OTL.txt :
OTL logfile created on: 18.10.2010 21:03:39 - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\noskin\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 66,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 4,59 Gb Free Space | 5,87% Space Free | Partition Type: NTFS
Drive E: | 219,96 Gb Total Space | 7,85 Gb Free Space | 3,57% Space Free | Partition Type: NTFS
Drive G: | 15,04 Gb Total Space | 0,02 Gb Free Space | 0,11% Space Free | Partition Type: FAT32
Drive H: | 3,72 Gb Total Space | 0,42 Gb Free Space | 11,36% Space Free | Partition Type: FAT32
Computer Name: NOSKINS | User Name: noskin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2010.10.18 21:02:25 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTL.exe
PRC - [2010.10.18 16:22:37 | 002,500,552 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2010.10.18 16:22:30 | 001,901,056 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2010.10.14 21:11:23 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Documents and Settings\noskin\Local Settings\Data aplikací\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010.10.08 14:00:10 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.07.09 21:04:34 | 003,493,776 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\Xfire.exe
PRC - [2010.04.28 16:22:20 | 000,604,488 | ---- | M] (TuneUp Software) -- C:\WINDOWS\system32\TUProgSt.exe
PRC - [2010.02.12 20:23:32 | 000,148,744 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
PRC - [2009.12.13 20:31:46 | 000,226,816 | ---- | M] (Uwe Sieber -
www.uwe-sieber.de) -- c:\Program Files\USBDLM\USBDLM.exe
PRC - [2009.03.29 12:30:38 | 002,058,240 | ---- | M] () -- C:\Program Files\FeedReader30\feedreader.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.11.03 11:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\Pac207\Monitor.exe
PRC - [2006.03.03 22:03:10 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
========== Modules (SafeList) ==========
MOD - [2010.10.18 21:02:25 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTL.exe
MOD - [2010.10.18 16:23:34 | 000,285,480 | ---- | M] (COMODO) -- C:\WINDOWS\system32\guard32.dll
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010.07.09 21:04:44 | 000,970,640 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\xfire_toucan_43094.dll
MOD - [2008.04.14 08:52:08 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll
MOD - [2008.04.14 08:49:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2003.02.21 00:00:00 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll
========== Win32 Services (SafeList) ==========
SRV - [2010.10.18 16:22:30 | 001,901,056 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010.09.07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.04.28 16:22:20 | 000,604,488 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV - [2010.04.28 16:22:19 | 000,361,288 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.03.09 16:59:59 | 000,488,960 | ---- | M] (Crawler.com) [Disabled | Stopped] -- C:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2010.02.12 20:23:32 | 000,148,744 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe -- (CLPSLS)
SRV - [2009.12.13 20:31:46 | 000,226,816 | ---- | M] (Uwe Sieber -
www.uwe-sieber.de) [Auto | Running] -- c:\Program Files\USBDLM\USBDLM.exe -- (USBDLM)
SRV - [2009.11.16 12:25:48 | 000,029,000 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009.10.27 10:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2006.03.03 22:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1.000\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010.10.18 16:23:33 | 000,239,240 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2010.10.18 16:23:33 | 000,091,560 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2010.10.18 16:23:33 | 000,025,240 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2010.09.07 16:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010.09.07 16:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010.09.07 16:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010.09.07 16:47:19 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010.09.07 16:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.09.07 16:46:51 | 000,028,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010.03.09 16:59:59 | 000,142,592 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2010.03.03 06:21:08 | 004,630,016 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.01.11 11:04:26 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.10.06 12:52:50 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.10.06 12:52:34 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.10.06 12:52:34 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009.10.06 12:52:34 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.09.11 12:48:04 | 000,066,056 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2009.09.11 12:47:54 | 000,014,984 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2009.09.11 12:47:42 | 000,031,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2009.09.11 12:47:32 | 000,035,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2009.09.11 12:47:22 | 000,022,792 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.08.08 18:11:00 | 000,100,736 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2008.04.14 00:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Ovladač zvukové karty USB (WDM)
DRV - [2008.04.13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007.11.21 01:09:22 | 000,104,320 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2007.06.29 16:32:08 | 000,611,584 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PFC027.SYS -- (PAC207)
