 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011.01.08 11:02:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.01.08 11:02:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.12.03 20:48:37 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.11 01:14:21 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010.10.14 02:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.09.15 21:50:07 | 000,007,605 | ---- | C] () -- C:\Users\hnizdil\AppData\Local\Resmon.ResmonCfg
[2010.08.14 21:16:50 | 000,303,104 | ---- | C] () -- C:\Windows\System32\FXStudioDLL.dll
[2010.08.14 21:16:48 | 000,235,532 | ---- | C] () -- C:\Windows\System32\loadimage.dll
[2010.08.14 21:16:48 | 000,131,072 | ---- | C] () -- C:\Windows\System32\RapBoxDSP.dll
[2010.08.14 21:16:48 | 000,126,976 | ---- | C] () -- C:\Windows\System32\NewWaveAnzeige.dll
[2010.08.14 21:16:48 | 000,081,920 | ---- | C] () -- C:\Windows\System32\eJ_Tool.dll
[2010.08.14 21:16:48 | 000,045,056 | ---- | C] () -- C:\Windows\System32\fader.dll
[2010.08.14 21:16:46 | 000,307,200 | ---- | C] () -- C:\Windows\System32\fxstudio.dll
[2010.08.14 21:16:46 | 000,032,768 | ---- | C] () -- C:\Windows\System32\WndRgn.dll
[2010.08.14 21:16:45 | 000,075,976 | ---- | C] () -- C:\Windows\System32\Bassdec.dll
[2010.08.14 21:16:44 | 000,360,448 | ---- | C] () -- C:\Windows\System32\pxd32d5.dll
[2010.08.14 21:16:44 | 000,029,696 | ---- | C] () -- C:\Windows\System32\pthread.dll
[2010.08.14 21:16:43 | 000,147,456 | ---- | C] () -- C:\Windows\System32\lttls13n.dll
[2010.08.14 21:16:42 | 000,796,672 | ---- | C] () -- C:\Windows\System32\LTRTN13n.DLL
[2010.08.14 21:16:38 | 000,708,608 | ---- | C] () -- C:\Windows\System32\ltcry13n.dll
[2010.08.14 21:16:36 | 000,031,744 | ---- | C] () -- C:\Windows\System32\lfvec13n.dll
[2010.08.14 21:16:35 | 000,118,784 | ---- | C] () -- C:\Windows\System32\lfkodak.dll
[2010.08.14 21:16:34 | 000,338,944 | ---- | C] () -- C:\Windows\System32\lffpx7.dll
[2010.07.25 20:40:46 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010.07.25 20:40:45 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2010.07.25 20:40:45 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2010.07.25 20:40:45 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2010.07.25 20:40:45 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2010.07.25 20:40:45 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2010.07.25 20:40:45 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2010.07.25 20:40:45 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2010.07.25 20:40:45 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2010.07.25 20:40:45 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2010.07.25 20:40:45 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2010.07.25 20:40:45 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2010.07.25 20:40:45 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2010.07.25 20:40:45 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2010.07.25 20:40:45 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2010.07.25 20:40:45 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2010.07.25 20:40:45 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.25 14:40:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.07.14 10:44:22 | 000,634,994 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2009.07.14 10:44:22 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2009.07.14 10:44:22 | 000,123,768 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2009.07.14 10:44:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 06:33:53 | 000,265,880 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 04:05:48 | 000,619,952 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 04:05:48 | 000,108,134 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\Windows\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
========== LOP Check ==========
[2011.02.20 18:33:24 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Atari
[2011.01.15 22:32:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Bandoo
[2011.01.22 14:41:45 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\CasualForge
[2010.08.06 14:00:33 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\DAEMON Tools Lite
[2011.03.19 16:59:37 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Epson
[2010.07.25 17:57:20 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ESET
[2011.03.29 21:59:38 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\ICQ
[2010.07.26 08:40:57 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Leadertech
[2010.09.19 19:34:21 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\QuickStoresToolbar
[2010.08.27 11:04:15 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\uTorrent
