VIRY.CZ

tam kde máte stažený OTL, najdete log OTL.txt

Ach já hlupák,ano díky...

OTL logfile created on: 12.5.2010 8:25:16 - Run 2
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Documents and Settings\aa\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

766,00 Mb Total Physical Memory | 106,00 Mb Available Physical Memory | 14,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 20,49 Gb Total Space | 7,24 Gb Free Space | 35,35% Space Free | Partition Type: NTFS
Drive D: | 44,82 Gb Total Space | 9,40 Gb Free Space | 20,98% Space Free | Partition Type: NTFS
Drive E: | 46,47 Gb Total Space | 23,96 Gb Free Space | 51,56% Space Free | Partition Type: NTFS
Drive F: | 2,57 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 465,65 Gb Total Space | 271,19 Gb Free Space | 58,24% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DOMA-FK3WZJTN19
Current User Name: aa
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.05.11 20:25:00 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aa\Dokumenty\Stažené soubory\OTL.exe
PRC - [2010.05.06 22:59:42 | 002,815,192 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.04.05 20:33:52 | 000,319,792 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\aa\Plocha\utorrent.exe
PRC - [2010.04.01 19:59:58 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010.01.24 16:04:59 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
PRC - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
PRC - [2008.10.31 07:24:26 | 001,705,256 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010.05.11 20:25:00 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aa\Dokumenty\Stažené soubory\OTL.exe
MOD - [2010.01.24 16:05:48 | 000,102,400 | ---- | M] (RealPlayer) -- c:\Program Files\Real\RealPlayer\browserrecord\chrome\hook\rpchromebrowserrecordhelper.dll
MOD - [2010.01.24 16:05:03 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll
MOD - [2009.08.13 15:56:20 | 001,748,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
MOD - [2008.04.14 08:49:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2007.04.12 15:00:16 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcp71.dll


========== Win32 Services (SafeList) ==========

SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2009.09.23 17:37:30 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- (SPF4)
SRV - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe -- (SbPF.Launcher)
SRV - [2008.07.29 20:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)


========== Driver Services (SafeList) ==========

DRV - [2010.05.06 22:39:23 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010.05.06 22:39:00 | 000,164,048 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2010.05.06 22:34:27 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010.05.06 22:33:59 | 000,100,432 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010.05.06 22:33:47 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.05.06 22:33:29 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010.03.19 22:25:03 | 000,015,906 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kwflower.log -- (kwflower)
DRV - [2009.12.13 21:17:59 | 000,138,376 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2009.11.12 23:17:02 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.03.23 11:25:54 | 000,029,696 | ---- | M] (Kerio Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kvnet.sys -- (kvnet)
DRV - [2008.10.31 07:09:06 | 000,270,888 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SbFw.sys -- (SbFw)
DRV - [2008.09.15 07:56:34 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008.09.15 07:56:24 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.09.15 07:56:24 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.09.15 07:56:24 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.07.18 17:39:18 | 000,213,008 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2008.06.21 04:54:54 | 000,066,600 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbhips.sys -- (sbhips)
DRV - [2008.06.21 04:54:54 | 000,065,576 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV - [2008.06.20 13:08:27 | 000,225,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008.04.13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.04.13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2008.02.01 15:17:12 | 000,138,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2008.02.01 15:17:06 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2007.07.26 13:19:24 | 000,547,904 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2007.05.14 23:41:46 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2007.05.14 23:38:22 | 000,009,216 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2006.06.28 17:25:00 | 004,304,384 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.06.16 20:56:00 | 000,083,968 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006.05.25 11:19:00 | 000,074,752 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR)
DRV - [2006.05.25 11:19:00 | 000,061,056 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR)
DRV - [2006.05.25 11:19:00 | 000,040,064 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR)
DRV - [2006.05.10 12:22:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.04.27 10:46:50 | 001,540,096 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.03.03 13:52:00 | 000,192,672 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2006.01.17 10:21:52 | 000,328,061 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2006.01.17 10:19:46 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)
DRV - [2006.01.17 10:18:22 | 000,850,474 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2006.01.17 10:15:36 | 000,030,459 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004.10.15 13:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb)
DRV - [2004.02.04 08:19:32 | 000,024,177 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2004.02.04 08:19:16 | 000,057,372 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com;www.plimus.com;regnow.com;www.regnow.com

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: feedbar@efinke.com:4.1.2
FF - prefs.js..extensions.enabledItems: {89506680-e3f4-484c-a2c0-ed711d481eda}:0.9.5.1
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.as ... ource=2&q="
FF - prefs.js..network.proxy.no_proxies_on: "plimus.com,www.plimus.com,regnow.com,www.regnow.com,"
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 7070

FF - user.js..browser.search.openintab: false
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port:
FF - user.js..network.proxy.no_proxies_on: ""
FF - user.js..network.proxy.socks: "127.0.0.1"
FF - user.js..network.proxy.socks_port: 7070
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\Program Files\Internet Explorer\plugins [2010.04.20 16:30:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.04.28 22:42:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.04.28 22:42:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2008.09.05 16:29:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Extensions
[2010.05.11 14:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions
[2009.01.01 20:40:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
[2009.11.04 16:11:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.12.12 22:49:19 | 000,000,000 | ---D | M] (Blue Fox) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{241aae70-0022-11de-87af-0800200c9a66}
[2009.11.07 22:10:07 | 000,000,000 | ---D | M] (Firefox Showcase) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{89506680-e3f4-484c-a2c0-ed711d481eda}
[2009.12.12 22:46:50 | 000,000,000 | ---D | M] (AmbientFox) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{c8f71e5b-88f8-42a7-98bb-e4c506161de9}
[2009.05.24 20:06:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
[2009.10.30 11:08:35 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010.03.07 07:57:06 | 000,000,000 | ---D | M] (BS Player Toolbar) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
[2009.12.12 22:52:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\feedbar@efinke.com
[2010.04.04 20:30:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\personas@christopher.beard
[2010.04.04 20:30:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\staged-xpis
[2009.12.27 01:27:17 | 000,002,257 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\askcom.xml
[2009.07.01 14:22:12 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\conduit.xml
[2010.04.28 12:21:47 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\daemon-search.xml
[2010.05.09 13:51:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-1.xml
[2009.07.18 07:43:59 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-10.xml
[2009.08.07 13:43:12 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-11.xml
[2009.09.13 19:00:31 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-12.xml
[2009.09.13 19:18:40 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-13.xml
[2009.10.30 07:51:17 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-14.xml
[2009.11.07 06:52:16 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-15.xml
[2009.11.12 23:34:27 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-16.xml
[2009.12.22 19:00:27 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-17.xml
[2010.01.07 13:53:46 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-18.xml
[2010.03.07 08:00:07 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-19.xml
[2008.12.28 22:46:47 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-2.xml
[2010.03.24 16:06:01 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-20.xml
[2010.04.04 20:28:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-21.xml
[2010.04.28 12:34:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-22.xml
[2009.02.06 12:24:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-3.xml
[2009.03.14 21:49:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-4.xml
[2009.04.08 08:59:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-5.xml
[2009.04.08 09:25:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-6.xml
[2009.04.26 08:37:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-7.xml
[2009.05.06 11:04:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-8.xml
[2009.06.21 09:29:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-9.xml
[2009.09.06 13:26:42 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin.xml
[2010.05.11 14:13:08 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.10.16 10:34:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.11.05 21:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(2)
[2010.05.10 22:44:46 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.05.10 22:44:27 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2008.10.16 15:09:05 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npdrmv2.dll
[2008.10.16 15:08:46 | 000,364,544 | ---- | M] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\Program Files\Mozilla Firefox\plugins\npdsplay(2).dll
[2009.01.07 10:58:04 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
[2008.10.16 15:08:57 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npwmsdrm.dll
[2010.04.01 18:51:34 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.04.01 18:51:34 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.04.01 18:51:34 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.04.01 18:51:34 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.04.01 18:51:34 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.04.14 07:27:52 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (WebTranslator) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - Reg Error: Key error. File not found
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Value error.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: DirectAnimation Java Classes Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java Reg Error: Value error. (Reg Error: Key error.)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\aa\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\aa\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.11 15:05:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Plocha\VAG
[2010.05.11 15:03:22 | 000,057,372 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftser2k.sys
[2010.05.11 15:03:22 | 000,048,625 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftserui2.dll
[2010.05.11 15:02:51 | 000,414,208 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftdiunin.exe
[2010.05.11 15:02:51 | 000,024,177 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftdibus.sys
[2010.05.11 15:02:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010.05.11 13:53:00 | 000,000,000 | ---D | C] -- C:\Program Files\VAG-COM
[2010.05.11 13:51:53 | 000,000,000 | ---D | C] -- C:\VAG-COM-USB
[2010.05.10 22:44:43 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.05.10 22:44:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.05.10 22:44:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.05.10 22:33:13 | 000,065,576 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFwIm.sys
[2010.05.10 22:33:12 | 000,270,888 | R--- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFw.sys
[2010.05.10 22:32:55 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2010.05.10 22:27:18 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.05.10 21:51:10 | 000,319,792 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\aa\Plocha\utorrent.exe
[2010.05.10 20:40:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.05.10 18:27:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.05.03 20:03:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Data aplikací\X-Chat 2
[2010.05.03 20:03:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Dokumenty\Downloads
[2010.05.03 20:03:22 | 000,000,000 | ---D | C] -- C:\Program Files\xchat
[2010.05.03 19:54:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Data aplikací\mIRC
[2010.05.02 18:53:45 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\aa\Recent
[2010.04.29 10:50:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Local Settings\Data aplikací\id Software
[2010.04.29 00:10:45 | 000,000,000 | ---D | C] -- C:\Program Files\Image Grabber II
[2010.04.28 12:59:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Solidshield
[2010.04.28 12:47:35 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2010.04.28 12:47:35 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2010.04.28 12:47:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2010.04.28 12:47:34 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2010.04.28 12:47:34 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2010.04.28 12:47:33 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2010.04.28 12:47:32 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2010.04.28 12:47:31 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2010.04.28 12:47:31 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2010.04.28 12:47:31 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2010.04.28 12:47:30 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2010.04.28 12:47:30 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2010.04.28 12:47:30 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2010.04.28 12:47:29 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2010.04.28 12:47:28 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll
[2010.04.28 12:47:28 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll
[2010.04.28 12:47:27 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll
[2010.04.28 12:47:27 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll
[2010.04.28 12:47:27 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll
[2010.04.28 12:47:26 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll
[2010.04.26 13:31:41 | 000,034,816 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\BrWiaNCp.dll
[2010.04.26 13:31:40 | 000,061,952 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrNetSti.dll
[2010.04.26 13:31:40 | 000,037,376 | ---- | C] (Brother Industries,Ltd) -- C:\WINDOWS\System32\Brnsplg.dll
[2010.04.26 13:31:40 | 000,018,944 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\BrnStiCp.cpl
[2010.04.26 13:31:39 | 000,009,728 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrSti07a.dll
[2010.04.26 13:31:33 | 000,000,000 | ---D | C] -- C:\Brother
[2010.04.26 13:30:20 | 000,000,000 | ---D | C] -- C:\Program Files\Nuance
[2010.04.22 21:07:02 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010.04.21 20:57:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Plocha\Avatary
[2010.04.20 16:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.04.20 16:31:57 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.04.20 16:31:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.04.15 20:43:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.04.15 20:43:10 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010.04.14 08:37:16 | 000,019,024 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010.04.14 08:37:15 | 000,164,048 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010.04.14 08:37:14 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010.04.14 08:37:13 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010.04.14 08:37:12 | 000,100,432 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010.04.14 08:37:12 | 000,094,800 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010.04.14 08:37:11 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010.04.14 08:36:53 | 000,165,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010.04.14 08:36:53 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010.04.13 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software