DRV - [2007.06.29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2007.06.15 16:47:26 | 001,127,936 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17)
DRV - [2007.05.18 11:01:50 | 000,304,640 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2007.05.14 10:12:28 | 003,526,464 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtHDMI.sys -- (RTHDMIAzAudService)
DRV - [2006.06.19 05:37:34 | 000,036,864 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2006.03.17 18:18:58 | 000,392,960 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2006.02.26 17:02:49 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2005.01.11 00:15:30 | 000,106,496 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2005.01.11 00:15:24 | 000,138,752 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2002.10.15 22:41:06 | 000,102,220 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sonypvs1.sys -- (sonypvs1)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
www.gooogle.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 85 BA F6 71 29 B2 CA 01 [binary data]
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "
http://www.ask.com/?o=14597&l=dis"
FF - prefs.js..extensions.enabledItems:
toolbar@ask.com:3.3.3.123
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems:
personas@christopher.beard:1.2.1
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..keyword.URL: "
http://websearch.ask.com/redirect?clien ... n_dtid=&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: c:\Program Files\Mozilla Firefox\components [2010.04.25 12:37:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: c:\Program Files\Mozilla Firefox\plugins [2010.10.13 17:58:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\
eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
[2010.03.09 22:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Extensions
[2010.01.02 15:08:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\extensions
[2010.01.02 15:08:57 | 000,000,000 | ---D | M] (XfireXO Toolbar) -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2010.09.18 20:56:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\extensions
[2010.04.14 20:39:19 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.08.22 11:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\extensions\
toolbar@ask.com
[2010.10.18 17:42:42 | 000,002,382 | ---- | M] () -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\searchplugins\askcom.xml
[2010.08.22 11:33:03 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\searchplugins\icqplugin-1.xml
[2010.04.14 20:39:23 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\searchplugins\icqplugin.xml
[2010.10.14 11:43:13 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.05.27 18:31:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.10.14 11:43:14 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.04.23 21:33:48 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\
personas@christopher.beard
[2009.03.21 10:36:29 | 000,239,432 | ---- | M] (Pando Networks) -- C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
O1 HOSTS File: ([2010.10.18 19:46:50 | 000,000,736 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\noskin\Data aplikací\FlashGetBHO\FlashGetBHO3.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: kuaiche.com ([software] http in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: Garmin Communicator Plug-In
https://static.garmincdn.com/gcp/ie/2.9 ... ontrol.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.31.30.139 172.31.30.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.12.25 19:21:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.04.15 11:00:54 | 000,177,835 | ---- | M] () - H:\AutoCzech aneb automatická detekce kódování » La Trine.mht -- [ FAT32 ]
O32 - AutoRun File - [2009.04.15 11:00:38 | 000,008,477 | ---- | M] () - H:\autoczech_phps.mht -- [ FAT32 ]
O33 - MountPoints2\{00a454e4-4ef7-11df-834c-001f1f0dbe5c}\Shell - "" = AutoRun
O33 - MountPoints2\{86f8113b-15b7-11dc-ac16-0018f3f2faf0}\Shell\AutoRun\command - "" = G:\setupSNK.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\WINDOWS\System32\xfcodec.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\yv12vfw.dll (
www.helixcommunity.org)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (54901175375364096)
========== Files/Folders - Created Within 7 Days ==========
[2010.10.18 21:02:25 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTL.exe
[2010.10.18 19:46:31 | 001,445,888 | ---- | C] (Option^Explicit Software Solutions) -- C:\Documents and Settings\noskin\Plocha\winsockxpfix.exe
[2010.10.18 19:12:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.10.18 18:26:03 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.10.18 18:21:35 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.10.18 18:21:35 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.10.18 18:21:35 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.10.18 18:21:35 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.10.18 18:21:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.10.18 18:20:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.10.18 16:54:50 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\noskin\Recent
[2010.10.18 16:12:09 | 000,000,000 | ---D | C] -- C:\_OTM
[2010.10.18 16:07:59 | 000,519,680 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTM.exe
[2010.10.14 20:17:29 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\AMCap.exe