[2011.01.05 18:12:18 | 000,000,000 | ---D | M] -- C:\Users\hnizdil\AppData\Roaming\Windows Live Writer
[2011.01.23 06:08:37 | 000,032,574 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
Re: Kotrola logu vyosek
Spustte znovu OTL
- Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
- Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
Kód: Vybrat vše
:otl SRV - File not found [Auto | Stopped] -- -- (ICQ Service) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/facesmooch/{0FDBD8EF-C132-4534-9AF8-F54FCDB5FC3A} IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C D6 3D 02 13 2C CB 01 [binary data] IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames EN Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832595&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Web Search" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" [2010.09.12 18:27:43 | 000,000,000 | ---D | M] (FaceSmooch Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} [2011.03.28 13:10:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.11.25 07:54:18 | 000,000,000 | ---D | M] (InnoGames EN Community Toolbar) -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} [2010.09.12 18:28:01 | 000,002,333 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml [2010.11.02 19:10:31 | 000,001,832 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml [2010.11.23 18:16:46 | 000,000,927 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml [2010.10.23 14:39:43 | 000,002,055 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml [2011.03.25 12:06:52 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml [2010.10.23 14:43:17 | 000,000,950 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml [2011.03.28 13:10:41 | 000,000,168 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif [2011.03.28 13:10:41 | 000,000,618 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src [2010.05.12 17:40:48 | 000,001,042 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml [2010.08.12 13:12:24 | 000,005,529 | ---- | M] () -- C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml [2010.07.25 22:03:02 | 000,002,226 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml [2010.03.10 17:00:26 | 000,002,025 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml O2 - BHO: (no name) - {7FF99715-3016-4381-84CE-E4E4C9673020} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKU\S-1-5-21-886626186-4199107485-4221113157-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\RunOnce: [DeleteDir[0F8] WIPE_0F8.TMP] File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found [1 C:\Users\hnizdil\AppData\Local\*.tmp files -> C:\Users\hnizdil\AppData\Local\*.tmp -> ] [2011.02.05 00:02:55 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\ute3mjk3.sys DRV - [2011.02.05 00:02:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ute3mjk3.sys -- (ute3mjk3) :reg [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Malwarebytes Anti-Malware (reboot)"=- "Malwarebytes' Anti-Malware (reboot)"=- "Adobe Reader Speed Launcher"=- "Adobe ARM"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=- :files %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp /s :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH]- Nasledne kliknete na Opravit
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
All processes killed
========== OTL ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "InnoGames EN Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "Web Search" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" removed from keyword.URL
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\searchplugin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\lib folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DeleteDir[0F8 not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Users\hnizdil\AppData\Local\GLF8B17.tmp deleted successfully.
C:\Windows\System32\drivers\ute3mjk3.sys moved successfully.
Service ute3mjk3 stopped successfully!
Service ute3mjk3 deleted successfully!
File C:\Windows\System32\drivers\ute3mjk3.sys not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\Installer\MSI5D9B.tmp moved successfully.
C:\Windows\temp\CabC013.tmp moved successfully.
C:\Windows\temp\CabD2F0.tmp moved successfully.
C:\Windows\temp\CabDCF2.tmp moved successfully.
C:\Windows\temp\NOD663B.tmp moved successfully.
C:\Windows\temp\NOD664C.tmp moved successfully.
C:\Windows\temp\NOD664D.tmp moved successfully.
C:\Windows\temp\NOD664E.tmp moved successfully.
C:\Windows\temp\NOD664F.tmp moved successfully.
C:\Windows\temp\NOD6660.tmp moved successfully.
C:\Windows\temp\NOD6661.tmp moved successfully.
C:\Windows\temp\NOD6662.tmp moved successfully.
C:\Windows\temp\NOD6663.tmp moved successfully.