========== Files - Modified Within 30 Days ==========

[2010.05.12 08:29:43 | 000,003,999 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\resume.dat
[2010.05.12 08:29:12 | 000,003,999 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\resume.dat.old
[2010.05.12 08:00:05 | 000,003,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\settings.dat
[2010.05.12 07:30:05 | 000,003,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\settings.dat.old
[2010.05.11 20:57:14 | 009,961,472 | ---- | M] () -- C:\Documents and Settings\aa\ntuser.dat
[2010.05.11 19:44:56 | 000,023,923 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.1.torrent
[2010.05.11 19:40:18 | 000,023,886 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.torrent
[2010.05.11 16:19:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.05.11 15:43:05 | 000,000,243 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\dht.dat
[2010.05.11 15:43:05 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\rss.dat
[2010.05.11 15:13:53 | 000,000,705 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Release 409-1.lnk

II čast:
[2010.05.11 15:06:57 | 000,000,573 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Manuál.lnk
[2010.05.11 15:06:57 | 000,000,543 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-Scope.lnk
[2010.05.11 15:06:57 | 000,000,531 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM USB.lnk
[2010.05.11 13:49:12 | 000,021,929 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Americky.zlocin.2007.FULL.DVD.CZ-UNiCORN.torrent
[2010.05.11 11:12:47 | 000,000,441 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010.05.11 11:08:03 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.11 11:07:47 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.11 11:07:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.11 11:07:33 | 803,385,344 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.11 08:33:53 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\aa\ntuser.ini
[2010.05.11 08:33:47 | 008,545,388 | -H-- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\IconCache.db
[2010.05.11 08:33:45 | 000,000,190 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\dht.dat.old
[2010.05.11 08:33:45 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\rss.dat.old
[2010.05.10 22:45:51 | 000,023,700 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.1.torrent
[2010.05.10 22:44:25 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.05.10 22:44:25 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.05.10 22:44:25 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.05.10 22:44:25 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010.05.10 22:44:24 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010.05.10 22:40:09 | 000,966,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.05.10 22:40:09 | 000,433,356 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.05.10 22:40:09 | 000,380,214 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.05.10 22:40:09 | 000,079,930 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.05.10 22:40:09 | 000,061,154 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.05.10 20:36:59 | 000,000,344 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.05.10 18:59:55 | 000,002,553 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.05.10 17:56:15 | 000,023,663 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.torrent
[2010.05.07 05:23:54 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\CCleaner.lnk
[2010.05.06 22:59:36 | 000,165,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010.05.06 22:39:23 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010.05.06 22:39:00 | 000,164,048 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010.05.06 22:34:27 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010.05.06 22:33:59 | 000,100,432 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010.05.06 22:33:55 | 000,094,800 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010.05.06 22:33:47 | 000,019,024 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010.05.06 22:33:29 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010.05.04 18:49:48 | 000,023,521 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Ztrata.diamantove.slzy.2008.DVDR.CZ-cibulator679.torrent
[2010.05.03 07:51:32 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.02 16:16:29 | 000,000,650 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.05.02 16:16:29 | 000,000,264 | RHS- | M] () -- C:\boot.ini
[2010.05.02 14:11:19 | 000,023,044 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Klic k vrazde.torrent
[2010.05.02 13:01:41 | 000,000,399 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\Zástupce - avatar19-5.lnk
[2010.05.02 09:58:56 | 000,023,808 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Nestanu.se.tvoji.zenou.2007.DVDR.CZ-cibultor679.torrent
[2010.04.29 00:22:01 | 000,085,320 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\VvBD-II.jpg
[2010.04.29 00:10:54 | 000,022,260 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Vrazda.v.Bilem.dome.1997.CZ-BeSTTRaCKeR.torrent
[2010.04.28 23:46:17 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.04.28 18:55:09 | 000,014,437 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Oblast.51.Pravda.nebo.fikce.2003.DVDRip.XviD.CZ.torrent
[2010.04.28 16:58:16 | 000,002,855 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2010.04.27 18:37:42 | 000,014,251 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Samec.2009.DVDRip.XviD.CZ-cibulator679.avi.torrent
[2010.04.27 07:15:40 | 000,003,782 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\hgjh.nfo
[2010.04.27 07:03:53 | 000,024,655 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Upiruv.pomocnik.2009.PAL.DVDR.CZ-kubix.torrent
[2010.04.26 15:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010.04.26 13:32:32 | 000,000,050 | ---- | M] () -- C:\WINDOWS\System32\bridf07a.dat
[2010.04.26 11:29:32 | 000,011,793 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Spy.Doc.With.An.Vir.2010.7.0.0.545.torrent
[2010.04.26 07:41:58 | 000,014,326 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Hydra.2009.DVDRip.XviD.CZ.torrent
[2010.04.25 13:23:51 | 000,014,523 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Anal.Payload.XviD.torrent
[2010.04.25 10:55:07 | 000,011,504 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\kaspersky 2010 antivirus.torrent
[2010.04.24 07:26:42 | 000,023,653 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Smash.Cut.2009.DVDR.CZ.torrent
[2010.04.23 23:49:59 | 000,023,050 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Gamer.2009.DVDR.CZ.torrent
[2010.04.22 11:03:11 | 000,024,613 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Stvanec.IRA.DVD.2008.CZ.torrent
[2010.04.21 21:04:05 | 000,022,653 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Konspirace.v.El.Escorialu.2008.DVDR.CZ.torrent
[2010.04.21 18:31:32 | 000,014,708 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Ass.Worship.11.XXX.DVDRip.XviD.torrent
[2010.04.20 19:01:54 | 000,014,479 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Teachers.XXX.BDRiP.XviD.torrent
[2010.04.20 16:36:23 | 000,040,270 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Jak.na.Vec.DVD9.2002.5.1.CZ.torrent
[2010.04.19 23:21:02 | 000,014,382 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Alvin.a.chipmunkove.2.2009.ac3.DVDRip.XviD.CZ - doha.torrent
[2010.04.19 17:31:00 | 000,017,620 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Morganovi.2009.DVDR.CZ.torrent
[2010.04.19 08:50:02 | 000,023,506 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Devitky.2007.DVDR.CZ-doha.torrent
[2010.04.18 21:44:47 | 000,014,585 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Fresh.Outta.High.School.19.XXX.DVDRip.XviD.torrent
[2010.04.18 19:23:16 | 000,013,540 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Strip Poker Exclusive 4 CZ.iso.torrent
[2010.04.18 17:58:35 | 000,014,447 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Blonde.Bombs.XXX.DVDRip.XviD.torrent
[2010.04.17 21:14:20 | 000,014,669 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Cum.Spoiled.Brats.XXX.DVDRip.XviD.torrent
[2010.04.17 19:30:16 | 000,017,846 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Neznamy.signal.2007.AC3.DVDRip.XviD.CZ.UniQue.torrent
[2010.04.17 19:20:52 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\msds.dat
[2010.04.17 16:37:00 | 000,023,668 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Vicky.Cristina.Barcelona.2008.DVDR.CZ.torrent
[2010.04.16 14:46:58 | 000,014,716 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Oil.Overload.3.DISC1.XXX.DVDRip.XviD.torrent
[2010.04.16 08:54:34 | 000,095,896 | ---- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.16 07:38:23 | 000,023,708 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\AZYL.2008.DVDR.CZ.torrent
[2010.04.15 20:59:01 | 000,017,229 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Pohoda 2010 CZ.torrent
[2010.04.15 20:02:27 | 000,323,520 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.04.15 19:59:01 | 000,000,771 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\smazani.reg
[2010.04.15 15:16:15 | 000,018,902 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Tolerance Data 2009 CZ.torrent
[2010.04.14 21:05:27 | 000,002,222 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\SlySoft.AnyDVD.HD.v6.6.3.4.Multilingual.WinAll.Incl.Keygen.and.Patch-BRD.torrent
[2010.04.14 20:48:57 | 000,002,605 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Advanced.System.Care.PRO.v3.5.1.Incl.Serial-DIGERATI.torrent
[2010.04.14 18:47:23 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010.04.14 07:27:52 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010.04.13 21:56:43 | 000,023,630 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Stastlivci.2008.DVDR.CZ.Destroy-DRagON.torrent
[2010.04.13 20:48:56 | 000,029,648 | ---- | M] () -- C:\WINDOWS\System32\drivers\fwdrv.err
[2010.04.13 16:29:15 | 000,023,301 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Zodiac.DVD.2007.5.1.CZ.torrent
[2010.04.13 14:41:23 | 000,023,878 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Fantastic.Mr.Fox.PL.DVDR-FMFOX.torrent
[2010.04.12 20:31:14 | 000,021,369 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Materske.galeje.torrent