[2010.10.14 16:51:10 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr70.dll
[2010.10.14 16:51:10 | 000,000,000 | ---D | C] -- C:\Program Files\All2WAV Recorder
[2010.10.14 11:45:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\noskin\Data aplikací\skypePM
[2010.10.14 11:43:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\noskin\Data aplikací\Skype
[2010.10.14 11:42:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Skype
[2010.10.12 19:26:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\noskin\Data aplikací\U3
========== Files - Modified Within 7 Days ==========
[2010.10.18 21:02:25 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTL.exe
[2010.10.18 21:00:04 | 000,000,488 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2010.10.18 19:50:24 | 000,000,310 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010.10.18 19:48:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.10.18 19:47:57 | 2145,898,496 | -HS- | M] () -- C:\hiberfil.sys
[2010.10.18 19:46:50 | 000,000,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.10.18 19:46:44 | 001,445,888 | ---- | M] (Option^Explicit Software Solutions) -- C:\Documents and Settings\noskin\Plocha\winsockxpfix.exe
[2010.10.18 18:32:34 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.bak
[2010.10.18 18:26:06 | 000,000,484 | RHS- | M] () -- C:\boot.ini
[2010.10.18 18:13:50 | 000,002,547 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010.10.18 18:04:11 | 003,879,784 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\ComboFix.exe
[2010.10.18 16:40:32 | 000,000,087 | ---- | M] () -- C:\Documents and Settings\noskin\intlname.ols
[2010.10.18 16:23:34 | 000,285,480 | ---- | M] (COMODO) -- C:\WINDOWS\System32\guard32.dll
[2010.10.18 16:23:33 | 000,239,240 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmdGuard.sys
[2010.10.18 16:23:33 | 000,091,560 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\inspect.sys
[2010.10.18 16:23:33 | 000,025,240 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmdhlp.sys
[2010.10.18 16:23:33 | 000,015,592 | ---- | M] (COMODO) -- C:\WINDOWS\System32\drivers\cmderd.sys
[2010.10.18 16:12:13 | 000,435,396 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.10.18 16:12:13 | 000,432,334 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.10.18 16:12:13 | 000,079,266 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.10.18 16:12:13 | 000,068,292 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.10.18 16:08:00 | 000,519,680 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\noskin\Plocha\OTM.exe
[2010.10.18 16:04:03 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\Bio Style.doc
[2010.10.18 09:38:41 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\Skype (2).lnk
[2010.10.16 22:18:11 | 000,188,984 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\foto trida2.JPG
[2010.10.16 22:16:42 | 000,198,875 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\foto trida1.JPG
[2010.10.16 16:51:47 | 000,921,632 | ---- | M] () -- C:\PA207.DAT
[2010.10.16 13:28:13 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.10.15 11:29:17 | 000,026,016 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\ohl.živnost a údaje.pdf
[2010.10.15 11:28:00 | 000,038,601 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\ohláš.živnosti.pdf
[2010.10.15 11:18:43 | 000,031,874 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\výpis trestů.pdf
[2010.10.15 09:27:05 | 000,234,368 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.10.14 20:17:29 | 000,000,325 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Amcap.lnk
[2010.10.14 16:57:51 | 031,625,727 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\zvukovka.zip
[2010.10.14 16:51:11 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\All2WAV Recorder.lnk
[2010.10.14 11:45:03 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.10.14 11:43:02 | 000,001,896 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Skype.lnk
[2010.10.14 11:35:52 | 020,165,034 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\skype-ubuntu-intrepid_2.1.0.81-1_i386.deb
[2010.10.13 22:17:44 | 000,025,088 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\Dobrý den.doc
[2010.10.13 18:24:45 | 000,339,991 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\RSIT.exe
[2010.10.13 17:58:13 | 000,001,735 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Adobe Reader 9.lnk
[2010.10.12 19:37:56 | 000,000,598 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Opera.lnk
[2010.10.12 18:00:18 | 000,099,840 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\Zadani prikladu (2).doc
[2010.10.12 17:59:56 | 000,243,712 | ---- | M] () -- C:\Documents and Settings\noskin\Plocha\Zadani prikladu (1).doc
========== Files Created - No Company Name ==========
[2010.10.18 19:15:59 | 2145,898,496 | -HS- | C] () -- C:\hiberfil.sys
[2010.10.18 18:26:06 | 000,000,439 | ---- | C] () -- C:\Boot.bak
[2010.10.18 18:21:35 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.10.18 18:21:35 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.10.18 18:21:35 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.10.18 18:21:35 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.10.18 18:21:35 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.10.18 18:03:51 | 003,879,784 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\ComboFix.exe
[2010.10.18 11:04:08 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\Bio Style.doc
[2010.10.16 18:39:56 | 000,188,984 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\foto trida2.JPG