C:\Windows\temp\NOD6664.tmp moved successfully.
C:\Windows\temp\NOD6665.tmp moved successfully.
C:\Windows\temp\NOD6666.tmp moved successfully.
C:\Windows\temp\NOD6667.tmp moved successfully.
C:\Windows\temp\NOD6668.tmp moved successfully.
C:\Windows\temp\NOD6669.tmp moved successfully.
C:\Windows\temp\NOD6679.tmp moved successfully.
C:\Windows\temp\NOD667A.tmp moved successfully.
C:\Windows\temp\NOD667B.tmp moved successfully.
C:\Windows\temp\NOD667C.tmp moved successfully.
C:\Windows\temp\NOD667D.tmp moved successfully.
C:\Windows\temp\NOD667E.tmp moved successfully.
C:\Windows\temp\NOD667F.tmp moved successfully.
C:\Windows\temp\NOD6680.tmp moved successfully.
C:\Windows\temp\NOD6681.tmp moved successfully.
C:\Windows\temp\NOD6682.tmp moved successfully.
C:\Windows\temp\NOD6683.tmp moved successfully.
C:\Windows\temp\NOD6684.tmp moved successfully.
C:\Windows\temp\NOD6695.tmp moved successfully.
C:\Windows\temp\NOD6696.tmp moved successfully.
C:\Windows\temp\NOD6697.tmp moved successfully.
C:\Windows\temp\NOD6698.tmp moved successfully.
C:\Windows\temp\NOD6699.tmp moved successfully.
C:\Windows\temp\NOD669A.tmp moved successfully.
C:\Windows\temp\NOD669B.tmp moved successfully.
C:\Windows\temp\NOD669C.tmp moved successfully.
C:\Windows\temp\NOD669D.tmp moved successfully.
C:\Windows\temp\NOD669E.tmp moved successfully.
C:\Windows\temp\NOD669F.tmp moved successfully.
C:\Windows\temp\NOD66A0.tmp moved successfully.
C:\Windows\temp\NOD66B0.tmp moved successfully.
C:\Windows\temp\NOD66B1.tmp moved successfully.
C:\Windows\temp\NOD66B2.tmp moved successfully.
C:\Windows\temp\NOD66B3.tmp moved successfully.
C:\Windows\temp\NOD66B4.tmp moved successfully.
C:\Windows\temp\NOD66B5.tmp moved successfully.
C:\Windows\temp\NOD66B6.tmp moved successfully.
C:\Windows\temp\NOD66B7.tmp moved successfully.
C:\Windows\temp\NOD66B8.tmp moved successfully.
C:\Windows\temp\NOD66B9.tmp moved successfully.
C:\Windows\temp\NOD66BA.tmp moved successfully.
C:\Windows\temp\NOD66BB.tmp moved successfully.
C:\Windows\temp\NOD66BC.tmp moved successfully.
C:\Windows\temp\NOD66BD.tmp moved successfully.
C:\Windows\temp\NOD66BE.tmp moved successfully.
C:\Windows\temp\NOD66BF.tmp moved successfully.
C:\Windows\temp\NOD66C0.tmp moved successfully.
C:\Windows\temp\NOD66D1.tmp moved successfully.
C:\Windows\temp\NOD66D2.tmp moved successfully.
C:\Windows\temp\NOD66D3.tmp moved successfully.
C:\Windows\temp\NOD66D4.tmp moved successfully.
C:\Windows\temp\NOD66D5.tmp moved successfully.
C:\Windows\temp\NOD66D6.tmp moved successfully.
C:\Windows\temp\NOD66D7.tmp moved successfully.
C:\Windows\temp\NOD66D8.tmp moved successfully.
C:\Windows\temp\NOD66D9.tmp moved successfully.
C:\Windows\temp\NOD66DA.tmp moved successfully.
C:\Windows\temp\NOD66DB.tmp moved successfully.