========== Files Created - No Company Name ==========

[2010.05.11 19:45:04 | 000,023,923 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.1.torrent
[2010.05.11 19:40:18 | 000,023,886 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.torrent
[2010.05.11 15:02:52 | 000,000,196 | R--- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini
[2010.05.11 13:53:04 | 000,000,705 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Release 409-1.lnk
[2010.05.11 13:52:01 | 000,000,573 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Manuál.lnk
[2010.05.11 13:52:01 | 000,000,543 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-Scope.lnk
[2010.05.11 13:52:01 | 000,000,531 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM USB.lnk
[2010.05.11 13:49:20 | 000,021,929 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Americky.zlocin.2007.FULL.DVD.CZ-UNiCORN.torrent
[2010.05.10 22:45:59 | 000,023,700 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.1.torrent
[2010.05.10 22:29:53 | 000,003,999 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\resume.dat.old
[2010.05.10 22:29:53 | 000,003,999 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\resume.dat
[2010.05.10 22:29:53 | 000,000,243 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\dht.dat
[2010.05.10 22:29:53 | 000,000,190 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\dht.dat.old
[2010.05.10 22:29:53 | 000,000,099 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\rss.dat.old
[2010.05.10 22:29:53 | 000,000,099 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\rss.dat
[2010.05.10 21:51:10 | 000,035,181 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\utorrent.lng
[2010.05.10 21:51:10 | 000,003,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\settings.dat.old
[2010.05.10 21:51:10 | 000,003,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\settings.dat
[2010.05.10 18:28:28 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.05.10 17:56:15 | 000,023,663 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.torrent
[2010.05.04 18:49:48 | 000,023,521 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Ztrata.diamantove.slzy.2008.DVDR.CZ-cibulator679.torrent
[2010.05.02 14:11:19 | 000,023,044 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Klic k vrazde.torrent
[2010.05.02 13:01:41 | 000,000,399 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\Zástupce - avatar19-5.lnk
[2010.05.02 09:58:56 | 000,023,808 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Nestanu.se.tvoji.zenou.2007.DVDR.CZ-cibultor679.torrent
[2010.04.29 00:19:03 | 000,085,320 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\VvBD-II.jpg
[2010.04.29 00:10:53 | 000,022,260 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Vrazda.v.Bilem.dome.1997.CZ-BeSTTRaCKeR.torrent
[2010.04.28 18:55:08 | 000,014,437 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Oblast.51.Pravda.nebo.fikce.2003.DVDRip.XviD.CZ.torrent
[2010.04.27 18:37:42 | 000,014,251 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Samec.2009.DVDRip.XviD.CZ-cibulator679.avi.torrent
[2010.04.27 18:36:38 | 000,006,106 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - games.nfo
[2010.04.27 18:36:38 | 000,006,104 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - soft.nfo
[2010.04.27 18:36:38 | 000,006,104 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - music.nfo
[2010.04.27 18:36:38 | 000,005,760 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - movie.nfo
[2010.04.27 07:15:40 | 000,003,782 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\hgjh.nfo
[2010.04.27 07:03:53 | 000,024,655 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Upiruv.pomocnik.2009.PAL.DVDR.CZ-kubix.torrent
[2010.04.26 13:31:40 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010.04.26 11:29:32 | 000,011,793 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Spy.Doc.With.An.Vir.2010.7.0.0.545.torrent
[2010.04.26 07:41:58 | 000,014,326 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Hydra.2009.DVDRip.XviD.CZ.torrent
[2010.04.25 13:23:51 | 000,014,523 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Anal.Payload.XviD.torrent
[2010.04.25 10:55:07 | 000,011,504 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\kaspersky 2010 antivirus.torrent
[2010.04.24 07:26:42 | 000,023,653 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Smash.Cut.2009.DVDR.CZ.torrent
[2010.04.23 23:49:58 | 000,023,050 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Gamer.2009.DVDR.CZ.torrent
[2010.04.22 11:03:11 | 000,024,613 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Stvanec.IRA.DVD.2008.CZ.torrent
[2010.04.21 21:04:05 | 000,022,653 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Konspirace.v.El.Escorialu.2008.DVDR.CZ.torrent
[2010.04.21 20:57:25 | 012,503,507 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\13 Chaos B.C.mp3
[2010.04.20 16:36:22 | 000,040,270 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Jak.na.Vec.DVD9.2002.5.1.CZ.torrent
[2010.04.19 23:21:01 | 000,014,382 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Alvin.a.chipmunkove.2.2009.ac3.DVDRip.XviD.CZ - doha.torrent
[2010.04.19 17:31:00 | 000,017,620 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Morganovi.2009.DVDR.CZ.torrent
[2010.04.19 08:50:02 | 000,023,506 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Devitky.2007.DVDR.CZ-doha.torrent
[2010.04.18 19:24:44 | 000,013,540 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Strip Poker Exclusive 4 CZ.iso.torrent
[2010.04.17 19:30:16 | 000,017,846 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Neznamy.signal.2007.AC3.DVDRip.XviD.CZ.UniQue.torrent
[2010.04.17 19:20:52 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\msds.dat
[2010.04.17 16:37:00 | 000,023,668 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Vicky.Cristina.Barcelona.2008.DVDR.CZ.torrent
[2010.04.16 07:38:23 | 000,023,708 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\AZYL.2008.DVDR.CZ.torrent
[2010.04.15 20:59:01 | 000,017,229 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Pohoda 2010 CZ.torrent
[2010.04.15 19:57:02 | 000,000,771 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\smazani.reg
[2010.04.15 19:06:48 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\CCleaner.lnk
[2010.04.15 15:16:15 | 000,018,902 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Tolerance Data 2009 CZ.torrent
[2010.04.14 21:05:27 | 000,002,222 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\SlySoft.AnyDVD.HD.v6.6.3.4.Multilingual.WinAll.Incl.Keygen.and.Patch-BRD.torrent
[2010.04.14 20:48:57 | 000,002,605 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Advanced.System.Care.PRO.v3.5.1.Incl.Serial-DIGERATI.torrent
[2010.04.14 07:38:35 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.13 21:56:43 | 000,023,630 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Stastlivci.2008.DVDR.CZ.Destroy-DRagON.torrent
[2010.04.13 14:41:23 | 000,023,878 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Fantastic.Mr.Fox.PL.DVDR-FMFOX.torrent
[2010.04.12 20:31:14 | 000,021,369 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Materske.galeje.torrent
[2010.03.10 19:59:35 | 000,000,232 | ---- | C] () -- C:\WINDOWS\reimage.ini
[2009.12.14 16:35:08 | 001,380,403 | ---- | C] () -- C:\WINDOWS\System32\avgsdk.dll
[2009.12.05 12:30:50 | 000,000,060 | ---- | C] () -- C:\WINDOWS\pident.ini
[2009.12.05 12:27:56 | 000,000,584 | ---- | C] () -- C:\WINDOWS\pirchutl.ini
[2009.10.17 19:56:11 | 000,000,120 | ---- | C] () -- C:\WINDOWS\CIS_Setup_3.12.111745.560_XP_Vista_x32.INI
[2009.08.24 13:06:27 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.03.10 14:41:00 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009.02.08 17:26:29 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009.01.19 17:23:50 | 000,000,416 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009.01.19 17:23:50 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009.01.08 20:45:41 | 000,138,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.01.01 20:36:55 | 000,002,686 | ---- | C] () -- C:\WINDOWS\TRNCOM.INI
[2008.11.11 22:37:20 | 000,000,196 | ---- | C] () -- C:\WINDOWS\thtitanc.INI
[2008.09.26 12:27:20 | 000,002,855 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.09.07 00:10:18 | 000,000,025 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2008.09.07 00:01:25 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008.09.06 09:53:29 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.09.06 00:04:12 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008.09.05 15:33:38 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2008.09.05 14:14:26 | 000,000,211 | ---- | C] () -- C:\WINDOWS\System32\BOOTBAK.INI
[2008.09.05 13:22:12 | 000,356,352 | ---- | C] () -- C:\WINDOWS\EMCRI.dll
[2008.09.05 12:17:21 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2008.09.05 12:16:56 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2006.10.28 20:57:48 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\ts.dll
[2006.01.17 10:31:30 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 003,223,552 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2005.10.14 11:56:48 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2005.10.14 11:56:48 | 000,266,240 | ---- | C] () -- C:\WINDOWS\System32\TomsMoComp_ff.dll
[2005.10.14 11:56:48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.02.17 11:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005.02.17 11:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2002.05.18 00:18:30 | 000,124,928 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[2001.11.14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[1997.11.17 18:13:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:A8ADE5D8
< End of report >