[2010.10.16 18:39:45 | 000,198,875 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\foto trida1.JPG
[2010.10.15 11:29:17 | 000,026,016 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\ohl.živnost a údaje.pdf
[2010.10.15 11:28:00 | 000,038,601 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\ohláš.živnosti.pdf
[2010.10.15 11:18:43 | 000,031,874 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\výpis trestů.pdf
[2010.10.14 20:29:39 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\Skype (2).lnk
[2010.10.14 20:17:29 | 000,000,325 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Amcap.lnk
[2010.10.14 16:56:57 | 031,625,727 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\zvukovka.zip
[2010.10.14 16:51:11 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\All2WAV Recorder.lnk
[2010.10.14 11:45:03 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.10.14 11:43:02 | 000,001,896 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Skype.lnk
[2010.10.14 11:35:39 | 020,165,034 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\skype-ubuntu-intrepid_2.1.0.81-1_i386.deb
[2010.10.13 22:17:43 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\Dobrý den.doc
[2010.10.13 18:24:45 | 000,339,991 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\RSIT.exe
[2010.10.13 17:58:13 | 000,001,735 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Adobe Reader 9.lnk
[2010.10.12 17:59:46 | 000,099,840 | ---- | C] () -- C:\Documents and Settings\noskin\Plocha\Zadani prikladu (2).doc
[2010.07.09 21:04:40 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.06.13 11:51:55 | 000,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2010.04.25 12:11:36 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010.03.09 16:59:59 | 000,142,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
[2010.03.04 13:22:06 | 000,000,240 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2010.02.21 14:22:59 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\noskin\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.01.11 10:56:21 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010.01.04 18:51:54 | 000,000,254 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\hpzinstall.log
[2009.12.25 23:09:13 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.12.25 22:49:23 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009.12.25 22:31:36 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\noskin\Data aplikací\PnkBstrK.sys
[2009.12.25 22:31:36 | 000,137,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.12.25 22:13:28 | 000,002,547 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009.12.25 19:42:56 | 000,064,512 | ---- | C] () -- C:\WINDOWS\System32\P17.dll
[2009.12.25 19:42:56 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\P17CPI.dll
[2009.12.25 19:42:25 | 000,005,663 | ---- | C] () -- C:\WINDOWS\System32\Ludap17.ini
[2009.12.25 19:42:25 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2009.12.25 19:38:05 | 000,005,810 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2009.11.06 11:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009.05.10 17:09:30 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2009.04.14 17:57:49 | 000,000,566 | ---- | C] () -- C:\WINDOWS\System32\SP207.INI
[2009.03.30 23:48:02 | 000,189,984 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2008.03.13 18:42:45 | 000,000,604 | -H-- | C] () -- C:\Program Files\STLL Notifier
[2005.10.14 12:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005.10.14 12:56:50 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.10.14 12:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 12:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2003.04.09 16:38:04 | 000,005,664 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
========== LOP Check ==========
[2010.03.09 14:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Alwil Software
[2010.06.08 14:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Codemasters
[2010.01.11 10:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\DAEMON Tools Lite
[2010.06.04 19:51:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Electronic Arts
[2009.12.25 22:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ESET
[2010.04.11 03:40:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ICQ
[2010.03.23 21:10:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\id Software
[2010.01.28 21:13:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Installations
[2010.01.28 21:30:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2010.06.15 12:31:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spyware Terminator
[2010.04.28 21:56:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Synetic
[2010.03.18 03:04:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TrackMania
[2010.03.09 14:22:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TuneUp Software
[2010.01.27 22:32:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TuneUpMedia
[2010.01.30 16:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\WOP
[2010.04.28 16:21:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
[2010.01.27 22:47:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010.02.21 11:55:53 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010.10.18 21:00:04 | 000,000,488 | ---- | M] () -- C:\WINDOWS\Tasks\1-Click Maintenance.job
[2010.10.18 19:50:24 | 000,000,310 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 08:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [2010.09.02 15:15:04 | 013,351,304 | R--- | M] (Skype Technologies S.A.)