C:\Windows\temp\NOD66DC.tmp moved successfully.
C:\Windows\temp\NOD66DD.tmp moved successfully.
C:\Windows\temp\NOD66DE.tmp moved successfully.
C:\Windows\temp\NOD66EF.tmp moved successfully.
C:\Windows\temp\NOD66F0.tmp moved successfully.
C:\Windows\temp\NOD66F1.tmp moved successfully.
C:\Windows\temp\NOD66F2.tmp moved successfully.
C:\Windows\temp\NOD66F3.tmp moved successfully.
C:\Windows\temp\NOD66F4.tmp moved successfully.
C:\Windows\temp\NOD66F5.tmp moved successfully.
C:\Windows\temp\NOD66F6.tmp moved successfully.
C:\Windows\temp\NOD66F7.tmp moved successfully.
C:\Windows\temp\NOD66F8.tmp moved successfully.
C:\Windows\temp\NOD66F9.tmp moved successfully.
C:\Windows\temp\NOD66FA.tmp moved successfully.
C:\Windows\temp\NOD66FB.tmp moved successfully.
C:\Windows\temp\NOD670B.tmp moved successfully.
C:\Windows\temp\NOD670C.tmp moved successfully.
C:\Windows\temp\NOD670D.tmp moved successfully.
C:\Windows\temp\NOD670E.tmp moved successfully.
C:\Windows\temp\NOD670F.tmp moved successfully.
C:\Windows\temp\NOD6710.tmp moved successfully.
C:\Windows\temp\NOD6711.tmp moved successfully.
C:\Windows\temp\NOD6712.tmp moved successfully.
C:\Windows\temp\NOD6713.tmp moved successfully.
C:\Windows\temp\NOD6714.tmp moved successfully.
C:\Windows\temp\NOD6715.tmp moved successfully.
C:\Windows\temp\NOD6726.tmp moved successfully.
C:\Windows\temp\NOD6727.tmp moved successfully.
C:\Windows\temp\NOD6728.tmp moved successfully.
C:\Windows\temp\NOD6729.tmp moved successfully.
C:\Windows\temp\NOD672A.tmp moved successfully.
C:\Windows\temp\NOD672B.tmp moved successfully.
C:\Windows\temp\NOD672C.tmp moved successfully.
C:\Windows\temp\NOD672D.tmp moved successfully.
C:\Windows\temp\NOD672E.tmp moved successfully.
C:\Windows\temp\NOD672F.tmp moved successfully.
C:\Windows\temp\NOD6730.tmp moved successfully.
C:\Windows\temp\NOD6731.tmp moved successfully.
C:\Windows\temp\NOD6742.tmp moved successfully.
C:\Windows\temp\NOD6743.tmp moved successfully.
C:\Windows\temp\NOD6744.tmp moved successfully.
C:\Windows\temp\NOD6745.tmp moved successfully.
C:\Windows\temp\NOD6746.tmp moved successfully.
C:\Windows\temp\NOD6747.tmp moved successfully.
C:\Windows\temp\NOD6748.tmp moved successfully.
C:\Windows\temp\NOD6749.tmp moved successfully.
C:\Windows\temp\NOD674A.tmp moved successfully.
C:\Windows\temp\NOD674B.tmp moved successfully.
C:\Windows\temp\NOD674C.tmp moved successfully.
C:\Windows\temp\NOD674D.tmp moved successfully.
C:\Windows\temp\NOD675D.tmp moved successfully.
C:\Windows\temp\NOD675E.tmp moved successfully.
C:\Windows\temp\NOD675F.tmp moved successfully.
C:\Windows\temp\NOD6760.tmp moved successfully.
C:\Windows\temp\NOD6761.tmp moved successfully.
C:\Windows\temp\NOD6762.tmp moved successfully.
C:\Windows\temp\NOD6763.tmp moved successfully.
C:\Windows\temp\NOD6764.tmp moved successfully.