C:\WINDOWS\PEV.exe otestujte na VIRUSTOTALu


najděte tento soubor C:\WINDOWS\System32\drivers\etc\hosts.ics klikněte na něj pravým tlačítkem myši a zkuste ho Otevřít v programu Poznámkový blok; co se objeví, zkopírujte sem


spusťte C:\Program Files\trend micro\aa.exe

neprovádějte sken, ale klikněte na tlačítko Open the Misc Tools Section

nahoře jsou čtyři tlačítka, musí být zamáčknuté Misc Tools:



najděte vlevo tlačítko Open ADS Spy , klikněte na něj, v následujícím okně klikněte na Scan; pokud se v okně něco objeví, označte to, klikněte na Save log a pak na Remove Selected.

restart a nový log z OTL

# Copyright (c) 1993-2001 Microsoft Corp.
#
# This file has been automatically generated for use by Microsoft Internet
# Connection Sharing. It contains the mappings of IP addresses to host names
# for the home network. Please do not make changes to the HOSTS.ICS file.
# Any changes may result in a loss of connectivity between machines on the
# local network.
#

85.92.58.186 doma-fk3wzjtn19.mshome.net # 2015 5 0 10 9 12 47 656


tohle je ta slozka otevrena v pozn.bloku..









Tohle je test : C:\WINDOWS\PEV.exe otestujte na VIRUSTOTALu

vysledek zde je odkaz: http://www.virustotal.com/cs/analisis/d ... 1273626248

scan první čast: Po restartu
OTL logfile created on: 12.5.2010 13:41:06 - Run 3
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Documents and Settings\aa\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

766,00 Mb Total Physical Memory | 406,00 Mb Available Physical Memory | 53,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 20,49 Gb Total Space | 7,25 Gb Free Space | 35,38% Space Free | Partition Type: NTFS
Drive D: | 44,82 Gb Total Space | 9,40 Gb Free Space | 20,98% Space Free | Partition Type: NTFS
Drive E: | 46,47 Gb Total Space | 23,96 Gb Free Space | 51,56% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
Drive G: | 465,65 Gb Total Space | 271,19 Gb Free Space | 58,24% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DOMA-FK3WZJTN19
Current User Name: aa
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.05.11 21:43:14 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aa\Dokumenty\Stažené soubory\OTL(2).exe
PRC - [2010.05.10 18:58:14 | 002,466,528 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\Setup\avast.setup
PRC - [2010.05.06 22:59:42 | 002,815,192 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.01.24 16:04:59 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
PRC - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
PRC - [2008.10.31 07:24:26 | 001,705,256 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010.05.11 21:43:14 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\aa\Dokumenty\Stažené soubory\OTL(2).exe
MOD - [2010.01.24 16:05:48 | 000,102,400 | ---- | M] (RealPlayer) -- c:\Program Files\Real\RealPlayer\browserrecord\chrome\hook\rpchromebrowserrecordhelper.dll
MOD - [2010.01.24 16:05:03 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll
MOD - [2009.08.13 15:56:20 | 001,748,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
MOD - [2008.04.14 08:49:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2007.04.12 15:00:16 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcp71.dll


========== Win32 Services (SafeList) ==========

SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010.05.06 22:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2009.09.23 17:37:30 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- (SPF4)
SRV - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe -- (SbPF.Launcher)
SRV - [2008.07.29 20:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)


========== Driver Services (SafeList) ==========

DRV - [2010.05.06 22:39:23 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010.05.06 22:39:00 | 000,164,048 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2010.05.06 22:34:27 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010.05.06 22:33:59 | 000,100,432 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010.05.06 22:33:47 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.05.06 22:33:29 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010.03.19 22:25:03 | 000,015,906 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kwflower.log -- (kwflower)
DRV - [2009.12.13 21:17:59 | 000,138,376 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2009.11.12 23:17:02 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.03.23 11:25:54 | 000,029,696 | ---- | M] (Kerio Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kvnet.sys -- (kvnet)
DRV - [2008.10.31 07:09:06 | 000,270,888 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SbFw.sys -- (SbFw)
DRV - [2008.09.15 07:56:34 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008.09.15 07:56:24 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.09.15 07:56:24 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.09.15 07:56:24 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.07.18 17:39:18 | 000,213,008 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2008.06.21 04:54:54 | 000,066,600 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbhips.sys -- (sbhips)
DRV - [2008.06.21 04:54:54 | 000,065,576 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV - [2008.06.20 13:08:27 | 000,225,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008.04.13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.04.13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2008.02.01 15:17:12 | 000,138,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2008.02.01 15:17:06 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2007.07.26 13:19:24 | 000,547,904 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2007.05.14 23:41:46 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2007.05.14 23:38:22 | 000,009,216 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2006.06.28 17:25:00 | 004,304,384 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.06.16 20:56:00 | 000,083,968 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006.05.25 11:19:00 | 000,074,752 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR)
DRV - [2006.05.25 11:19:00 | 000,061,056 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR)
DRV - [2006.05.25 11:19:00 | 000,040,064 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR)
DRV - [2006.05.10 12:22:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.04.27 10:46:50 | 001,540,096 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.03.03 13:52:00 | 000,192,672 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2006.01.17 10:21:52 | 000,328,061 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2006.01.17 10:19:46 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)
DRV - [2006.01.17 10:18:22 | 000,850,474 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2006.01.17 10:15:36 | 000,030,459 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004.10.15 13:50:20 | 000,015,295 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb)
DRV - [2004.02.04 08:19:32 | 000,024,177 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2004.02.04 08:19:16 | 000,057,372 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com;www.plimus.com;regnow.com;www.regnow.com