"Google Update" = "C:\Documents and Settings\noskin\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c -- [2010.02.09 20:55:55 | 000,135,664 | ---- | M] (Google Inc.)
< c:\windows\*.* /U >
< %SYSTEMDRIVE%\*.exe >
[2008.04.08 12:46:45 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\devcon.exe
[2008.05.02 11:11:10 | 000,364,721 | ---- | M] () -- C:\DPsFnshr.exe
[2008.05.02 11:11:14 | 000,282,725 | ---- | M] () -- C:\DSPdsblr.exe
[2009.01.14 15:14:38 | 000,376,112 | ---- | M] (techPowerUp (
www.techpowerup.com)) -- C:\GPU-Z.0.3.1.exe
[2008.04.08 12:46:45 | 000,020,992 | ---- | M] () -- C:\makePNF.exe
[2008.04.08 12:46:45 | 000,137,728 | ---- | M] () -- C:\mute.exe
[2008.05.02 11:11:17 | 000,235,131 | ---- | M] () -- C:\pmtimer.exe
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2010.09.26 11:26:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Adobe
[2010.01.08 00:52:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\AdobeUM
[2010.02.15 19:33:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Apple Computer
[2009.12.26 18:17:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\ATI
[2010.01.11 11:07:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\DAEMON Tools Lite
[2010.06.06 20:03:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\DNA
[2010.09.26 13:09:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Downloaded Installations
[2010.07.10 18:02:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\dvdcss
[2009.12.25 22:35:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\ESET
[2010.02.07 02:25:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Feedreader
[2010.04.18 17:06:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\FlashGet
[2010.04.23 18:40:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\GARMIN
[2010.04.28 16:51:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\GlarySoft
[2010.06.18 17:20:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\gtk-2.0
[2010.02.09 20:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Help
[2010.07.03 22:16:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\ICQ
[2010.03.23 21:11:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\id Software
[2009.12.25 22:09:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Identities
[2010.01.04 19:26:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Image Zone Express
[2010.01.15 19:58:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\InstallShield
[2009.12.25 22:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Macromedia
[2010.02.14 13:46:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Malwarebytes
[2010.04.02 18:18:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\MAXON
[2010.04.12 23:11:00 | 000,000,000 | --SD | M] -- C:\Documents and Settings\noskin\Data aplikací\Microsoft
[2010.03.09 22:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Mozilla
[2010.06.04 20:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Need for Speed World
[2010.06.04 20:31:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Need for Speed World Online
[2010.01.28 21:30:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Nokia
[2010.05.10 22:25:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\OpenOffice.org
[2009.12.25 22:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Opera
[2010.01.28 21:30:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\PC Suite
[2010.04.10 10:35:52 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\noskin\Data aplikací\SecuROM
[2010.10.18 20:48:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Skype
[2010.10.18 17:49:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\skypePM
[2010.09.27 16:24:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Spyware Terminator
[2010.01.19 23:50:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Sun
[2010.01.20 19:05:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Thinstall
[2010.01.17 03:14:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\TuneUp Software
[2010.01.27 22:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\TuneUpMedia
[2010.10.14 21:22:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\U3
[2010.09.26 11:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\uTorrent
[2010.09.17 15:49:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\vlc
[2010.10.18 18:38:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\noskin\Data aplikací\Xfire
< %APPDATA%\*.exe /s >