C:\Windows\temp\NOD6765.tmp moved successfully.
C:\Windows\temp\NOD6766.tmp moved successfully.
C:\Windows\temp\NOD6767.tmp moved successfully.
C:\Windows\temp\NOD6768.tmp moved successfully.
C:\Windows\temp\NOD6769.tmp moved successfully.
C:\Windows\temp\NOD676A.tmp moved successfully.
C:\Windows\temp\NOD677B.tmp moved successfully.
C:\Windows\temp\NOD677C.tmp moved successfully.
C:\Windows\temp\NOD677D.tmp moved successfully.
C:\Windows\temp\NOD677E.tmp moved successfully.
C:\Windows\temp\NOD677F.tmp moved successfully.
C:\Windows\temp\NOD6780.tmp moved successfully.
C:\Windows\temp\NOD6781.tmp moved successfully.
C:\Windows\temp\NOD6782.tmp moved successfully.
C:\Windows\temp\NOD943D.tmp moved successfully.
C:\Windows\temp\NOD944E.tmp moved successfully.
C:\Windows\temp\NOD944F.tmp moved successfully.
C:\Windows\temp\NODB392.tmp moved successfully.
C:\Windows\temp\TarC014.tmp moved successfully.
C:\Windows\temp\TarD2F1.tmp moved successfully.
C:\Windows\temp\TarDCF3.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: hnizdil
->Temp folder emptied: 57600760 bytes
->Temporary Internet Files folder emptied: 5432936 bytes
->FireFox cache emptied: 113176931 bytes
->Flash cache emptied: 1892 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 168,00 mb
[EMPTYFLASH]
User: All Users
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: hnizdil
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.22.3 log created on 03312011_142425
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
========== OTL ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-886626186-4199107485-4221113157-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "InnoGames EN Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.as ... earchTerms}" removed from browser.search.defaulturl
Prefs.js: "Web Search" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" removed from keyword.URL
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content\somoto folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\searchplugin folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\META-INF folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\lib folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\defaults folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\components folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\chrome folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59} folder moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bigseekpro.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\bing.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\conduit.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.gif moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.src moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\hnizdil\AppData\Roaming\Mozilla\Firefox\Profiles\xv5v5qmv.default\searchplugins\SearchquWebSearch.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-21-886626186-4199107485-4221113157-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DeleteDir[0F8 not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Users\hnizdil\AppData\Local\GLF8B17.tmp deleted successfully.
C:\Windows\System32\drivers\ute3mjk3.sys moved successfully.
Service ute3mjk3 stopped successfully!
Service ute3mjk3 deleted successfully!
File C:\Windows\System32\drivers\ute3mjk3.sys not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware (reboot) deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\Installer\MSI5D9B.tmp moved successfully.
C:\Windows\temp\CabC013.tmp moved successfully.
C:\Windows\temp\CabD2F0.tmp moved successfully.
C:\Windows\temp\CabDCF2.tmp moved successfully.
C:\Windows\temp\NOD663B.tmp moved successfully.
C:\Windows\temp\NOD664C.tmp moved successfully.
C:\Windows\temp\NOD664D.tmp moved successfully.
C:\Windows\temp\NOD664E.tmp moved successfully.
C:\Windows\temp\NOD664F.tmp moved successfully.
C:\Windows\temp\NOD6660.tmp moved successfully.
C:\Windows\temp\NOD6661.tmp moved successfully.
C:\Windows\temp\NOD6662.tmp moved successfully.
C:\Windows\temp\NOD6663.tmp moved successfully.
C:\Windows\temp\NOD6664.tmp moved successfully.
C:\Windows\temp\NOD6665.tmp moved successfully.
C:\Windows\temp\NOD6666.tmp moved successfully.
C:\Windows\temp\NOD6667.tmp moved successfully.
C:\Windows\temp\NOD6668.tmp moved successfully.