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.as ... earchTerms}"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: feedbar@efinke.com:4.1.2
FF - prefs.js..extensions.enabledItems: {89506680-e3f4-484c-a2c0-ed711d481eda}:0.9.5.1
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.as ... ource=2&q="
FF - prefs.js..network.proxy.no_proxies_on: "plimus.com,www.plimus.com,regnow.com,www.regnow.com,"
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 7070

FF - user.js..browser.search.openintab: false
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port:
FF - user.js..network.proxy.no_proxies_on: ""
FF - user.js..network.proxy.socks: "127.0.0.1"
FF - user.js..network.proxy.socks_port: 7070
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\Program Files\Internet Explorer\plugins [2010.04.20 16:30:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.04.28 22:42:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.04.28 22:42:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2008.09.05 16:29:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Extensions
[2010.05.11 14:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions
[2009.01.01 20:40:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
[2009.11.04 16:11:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.12.12 22:49:19 | 000,000,000 | ---D | M] (Blue Fox) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{241aae70-0022-11de-87af-0800200c9a66}
[2009.11.07 22:10:07 | 000,000,000 | ---D | M] (Firefox Showcase) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{89506680-e3f4-484c-a2c0-ed711d481eda}
[2009.12.12 22:46:50 | 000,000,000 | ---D | M] (AmbientFox) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{c8f71e5b-88f8-42a7-98bb-e4c506161de9}
[2009.05.24 20:06:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
[2009.10.30 11:08:35 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010.03.07 07:57:06 | 000,000,000 | ---D | M] (BS Player Toolbar) -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
[2009.12.12 22:52:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\feedbar@efinke.com
[2010.04.04 20:30:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\personas@christopher.beard
[2010.04.04 20:30:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\extensions\staged-xpis
[2009.12.27 01:27:17 | 000,002,257 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\askcom.xml
[2009.07.01 14:22:12 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\conduit.xml
[2010.04.28 12:21:47 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\daemon-search.xml
[2010.05.09 13:51:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-1.xml
[2009.07.18 07:43:59 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-10.xml
[2009.08.07 13:43:12 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-11.xml
[2009.09.13 19:00:31 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-12.xml
[2009.09.13 19:18:40 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-13.xml
[2009.10.30 07:51:17 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-14.xml
[2009.11.07 06:52:16 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-15.xml
[2009.11.12 23:34:27 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-16.xml
[2009.12.22 19:00:27 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-17.xml
[2010.01.07 13:53:46 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-18.xml
[2010.03.07 08:00:07 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-19.xml
[2008.12.28 22:46:47 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-2.xml
[2010.03.24 16:06:01 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-20.xml
[2010.04.04 20:28:26 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-21.xml
[2010.04.28 12:34:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-22.xml
[2009.02.06 12:24:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-3.xml
[2009.03.14 21:49:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-4.xml
[2009.04.08 08:59:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-5.xml
[2009.04.08 09:25:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-6.xml
[2009.04.26 08:37:53 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-7.xml
[2009.05.06 11:04:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-8.xml
[2009.06.21 09:29:55 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin-9.xml
[2009.09.06 13:26:42 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\aa\Data aplikací\Mozilla\Firefox\Profiles\ae1wnv4i.default\searchplugins\icqplugin.xml
[2010.05.11 14:13:08 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.10.16 10:34:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.11.05 21:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(2)
[2010.05.10 22:44:46 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.05.10 22:44:27 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2008.10.16 15:09:05 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npdrmv2.dll
[2008.10.16 15:08:46 | 000,364,544 | ---- | M] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\Program Files\Mozilla Firefox\plugins\npdsplay(2).dll
[2009.01.07 10:58:04 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
[2008.10.16 15:08:57 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npwmsdrm.dll
[2010.04.01 18:51:34 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.04.01 18:51:34 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.04.01 18:51:34 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.04.01 18:51:34 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.04.01 18:51:34 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.04.14 07:27:52 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (WebTranslator) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - Reg Error: Key error. File not found
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Value error.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-

druha čast:
windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: DirectAnimation Java Classes Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java Reg Error: Value error. (Reg Error: Key error.)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\aa\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\aa\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.11 15:05:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Plocha\VAG
[2010.05.11 15:03:22 | 000,057,372 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftser2k.sys
[2010.05.11 15:03:22 | 000,048,625 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftserui2.dll
[2010.05.11 15:02:51 | 000,414,208 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftdiunin.exe
[2010.05.11 15:02:51 | 000,024,177 | R--- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftdibus.sys
[2010.05.11 13:53:00 | 000,000,000 | ---D | C] -- C:\Program Files\VAG-COM
[2010.05.11 13:51:53 | 000,000,000 | ---D | C] -- C:\VAG-COM-USB
[2010.05.10 22:44:43 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.05.10 22:44:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.05.10 22:44:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.05.10 22:33:13 | 000,065,576 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFwIm.sys
[2010.05.10 22:33:12 | 000,270,888 | R--- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFw.sys
[2010.05.10 22:32:55 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2010.05.10 22:27:18 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.05.10 21:51:10 | 000,319,792 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\aa\Plocha\utorrent.exe
[2010.05.10 20:40:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.05.10 18:27:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.05.03 20:03:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Data aplikací\X-Chat 2
[2010.05.03 20:03:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Dokumenty\Downloads
[2010.05.03 20:03:22 | 000,000,000 | ---D | C] -- C:\Program Files\xchat
[2010.05.03 19:54:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Data aplikací\mIRC
[2010.05.02 18:53:45 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\aa\Recent
[2010.04.29 10:50:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Local Settings\Data aplikací\id Software
[2010.04.29 00:10:45 | 000,000,000 | ---D | C] -- C:\Program Files\Image Grabber II
[2010.04.28 12:59:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Solidshield
[2010.04.28 12:47:35 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2010.04.28 12:47:35 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2010.04.28 12:47:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2010.04.28 12:47:34 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2010.04.28 12:47:34 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2010.04.28 12:47:33 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2010.04.28 12:47:32 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2010.04.28 12:47:31 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2010.04.28 12:47:31 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2010.04.28 12:47:31 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2010.04.28 12:47:30 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2010.04.28 12:47:30 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2010.04.28 12:47:30 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2010.04.28 12:47:29 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2010.04.28 12:47:28 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll
[2010.04.28 12:47:28 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll
[2010.04.28 12:47:27 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll
[2010.04.28 12:47:27 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll
[2010.04.28 12:47:27 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll
[2010.04.28 12:47:26 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll
[2010.04.26 13:31:41 | 000,034,816 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\BrWiaNCp.dll
[2010.04.26 13:31:40 | 000,061,952 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrNetSti.dll
[2010.04.26 13:31:40 | 000,037,376 | ---- | C] (Brother Industries,Ltd) -- C:\WINDOWS\System32\Brnsplg.dll
[2010.04.26 13:31:40 | 000,018,944 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\BrnStiCp.cpl
[2010.04.26 13:31:39 | 000,009,728 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrSti07a.dll
[2010.04.26 13:31:33 | 000,000,000 | ---D | C] -- C:\Brother
[2010.04.26 13:30:20 | 000,000,000 | ---D | C] -- C:\Program Files\Nuance
[2010.04.22 21:07:02 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010.04.21 20:57:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\aa\Plocha\Avatary
[2010.04.20 16:33:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.04.20 16:31:57 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.04.20 16:31:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.04.15 20:43:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.04.15 20:43:10 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010.04.14 08:37:16 | 000,019,024 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010.04.14 08:37:15 | 000,164,048 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010.04.14 08:37:14 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010.04.14 08:37:13 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010.04.14 08:37:12 | 000,100,432 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010.04.14 08:37:12 | 000,094,800 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010.04.14 08:37:11 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010.04.14 08:36:53 | 000,165,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010.04.14 08:36:53 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010.04.13 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software