[2010.04.12 23:11:00 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\noskin\Data aplikací\Microsoft\Installer\{B63B5FC6-B005-5B6D-7F04-3950656634B9}\ARPPRODUCTICON.exe
[2010.10.18 17:42:52 | 003,056,008 | ---- | M] (Ask) -- C:\Documents and Settings\noskin\Data aplikací\Mozilla\Firefox\Profiles\y95au2uo.default\extensions\
toolbar@ask.com\chrome\temp\askToolbar.exe
[2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\noskin\Data aplikací\U3\temp\cleanup.exe
[2008.05.02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Documents and Settings\noskin\Data aplikací\U3\temp\Launchpad Removal.exe
< MD5 for: AGP440.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0071\DriverFiles\i386\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 08:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 08:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 08:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 00:01:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: NVATA.SYS >
[2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\Win2K\sata_ide\nvata.sys
[2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\WinXP\sata_ide\nvata.sys
[2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\drivers\nvata.sys
< MD5 for: NVATABUS.SYS >
[2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\Win2K\sataraid\nvatabus.sys
[2006.04.24 18:52:28 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\WinXP\sataraid\nvatabus.sys
[2008.08.08 18:11:00 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\drivers\nvatabus.sys
< MD5 for: NVGTS.SYS >
[2008.11.12 16:58:38 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=75E2E77C5497F34E60491D27BF03F1CB -- C:\NVIDIA\nForceWinXPInt\15.25\IDE\WinXP\sata_ide\nvgts.sys
[2008.11.12 16:59:06 | 000,145,952 | ---- | M] (NVIDIA Corporation) MD5=8EB82606FCD8C5D039ADA33BD46FE7F8 -- C:\NVIDIA\nForceWinXPInt\15.25\IDE\WinXP\sataraid\nvgts.sys
< MD5 for: NVRAID.SYS >
[2006.04.24 18:52:36 | 000,082,944 | ---- | M] (NVIDIA Corporation) MD5=B65CE56C36F573113FF2F6D0F07B7563 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\Win2K\sataraid\nvraid.sys
[2006.04.24 18:52:36 | 000,082,944 | ---- | M] (NVIDIA Corporation) MD5=B65CE56C36F573113FF2F6D0F07B7563 -- C:\NVIDIA\nForceWin2KXP\9.16\IDE\WinXP\sataraid\nvraid.sys
< MD5 for: NVRD32.SYS >
[2008.11.12 16:59:08 | 000,133,152 | ---- | M] (NVIDIA Corporation) MD5=6B1B4E25277A99A6B515CF124D6060E0 -- C:\NVIDIA\nForceWinXPInt\15.25\IDE\WinXP\sataraid\nvrd32.sys
< MD5 for: SCECLI.DLL >
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2010.09.10 07:52:30 | 000,184,320 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\iepeers.dll
[2010.09.10 07:52:31 | 000,602,112 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\msfeeds.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.01.11 11:04:26 | 000,691,696 | ---- | M] ()
Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2009.12.25 22:31:52 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2009.12.25 22:31:52 | 001,093,632 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2009.12.25 22:31:51 | 000,516,096 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
[2010.09.10 07:52:30 | 000,184,320 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\iepeers.dll
[2010.09.10 07:52:31 | 000,602,112 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\msfeeds.dll
< %systemroot%\system32\drivers\*.sys /3 >
[2010.10.18 16:23:33 | 000,015,592 | ---- | M] (COMODO) -- C:\WINDOWS\system32\drivers\cmderd.sys
[2010.10.18 16:23:33 | 000,239,240 | ---- | M] (COMODO) -- C:\WINDOWS\system32\drivers\cmdGuard.sys
[2010.10.18 16:23:33 | 000,025,240 | ---- | M] (COMODO) -- C:\WINDOWS\system32\drivers\cmdhlp.sys
[2010.10.18 16:23:33 | 000,091,560 | ---- | M] (COMODO) -- C:\WINDOWS\system32\drivers\inspect.sys
< %systemroot%\system32\*.* /3 >
[2010.10.18 16:23:34 | 000,285,480 | ---- | M] (COMODO) -- C:\WINDOWS\system32\guard32.dll
[2010.10.18 16:12:13 | 000,079,266 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2010.10.18 16:12:13 | 000,068,292 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2010.10.18 16:12:13 | 000,432,334 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2010.10.18 16:12:13 | 000,435,396 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2010.10.18 16:12:13 | 001,028,848 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2010.10.16 13:28:13 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
< End of report >