C:\Windows\temp\NOD6669.tmp moved successfully.
C:\Windows\temp\NOD6679.tmp moved successfully.
C:\Windows\temp\NOD667A.tmp moved successfully.
C:\Windows\temp\NOD667B.tmp moved successfully.
C:\Windows\temp\NOD667C.tmp moved successfully.
C:\Windows\temp\NOD667D.tmp moved successfully.
C:\Windows\temp\NOD667E.tmp moved successfully.
C:\Windows\temp\NOD667F.tmp moved successfully.
C:\Windows\temp\NOD6680.tmp moved successfully.
C:\Windows\temp\NOD6681.tmp moved successfully.
C:\Windows\temp\NOD6682.tmp moved successfully.
C:\Windows\temp\NOD6683.tmp moved successfully.
C:\Windows\temp\NOD6684.tmp moved successfully.
C:\Windows\temp\NOD6695.tmp moved successfully.
C:\Windows\temp\NOD6696.tmp moved successfully.
C:\Windows\temp\NOD6697.tmp moved successfully.
C:\Windows\temp\NOD6698.tmp moved successfully.
C:\Windows\temp\NOD6699.tmp moved successfully.
C:\Windows\temp\NOD669A.tmp moved successfully.
C:\Windows\temp\NOD669B.tmp moved successfully.
C:\Windows\temp\NOD669C.tmp moved successfully.
C:\Windows\temp\NOD669D.tmp moved successfully.
C:\Windows\temp\NOD669E.tmp moved successfully.
C:\Windows\temp\NOD669F.tmp moved successfully.
C:\Windows\temp\NOD66A0.tmp moved successfully.
C:\Windows\temp\NOD66B0.tmp moved successfully.
C:\Windows\temp\NOD66B1.tmp moved successfully.
C:\Windows\temp\NOD66B2.tmp moved successfully.
C:\Windows\temp\NOD66B3.tmp moved successfully.
C:\Windows\temp\NOD66B4.tmp moved successfully.
C:\Windows\temp\NOD66B5.tmp moved successfully.
C:\Windows\temp\NOD66B6.tmp moved successfully.
C:\Windows\temp\NOD66B7.tmp moved successfully.
C:\Windows\temp\NOD66B8.tmp moved successfully.
C:\Windows\temp\NOD66B9.tmp moved successfully.
C:\Windows\temp\NOD66BA.tmp moved successfully.
C:\Windows\temp\NOD66BB.tmp moved successfully.
C:\Windows\temp\NOD66BC.tmp moved successfully.
C:\Windows\temp\NOD66BD.tmp moved successfully.
C:\Windows\temp\NOD66BE.tmp moved successfully.
C:\Windows\temp\NOD66BF.tmp moved successfully.
C:\Windows\temp\NOD66C0.tmp moved successfully.
C:\Windows\temp\NOD66D1.tmp moved successfully.
C:\Windows\temp\NOD66D2.tmp moved successfully.
C:\Windows\temp\NOD66D3.tmp moved successfully.
C:\Windows\temp\NOD66D4.tmp moved successfully.
C:\Windows\temp\NOD66D5.tmp moved successfully.
C:\Windows\temp\NOD66D6.tmp moved successfully.
C:\Windows\temp\NOD66D7.tmp moved successfully.
C:\Windows\temp\NOD66D8.tmp moved successfully.
C:\Windows\temp\NOD66D9.tmp moved successfully.
C:\Windows\temp\NOD66DA.tmp moved successfully.
C:\Windows\temp\NOD66DB.tmp moved successfully.
C:\Windows\temp\NOD66DC.tmp moved successfully.
C:\Windows\temp\NOD66DD.tmp moved successfully.
C:\Windows\temp\NOD66DE.tmp moved successfully.
C:\Windows\temp\NOD66EF.tmp moved successfully.
C:\Windows\temp\NOD66F0.tmp moved successfully.
C:\Windows\temp\NOD66F1.tmp moved successfully.