========== Files - Modified Within 30 Days ==========

[2010.05.12 13:40:11 | 000,000,442 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010.05.12 13:40:06 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.12 13:39:42 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.12 13:39:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.12 13:39:06 | 803,385,344 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.12 13:39:06 | 000,323,520 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.05.12 13:37:53 | 009,961,472 | ---- | M] () -- C:\Documents and Settings\aa\ntuser.dat
[2010.05.12 13:37:53 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\aa\ntuser.ini
[2010.05.12 13:37:42 | 000,003,932 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\resume.dat
[2010.05.12 13:37:42 | 000,003,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\settings.dat
[2010.05.12 13:37:42 | 000,000,633 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\dht.dat
[2010.05.12 13:37:42 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\rss.dat
[2010.05.12 13:37:39 | 013,334,394 | -H-- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\IconCache.db
[2010.05.12 13:37:25 | 000,003,962 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\resume.dat.old
[2010.05.12 13:30:07 | 000,003,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\settings.dat.old
[2010.05.11 19:44:56 | 000,023,923 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.1.torrent
[2010.05.11 19:40:18 | 000,023,886 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.torrent
[2010.05.11 16:19:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.05.11 15:43:05 | 000,000,243 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\dht.dat.old
[2010.05.11 15:43:05 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\rss.dat.old
[2010.05.11 15:13:53 | 000,000,705 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Release 409-1.lnk
[2010.05.11 15:06:57 | 000,000,573 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Manuál.lnk
[2010.05.11 15:06:57 | 000,000,543 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-Scope.lnk
[2010.05.11 15:06:57 | 000,000,531 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\VAG-COM USB.lnk
[2010.05.11 13:49:12 | 000,021,929 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Americky.zlocin.2007.FULL.DVD.CZ-UNiCORN.torrent
[2010.05.10 22:45:51 | 000,023,700 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.1.torrent
[2010.05.10 22:44:25 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.05.10 22:44:25 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.05.10 22:44:25 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.05.10 22:44:25 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010.05.10 22:44:24 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010.05.10 22:40:09 | 000,966,990 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.05.10 22:40:09 | 000,433,356 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.05.10 22:40:09 | 000,380,214 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.05.10 22:40:09 | 000,079,930 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.05.10 22:40:09 | 000,061,154 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.05.10 20:36:59 | 000,000,344 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.05.10 18:59:55 | 000,002,553 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.05.10 17:56:15 | 000,023,663 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.torrent
[2010.05.07 05:23:54 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\CCleaner.lnk
[2010.05.06 22:59:36 | 000,165,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010.05.06 22:39:23 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010.05.06 22:39:00 | 000,164,048 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010.05.06 22:34:27 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010.05.06 22:33:59 | 000,100,432 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010.05.06 22:33:55 | 000,094,800 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010.05.06 22:33:47 | 000,019,024 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010.05.06 22:33:29 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010.05.04 18:49:48 | 000,023,521 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Ztrata.diamantove.slzy.2008.DVDR.CZ-cibulator679.torrent
[2010.05.03 07:51:32 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.02 16:16:29 | 000,000,650 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.05.02 16:16:29 | 000,000,264 | RHS- | M] () -- C:\boot.ini
[2010.05.02 14:11:19 | 000,023,044 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Klic k vrazde.torrent
[2010.05.02 13:01:41 | 000,000,399 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\Zástupce - avatar19-5.lnk
[2010.05.02 09:58:56 | 000,023,808 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Nestanu.se.tvoji.zenou.2007.DVDR.CZ-cibultor679.torrent
[2010.04.29 00:22:01 | 000,085,320 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\VvBD-II.jpg
[2010.04.29 00:10:54 | 000,022,260 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Vrazda.v.Bilem.dome.1997.CZ-BeSTTRaCKeR.torrent
[2010.04.28 23:46:17 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.04.28 18:55:09 | 000,014,437 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Oblast.51.Pravda.nebo.fikce.2003.DVDRip.XviD.CZ.torrent
[2010.04.28 16:58:16 | 000,002,855 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2010.04.27 18:37:42 | 000,014,251 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Samec.2009.DVDRip.XviD.CZ-cibulator679.avi.torrent
[2010.04.27 07:15:40 | 000,003,782 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\hgjh.nfo
[2010.04.27 07:03:53 | 000,024,655 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Upiruv.pomocnik.2009.PAL.DVDR.CZ-kubix.torrent
[2010.04.26 15:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010.04.26 13:32:32 | 000,000,050 | ---- | M] () -- C:\WINDOWS\System32\bridf07a.dat
[2010.04.26 11:29:32 | 000,011,793 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Spy.Doc.With.An.Vir.2010.7.0.0.545.torrent
[2010.04.26 07:41:58 | 000,014,326 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Hydra.2009.DVDRip.XviD.CZ.torrent
[2010.04.25 13:23:51 | 000,014,523 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Anal.Payload.XviD.torrent
[2010.04.25 10:55:07 | 000,011,504 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\kaspersky 2010 antivirus.torrent
[2010.04.24 07:26:42 | 000,023,653 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Smash.Cut.2009.DVDR.CZ.torrent
[2010.04.23 23:49:59 | 000,023,050 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Gamer.2009.DVDR.CZ.torrent
[2010.04.22 11:03:11 | 000,024,613 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Stvanec.IRA.DVD.2008.CZ.torrent
[2010.04.21 21:04:05 | 000,022,653 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Konspirace.v.El.Escorialu.2008.DVDR.CZ.torrent
[2010.04.21 18:31:32 | 000,014,708 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Ass.Worship.11.XXX.DVDRip.XviD.torrent
[2010.04.20 19:01:54 | 000,014,479 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Teachers.XXX.BDRiP.XviD.torrent
[2010.04.20 16:36:23 | 000,040,270 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Jak.na.Vec.DVD9.2002.5.1.CZ.torrent
[2010.04.19 23:21:02 | 000,014,382 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Alvin.a.chipmunkove.2.2009.ac3.DVDRip.XviD.CZ - doha.torrent
[2010.04.19 17:31:00 | 000,017,620 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Morganovi.2009.DVDR.CZ.torrent
[2010.04.19 08:50:02 | 000,023,506 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Devitky.2007.DVDR.CZ-doha.torrent
[2010.04.18 21:44:47 | 000,014,585 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Fresh.Outta.High.School.19.XXX.DVDRip.XviD.torrent
[2010.04.18 19:23:16 | 000,013,540 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Strip Poker Exclusive 4 CZ.iso.torrent
[2010.04.18 17:58:35 | 000,014,447 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Blonde.Bombs.XXX.DVDRip.XviD.torrent
[2010.04.17 21:14:20 | 000,014,669 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Cum.Spoiled.Brats.XXX.DVDRip.XviD.torrent
[2010.04.17 19:30:16 | 000,017,846 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Neznamy.signal.2007.AC3.DVDRip.XviD.CZ.UniQue.torrent
[2010.04.17 19:20:52 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\msds.dat
[2010.04.17 16:37:00 | 000,023,668 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Vicky.Cristina.Barcelona.2008.DVDR.CZ.torrent
[2010.04.16 14:46:58 | 000,014,716 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Oil.Overload.3.DISC1.XXX.DVDRip.XviD.torrent
[2010.04.16 08:54:34 | 000,095,896 | ---- | M] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.16 07:38:23 | 000,023,708 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\AZYL.2008.DVDR.CZ.torrent
[2010.04.15 20:59:01 | 000,017,229 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Pohoda 2010 CZ.torrent
[2010.04.15 19:59:01 | 000,000,771 | ---- | M] () -- C:\Documents and Settings\aa\Plocha\smazani.reg
[2010.04.15 15:16:15 | 000,018,902 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Tolerance Data 2009 CZ.torrent
[2010.04.14 21:05:27 | 000,002,222 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\SlySoft.AnyDVD.HD.v6.6.3.4.Multilingual.WinAll.Incl.Keygen.and.Patch-BRD.torrent
[2010.04.14 20:48:57 | 000,002,605 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Advanced.System.Care.PRO.v3.5.1.Incl.Serial-DIGERATI.torrent
[2010.04.14 18:47:23 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010.04.14 07:27:52 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010.04.13 21:56:43 | 000,023,630 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Stastlivci.2008.DVDR.CZ.Destroy-DRagON.torrent
[2010.04.13 20:48:56 | 000,029,648 | ---- | M] () -- C:\WINDOWS\System32\drivers\fwdrv.err
[2010.04.13 16:29:15 | 000,023,301 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Zodiac.DVD.2007.5.1.CZ.torrent
[2010.04.13 14:41:23 | 000,023,878 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Fantastic.Mr.Fox.PL.DVDR-FMFOX.torrent
[2010.04.12 20:31:14 | 000,021,369 | ---- | M] () -- C:\Documents and Settings\aa\Dokumenty\Materske.galeje.torrent

========== Files Created - No Company Name ==========

[2010.05.11 19:45:04 | 000,023,923 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.1.torrent
[2010.05.11 19:40:18 | 000,023,886 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\All.About.Steve.2009.DVDR.CZ-LeMuR.torrent
[2010.05.11 15:02:52 | 000,000,196 | R--- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini
[2010.05.11 13:53:04 | 000,000,705 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Release 409-1.lnk
[2010.05.11 13:52:01 | 000,000,573 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM Manuál.lnk
[2010.05.11 13:52:01 | 000,000,543 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-Scope.lnk
[2010.05.11 13:52:01 | 000,000,531 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\VAG-COM USB.lnk
[2010.05.11 13:49:20 | 000,021,929 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Americky.zlocin.2007.FULL.DVD.CZ-UNiCORN.torrent
[2010.05.10 22:45:59 | 000,023,700 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.1.torrent
[2010.05.10 22:29:53 | 000,003,962 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\resume.dat.old
[2010.05.10 22:29:53 | 000,003,932 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\resume.dat
[2010.05.10 22:29:53 | 000,000,633 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\dht.dat
[2010.05.10 22:29:53 | 000,000,243 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\dht.dat.old
[2010.05.10 22:29:53 | 000,000,099 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\rss.dat.old
[2010.05.10 22:29:53 | 000,000,099 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\rss.dat
[2010.05.10 21:51:10 | 000,035,181 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\utorrent.lng
[2010.05.10 21:51:10 | 000,003,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\settings.dat.old
[2010.05.10 21:51:10 | 000,003,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\settings.dat
[2010.05.10 18:28:28 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.05.10 17:56:15 | 000,023,663 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Battle.in.Seattle.2007.DVDR.CZ-LeMuR.torrent
[2010.05.04 18:49:48 | 000,023,521 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Ztrata.diamantove.slzy.2008.DVDR.CZ-cibulator679.torrent
[2010.05.02 14:11:19 | 000,023,044 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Klic k vrazde.torrent
[2010.05.02 13:01:41 | 000,000,399 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\Zástupce - avatar19-5.lnk
[2010.05.02 09:58:56 | 000,023,808 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Nestanu.se.tvoji.zenou.2007.DVDR.CZ-cibultor679.torrent
[2010.04.29 00:19:03 | 000,085,320 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\VvBD-II.jpg
[2010.04.29 00:10:53 | 000,022,260 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Vrazda.v.Bilem.dome.1997.CZ-BeSTTRaCKeR.torrent
[2010.04.28 18:55:08 | 000,014,437 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Oblast.51.Pravda.nebo.fikce.2003.DVDRip.XviD.CZ.torrent
[2010.04.27 18:37:42 | 000,014,251 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Samec.2009.DVDRip.XviD.CZ-cibulator679.avi.torrent
[2010.04.27 18:36:38 | 000,006,106 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - games.nfo
[2010.04.27 18:36:38 | 000,006,104 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - soft.nfo
[2010.04.27 18:36:38 | 000,006,104 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - music.nfo
[2010.04.27 18:36:38 | 000,005,760 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\besttracker - movie.nfo
[2010.04.27 07:15:40 | 000,003,782 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\hgjh.nfo
[2010.04.27 07:03:53 | 000,024,655 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Upiruv.pomocnik.2009.PAL.DVDR.CZ-kubix.torrent
[2010.04.26 13:31:40 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010.04.26 11:29:32 | 000,011,793 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Spy.Doc.With.An.Vir.2010.7.0.0.545.torrent
[2010.04.26 07:41:58 | 000,014,326 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Hydra.2009.DVDRip.XviD.CZ.torrent
[2010.04.25 13:23:51 | 000,014,523 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Anal.Payload.XviD.torrent
[2010.04.25 10:55:07 | 000,011,504 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\kaspersky 2010 antivirus.torrent
[2010.04.24 07:26:42 | 000,023,653 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Smash.Cut.2009.DVDR.CZ.torrent
[2010.04.23 23:49:58 | 000,023,050 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Gamer.2009.DVDR.CZ.torrent
[2010.04.22 11:03:11 | 000,024,613 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Stvanec.IRA.DVD.2008.CZ.torrent
[2010.04.21 21:04:05 | 000,022,653 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Konspirace.v.El.Escorialu.2008.DVDR.CZ.torrent
[2010.04.21 20:57:25 | 012,503,507 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\13 Chaos B.C.mp3
[2010.04.20 16:36:22 | 000,040,270 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Jak.na.Vec.DVD9.2002.5.1.CZ.torrent
[2010.04.19 23:21:01 | 000,014,382 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Alvin.a.chipmunkove.2.2009.ac3.DVDRip.XviD.CZ - doha.torrent
[2010.04.19 17:31:00 | 000,017,620 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Morganovi.2009.DVDR.CZ.torrent
[2010.04.19 08:50:02 | 000,023,506 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Devitky.2007.DVDR.CZ-doha.torrent
[2010.04.18 19:24:44 | 000,013,540 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Strip Poker Exclusive 4 CZ.iso.torrent
[2010.04.17 19:30:16 | 000,017,846 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Neznamy.signal.2007.AC3.DVDRip.XviD.CZ.UniQue.torrent
[2010.04.17 19:20:52 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\msds.dat
[2010.04.17 16:37:00 | 000,023,668 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Vicky.Cristina.Barcelona.2008.DVDR.CZ.torrent
[2010.04.16 07:38:23 | 000,023,708 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\AZYL.2008.DVDR.CZ.torrent
[2010.04.15 20:59:01 | 000,017,229 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Pohoda 2010 CZ.torrent
[2010.04.15 19:57:02 | 000,000,771 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\smazani.reg
[2010.04.15 19:06:48 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\aa\Plocha\CCleaner.lnk
[2010.04.15 15:16:15 | 000,018,902 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Tolerance Data 2009 CZ.torrent
[2010.04.14 21:05:27 | 000,002,222 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\SlySoft.AnyDVD.HD.v6.6.3.4.Multilingual.WinAll.Incl.Keygen.and.Patch-BRD.torrent
[2010.04.14 20:48:57 | 000,002,605 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Advanced.System.Care.PRO.v3.5.1.Incl.Serial-DIGERATI.torrent
[2010.04.14 07:38:35 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\aa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.13 21:56:43 | 000,023,630 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Stastlivci.2008.DVDR.CZ.Destroy-DRagON.torrent
[2010.04.13 14:41:23 | 000,023,878 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Fantastic.Mr.Fox.PL.DVDR-FMFOX.torrent
[2010.04.12 20:31:14 | 000,021,369 | ---- | C] () -- C:\Documents and Settings\aa\Dokumenty\Materske.galeje.torrent
[2010.03.10 19:59:35 | 000,000,232 | ---- | C] () -- C:\WINDOWS\reimage.ini
[2009.12.14 16:35:08 | 001,380,403 | ---- | C] () -- C:\WINDOWS\System32\avgsdk.dll
[2009.12.05 12:30:50 | 000,000,060 | ---- | C] () -- C:\WINDOWS\pident.ini
[2009.12.05 12:27:56 | 000,000,584 | ---- | C] () -- C:\WINDOWS\pirchutl.ini
[2009.10.17 19:56:11 | 000,000,120 | ---- | C] () -- C:\WINDOWS\CIS_Setup_3.12.111745.560_XP_Vista_x32.INI
[2009.08.24 13:06:27 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.03.10 14:41:00 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009.02.08 17:26:29 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009.01.19 17:23:50 | 000,000,416 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009.01.19 17:23:50 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009.01.08 20:45:41 | 000,138,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.01.01 20:36:55 | 000,002,686 | ---- | C] () -- C:\WINDOWS\TRNCOM.INI
[2008.11.11 22:37:20 | 000,000,196 | ---- | C] () -- C:\WINDOWS\thtitanc.INI
[2008.09.26 12:27:20 | 000,002,855 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.09.07 00:10:18 | 000,000,025 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2008.09.07 00:01:25 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008.09.06 09:53:29 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.09.06 00:04:12 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008.09.05 15:33:38 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2008.09.05 14:14:26 | 000,000,211 | ---- | C] () -- C:\WINDOWS\System32\BOOTBAK.INI
[2008.09.05 13:22:12 | 000,356,352 | ---- | C] () -- C:\WINDOWS\EMCRI.dll
[2008.09.05 12:17:21 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2008.09.05 12:16:56 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2006.10.28 20:57:48 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\ts.dll
[2006.01.17 10:31:30 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 003,223,552 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2005.10.14 11:56:48 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2005.10.14 11:56:48 | 000,266,240 | ---- | C] () -- C:\WINDOWS\System32\TomsMoComp_ff.dll
[2005.10.14 11:56:48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.02.17 11:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005.02.17 11:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2002.05.18 00:18:30 | 000,124,928 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[2001.11.14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[1997.11.17 18:13:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:A8ADE5D8
< End of report >

Neustale me avast hlasi DCOM exploit vzdy z jine IP adresy,jde to nejak utnout?prosim

C:\WINDOWS\PEV.exe uploadněte na http://www.james008.net/havet/

stahnete SDFix a ulozte jej na plochu

spustte stazeny exe soubor, ten si vybali soubory do vami zadefinovaneho adresare

restartujte pocitac do nouzoveho rezimu (pri restartu mackejte klavesu F8, pote zvolte z nabidky Stav nouze; pote chvili vyckejte, otevre se vam potvrzovaci okno s nabidkou spusteni zvlastniho diagnostickeho rezimu, ktere potvrdte OK), otevrete vyse zmineny adresar a spustte aplikaci RunThis.bat, cimz se odstartuje skript; v dalsim screenu potvrdte klavesou Yes:



probehne sken, po jeho ukonceni budete vyzvani ke stisku jakekoli klavesy k restartu windows

po restartu probehne jeste jeden sken, po jehoz ukonceni bude zobrazeno hlaseni Finished, stisknete opet nejakou klavesu k ukonceni a startu windows

pote se vam zobrazi log z SDFixu v samostatnem okne, ulozeny v adresari s SDFixem, nazvany Report.txt; jeho obsah sem vlozte