C:\Windows\temp\NOD66F2.tmp moved successfully.
C:\Windows\temp\NOD66F3.tmp moved successfully.
C:\Windows\temp\NOD66F4.tmp moved successfully.
C:\Windows\temp\NOD66F5.tmp moved successfully.
C:\Windows\temp\NOD66F6.tmp moved successfully.
C:\Windows\temp\NOD66F7.tmp moved successfully.
C:\Windows\temp\NOD66F8.tmp moved successfully.
C:\Windows\temp\NOD66F9.tmp moved successfully.
C:\Windows\temp\NOD66FA.tmp moved successfully.
C:\Windows\temp\NOD66FB.tmp moved successfully.
C:\Windows\temp\NOD670B.tmp moved successfully.
C:\Windows\temp\NOD670C.tmp moved successfully.
C:\Windows\temp\NOD670D.tmp moved successfully.
C:\Windows\temp\NOD670E.tmp moved successfully.
C:\Windows\temp\NOD670F.tmp moved successfully.
C:\Windows\temp\NOD6710.tmp moved successfully.
C:\Windows\temp\NOD6711.tmp moved successfully.
C:\Windows\temp\NOD6712.tmp moved successfully.
C:\Windows\temp\NOD6713.tmp moved successfully.
C:\Windows\temp\NOD6714.tmp moved successfully.
C:\Windows\temp\NOD6715.tmp moved successfully.
C:\Windows\temp\NOD6726.tmp moved successfully.
C:\Windows\temp\NOD6727.tmp moved successfully.
C:\Windows\temp\NOD6728.tmp moved successfully.
C:\Windows\temp\NOD6729.tmp moved successfully.
C:\Windows\temp\NOD672A.tmp moved successfully.
C:\Windows\temp\NOD672B.tmp moved successfully.
C:\Windows\temp\NOD672C.tmp moved successfully.
C:\Windows\temp\NOD672D.tmp moved successfully.
C:\Windows\temp\NOD672E.tmp moved successfully.
C:\Windows\temp\NOD672F.tmp moved successfully.
C:\Windows\temp\NOD6730.tmp moved successfully.
C:\Windows\temp\NOD6731.tmp moved successfully.
C:\Windows\temp\NOD6742.tmp moved successfully.
C:\Windows\temp\NOD6743.tmp moved successfully.
C:\Windows\temp\NOD6744.tmp moved successfully.
C:\Windows\temp\NOD6745.tmp moved successfully.
C:\Windows\temp\NOD6746.tmp moved successfully.
C:\Windows\temp\NOD6747.tmp moved successfully.
C:\Windows\temp\NOD6748.tmp moved successfully.
C:\Windows\temp\NOD6749.tmp moved successfully.
C:\Windows\temp\NOD674A.tmp moved successfully.
C:\Windows\temp\NOD674B.tmp moved successfully.
C:\Windows\temp\NOD674C.tmp moved successfully.
C:\Windows\temp\NOD674D.tmp moved successfully.
C:\Windows\temp\NOD675D.tmp moved successfully.
C:\Windows\temp\NOD675E.tmp moved successfully.
C:\Windows\temp\NOD675F.tmp moved successfully.
C:\Windows\temp\NOD6760.tmp moved successfully.
C:\Windows\temp\NOD6761.tmp moved successfully.
C:\Windows\temp\NOD6762.tmp moved successfully.
C:\Windows\temp\NOD6763.tmp moved successfully.
C:\Windows\temp\NOD6764.tmp moved successfully.
C:\Windows\temp\NOD6765.tmp moved successfully.
C:\Windows\temp\NOD6766.tmp moved successfully.
C:\Windows\temp\NOD6767.tmp moved successfully.
C:\Windows\temp\NOD6768.tmp moved successfully.
C:\Windows\temp\NOD6769.tmp moved successfully.
C:\Windows\temp\NOD676A.tmp moved successfully.