C:\WINDOWS\PEV.exe uploadněte na http://www.james008.net/havet/


uploadovano...

ok...teď ještě ten SDFix

SDFix: Version 1.240
Run by Administrator on st 12.05.2010 at 17:06

Microsoft Windows XP [Verze 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\xp - Deleted


Could Not Remove C:\WINDOWS\rundll16.exe
Could Not Remove C:\WINDOWS\rundl132.exe



Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-12 17:14:19
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

IPC error: 2 Systém nemůže nalézt uvedený soubor.
scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:98,d7,f1,6c,b7,06,17,94,25,8d,f0,b0,a6,bf,bd,c6,4a,90,0c,1f,89,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"h0"=dword:00000002
"hdf12"=hex:16,d0,0b,b8,e5,20,c7,b9,a5,d7,d5,6e,12,2b,57,bd,50,a8,33,ec,3e,..
"u0"=hex:d4,c3,97,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"hdf12"=hex:9a,f2,f3,56,6e,63,ef,a2,e0,41,d7,4d,81,17,25,a5,b5,d7,41,bb,1d,..
"a0"=hex:20,01,00,00,2b,32,50,33,06,f1,f4,42,af,03,d2,d2,2d,20,fe,ca,7d,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:ab,bf,a9,24,48,ee,21,5a,1b,ea,ef,5a,e4,bc,b9,48,14,50,1f,86,17,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:72,cf,54,42,e5,1c,b7,6d,16,8c,5a,a8,a4,be,cb,4b,44,39,42,38,81,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:9f,1e,4f,ce,75,30,4d,8e,03,80,42,b2,c6,1f,d0,1a,da,8b,79,8a,7f,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,06,bc,92,2d,0e,c0,20,73,fa,4d,f2,57,d6,2f,27,7d,e8,..
"khjeh"=hex:66,1f,1c,a0,13,8b,09,c5,1e,44,de,e6,c3,72,07,12,f1,76,92,6a,6b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d1,8a,59,50,d8,f0,4b,8c,1b,ea,94,65,f8,5f,66,45,4d,d5,e3,23,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:1e,1f,3b,26,92,10,ad,d4,b5,ef,d3,ae,12,dc,23,b8,20,17,0c,cc,d4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:4a,2d,27,61,50,07,30,47,46,fa,30,23,b2,b9,4a,42,ed,41,b4,f4,01,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:9f,1e,4f,ce,75,30,4d,8e,03,80,42,b2,c6,1f,d0,1a,da,8b,79,8a,7f,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,06,bc,92,2d,0e,c0,20,73,fa,4d,f2,57,d6,2f,27,7d,e8,..
"khjeh"=hex:66,1f,1c,a0,13,8b,09,c5,1e,44,de,e6,c3,72,07,12,f1,76,92,6a,6b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d1,8a,59,50,d8,f0,4b,8c,1b,ea,94,65,f8,5f,66,45,4d,d5,e3,23,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:1e,1f,3b,26,92,10,ad,d4,b5,ef,d3,ae,12,dc,23,b8,20,17,0c,cc,d4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:4a,2d,27,61,50,07,30,47,46,fa,30,23,b2,b9,4a,42,ed,41,b4,f4,01,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:98,d7,f1,6c,b7,06,17,94,25,8d,f0,b0,a6,bf,bd,c6,4a,90,0c,1f,89,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"h0"=dword:00000002
"hdf12"=hex:16,d0,0b,b8,e5,20,c7,b9,a5,d7,d5,6e,12,2b,57,bd,50,a8,33,ec,3e,..
"u0"=hex:d4,c3,97,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"hdf12"=hex:9a,f2,f3,56,6e,63,ef,a2,e0,41,d7,4d,81,17,25,a5,b5,d7,41,bb,1d,..
"a0"=hex:20,01,00,00,2b,32,50,33,06,f1,f4,42,af,03,d2,d2,2d,20,fe,ca,7d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:ab,bf,a9,24,48,ee,21,5a,1b,ea,ef,5a,e4,bc,b9,48,14,50,1f,86,17,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:72,cf,54,42,e5,1c,b7,6d,16,8c,5a,a8,a4,be,cb,4b,44,39,42,38,81,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes]
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?"="C:\WINDOWS\cursors\arrow_r.cur,C:\WINDOWS\cursors\help_r.cur,C:\WINDOWS\cursors\wait_r.cur,C:\WINDOWS\cursors\busy_r.cur,C:\WINDOWS\cursors\cross_r.cur,C:\WINDOWS\cursors\beam_r.cur,C:\WINDOWS\cursors\pen_r.cur,C:\WINDOWS\cursors\no_r.cur,C:\WINDOWS\cursors\size4_r.cur,C:\WINDOWS\cursors\size3_r.cur,C:\WINDOWS\cursors\size2_r.cur,C:\WINDOWS\cursors\size1_r.cur,C:\WINDOWS\cursors\move_r.cur,C:\WINDOWS\cursors\up_r.cur"
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?(?v?e?l?k?é?)?"="C:\WINDOWS\cursors\arrow_rm.cur,C:\WINDOWS\cursors\help_rm.cur,C:\WINDOWS\cursors\wait_rm.cur,C:\WINDOWS\cursors\busy_rm.cur,C:\WINDOWS\cursors\cross_rm.cur,C:\WINDOWS\cursors\beam_rm.cur,C:\WINDOWS\cursors\pen_rm.cur,C:\WINDOWS\cursors\no_rm.cur,C:\WINDOWS\cursors\size4_rm.cur,C:\WINDOWS\cursors\size3_rm.cur,C:\WINDOWS\cursors\size2_rm.cur,C:\WINDOWS\cursors\size1_rm.cur,C:\WINDOWS\cursors\move_rm.cur,C:\WINDOWS\cursors\up_rm.cur"
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?(?n?e?j?v?\e\1t?a\1í?)?"="C:\WINDOWS\cursors\arrow_rl.cur,C:\WINDOWS\cursors\help_rl.cur,C:\WINDOWS\cursors\wait_rl.cur,C:\WINDOWS\cursors\busy_rl.cur,C:\WINDOWS\cursors\cross_rl.cur,C:\WINDOWS\cursors\beam_rl.cur,C:\WINDOWS\cursors\pen_rl.cur,C:\WINDOWS\cursors\no_rl.cur,C:\WINDOWS\cursors\size4_rl.cur,C:\WINDOWS\cursors\size3_rl.cur,C:\WINDOWS\cursors\size2_rl.cur,C:\WINDOWS\cursors\size1_rl.cur,C:\WINDOWS\cursors\move_rl.cur,C:\WINDOWS\cursors\up_rl.cur"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
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

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Disabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Disabled:Microsoft Office OneNote"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Disabled:Microsoft Office Outlook"
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"="C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Java\\jre6\\bin\\java.exe"="C:\\Program Files\\Java\\jre6\\bin\\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Documents and Settings\\aa\\Plocha\\utorrent.exe"="C:\\Documents and Settings\\aa\\Plocha\\utorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :

C:\WINDOWS\rundll16.exe Found
C:\WINDOWS\rundl132.exe Found

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Sun 8 Mar 2009 638,816 A.SH. --- "C:\Program Files\Internet Explorer\iexplore.exe"
Mon 14 Apr 2008 1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Mon 14 Apr 2008 60,416 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe"
Tue 2 Jun 2009 1,496,576 ...H. --- "C:\WINDOWS\system32\wodfamop.dll"
Wed 17 Mar 2010 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 10 Dec 2009 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\1dae72938e631e61bacdde4929bca486\BIT10.tmp"

Finished!

C:\WINDOWS\rundll16.exe
C:\WINDOWS\rundl132.exe
pokuste se najít tyto dva soubory a otestujte je na VIRUSTOTALu

hm,Obě dve složky jsou prázné--?

není co kontrolovat:) DCOM exploit me pořád obtěžuje,dostanem se i k tomuto problemu..

vzdy ta adresa zacina 85: IP adresa....

právě tento problém tu celou dobu řešíme...takže

spustte SDFix v normalnim rezimu

objevi se vam tato obrazovka:



zde zmacknete A a stisknete Enter; behem kratke chvilky se vam vytvori systemovy report

jeho obsah mne zajima

upozorneni: je mozne ze log bude delsi a nevejde se vam do jednoho prispevku, proto prosim pri vkladani zkontrolujte, zda je log cely