C:\Windows\temp\NOD677B.tmp moved successfully.
C:\Windows\temp\NOD677C.tmp moved successfully.
C:\Windows\temp\NOD677D.tmp moved successfully.
C:\Windows\temp\NOD677E.tmp moved successfully.
C:\Windows\temp\NOD677F.tmp moved successfully.
C:\Windows\temp\NOD6780.tmp moved successfully.
C:\Windows\temp\NOD6781.tmp moved successfully.
C:\Windows\temp\NOD6782.tmp moved successfully.
C:\Windows\temp\NOD943D.tmp moved successfully.
C:\Windows\temp\NOD944E.tmp moved successfully.
C:\Windows\temp\NOD944F.tmp moved successfully.
C:\Windows\temp\NODB392.tmp moved successfully.
C:\Windows\temp\TarC014.tmp moved successfully.
C:\Windows\temp\TarD2F1.tmp moved successfully.
C:\Windows\temp\TarDCF3.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: hnizdil
->Temp folder emptied: 57600760 bytes
->Temporary Internet Files folder emptied: 5432936 bytes
->FireFox cache emptied: 113176931 bytes
->Flash cache emptied: 1892 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 168,00 mb
[EMPTYFLASH]
User: All Users
User: Default
->Flash cache emptied: 0 bytes
User: Default User
->Flash cache emptied: 0 bytes
User: hnizdil
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.22.3 log created on 03312011_142425
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
Re: Kotrola logu vyosek
Jak se chova PC 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Už se mi zdá o něco rychlejší,akorád mi nejde zázálohovat disk furt mi to píše málo místa na disku,i když tam místa mám hodně .
Re: Kotrola logu vyosek
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner (viz muj podpis)Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Doporucuji provest defragmentaci disku
- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace
Pres co provadite tu zalohu "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Přes disk D: a má se zálohovat bitová kopie systému a všichni uživatelé.
Re: Kotrola logu vyosek
Myslel jsem pres jaky programek 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
přes Acronis True Image Home 2010 .
Re: Kotrola logu vyosek
Zkuste kontaktovat jejich tech. podporu proc Vam to takto "blbne" - oni budou nejlepe vedet co s tim...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Kotrola logu vyosek
Dobrý den,na obou počítačích po testu MBAM mám 9 infekcí zde je předkládám logi z obou PC.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Verze databáze: 6325
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.4.2011 19:16:01
mbam-log-2011-04-10 (19-15-55).txt
Typ kontroly: Rychlý test
Testované objekty: 158800
Uplynulý čas: 7 minut, 29 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\documents and settings\tomáš hnízdil\local settings\data aplikací\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
Po posouzení napište jestli mohu tyto infekce smáznout díky
.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Verze databáze: 6325
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.4.2011 19:16:01
mbam-log-2011-04-10 (19-15-55).txt
Typ kontroly: Rychlý test
Testované objekty: 158800
Uplynulý čas: 7 minut, 29 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\documents and settings\tomáš hnízdil\local settings\data aplikací\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
Po posouzení napište jestli mohu tyto infekce smáznout díky
.Re: Kotrola logu vyosek
Druhý log :
Typ kontroly: Rychlý test
Testované objekty: 154479
Uplynulý čas: 17 minut, 10 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\Users\hnizdil\AppData\Local\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
c:\Users\hnizdil\downloads\mediapluginsetup.exe (Spyware.GamePlayLabs) -> No action taken.
Typ kontroly: Rychlý test
Testované objekty: 154479
Uplynulý čas: 17 minut, 10 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 8
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> No action taken.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> No action taken.
Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\Users\hnizdil\AppData\Local\gameplaylabs plugin\BHO.dll (Spyware.GamePlayLabs) -> No action taken.
c:\Users\hnizdil\downloads\mediapluginsetup.exe (Spyware.GamePlayLabs) -> No action taken.
Přispějete na provoz fóra?